last executing test programs: 2m27.444188161s ago: executing program 4 (id=1083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) 2m27.117260384s ago: executing program 4 (id=1085): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, &(0x7f0000000940)=ANY=[], 0xff2e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) 2m25.761340892s ago: executing program 4 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xffffffff}, &(0x7f0000000240)=0x8) 2m25.511843299s ago: executing program 4 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m25.282948608s ago: executing program 4 (id=1104): syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x1a5982) 2m24.240574776s ago: executing program 4 (id=1111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x1ff}, &(0x7f0000000280)=0x8) 2m23.606331937s ago: executing program 32 (id=1111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x1ff}, &(0x7f0000000280)=0x8) 1m52.675576691s ago: executing program 5 (id=1293): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'bond0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'dvmrp1\x00'}}, 0x1e) 1m51.946244865s ago: executing program 5 (id=1295): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfffe, 0x6, 0x101, 0x6}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 1m51.516140329s ago: executing program 2 (id=1296): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}]}]}]}}]}, 0xa4}}, 0x0) 1m51.336494964s ago: executing program 5 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a01040000f6ffffff00000a0000040900010073797a31000000002c000480280001800d00010073796e70726f78790000000014000280080003400000000505000200010000000900020073797a3200000000140000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608e37f300142c00fe800000000064f0ac99f85c1fd500bbfe8000000000000000000000000000aa11000019"], 0x0) 1m49.031392186s ago: executing program 1 (id=1304): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_score_adj\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000540)=""/76, 0x4c) 1m48.71781131s ago: executing program 5 (id=1306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m48.653221701s ago: executing program 1 (id=1308): r0 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x226f, 0x13500, 0x0, 0xeffffffd}, &(0x7f0000000240), &(0x7f0000000300)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1) 1m48.268307327s ago: executing program 1 (id=1309): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={0x0, 0x44}}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) 1m47.759928691s ago: executing program 3 (id=1310): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init1(0x0) 1m45.318364986s ago: executing program 3 (id=1312): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='virt_wifi0\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) 1m45.063010757s ago: executing program 5 (id=1314): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1m45.027088567s ago: executing program 3 (id=1315): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x0, 0xa, "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", 0x5, 0xe, 0x9, 0x2, 0xbc, 0xfa, 0x6, 0x1}, r2}}, 0x128) 1m44.779787982s ago: executing program 3 (id=1316): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x200) 1m44.109367919s ago: executing program 0 (id=1317): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 1m43.780016002s ago: executing program 0 (id=1318): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(r0, 0x14, 0xb9c, 0x3, 0x0, 0xffffffd5) 1m43.423184693s ago: executing program 0 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=ANY=[], 0x0, 0x1200) 1m42.990328124s ago: executing program 0 (id=1320): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"]) 1m42.25798115s ago: executing program 1 (id=1321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) accept(r0, 0x0, 0x0) shutdown(r0, 0x1) 1m42.257087166s ago: executing program 2 (id=1322): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x11) 1m41.879612053s ago: executing program 3 (id=1323): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) statfs(&(0x7f0000000100)='./file0\x00', 0x0) 1m41.764233835s ago: executing program 2 (id=1324): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 1m41.397932s ago: executing program 0 (id=1325): syz_open_dev$usbfs(&(0x7f0000000380), 0x1ff, 0x2) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m41.139469914s ago: executing program 3 (id=1326): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 1m41.057039487s ago: executing program 1 (id=1327): r0 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000980)={0x2, 0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000740)=""/241, 0xf1}], 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r1, 0x4, 0x0) 1m41.01201883s ago: executing program 2 (id=1328): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040014}, 0x0) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1, &(0x7f0000000440)=""/7, 0x7}, 0xaee02048}], 0x1, 0x0, 0x0) 1m40.646826044s ago: executing program 2 (id=1329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1m40.594338995s ago: executing program 1 (id=1330): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x304}, "5f2852f88fa61aef", "d9f20624eac59ac2953cc646fd176845eaee44ab8ebbb083c03c301bba5d1520", "9afea2f5", "5e3b22435e040ebe"}, 0x38) 1m39.950323632s ago: executing program 2 (id=1331): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2}) 1m39.93452433s ago: executing program 5 (id=1332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) 1m39.86220829s ago: executing program 0 (id=1333): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.604800541s ago: executing program 33 (id=1333): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m3.129893968s ago: executing program 34 (id=1330): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000040)=@gcm_256={{0x304}, "5f2852f88fa61aef", "d9f20624eac59ac2953cc646fd176845eaee44ab8ebbb083c03c301bba5d1520", "9afea2f5", "5e3b22435e040ebe"}, 0x38) 51.59543923s ago: executing program 35 (id=1331): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r2}) 21.921328807s ago: executing program 36 (id=1326): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 0s ago: executing program 37 (id=1332): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$l2tp(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): iscuous mode [ 104.251716][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.251740][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.332218][ T5837] veth0_macvtap: entered promiscuous mode [ 104.366338][ T5842] veth1_vlan: entered promiscuous mode [ 104.404773][ T5841] veth1_vlan: entered promiscuous mode [ 104.441092][ T5837] veth1_macvtap: entered promiscuous mode [ 104.499327][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.499351][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.690954][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.713305][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.713326][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.748608][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.855609][ T5841] veth0_macvtap: entered promiscuous mode [ 104.891577][ T5842] veth0_macvtap: entered promiscuous mode [ 104.895853][ T3512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.919521][ T3512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.930936][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.930955][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.962273][ T3512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.969812][ T5841] veth1_macvtap: entered promiscuous mode [ 105.003339][ T3512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.008508][ T5842] veth1_macvtap: entered promiscuous mode [ 105.126954][ T5963] netlink: 'syz.3.4': attribute type 62 has an invalid length. [ 105.226788][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.332498][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.382142][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.404759][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.466717][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.467017][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.467309][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.523921][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.596935][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.622640][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.626881][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.626904][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.654633][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.769307][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.037646][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.037670][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.489147][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.489170][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.615327][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.615351][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.918019][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.918042][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.009087][ T5986] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 107.140336][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.140359][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.530488][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.755697][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.755729][ T31] usb 4-1: config 0 has no interfaces? [ 107.785198][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 107.785245][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 107.785265][ T31] usb 4-1: Product: syz [ 107.785279][ T31] usb 4-1: Manufacturer: syz [ 107.896476][ T31] usb 4-1: config 0 descriptor?? [ 108.186437][ T5991] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.284950][ T9] usb 4-1: USB disconnect, device number 2 [ 108.382950][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 108.649763][ T5931] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.809245][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 108.825371][ T5931] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 108.825403][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.891049][ T5931] usb 2-1: config 0 descriptor?? [ 109.349392][ T1234] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 109.422148][ T5931] magicmouse 0003:05AC:0269.0001: reserved main item tag 0xd [ 109.422223][ T5931] magicmouse 0003:05AC:0269.0001: item fetching failed at offset 4/5 [ 109.423233][ T5931] magicmouse 0003:05AC:0269.0001: magicmouse hid parse failed [ 109.423405][ T5931] magicmouse 0003:05AC:0269.0001: probe with driver magicmouse failed with error -22 [ 109.521497][ T37] audit: type=1800 audit(1756378449.870:2): pid=6024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.29" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 109.556397][ T1234] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 109.556436][ T1234] usb 3-1: config 0 has no interface number 0 [ 109.580496][ T1234] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 109.580549][ T1234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.580570][ T1234] usb 3-1: Product: syz [ 109.580584][ T1234] usb 3-1: Manufacturer: syz [ 109.580599][ T1234] usb 3-1: SerialNumber: syz [ 109.632323][ T1234] usb 3-1: config 0 descriptor?? [ 109.787193][ T9] usb 2-1: USB disconnect, device number 2 [ 109.890693][ T1234] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 110.064860][ T1234] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 110.065202][ T1234] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 110.065559][ T1234] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 110.107566][ T1234] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 110.358301][ T5932] usb 3-1: USB disconnect, device number 2 [ 110.470711][ T5932] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 110.474201][ T5932] keyspan 3-1:0.133: device disconnected [ 111.203204][ T6058] tipc: Started in network mode [ 111.203237][ T6058] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 111.207582][ T6058] tipc: Enabled bearer , priority 10 [ 111.791487][ T6072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.330803][ T31] tipc: Node number set to 4269801494 [ 112.619029][ T6029] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.773783][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.773821][ T6029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.773863][ T6029] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 112.773886][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.816876][ T6029] usb 5-1: config 0 descriptor?? [ 113.282734][ T6107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.306599][ T6029] kone 0003:1E7D:2CED.0002: unknown main item tag 0x4 [ 113.360730][ T6108] Invalid logical block size (8192) [ 113.415161][ T6029] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 113.515911][ T1234] usb 5-1: USB disconnect, device number 2 [ 114.188095][ T6128] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 114.188165][ T6128] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 114.188293][ T6128] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 114.188791][ T6128] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 114.229128][ T6128] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 114.229200][ T6128] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 114.229375][ T6128] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 114.229441][ T6128] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 114.229496][ T6128] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 114.229721][ T6128] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 114.229778][ T6128] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 114.229833][ T6128] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 114.333207][ T6124] fido_id[6124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.303938][ T6156] capability: warning: `syz.2.84' uses deprecated v2 capabilities in a way that may be insecure [ 115.498957][ T5934] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 115.653291][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.653328][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.653351][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 115.653396][ T5934] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 115.653421][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.780097][ T5934] usb 4-1: config 0 descriptor?? [ 116.199164][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 116.334688][ T5934] wacom 0003:056A:005D.0003: unbalanced delimiter at end of report description [ 116.335602][ T5934] wacom 0003:056A:005D.0003: parse failed [ 116.335713][ T5934] wacom 0003:056A:005D.0003: probe with driver wacom failed with error -22 [ 116.350032][ T6175] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 116.519263][ T5931] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 116.520039][ T5934] usb 4-1: USB disconnect, device number 3 [ 116.691588][ T6181] CUSE: info not properly terminated [ 116.709605][ T5931] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.709635][ T5931] usb 5-1: config 0 has no interface number 0 [ 116.709688][ T5931] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 116.709711][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.717406][ T5931] usb 5-1: config 0 descriptor?? [ 116.778309][ T5931] usb 5-1: selecting invalid altsetting 1 [ 116.786803][ T5931] dvb_ttusb_budget: ttusb_init_controller: error [ 116.787070][ T5931] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 117.000077][ T6186] Bluetooth: MGMT ver 1.23 [ 117.034935][ T5931] DVB: Unable to find symbol cx22700_attach() [ 117.040958][ T5932] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.127559][ T5931] DVB: Unable to find symbol tda10046_attach() [ 117.127576][ T5931] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 117.157088][ T5931] usb 5-1: USB disconnect, device number 3 [ 117.191921][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.191955][ T5932] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.192000][ T5932] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 117.192023][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.248122][ T5932] usb 1-1: config 0 descriptor?? [ 117.744949][ T5932] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 117.744992][ T5932] logitech 0003:046D:C29C.0004: unknown main item tag 0x0 [ 117.767083][ T5932] logitech 0003:046D:C29C.0004: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.0-1/input0 [ 117.926013][ T5932] logitech 0003:046D:C29C.0004: no inputs found [ 118.039514][ T5932] usb 1-1: USB disconnect, device number 2 [ 118.132724][ T6202] dummy0: entered promiscuous mode [ 118.257672][ T6200] fido_id[6200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 119.292859][ T6228] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 120.656741][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 120.869413][ T1234] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 121.042097][ T1234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.042127][ T1234] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.042187][ T1234] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 121.042210][ T1234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.111513][ T1234] usb 3-1: config 0 descriptor?? [ 121.159664][ T1234] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.159984][ T1234] dvb-usb: bulk message failed: -22 (3/0) [ 121.184244][ T1234] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 121.185507][ T1234] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 121.185569][ T1234] usb 3-1: media controller created [ 121.221134][ T1234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.276881][ T1234] dvb-usb: bulk message failed: -22 (6/0) [ 121.277018][ T1234] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.307257][ T1234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 121.354234][ T6255] dvb-usb: bulk message failed: -22 (4/0) [ 121.376562][ T1234] dvb-usb: schedule remote query interval to 150 msecs. [ 121.376587][ T1234] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.415246][ T1234] usb 3-1: USB disconnect, device number 3 [ 121.795155][ T5846] IPVS: starting estimator thread 0... [ 121.899352][ T6278] IPVS: using max 6 ests per chain, 14400 per kthread [ 121.951092][ T5932] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.954753][ T1234] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.104093][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.104128][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.104149][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.104192][ T5932] usb 5-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 122.104219][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.168636][ T5932] usb 5-1: config 0 descriptor?? [ 122.560506][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.143'. [ 122.732658][ T5932] apple 0003:05AC:8102.0005: unknown main item tag 0x0 [ 122.732701][ T5932] apple 0003:05AC:8102.0005: unknown main item tag 0x0 [ 122.732727][ T5932] apple 0003:05AC:8102.0005: unknown main item tag 0x0 [ 122.732752][ T5932] apple 0003:05AC:8102.0005: unknown main item tag 0x0 [ 122.732777][ T5932] apple 0003:05AC:8102.0005: unknown main item tag 0x0 [ 122.752838][ T5932] apple 0003:05AC:8102.0005: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.4-1/input0 [ 122.923108][ T5846] usb 5-1: USB disconnect, device number 4 [ 123.049009][ T5934] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 123.213635][ T5934] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 123.213667][ T5934] usb 2-1: config 0 has no interface number 0 [ 123.213707][ T5934] usb 2-1: config 0 interface 128 has no altsetting 0 [ 123.219165][ T5934] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 123.219194][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.219213][ T5934] usb 2-1: Product: syz [ 123.219225][ T5934] usb 2-1: Manufacturer: syz [ 123.219238][ T5934] usb 2-1: SerialNumber: syz [ 123.225288][ T5934] usb 2-1: config 0 descriptor?? [ 123.304870][ T5934] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 123.304984][ T5934] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 123.305687][ T5934] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 123.356561][ T6296] fido_id[6296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 123.560385][ T5846] usb 2-1: USB disconnect, device number 3 [ 123.789866][ T37] audit: type=1326 audit(1756378464.150:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 123.789925][ T37] audit: type=1326 audit(1756378464.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 123.824038][ T37] audit: type=1326 audit(1756378464.180:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 123.824100][ T37] audit: type=1326 audit(1756378464.180:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 123.824140][ T37] audit: type=1326 audit(1756378464.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 123.824179][ T37] audit: type=1326 audit(1756378464.180:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 123.824217][ T37] audit: type=1326 audit(1756378464.180:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6305 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e147cebe9 code=0x7ffc0000 [ 124.559490][ T6324] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 124.567752][ T5934] IPVS: starting estimator thread 0... [ 124.662939][ T6326] IPVS: using max 5 ests per chain, 12000 per kthread [ 125.286261][ T6339] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 125.669202][ T6349] netlink: 'syz.4.171': attribute type 10 has an invalid length. [ 126.183788][ T6349] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.217765][ T6363] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 126.217787][ T6363] CUSE: unknown device info "3ܟ,̘" [ 126.217798][ T6363] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 126.217798][ T6363] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 126.217815][ T6363] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|0htvw 7:" [ 126.217828][ T6363] CUSE: DEVNAME unspecified [ 126.225131][ T6347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.533074][ T6371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.084317][ T1234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.233281][ T1234] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 128.233314][ T1234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.289261][ T1234] usb 2-1: config 0 descriptor?? [ 128.860636][ T1234] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 128.860675][ T1234] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 128.860700][ T1234] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 128.860724][ T1234] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 128.860749][ T1234] elecom 0003:056E:00E6.0006: unknown main item tag 0x0 [ 128.881449][ T1234] elecom 0003:056E:00E6.0006: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 129.004668][ T1234] usb 2-1: USB disconnect, device number 4 [ 129.049451][ T5932] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.116977][ T6430] fido_id[6430]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 129.209126][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 129.213742][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.215402][ T5932] usb 4-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 129.215474][ T5932] usb 4-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 129.215503][ T5932] usb 4-1: config 4 interface 0 has no altsetting 0 [ 129.252228][ T5932] usb 4-1: string descriptor 0 read error: -22 [ 129.252408][ T5932] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 129.252433][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.334905][ T5932] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 129.346886][ T5932] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.347788][ T5932] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 129.347848][ T5932] usb 4-1: media controller created [ 129.425755][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.538900][ T6435] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 129.562992][ T6434] IPVS: stopping backup sync thread 6435 ... [ 130.522392][ T5932] zl10353_read_register: readreg error (reg=127, ret==0) [ 130.773794][ T5932] usb 4-1: USB disconnect, device number 4 [ 131.160285][ T6029] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.310126][ T6029] usb 3-1: Using ep0 maxpacket: 8 [ 131.314176][ T6029] usb 3-1: unable to get BOS descriptor or descriptor too short [ 131.318486][ T6029] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.318577][ T6029] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.318604][ T6029] usb 3-1: config 1 interface 0 has no altsetting 0 [ 131.369436][ T6029] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.369467][ T6029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.369487][ T6029] usb 3-1: Product: syz [ 131.369502][ T6029] usb 3-1: Manufacturer: syz [ 131.369516][ T6029] usb 3-1: SerialNumber: syz [ 131.643348][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 131.643374][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 131.643398][ T6474] netlink: 'syz.3.227': attribute type 7 has an invalid length. [ 131.743037][ T6029] usb 3-1: bad CDC descriptors [ 131.770617][ T6029] usb 3-1: USB disconnect, device number 4 [ 132.174271][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 132.174296][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.234'. [ 132.174321][ T6489] netlink: 'syz.1.234': attribute type 15 has an invalid length. [ 132.279084][ T6029] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.439560][ T6029] usb 4-1: Using ep0 maxpacket: 16 [ 132.448208][ T6029] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 132.448237][ T6029] usb 4-1: config 0 has no interface number 0 [ 132.448289][ T6029] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 132.448313][ T6029] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.503809][ T6029] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 132.503842][ T6029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.503862][ T6029] usb 4-1: Product: syz [ 132.503877][ T6029] usb 4-1: Manufacturer: syz [ 132.503891][ T6029] usb 4-1: SerialNumber: syz [ 132.542381][ T6029] usb 4-1: config 0 descriptor?? [ 132.543662][ T6485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.543997][ T6485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.776938][ T6485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.778111][ T6485] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 133.090160][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090375][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.207218][ T6029] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 133.207250][ T6029] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 133.207544][ T6029] asix 4-1:0.251: probe with driver asix failed with error -71 [ 133.267737][ T6029] usb 4-1: USB disconnect, device number 5 [ 133.589019][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.739118][ T5932] usb 2-1: Using ep0 maxpacket: 16 [ 133.754456][ T5932] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 133.754489][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.754510][ T5932] usb 2-1: Product: syz [ 133.754525][ T5932] usb 2-1: Manufacturer: syz [ 133.754539][ T5932] usb 2-1: SerialNumber: syz [ 133.781239][ T5932] usb 2-1: config 0 descriptor?? [ 133.816567][ T5932] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 134.022892][ T5932] gspca_sn9c2028: read1 error -32 [ 134.227804][ T5932] gspca_sn9c2028: read1 error -71 [ 134.227912][ T5932] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 134.279559][ T5932] usb 2-1: USB disconnect, device number 5 [ 135.053842][ T37] audit: type=1400 audit(1756378475.410:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6547 comm="syz.3.262" src=1 dest=20000 netif=wpan0 [ 136.356345][ T6582] Bluetooth: MGMT ver 1.23 [ 136.797562][ T6593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.030750][ T5917] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 137.192676][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 137.192732][ T5917] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 137.192755][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.207405][ T5917] usb 4-1: config 0 descriptor?? [ 137.210095][ T6594] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.659160][ T5932] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 137.693091][ T5917] elan 0003:04F3:0755.0007: unknown main item tag 0x7 [ 137.693130][ T5917] elan 0003:04F3:0755.0007: item fetching failed at offset 4/5 [ 137.694059][ T5917] elan 0003:04F3:0755.0007: Hid Parse failed [ 137.694193][ T5917] elan 0003:04F3:0755.0007: probe with driver elan failed with error -22 [ 137.812047][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.812083][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.812106][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 137.812150][ T5932] usb 3-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 137.812172][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.969463][ T5932] usb 3-1: config 0 descriptor?? [ 137.972815][ T5917] usb 4-1: USB disconnect, device number 6 [ 138.470445][ T5932] hid-generic 0003:045E:008E.0008: unbalanced collection at end of report description [ 138.471466][ T5932] hid-generic 0003:045E:008E.0008: probe with driver hid-generic failed with error -22 [ 138.572454][ T6628] IPVS: Unknown mcast interface: pim6reg0 [ 138.666505][ T5932] usb 3-1: USB disconnect, device number 5 [ 138.730701][ T6633] tmpfs: Bad value for 'mpol' [ 139.279087][ T5932] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.430580][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 139.434973][ T5932] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 139.459088][ T5932] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 139.459118][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.459138][ T5932] usb 2-1: Product: syz [ 139.459152][ T5932] usb 2-1: Manufacturer: syz [ 139.459166][ T5932] usb 2-1: SerialNumber: syz [ 139.506708][ T5932] usb 2-1: config 0 descriptor?? [ 139.523950][ T5932] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 139.524013][ T5932] usb 2-1: setting power ON [ 139.524522][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 139.539875][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.550896][ T5932] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 139.550962][ T5932] usb 2-1: media controller created [ 139.764685][ T6639] dvb-usb: bulk message failed: -22 (3/0) [ 139.764714][ T6639] dvb-usb: bulk message failed: -22 (3/0) [ 139.793712][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.976837][ T5932] usb 2-1: selecting invalid altsetting 6 [ 139.976862][ T5932] usb 2-1: digital interface selection failed (-22) [ 139.976878][ T5932] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 139.985766][ T5932] usb 2-1: setting power OFF [ 139.986005][ T5932] dvb-usb: bulk message failed: -22 (2/0) [ 139.986022][ T5932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 139.986033][ T5932] (NULL device *): no alternate interface [ 140.296001][ T5932] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 140.314587][ T5932] usb 2-1: USB disconnect, device number 6 [ 140.439129][ T5955] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.504946][ T6670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.505116][ T6670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.505725][ T6670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.505812][ T6670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.506166][ T6670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.506252][ T6670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.506582][ T6670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.506664][ T6670] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.507020][ T6670] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.593032][ T5955] usb 5-1: Using ep0 maxpacket: 8 [ 140.597260][ T5955] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.597326][ T5955] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.600371][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.600397][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.600415][ T5955] usb 5-1: SerialNumber: syz [ 140.721599][ T5955] cdc_acm 5-1:1.0: skipping garbage [ 140.721623][ T5955] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 140.721637][ T5955] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 140.721679][ T5955] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 140.866976][ T6678] syz.3.326 uses obsolete (PF_INET,SOCK_PACKET) [ 140.960301][ T5955] usb 5-1: USB disconnect, device number 5 [ 141.010774][ T5932] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 141.164950][ T5932] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 141.164980][ T5932] usb 3-1: config 0 has no interface number 0 [ 141.165018][ T5932] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 141.165059][ T5932] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 141.165087][ T5932] usb 3-1: config 0 interface 255 has no altsetting 0 [ 141.165124][ T5932] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 141.165146][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.218760][ T5932] usb 3-1: config 0 descriptor?? [ 141.226611][ T5932] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 141.429860][ T5955] usb 3-1: USB disconnect, device number 6 [ 143.366353][ T6740] netlink: 'syz.3.352': attribute type 10 has an invalid length. [ 143.618651][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.686649][ T6740] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 144.629900][ T5917] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 144.791820][ T5917] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.791850][ T5917] usb 1-1: config 0 has no interface number 0 [ 144.791901][ T5917] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 144.791925][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.831576][ T5917] usb 1-1: config 0 descriptor?? [ 144.863680][ T5917] usb 1-1: selecting invalid altsetting 1 [ 144.863874][ T5917] dvb_ttusb_budget: ttusb_init_controller: error [ 144.863888][ T5917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 145.151400][ T5917] DVB: Unable to find symbol cx22700_attach() [ 145.452548][ T5917] DVB: Unable to find symbol tda10046_attach() [ 145.452566][ T5917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 145.462981][ T5917] usb 1-1: USB disconnect, device number 3 [ 145.770540][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'. [ 145.804104][ T6800] net_ratelimit: 1053 callbacks suppressed [ 145.804127][ T6800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.436638][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 146.799329][ T5931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.959101][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 146.962282][ T5931] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 146.962315][ T5931] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.962385][ T5931] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.962409][ T5931] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 146.966767][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.966795][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.966815][ T5931] usb 1-1: Product: syz [ 146.966828][ T5931] usb 1-1: Manufacturer: syz [ 146.966842][ T5931] usb 1-1: SerialNumber: syz [ 147.259105][ T6829] Bluetooth: MGMT ver 1.23 [ 147.469103][ T5931] usb 1-1: USB disconnect, device number 4 [ 147.694224][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.718807][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 148.470954][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 149.063848][ T6873] tmpfs: Unexpected value for 'usrquota' [ 149.118966][ T5917] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 149.280922][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.280952][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 149.281011][ T5917] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 149.281035][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.327731][ T5917] usb 4-1: config 0 descriptor?? [ 149.386711][ T5917] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 149.386804][ T5917] dvb-usb: bulk message failed: -22 (3/0) [ 149.394628][ T6877] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.416'. [ 149.414415][ T5917] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 149.430063][ T5917] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 149.430126][ T5917] usb 4-1: media controller created [ 149.433007][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.473204][ T5917] dvb-usb: bulk message failed: -22 (6/0) [ 149.473305][ T5917] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 149.496830][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 149.525141][ T5917] dvb-usb: schedule remote query interval to 150 msecs. [ 149.525178][ T5917] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 149.560085][ T6867] dvb-usb: bulk message failed: -22 (2/0) [ 149.587567][ T5917] usb 4-1: USB disconnect, device number 7 [ 149.850557][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'. [ 149.850595][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 149.969127][ T5846] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.009506][ T5917] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 150.131670][ T5846] usb 1-1: Using ep0 maxpacket: 16 [ 150.134485][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.134518][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.134540][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.134582][ T5846] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.134605][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.216524][ T5846] usb 1-1: config 0 descriptor?? [ 150.464398][ T6891] netlink: 104 bytes leftover after parsing attributes in process `syz.1.423'. [ 150.588058][ T6897] tap0: tun_chr_ioctl cmd 1074025681 [ 150.730068][ T5846] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input7 [ 150.796742][ T5846] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 150.893444][ T5955] usb 1-1: USB disconnect, device number 5 [ 151.066168][ T6905] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 151.129203][ T6029] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.217049][ T6904] fido_id[6904]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 151.278959][ T6029] usb 4-1: Using ep0 maxpacket: 16 [ 151.295864][ T6029] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 151.295896][ T6029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.295917][ T6029] usb 4-1: Product: syz [ 151.295931][ T6029] usb 4-1: Manufacturer: syz [ 151.295945][ T6029] usb 4-1: SerialNumber: syz [ 151.452775][ T6029] usb 4-1: config 0 descriptor?? [ 151.498069][ T6029] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 151.695653][ T6029] gp8psk: usb in 128 operation failed. [ 151.700852][ T6029] gp8psk: usb in 137 operation failed. [ 151.700871][ T6029] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.701795][ T6029] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 151.701850][ T6029] usb 4-1: media controller created [ 151.725558][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 151.832064][ T6029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.832649][ T6918] netlink: 48 bytes leftover after parsing attributes in process `syz.4.435'. [ 151.987841][ T6029] gp8psk_fe: Frontend revision 1 attached [ 151.988669][ T6029] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 152.005847][ T6029] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 152.361539][ T6029] gp8psk: usb in 138 operation failed. [ 152.361562][ T6029] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 152.361575][ T6029] gp8psk: found Genpix USB device pID = 201 (hex) [ 152.420307][ T6029] usb 4-1: USB disconnect, device number 8 [ 153.130821][ T6029] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 154.489064][ T5917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 154.669004][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 154.686011][ T5917] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 154.686039][ T5917] usb 1-1: config 0 has no interface number 0 [ 154.705764][ T5917] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 154.705795][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.705815][ T5917] usb 1-1: Product: syz [ 154.705829][ T5917] usb 1-1: Manufacturer: syz [ 154.705843][ T5917] usb 1-1: SerialNumber: syz [ 154.764681][ T5917] usb 1-1: config 0 descriptor?? [ 154.790387][ T5917] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 154.790416][ T5917] usb 1-1: selecting invalid altsetting 1 [ 154.790431][ T5917] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 154.795384][ T5917] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 154.795852][ T5917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 154.795912][ T5917] usb 1-1: media controller created [ 154.884326][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.325122][ T6993] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 156.043571][ T5917] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 156.043659][ T5917] zl10353_read_register: readreg error (reg=127, ret==-110) [ 156.079166][ T6967] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 156.226921][ T5917] usb 1-1: USB disconnect, device number 6 [ 156.499046][ T5846] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 156.657713][ T5846] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.657756][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.657777][ T5846] usb 2-1: Product: syz [ 156.657791][ T5846] usb 2-1: Manufacturer: syz [ 156.657805][ T5846] usb 2-1: SerialNumber: syz [ 156.737189][ T5846] usb 2-1: config 0 descriptor?? [ 156.974846][ T5846] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 157.385766][ T5846] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 157.417281][ T5846] usb 2-1: USB disconnect, device number 7 [ 157.451214][ T7035] netlink: 'syz.2.486': attribute type 13 has an invalid length. [ 157.451272][ T7035] macvtap0: entered promiscuous mode [ 157.502743][ T7035] macvtap0: refused to change device tx_queue_len [ 158.047393][ T5846] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.213394][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.213431][ T5846] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.213473][ T5846] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 158.213496][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.267589][ T5846] usb 1-1: config 0 descriptor?? [ 158.734883][ T5846] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 158.774820][ T5846] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 158.900413][ T5846] cp2112 0003:10C4:EA90.000A: error requesting version [ 158.924044][ T5846] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -71 [ 158.972623][ T5846] usb 1-1: USB disconnect, device number 7 [ 159.063039][ T7062] fido_id[7062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 159.230580][ T7066] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.501'. [ 160.246147][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 160.561847][ T37] audit: type=1326 audit(1756378500.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2deebe9 code=0x7ffc0000 [ 160.561912][ T37] audit: type=1326 audit(1756378500.910:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2deebe9 code=0x7ffc0000 [ 160.570706][ T37] audit: type=1326 audit(1756378500.930:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f50a2deebe9 code=0x7ffc0000 [ 160.581527][ T37] audit: type=1326 audit(1756378500.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a2deebe9 code=0x7ffc0000 [ 160.581585][ T37] audit: type=1326 audit(1756378500.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f50a2deebe9 code=0x7ffc0000 [ 160.603436][ T37] audit: type=1326 audit(1756378500.960:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50a2d8ade9 code=0x7ffc0000 [ 160.605783][ T37] audit: type=1326 audit(1756378500.960:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50a2d8ade9 code=0x7ffc0000 [ 160.623294][ T37] audit: type=1326 audit(1756378500.970:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50a2d8ade9 code=0x7ffc0000 [ 160.624459][ T37] audit: type=1326 audit(1756378500.980:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50a2d8ade9 code=0x7ffc0000 [ 160.639327][ T37] audit: type=1326 audit(1756378500.990:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f50a2d8ade9 code=0x7ffc0000 [ 161.181447][ T7106] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 161.181470][ T7106] netlink: 'syz.1.520': attribute type 4 has an invalid length. [ 161.181483][ T7106] netlink: 188 bytes leftover after parsing attributes in process `syz.1.520'. [ 161.181497][ T7106] NCSI netlink: No device for ifindex 458760 [ 161.517344][ T7110] evm: overlay not supported [ 161.829286][ T5846] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.999123][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 162.002500][ T5846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.002533][ T5846] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.002657][ T5846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.002696][ T5846] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 162.002728][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.109561][ T5846] usb 2-1: config 0 descriptor?? [ 162.674259][ T5846] cougar 0003:060B:500A.000B: unexpected long global item [ 162.700496][ T5846] cougar 0003:060B:500A.000B: parse failed [ 162.700619][ T5846] cougar 0003:060B:500A.000B: probe with driver cougar failed with error -22 [ 162.871617][ T5955] usb 2-1: USB disconnect, device number 8 [ 164.194802][ T7150] IPVS: persistence engine module ip_vs_pe_ not found [ 165.619175][ T5846] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.773071][ T5846] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 165.773100][ T5846] usb 2-1: config 0 has no interface number 0 [ 165.776385][ T5846] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 165.776413][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.776432][ T5846] usb 2-1: Product: syz [ 165.776446][ T5846] usb 2-1: Manufacturer: syz [ 165.776460][ T5846] usb 2-1: SerialNumber: syz [ 165.837894][ T5846] usb 2-1: config 0 descriptor?? [ 166.077277][ T5846] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 166.102099][ T5846] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 166.102573][ T5846] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 166.102626][ T5846] usb 2-1: media controller created [ 166.173113][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.329852][ T5846] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 167.330590][ T7183] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 167.486716][ T5846] usb 2-1: USB disconnect, device number 9 [ 168.193175][ T7231] netlink: 1 bytes leftover after parsing attributes in process `syz.1.576'. [ 168.280744][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 168.281302][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.743331][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.579'. [ 169.163296][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.163693][ T153] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 169.180024][ T6029] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.119297][ T5932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.208646][ T5932] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 170.218413][ T7269] netlink: 'syz.4.592': attribute type 2 has an invalid length. [ 170.593857][ T7282] netlink: 260 bytes leftover after parsing attributes in process `syz.0.596'. [ 171.151852][ T7295] cgroup: fork rejected by pids controller in /syz2 [ 172.125511][ T31] kernel read not supported for file /dsp1 (pid: 31 comm: kworker/1:0) [ 172.299022][ T5846] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.450765][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 172.453762][ T5846] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 172.453793][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.484253][ T5846] usb 4-1: config 0 descriptor?? [ 172.520929][ T5846] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 172.711697][ T5846] usb 4-1: Detected FT232B [ 172.922080][ T5846] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 172.943760][ T5846] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 173.169677][ T5846] usb 4-1: USB disconnect, device number 9 [ 173.218535][ T5846] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 173.239458][ T5846] ftdi_sio 4-1:0.0: device disconnected [ 173.400259][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 173.999653][ T7333] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 173.999681][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 173.999697][ T7333] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 173.999710][ T7333] netlink: 'syz.3.622': attribute type 2 has an invalid length. [ 173.999723][ T7333] netlink: 64 bytes leftover after parsing attributes in process `syz.3.622'. [ 174.043410][ T7332] input: syz1 as /devices/virtual/input/input8 [ 174.484699][ T1208] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.972239][ T7349] process 'syz.1.629' launched './file0' with NULL argv: empty string added [ 175.150979][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.171817][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.173184][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.174521][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.175434][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.355970][ T1208] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.639120][ T5932] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.802037][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.802066][ T5932] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.822310][ T5932] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.822338][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 175.822356][ T5932] usb 1-1: SerialNumber: syz [ 175.895864][ T1208] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.264989][ T5932] usb 1-1: 0:2 : does not exist [ 176.421803][ T5932] usb 1-1: USB disconnect, device number 8 [ 176.694800][ T1208] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.804719][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.240091][ T5851] Bluetooth: hci0: command tx timeout [ 178.029695][ T7380] syz.1.642 (7380) used greatest stack depth: 16696 bytes left [ 178.619709][ T1208] bridge_slave_1: left allmulticast mode [ 178.619909][ T1208] bridge_slave_1: left promiscuous mode [ 178.622930][ T1208] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.781227][ T1208] bridge_slave_0: left allmulticast mode [ 178.781264][ T1208] bridge_slave_0: left promiscuous mode [ 178.781572][ T1208] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.798987][ T6029] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.955416][ T6029] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 178.955449][ T6029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.955469][ T6029] usb 4-1: Product: syz [ 178.955483][ T6029] usb 4-1: Manufacturer: syz [ 178.955505][ T6029] usb 4-1: SerialNumber: syz [ 179.029026][ T6029] usb 4-1: config 0 descriptor?? [ 179.053669][ T6029] ch341 4-1:0.0: ch341-uart converter detected [ 179.318972][ T5851] Bluetooth: hci0: command tx timeout [ 179.866068][ T6029] usb 4-1: failed to send control message: -71 [ 179.866356][ T6029] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 179.922880][ T6029] usb 4-1: USB disconnect, device number 10 [ 179.925717][ T6029] ch341 4-1:0.0: device disconnected [ 181.401701][ T5851] Bluetooth: hci0: command tx timeout [ 181.521163][ T1234] kernel read not supported for file /dsp (pid: 1234 comm: kworker/1:2) [ 182.720121][ T1208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.800065][ T1208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.847453][ T1208] bond0 (unregistering): Released all slaves [ 182.939198][ T5917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.122428][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 183.181332][ T5917] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 183.181365][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.181384][ T5917] usb 4-1: Product: syz [ 183.181398][ T5917] usb 4-1: Manufacturer: syz [ 183.181412][ T5917] usb 4-1: SerialNumber: syz [ 183.236416][ T5917] usb 4-1: config 0 descriptor?? [ 183.289119][ T5917] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 183.486517][ T5851] Bluetooth: hci0: command tx timeout [ 183.880687][ T5934] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 183.970381][ T5917] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 183.971061][ T5917] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 184.008586][ T5917] usb 4-1: USB disconnect, device number 11 [ 184.029061][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 184.050854][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.050925][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.050953][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.050974][ T5934] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 184.050998][ T5934] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.069313][ T5934] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 184.069341][ T5934] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 184.069359][ T5934] usb 2-1: Manufacturer: syz [ 184.150126][ T5934] usb 2-1: config 0 descriptor?? [ 184.340506][ T7350] chnl_net:caif_netlink_parms(): no params data found [ 184.602587][ T5934] rc_core: IR keymap rc-hauppauge not found [ 184.602613][ T5934] Registered IR keymap rc-empty [ 184.605230][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.638781][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.801834][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 184.898056][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 184.944911][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.960584][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.979946][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.004973][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.021782][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.041410][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.059223][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.079459][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.100744][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.119171][ T5934] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 185.242271][ T5934] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 185.242299][ T5934] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 185.278954][ T5934] usb 2-1: USB disconnect, device number 10 [ 185.486257][ T7498] vivid-000: ================= START STATUS ================= [ 185.486279][ T7498] vivid-000: Test Pattern: 75% Colorbar [ 185.486302][ T7498] vivid-000: Fill Percentage of Frame: 100 [ 185.486323][ T7498] vivid-000: Horizontal Movement: No Movement [ 185.486343][ T7498] vivid-000: Vertical Movement: No Movement [ 185.486361][ T7498] vivid-000: OSD Text Mode: All [ 185.486379][ T7498] vivid-000: Show Border: false [ 185.486397][ T7498] vivid-000: Show Square: false [ 185.486415][ T7498] vivid-000: Sensor Flipped Horizontally: false [ 185.486433][ T7498] vivid-000: Sensor Flipped Vertically: false [ 185.486452][ T7498] vivid-000: Insert SAV Code in Image: false [ 185.486471][ T7498] vivid-000: Insert EAV Code in Image: false [ 185.486490][ T7498] vivid-000: Insert Video Guard Band: false [ 185.486508][ T7498] vivid-000: Reduced Framerate: false [ 185.486525][ T7498] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 185.486546][ T7498] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 185.486566][ T7498] vivid-000: Enable Capture Cropping: true grabbed [ 185.486589][ T7498] vivid-000: Enable Capture Composing: true grabbed [ 185.486612][ T7498] vivid-000: Enable Capture Scaler: true grabbed [ 185.486644][ T7498] vivid-000: Timestamp Source: End of Frame [ 185.486664][ T7498] vivid-000: Colorspace: sRGB [ 185.486682][ T7498] vivid-000: Transfer Function: Default [ 185.486702][ T7498] vivid-000: Y'CbCr Encoding: Default [ 185.486721][ T7498] vivid-000: HSV Encoding: Hue 0-179 [ 185.486740][ T7498] vivid-000: Quantization: Default [ 185.486765][ T7498] vivid-000: Apply Alpha To Red Only: false [ 185.486784][ T7498] vivid-000: Standard Aspect Ratio: 4x3 [ 185.486803][ T7498] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 185.486827][ T7498] vivid-000: DV Timings: 640x480p59 inactive [ 185.486851][ T7498] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 185.486870][ T7498] vivid-000: Maximum EDID Blocks: 2 [ 185.486889][ T7498] vivid-000: Limited RGB Range (16-235): false [ 185.486909][ T7498] vivid-000: Rx RGB Quantization Range: Automatic [ 185.486928][ T7498] vivid-000: Power Present: 0x00000001 [ 185.486950][ T7498] tpg source WxH: 320x240 (Y'CbCr) [ 185.486963][ T7498] tpg field: 1 [ 185.486970][ T7498] tpg crop: (0,0)/320x240 [ 185.486983][ T7498] tpg compose: (0,0)/320x240 [ 185.486996][ T7498] tpg colorspace: 8 [ 185.487004][ T7498] tpg transfer function: 0/2 [ 185.487014][ T7498] tpg Y'CbCr encoding: 0/1 [ 185.487023][ T7498] tpg quantization: 0/2 [ 185.487033][ T7498] tpg RGB range: 0/2 [ 185.487042][ T7498] vivid-000: ================== END STATUS ================== [ 186.708497][ T7519] loop8: detected capacity change from 0 to 1 [ 186.770371][ T7519] Dev loop8: unable to read RDB block 1 [ 186.770423][ T7519] loop8: unable to read partition table [ 186.770700][ T7519] loop8: partition table beyond EOD, truncated [ 186.770722][ T7519] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 187.099074][ T5955] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.258365][ T5955] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.258400][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.258420][ T5955] usb 4-1: Product: syz [ 187.258434][ T5955] usb 4-1: Manufacturer: syz [ 187.258448][ T5955] usb 4-1: SerialNumber: syz [ 187.279328][ T5955] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.478333][ T5934] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.698995][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 187.852396][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 187.857741][ T5932] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.857872][ T5932] usb 1-1: config 0 has no interface number 0 [ 187.857928][ T5932] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.857954][ T5932] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.858085][ T5932] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 187.858110][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.067597][ T5932] usb 1-1: config 0 descriptor?? [ 188.163005][ T1234] usb 4-1: USB disconnect, device number 12 [ 188.299893][ T7539] ======================================================= [ 188.299893][ T7539] WARNING: The mand mount option has been deprecated and [ 188.299893][ T7539] and is ignored by this kernel. Remove the mand [ 188.299893][ T7539] option from the mount to silence this warning. [ 188.299893][ T7539] ======================================================= [ 188.432787][ T7539] loop0: Can't mount, would change RO state [ 188.494312][ T1208] hsr_slave_0: left promiscuous mode [ 188.539302][ T1208] hsr_slave_1: left promiscuous mode [ 188.540579][ T1208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.540683][ T1208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.619055][ T1208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.619094][ T1208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.724462][ T5932] input: HID 28bd:0094 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.000C/input/input10 [ 188.759023][ T5934] usb 4-1: Service connection timeout for: 256 [ 188.759049][ T5934] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 188.760626][ T5934] ath9k_htc: Failed to initialize the device [ 188.783944][ T1234] usb 4-1: ath9k_htc: USB layer deinitialized [ 188.922208][ T5932] uclogic 0003:28BD:0094.000C: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 188.970098][ T5932] usb 1-1: USB disconnect, device number 9 [ 189.067778][ T1208] veth1_macvtap: left promiscuous mode [ 189.068298][ T1208] veth0_macvtap: left promiscuous mode [ 189.082909][ T1208] veth1_vlan: left promiscuous mode [ 189.083361][ T1208] veth0_vlan: left promiscuous mode [ 189.151751][ T7550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 189.461879][ T7551] fido_id[7551]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 191.303457][ T7572] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 192.690066][ T1208] team0 (unregistering): Port device team_slave_1 removed [ 192.958544][ T1208] team0 (unregistering): Port device team_slave_0 removed [ 194.549800][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549891][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.340870][ T7350] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.341101][ T7350] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.341325][ T7350] bridge_slave_0: entered allmulticast mode [ 195.343339][ T7350] bridge_slave_0: entered promiscuous mode [ 195.829743][ T7579] kthread_run failed with err -4 [ 195.844263][ T7350] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.844424][ T7350] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.844684][ T7350] bridge_slave_1: entered allmulticast mode [ 195.847956][ T7350] bridge_slave_1: entered promiscuous mode [ 196.496120][ T7350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.559615][ T7350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.034009][ T7350] team0: Port device team_slave_0 added [ 197.038404][ T7350] team0: Port device team_slave_1 added [ 197.864594][ T7620] bridge0: port 3(batadv1) entered blocking state [ 197.879697][ T7620] bridge0: port 3(batadv1) entered disabled state [ 197.880011][ T7620] batadv1: entered allmulticast mode [ 197.883860][ T7620] batadv1: entered promiscuous mode [ 198.036105][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.036124][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.036151][ T7350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.070295][ T7350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.070313][ T7350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.070337][ T7350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.190953][ T7627] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 198.211767][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.217180][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.237185][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 198.326299][ T69] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 198.326321][ T69] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 198.564456][ T7350] hsr_slave_0: entered promiscuous mode [ 198.565966][ T7350] hsr_slave_1: entered promiscuous mode [ 198.567108][ T7350] debugfs: 'hsr0' already exists in 'hsr' [ 198.567136][ T7350] Cannot create hsr debugfs directory [ 198.636540][ T7633] team_slave_0: entered promiscuous mode [ 198.636638][ T7633] team_slave_1: entered promiscuous mode [ 200.200252][ T5855] Bluetooth: hci5: command 0x1003 tx timeout [ 200.208713][ T5851] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 200.350505][ T7661] cgroup: fork rejected by pids controller in /syz0 [ 201.176997][ T7721] input: syz0 as /devices/virtual/input/input11 [ 202.486852][ T5932] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.628986][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 202.640681][ T5932] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 202.640707][ T5932] usb 4-1: config 8 has no interface number 0 [ 202.640754][ T5932] usb 4-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 202.640776][ T5932] usb 4-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.640796][ T5932] usb 4-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 202.640816][ T5932] usb 4-1: config 8 interface 39 has no altsetting 0 [ 202.644041][ T5932] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 202.644067][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.644084][ T5932] usb 4-1: Product: syz [ 202.644097][ T5932] usb 4-1: Manufacturer: syz [ 202.644109][ T5932] usb 4-1: SerialNumber: syz [ 203.329208][ T7749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.358031][ T7749] bond0: (slave bond1): Enslaving as an active interface with an up link [ 203.533629][ T5932] ipheth 4-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 204.014229][ T5932] ipheth 4-1:8.39: Apple iPhone USB Ethernet device attached [ 204.068393][ T5932] usb 4-1: USB disconnect, device number 13 [ 204.387488][ T7773] netlink: 'syz.0.764': attribute type 7 has an invalid length. [ 204.525549][ T5932] ipheth 4-1:8.39: Apple iPhone USB Ethernet now disconnected [ 205.195287][ T7794] Invalid/unusable pipe [ 205.312401][ T7350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.447596][ T7350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.612180][ T7350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.732844][ T7350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.602815][ T7350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.746442][ T7350] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.816821][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.819098][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.913738][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.913902][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.096714][ T7852] serio: Serial port ptm0 [ 208.470608][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.509410][ T5932] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 208.659995][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 208.663515][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.663568][ T5932] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.663591][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.713346][ T5932] usb 4-1: config 0 descriptor?? [ 208.957416][ T7350] veth0_vlan: entered promiscuous mode [ 209.042995][ T7350] veth1_vlan: entered promiscuous mode [ 209.149206][ T5932] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 209.173966][ T7350] veth0_macvtap: entered promiscuous mode [ 209.202647][ T7350] veth1_macvtap: entered promiscuous mode [ 209.232404][ T5932] usb 4-1: USB disconnect, device number 14 [ 209.275105][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.331891][ T7350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.419028][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.431697][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.440908][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.455698][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.507371][ T7904] mkiss: ax0: crc mode is auto. [ 210.689959][ T7911] loop8: detected capacity change from 0 to 1 [ 210.724661][ T7911] Dev loop8: unable to read RDB block 1 [ 210.724712][ T7911] loop8: unable to read partition table [ 210.724979][ T7911] loop8: partition table beyond EOD, truncated [ 210.724998][ T7911] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 211.312214][ T7922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.367755][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.367779][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.878106][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.878127][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.397785][ T5955] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 215.551164][ T5955] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.551299][ T5955] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 215.551359][ T5955] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 215.551382][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.571967][ T5955] usb 5-1: config 0 descriptor?? [ 215.610398][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 215.610457][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 215.700902][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 215.704581][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 215.704644][ T5955] usb 5-1: media controller created [ 215.751457][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.766159][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 215.766265][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 215.853627][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 215.948728][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 215.948752][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 216.130040][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 216.130101][ T5955] dvb-usb: error while querying for an remote control event. [ 216.286984][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 216.287022][ T5955] dvb-usb: error while querying for an remote control event. [ 216.446877][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 216.446916][ T5955] dvb-usb: error while querying for an remote control event. [ 216.606842][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 216.606886][ T5955] dvb-usb: error while querying for an remote control event. [ 216.766675][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 216.766714][ T5955] dvb-usb: error while querying for an remote control event. [ 216.926632][ T5955] dvb-usb: bulk message failed: -22 (1/0) [ 216.926672][ T5955] dvb-usb: error while querying for an remote control event. [ 217.086590][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 217.086629][ T5932] dvb-usb: error while querying for an remote control event. [ 217.112795][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 217.112838][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 217.112866][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 217.112938][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 217.246583][ T5932] dvb-usb: bulk message failed: -22 (1/0) [ 217.246621][ T5932] dvb-usb: error while querying for an remote control event. [ 217.352736][ T5955] usb 5-1: USB disconnect, device number 6 [ 217.642546][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 218.128595][ T8037] input: syz0 as /devices/virtual/input/input13 [ 218.481961][ T8040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.512225][ T8040] bond0: (slave bond1): Enslaving as an active interface with an up link [ 219.325891][ T8060] netlink: 104 bytes leftover after parsing attributes in process `syz.4.847'. [ 219.563619][ T8062] hsr0: entered promiscuous mode [ 219.955347][ T1234] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 220.132144][ T1234] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 220.132184][ T1234] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 220.132202][ T1234] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 220.132220][ T1234] usb 5-1: config 220 has no interface number 2 [ 220.132299][ T1234] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 220.132326][ T1234] usb 5-1: config 220 interface 0 has no altsetting 0 [ 220.132343][ T1234] usb 5-1: config 220 interface 76 has no altsetting 0 [ 220.132360][ T1234] usb 5-1: config 220 interface 1 has no altsetting 0 [ 220.214507][ T1234] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 220.214538][ T1234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.214559][ T1234] usb 5-1: Product: syz [ 220.214573][ T1234] usb 5-1: Manufacturer: syz [ 220.214587][ T1234] usb 5-1: SerialNumber: syz [ 220.482782][ T8074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.854'. [ 220.509027][ T1234] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 220.509066][ T1234] usb 5-1: No valid video chain found. [ 220.509132][ T1234] usb 5-1: selecting invalid altsetting 0 [ 220.559314][ T1234] usb 5-1: selecting invalid altsetting 0 [ 220.559370][ T1234] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 220.585215][ T1234] usb 5-1: USB disconnect, device number 7 [ 220.927523][ T8076] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.945546][ T8076] bond0: (slave bond1): Enslaving as an active interface with an up link [ 221.606912][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 221.606941][ T8090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 222.445676][ T7597] udevd[7597]: failed to send result of seq 13444 to main daemon: Connection refused [ 223.637041][ T5934] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 223.786434][ T5934] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.786468][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.813938][ T5934] usb 4-1: config 0 descriptor?? [ 223.832758][ T5934] cp210x 4-1:0.0: cp210x converter detected [ 224.244734][ T5934] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 224.354080][ T5934] usb 4-1: cp210x converter now attached to ttyUSB0 [ 224.455046][ T5934] usb 4-1: USB disconnect, device number 15 [ 224.509978][ T5934] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.623537][ T5934] cp210x 4-1:0.0: device disconnected [ 224.691049][ T8155] mmap: syz.1.889 (8155) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.176265][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 225.187178][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 225.542516][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 227.047076][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 227.047103][ T8208] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 227.900104][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 227.900213][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.923'. [ 228.620836][ T5934] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.785162][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.785198][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.785240][ T5934] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 228.785263][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.804704][ T5934] usb 2-1: config 0 descriptor?? [ 229.638878][ T5934] hid-led 0003:27B8:01ED.000D: probe with driver hid-led failed with error -71 [ 229.655610][ T5934] usb 2-1: USB disconnect, device number 11 [ 232.267917][ T8312] ip6gretap1: entered allmulticast mode [ 233.674195][ T8357] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.690697][ T8357] bond0: (slave bond1): Enslaving as an active interface with an up link [ 235.098804][ T8395] : renamed from veth0_vlan [ 236.213503][ T8404] Bluetooth: MGMT ver 1.23 [ 236.297006][ T5932] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 236.460495][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.460531][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.460572][ T5932] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 236.460596][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.472907][ T5932] usb 4-1: config 0 descriptor?? [ 236.944848][ T5932] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0 [ 236.971021][ T5932] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 236.971360][ T5932] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints? [ 237.139615][ C0] hid-thrustmaster 0003:044F:B65D.000E: Unknown packet type 0x0, unable to proceed further with wheel init [ 237.342769][ T5932] usb 4-1: USB disconnect, device number 16 [ 238.446631][ T8446] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 239.418756][ T8472] Zero length message leads to an empty skb [ 239.715395][ T5932] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.765225][ T37] kauditd_printk_skb: 640 callbacks suppressed [ 239.765247][ T37] audit: type=1326 audit(1756379349.136:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.774804][ T37] audit: type=1326 audit(1756379349.146:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.774866][ T37] audit: type=1326 audit(1756379349.146:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.852945][ T37] audit: type=1326 audit(1756379349.226:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.853556][ T37] audit: type=1326 audit(1756379349.226:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.854517][ T37] audit: type=1326 audit(1756379349.226:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.854571][ T37] audit: type=1326 audit(1756379349.226:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.861618][ T37] audit: type=1326 audit(1756379349.236:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f83c4295ba7 code=0x7ffc0000 [ 239.861674][ T37] audit: type=1326 audit(1756379349.236:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f83c423ade9 code=0x7ffc0000 [ 239.861715][ T37] audit: type=1326 audit(1756379349.236:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8485 comm="syz.2.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f83c429ebe9 code=0x7ffc0000 [ 239.885549][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 239.895598][ T5932] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 239.905399][ T1234] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.929933][ T5932] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 239.929961][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.929979][ T5932] usb 4-1: Product: syz [ 239.929991][ T5932] usb 4-1: Manufacturer: syz [ 239.930004][ T5932] usb 4-1: SerialNumber: syz [ 240.144991][ T1234] usb 1-1: Using ep0 maxpacket: 32 [ 240.147766][ T1234] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.147796][ T1234] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.147819][ T1234] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.151160][ T1234] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.151189][ T1234] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 240.151209][ T1234] usb 1-1: Product: syz [ 240.151221][ T1234] usb 1-1: Manufacturer: syz [ 240.151234][ T1234] usb 1-1: SerialNumber: syz [ 240.271544][ T1234] usb 1-1: config 0 descriptor?? [ 240.464881][ T5934] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.616638][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 240.622393][ T5934] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 240.622426][ T5934] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 240.622447][ T5934] usb 3-1: Product: syz [ 240.622461][ T5934] usb 3-1: Manufacturer: syz [ 240.622475][ T5934] usb 3-1: SerialNumber: syz [ 240.653214][ T5934] usb 3-1: config 0 descriptor?? [ 240.667060][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 240.724149][ T1234] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 240.847851][ T5932] usb 4-1: reset high-speed USB device number 17 using dummy_hcd [ 241.079127][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.124060][ T1234] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 241.134207][ T1234] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 241.155354][ T1234] usb 1-1: USB disconnect, device number 10 [ 241.298921][ T5932] usb 4-1: device firmware changed [ 241.323111][ T5934] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 241.363621][ T5932] usb 4-1: USB disconnect, device number 17 [ 241.425876][ T8510] Bluetooth: MGMT ver 1.23 [ 241.539237][ T31] usb 3-1: USB disconnect, device number 7 [ 241.544347][ T5932] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 241.698108][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.700150][ T5932] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 241.705775][ T5932] usb 4-1: string descriptor 0 read error: -22 [ 241.705931][ T5932] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 241.705952][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.874234][ T5932] usb 4-1: reset high-speed USB device number 18 using dummy_hcd [ 242.743872][ T5934] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 242.839492][ T5932] usb 4-1: USB disconnect, device number 18 [ 242.903797][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 242.907001][ T5934] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.907031][ T5934] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.907053][ T5934] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.908667][ T5934] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 242.908695][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 242.908714][ T5934] usb 3-1: Product: syz [ 242.917252][ T5934] usb 3-1: config 0 descriptor?? [ 243.024505][ T8556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.375932][ T5934] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 243.375969][ T5934] waterforce 0003:1044:7A4D.000F: unknown main item tag 0x0 [ 243.375993][ T5934] waterforce 0003:1044:7A4D.000F: item fetching failed at offset 2/5 [ 243.376929][ T5934] waterforce 0003:1044:7A4D.000F: hid parse failed with -22 [ 243.377048][ T5934] waterforce 0003:1044:7A4D.000F: probe with driver waterforce failed with error -22 [ 243.384116][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1070'. [ 243.596083][ T1234] usb 3-1: USB disconnect, device number 8 [ 243.733412][ T5932] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 243.894572][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 243.897349][ T5932] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 243.897380][ T5932] usb 1-1: config 0 interface 0 has no altsetting 0 [ 243.897416][ T5932] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 243.897440][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.925400][ T5932] usb 1-1: config 0 descriptor?? [ 244.148231][ T8587] 9pnet_fd: Insufficient options for proto=fd [ 244.219634][ T5932] usbhid 1-1:0.0: can't add hid device: -71 [ 244.219785][ T5932] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 244.245197][ T5932] usb 1-1: USB disconnect, device number 11 [ 244.252997][ T6034] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 244.412477][ T6034] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.412543][ T6034] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 244.412570][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 244.412598][ T6034] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 244.412620][ T6034] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.416557][ T6034] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 244.416585][ T6034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 244.416602][ T6034] usb 4-1: Product: syz [ 244.416614][ T6034] usb 4-1: Manufacturer: syz [ 244.416626][ T6034] usb 4-1: SerialNumber: syz [ 244.456321][ T6034] usb 4-1: config 0 descriptor?? [ 244.698117][ T6034] radio-si470x 4-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 244.901195][ T6034] radio-si470x 4-1:0.0: software version 200, hardware version 200 [ 245.105443][ T6034] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 245.105511][ T6034] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 245.106005][ T6034] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 245.106433][ T6034] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 245.155388][ T6034] usb 4-1: USB disconnect, device number 19 [ 246.125245][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 246.125266][ T37] audit: type=1326 audit(1756379355.499:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.1098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cb6cdebe9 code=0x0 [ 246.713703][ T1234] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 246.873278][ T1234] usb 4-1: Using ep0 maxpacket: 16 [ 246.876690][ T1234] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.876746][ T1234] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 246.876770][ T1234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.975572][ T1234] usb 4-1: config 0 descriptor?? [ 246.998562][ T1234] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 247.248656][ T5194] bcm5974 4-1:0.0: could not read from device [ 247.319004][ T1234] bcm5974 4-1:0.0: could not read from device [ 247.357974][ T5194] bcm5974 4-1:0.0: could not read from device [ 247.481375][ T1234] input: failed to attach handler mousedev to device input17, error: -5 [ 247.521904][ T1234] usb 4-1: USB disconnect, device number 20 [ 247.541866][ T5194] bcm5974 4-1:0.0: could not read from device [ 248.277185][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.470824][ T5917] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 248.623300][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 248.626019][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.626053][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.626093][ T5917] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 248.626115][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.661082][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 248.661119][ T8671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1119'. [ 248.713872][ T5917] usb 4-1: config 0 descriptor?? [ 248.850313][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.171432][ T5917] playstation 0003:054C:05C4.0010: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 249.300122][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.327213][ T5158] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.329000][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.335078][ T5917] playstation 0003:054C:05C4.0010: Invalid reportID received, expected 18 got 0 [ 249.335104][ T5917] playstation 0003:054C:05C4.0010: Failed to retrieve DualShock4 pairing info: -22 [ 249.335155][ T5917] playstation 0003:054C:05C4.0010: Failed to get MAC address from DualShock4 [ 249.335168][ T5917] playstation 0003:054C:05C4.0010: Failed to create dualshock4. [ 249.340049][ T5158] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.341181][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.405127][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.437646][ T5917] playstation 0003:054C:05C4.0010: probe with driver playstation failed with error -22 [ 249.548477][ T5917] usb 4-1: USB disconnect, device number 21 [ 249.804237][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.427783][ T8701] vxcan3: entered allmulticast mode [ 250.696410][ T8705] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 250.883311][ T67] bridge_slave_1: left allmulticast mode [ 250.883347][ T67] bridge_slave_1: left promiscuous mode [ 250.883639][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.964106][ T67] bridge_slave_0: left allmulticast mode [ 250.964145][ T67] bridge_slave_0: left promiscuous mode [ 250.967386][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.379802][ T5853] Bluetooth: hci4: command tx timeout [ 251.432933][ T8728] program syz.1.1146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.122780][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.179590][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.249614][ T67] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 253.389921][ T67] bond0 (unregistering): Released all slaves [ 253.458545][ T5853] Bluetooth: hci4: command tx timeout [ 253.729103][ T8732] block nbd2: server does not support multiple connections per device. [ 253.767454][ T8732] block nbd2: shutting down sockets [ 254.790459][ T8752] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.983089][ T8755] ALSA: mixer_oss: invalid OSS volume 'N#' [ 255.537510][ T5853] Bluetooth: hci4: command tx timeout [ 255.614273][ T67] tipc: Disabling bearer [ 255.622985][ T67] tipc: Left network mode [ 255.735655][ T67] IPVS: stopping backup sync thread 6905 ... [ 255.768793][ T8680] chnl_net:caif_netlink_parms(): no params data found [ 255.965651][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.965745][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.147141][ T5934] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 256.316864][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 256.319337][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.319403][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.319431][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 256.319453][ T5934] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 256.319476][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.321171][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 256.321199][ T5934] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.321217][ T5934] usb 4-1: Manufacturer: syz [ 256.422145][ T5934] usb 4-1: config 0 descriptor?? [ 256.786879][ T5934] rc_core: IR keymap rc-hauppauge not found [ 256.786901][ T5934] Registered IR keymap rc-empty [ 256.787105][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.806713][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.828387][ T5934] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 256.832055][ T5934] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 256.872306][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.874629][ C0] mceusb 4-1:0.0: long-range (0x1) receiver active [ 256.891914][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.908877][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.927017][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.946745][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.966750][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 256.986676][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 257.006809][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 257.026971][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 257.046602][ T5934] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 257.115193][ T5934] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 257.115221][ T5934] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 257.187252][ T8784] batman_adv: batadv0: Adding interface: ipvlan3 [ 257.187275][ T8784] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.187305][ T8784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.187321][ T8784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.187338][ T8784] batman_adv: batadv0: Interface activated: ipvlan3 [ 257.261363][ T5934] usb 4-1: USB disconnect, device number 22 [ 257.423753][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.616754][ T5853] Bluetooth: hci4: command tx timeout [ 257.769372][ T67] hsr_slave_0: left promiscuous mode [ 257.781857][ T5917] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 257.806242][ T67] hsr_slave_1: left promiscuous mode [ 257.807344][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.807376][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.847234][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.847271][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.942597][ T5917] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.942626][ T5917] usb 1-1: config 0 has no interface number 0 [ 257.942679][ T5917] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 257.942702][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.996886][ T5917] usb 1-1: config 0 descriptor?? [ 258.005099][ T67] team_slave_0: left promiscuous mode [ 258.005243][ T67] team_slave_1: left promiscuous mode [ 258.016472][ T67] veth1_macvtap: left promiscuous mode [ 258.016613][ T67] veth0_macvtap: left promiscuous mode [ 258.016957][ T67] veth1_vlan: left promiscuous mode [ 258.017191][ T67] veth0_vlan: left promiscuous mode [ 258.049933][ T5917] usb 1-1: selecting invalid altsetting 1 [ 258.052557][ T5917] dvb_ttusb_budget: ttusb_init_controller: error [ 258.052580][ T5917] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 258.143442][ T5917] DVB: Unable to find symbol cx22700_attach() [ 258.212525][ T5917] DVB: Unable to find symbol tda10046_attach() [ 258.212542][ T5917] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 258.232832][ T5917] usb 1-1: USB disconnect, device number 12 [ 258.654967][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.716116][ T5955] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 258.879935][ T8817] kvm: user requested TSC rate below hardware speed [ 258.900446][ T5955] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 258.900479][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.924949][ T5955] usb 3-1: config 0 descriptor?? [ 258.937041][ T5955] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 259.070903][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.504581][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.788592][ T5955] gspca_cpia1: usb_control_msg 02, error -71 [ 259.789242][ T5955] gspca_cpia1: usb_control_msg 05, error -71 [ 259.789700][ T5955] gspca_cpia1: usb_control_msg 04, error -71 [ 259.789799][ T5955] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 259.820637][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.830395][ T5955] usb 3-1: USB disconnect, device number 9 [ 260.055577][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.437417][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.386097][ T67] team0 (unregistering): Port device team_slave_1 removed [ 261.657909][ T67] team0 (unregistering): Port device team_slave_0 removed [ 264.448009][ T8812] tap0: tun_chr_ioctl cmd 1074025677 [ 264.448224][ T8812] tap0: linktype set to 0 [ 264.907606][ T8680] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.907991][ T8680] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.908247][ T8680] bridge_slave_0: entered allmulticast mode [ 264.915947][ T8680] bridge_slave_0: entered promiscuous mode [ 264.929255][ T8680] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.931462][ T8680] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.931697][ T8680] bridge_slave_1: entered allmulticast mode [ 264.940453][ T8680] bridge_slave_1: entered promiscuous mode [ 265.072581][ T5917] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 265.235144][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.235195][ T5917] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 265.235219][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.245871][ T5917] usb 3-1: config 0 descriptor?? [ 265.302629][ T31] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 265.394638][ T8680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.399553][ T8680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.488105][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 265.488137][ T31] usb 2-1: config 1 has no interface number 0 [ 265.490540][ T31] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.490577][ T31] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 265.490700][ T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.515034][ T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.515180][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.515200][ T31] usb 2-1: Product: syz [ 265.515213][ T31] usb 2-1: Manufacturer: syz [ 265.515284][ T31] usb 2-1: SerialNumber: syz [ 266.011058][ T8680] team0: Port device team_slave_0 added [ 266.026953][ T31] cdc_ncm 2-1:1.1: bind() failure [ 266.051437][ T5917] nintendo 0003:057E:200E.0011: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 266.073977][ T8680] team0: Port device team_slave_1 added [ 266.084082][ T31] usb 2-1: USB disconnect, device number 12 [ 266.103014][ T5917] nintendo 0003:057E:200E.0011: Failed charging grip handshake [ 266.103040][ T5917] nintendo 0003:057E:200E.0011: Failed to initialize controller; ret=-110 [ 266.292043][ T5917] nintendo 0003:057E:200E.0011: probe - fail = -110 [ 266.292288][ T5917] nintendo 0003:057E:200E.0011: probe with driver nintendo failed with error -110 [ 266.298444][ T5917] usb 3-1: USB disconnect, device number 10 [ 266.595098][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.595118][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.595149][ T8680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.598018][ T8680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.598034][ T8680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.598061][ T8680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.224192][ T8680] hsr_slave_0: entered promiscuous mode [ 267.252286][ T8680] hsr_slave_1: entered promiscuous mode [ 267.274814][ T8680] debugfs: 'hsr0' already exists in 'hsr' [ 267.274848][ T8680] Cannot create hsr debugfs directory [ 269.209853][ T8680] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.295746][ T8680] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.421355][ T8680] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.512680][ T8680] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.950928][ T8680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.063932][ T8680] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.102587][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.102937][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.142331][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.142643][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.308951][ T8930] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1226'. [ 270.309514][ T8928] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1226'. [ 270.316126][ T8928] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1226'. [ 270.590938][ T31] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 270.665585][ T8942] serio: Serial port ttynull [ 270.743466][ T31] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 270.743497][ T31] usb 2-1: config 0 has no interface number 0 [ 270.747091][ T31] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 270.747119][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.747138][ T31] usb 2-1: Product: syz [ 270.747152][ T31] usb 2-1: Manufacturer: syz [ 270.747165][ T31] usb 2-1: SerialNumber: syz [ 270.806622][ T31] usb 2-1: config 0 descriptor?? [ 271.057284][ T8680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.661999][ T31] usb 2-1: Firmware version (0.0) predates our first public release. [ 271.662028][ T31] usb 2-1: Please update to version 0.2 or newer [ 271.809659][ T31] usb 2-1: USB disconnect, device number 13 [ 271.841197][ T5955] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 271.992154][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 271.992191][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 271.992218][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 271.995951][ T5955] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 271.995983][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.996004][ T5955] usb 3-1: Product: syz [ 271.996019][ T5955] usb 3-1: Manufacturer: syz [ 271.996034][ T5955] usb 3-1: SerialNumber: syz [ 272.022268][ T5955] usb 3-1: config 0 descriptor?? [ 272.075493][ T5955] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 272.304531][ T6034] usb 3-1: USB disconnect, device number 11 [ 272.572711][ T8680] veth0_vlan: entered promiscuous mode [ 272.603065][ T8680] veth1_vlan: entered promiscuous mode [ 272.731502][ T8680] veth0_macvtap: entered promiscuous mode [ 272.776011][ T8680] veth1_macvtap: entered promiscuous mode [ 272.819172][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.842392][ T8680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.882597][ T1208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.882892][ T1208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.884781][ T1208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.885200][ T1208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.602536][ T8989] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1248'. [ 273.653520][ T3512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.653546][ T3512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.823012][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.823037][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.908301][ T6034] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 274.060620][ T6034] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.060668][ T6034] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 274.063939][ T6034] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.063975][ T6034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.063996][ T6034] usb 3-1: Product: syz [ 274.064011][ T6034] usb 3-1: Manufacturer: syz [ 274.064025][ T6034] usb 3-1: SerialNumber: syz [ 274.148769][ T9000] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1253'. [ 274.149046][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 274.397618][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.412641][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.434606][ T6034] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 274.499870][ T6034] usb 3-1: USB disconnect, device number 12 [ 274.634877][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'. [ 274.688259][ T5932] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 274.728153][ T5931] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 274.877619][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 274.887403][ T5931] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 274.901392][ T5931] usb 4-1: config 0 has no interface number 0 [ 274.916218][ T5931] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 274.916250][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.916268][ T5931] usb 4-1: Product: syz [ 274.916282][ T5931] usb 4-1: Manufacturer: syz [ 274.916295][ T5931] usb 4-1: SerialNumber: syz [ 274.941440][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1261'. [ 274.941500][ T9020] netem: change failed [ 274.972729][ T5931] usb 4-1: config 0 descriptor?? [ 274.985522][ T5931] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 275.027682][ T6034] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 275.060039][ T3512] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 275.187471][ T6034] usb 3-1: Using ep0 maxpacket: 8 [ 275.190031][ T6034] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 275.190060][ T6034] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 275.190127][ T6034] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.190147][ T6034] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.190169][ T6034] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 275.190191][ T6034] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.190214][ T6034] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.190251][ T6034] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.190271][ T6034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.206798][ T5955] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 275.293102][ T5934] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 275.327104][ T5931] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 275.356976][ T5931] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 275.429718][ T6034] usb 3-1: usb_control_msg returned -71 [ 275.429776][ T6034] usbtmc 3-1:16.0: can't read capabilities [ 275.429831][ T6034] usbtmc 3-1:16.0: Failed to submit iin_urb [ 275.429938][ T6034] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -90 [ 275.496305][ T5934] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.496341][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.496361][ T5934] usb 1-1: Product: syz [ 275.496376][ T5934] usb 1-1: Manufacturer: syz [ 275.496391][ T5934] usb 1-1: SerialNumber: syz [ 275.530068][ T5934] usb 1-1: config 0 descriptor?? [ 275.530891][ T6034] usb 3-1: USB disconnect, device number 13 [ 275.680449][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 275.684267][ T5955] usb 4-1: USB disconnect, device number 23 [ 275.735577][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 275.825351][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 275.826208][ T5955] quatech2 4-1:0.51: device disconnected [ 276.006654][ T5934] usb 1-1: USB disconnect, device number 13 [ 276.097860][ T153] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.098276][ T6034] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 276.098581][ T153] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.248161][ T6034] usb 6-1: Using ep0 maxpacket: 16 [ 276.256368][ T6034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.256406][ T6034] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.256448][ T6034] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 276.256471][ T6034] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.281040][ T6034] usb 6-1: config 0 descriptor?? [ 276.510983][ T9048] sp0: Synchronizing with TNC [ 276.531677][ T9048] sp0: Found TNC [ 276.702669][ T6034] hid (null): unknown global tag 0x83 [ 276.702716][ T6034] hid (null): unknown global tag 0xc [ 276.702748][ T6034] hid (null): global environment stack underflow [ 276.887010][ T5931] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 276.899041][ T6034] usb 6-1: string descriptor 0 read error: -71 [ 276.922833][ T6034] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 276.922931][ T6034] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -32 [ 276.936658][ T6034] usb 6-1: USB disconnect, device number 2 [ 277.581909][ T9065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.165180][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 283.198312][ T9122] netlink: 360 bytes leftover after parsing attributes in process `syz.5.1306'. [ 284.019571][ T37] audit: type=1326 audit(1756379393.408:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.020307][ T37] audit: type=1326 audit(1756379393.408:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.020626][ T37] audit: type=1326 audit(1756379393.408:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.021242][ T37] audit: type=1326 audit(1756379393.408:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.313377][ T37] audit: type=1326 audit(1756379393.458:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.313448][ T37] audit: type=1326 audit(1756379393.458:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.313620][ T37] audit: type=1326 audit(1756379393.458:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.313686][ T37] audit: type=1326 audit(1756379393.458:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.313736][ T37] audit: type=1326 audit(1756379393.458:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 284.313795][ T37] audit: type=1326 audit(1756379393.458:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9124 comm="syz.0.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e998debe9 code=0x7fc00000 [ 288.560892][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 291.229857][ T5931] kernel read not supported for file /dsp1 (pid: 5931 comm: kworker/1:6) [ 304.762400][ T30] sched: DL replenish lagged too much [ 311.260148][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 324.059470][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.078429][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.676068][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.551760][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.574227][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.584372][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.585966][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.586739][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.748343][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.817419][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.863184][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.865504][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.866467][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.153730][ T5158] Bluetooth: hci5: command tx timeout [ 371.709624][ T5853] Bluetooth: hci5: command tx timeout [ 374.020060][ T5855] Bluetooth: hci5: command tx timeout [ 374.756683][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.789940][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 375.096712][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 375.111161][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.112115][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.087532][ T5853] Bluetooth: hci5: command tx timeout [ 376.087582][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 376.512116][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 376.601816][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.156965][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 378.221987][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 378.224295][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.641746][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 380.992987][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.121789][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.123220][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.124126][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.842548][ T5853] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 389.890709][ T5853] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 390.860340][ T5853] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 391.106173][ T5853] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 391.107165][ T5853] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.912389][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 397.564775][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 398.085365][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 398.104216][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 398.105180][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.398855][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 399.439711][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.581682][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 426.023344][ T5848] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 450.887333][ T5158] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 452.019144][ T5158] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 452.062176][ T5158] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 453.105590][ T5158] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 453.107266][ T5158] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 453.894527][ T38] INFO: task syz.3.1326:9180 blocked for more than 144 seconds. [ 453.894556][ T38] Not tainted syzkaller #0 [ 453.894568][ T38] Blocked by coredump. [ 453.894576][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 453.894586][ T38] task:syz.3.1326 state:D stack:23736 pid:9180 tgid:9179 ppid:5838 task_flags:0x40044c flags:0x00004002 [ 453.894652][ T38] Call Trace: [ 453.894660][ T38] [ 453.894677][ T38] __schedule+0x16f3/0x4c20 [ 453.894737][ T38] ? __lock_acquire+0xab9/0xd20 [ 453.894766][ T38] ? __pfx___schedule+0x10/0x10 [ 453.894812][ T38] ? schedule+0x91/0x360 [ 453.894842][ T38] schedule+0x165/0x360 [ 453.894870][ T38] schedule_timeout+0x9a/0x270 [ 453.894895][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 453.894933][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 453.894960][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.894983][ T38] ? wait_for_completion+0x267/0x5d0 [ 453.895013][ T38] wait_for_completion+0x2bf/0x5d0 [ 453.895056][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 453.895100][ T38] exit_aio+0x2f1/0x3b0 [ 453.895136][ T38] ? __pfx_exit_aio+0x10/0x10 [ 453.895188][ T38] ? uprobe_clear_state+0x280/0x2a0 [ 453.895210][ T38] ? mm_update_next_owner+0xa7/0x870 [ 453.895237][ T38] __mmput+0x68/0x3d0 [ 453.895265][ T38] exit_mm+0x1da/0x2c0 [ 453.895289][ T38] ? __pfx_exit_mm+0x10/0x10 [ 453.895313][ T38] ? rcu_is_watching+0x15/0xb0 [ 453.895351][ T38] do_exit+0x648/0x2300 [ 453.895390][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 453.895424][ T38] ? __lock_acquire+0xab9/0xd20 [ 453.895454][ T38] ? __pfx_do_exit+0x10/0x10 [ 453.895471][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 453.895498][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 453.895532][ T38] do_group_exit+0x21c/0x2d0 [ 453.895559][ T38] get_signal+0x125e/0x1310 [ 453.895619][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 453.895647][ T38] ? percpu_ref_put+0x188/0x230 [ 453.895680][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 453.895703][ T38] ? __se_sys_io_submit+0x201/0x2f0 [ 453.895750][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 453.895782][ T38] exit_to_user_mode_loop+0x75/0x110 [ 453.895811][ T38] do_syscall_64+0x2bd/0x3b0 [ 453.895837][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.895863][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.895884][ T38] ? clear_bhb_loop+0x60/0xb0 [ 453.895910][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.895931][ T38] RIP: 0033:0x7f4e147cebe9 [ 453.895950][ T38] RSP: 002b:00007f4e12a2e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 453.895972][ T38] RAX: 0000000000000001 RBX: 00007f4e149f5fa0 RCX: 00007f4e147cebe9 [ 453.895988][ T38] RDX: 00002000000000c0 RSI: 00000000000000ca RDI: 00007f4e15531000 [ 453.896002][ T38] RBP: 00007f4e14851e19 R08: 0000000000000000 R09: 0000000000000000 [ 453.896016][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.896030][ T38] R13: 00007f4e149f6038 R14: 00007f4e149f5fa0 R15: 00007ffe84cb4cb8 [ 453.896066][ T38] [ 453.896095][ T38] [ 453.896095][ T38] Showing all locks held in the system: [ 453.896105][ T38] 4 locks held by kworker/0:0/9: [ 453.896117][ T38] #0: ffff88805b714938 ((wq_completion)wg-kex-wg2#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.896202][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.896272][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.896333][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.896387][ T38] 4 locks held by kworker/0:1/10: [ 453.896398][ T38] #0: ffff888058bf8538 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.896451][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.896520][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.896571][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.896623][ T38] 7 locks held by kworker/u8:0/12: [ 453.896635][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.896688][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.896743][ T38] #2: ffff88805a7dd300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 453.896800][ T38] #3: ffff88805a6eb520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 453.896854][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 453.896901][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.896951][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.897004][ T38] 5 locks held by kworker/u8:1/13: [ 453.897015][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.897069][ T38] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.897122][ T38] #2: ffff88805c520898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.897175][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.897235][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.897288][ T38] 2 locks held by ksoftirqd/0/15: [ 453.897300][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.897351][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.897405][ T38] 2 locks held by rcuc/0/20: [ 453.897415][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.897467][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.897519][ T38] 2 locks held by rcuc/1/28: [ 453.897530][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.897582][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.897635][ T38] 8 locks held by ktimers/1/29: [ 453.897646][ T38] 2 locks held by ksoftirqd/1/30: [ 453.897657][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.897708][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.897761][ T38] 4 locks held by kworker/1:0/31: [ 453.897772][ T38] #0: ffff888058f39938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.897830][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.897995][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.898047][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.898101][ T38] 1 lock held by khungtaskd/38: [ 453.898112][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 453.898162][ T38] 6 locks held by kworker/u8:2/43: [ 453.898173][ T38] #0: ffff888024252138 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.898240][ T38] #1: ffffc90000b47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.898294][ T38] #2: ffff88805b2655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 453.898356][ T38] #3: ffff88802330c388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 453.898415][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.898466][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.898519][ T38] 6 locks held by kworker/u8:3/44: [ 453.898531][ T38] #0: ffff888033c13938 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.898589][ T38] #1: ffffc90000b67bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.898642][ T38] #2: ffff88803808d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 453.898702][ T38] #3: ffff88802330ede8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 453.898762][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.898813][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.898866][ T38] 4 locks held by kworker/1:1/50: [ 453.898894][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.898947][ T38] #1: ffffc90000bc7bc0 ((work_completion)(&br->mcast_gc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.899000][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.899051][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.899106][ T38] 5 locks held by kworker/u8:4/67: [ 453.899118][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.899170][ T38] #1: ffffc9000152fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.899230][ T38] #2: ffff88805c580898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.899281][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.899333][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.899386][ T38] 5 locks held by kworker/u8:5/69: [ 453.899397][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.899449][ T38] #1: ffffc9000155fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.899503][ T38] #2: ffff8880499b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.899554][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.899605][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.899658][ T38] 5 locks held by kworker/u8:6/83: [ 453.899669][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.899722][ T38] #1: ffffc900015afbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.899775][ T38] #2: ffff8880585e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.899826][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.899878][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.899933][ T38] 5 locks held by kworker/u8:7/153: [ 453.899945][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.899998][ T38] #1: ffffc90003ba7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.900050][ T38] #2: ffff88805c220898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.900101][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.900152][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.900215][ T38] 4 locks held by kworker/0:2/992: [ 453.900226][ T38] #0: ffff88805c0d2538 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.900281][ T38] #1: ffffc900049ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.900349][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.900400][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.900453][ T38] 3 locks held by kworker/u8:8/1029: [ 453.900467][ T38] 5 locks held by kworker/u8:9/1182: [ 453.900479][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.900532][ T38] #1: ffffc90004f1fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.900586][ T38] #2: ffff88805d6b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.900636][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.900688][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.900741][ T38] 4 locks held by kworker/u8:10/1208: [ 453.900753][ T38] #0: ffff888035fe0138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.900810][ T38] #1: ffffc9000502fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.900863][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.900914][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.900966][ T38] 4 locks held by kworker/1:2/1234: [ 453.900977][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.901029][ T38] #1: ffffc9000512fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.901082][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.901134][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.901195][ T38] 2 locks held by aoe_tx0/1326: [ 453.901207][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.901258][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.901312][ T38] 2 locks held by kworker/u8:11/1426: [ 453.901335][ T38] 3 locks held by kworker/u8:12/3512: [ 453.901347][ T38] 5 locks held by kworker/u8:13/3518: [ 453.901359][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.901412][ T38] #1: ffffc9000d5d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.901466][ T38] #2: ffff888027f40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.901517][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.901569][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.901623][ T38] 5 locks held by kworker/u8:14/3564: [ 453.901634][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.901686][ T38] #1: ffffc9000d8b7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.901739][ T38] #2: ffff88805fee0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 453.901789][ T38] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.901842][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.901895][ T38] 7 locks held by kworker/u8:15/3603: [ 453.901906][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.901958][ T38] #1: ffffc9000da57bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.902014][ T38] #2: ffff88805a9cb300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 453.902073][ T38] #3: ffff88805a8f1d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 453.902129][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 453.902184][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.902235][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.902288][ T38] 6 locks held by kworker/u8:16/5116: [ 453.902299][ T38] #0: ffff8880366f8138 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.902356][ T38] #1: ffffc9000f7f7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.902410][ T38] #2: ffff888063d615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 453.902471][ T38] #3: ffff888036f1ce20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 453.902532][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.902583][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.902637][ T38] 2 locks held by getty/5596: [ 453.902648][ T38] #0: ffff88823bf6a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 453.902704][ T38] #1: ffffc90003e7b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 453.913785][ T38] 6 locks held by sshd-session/5826: [ 453.913803][ T38] #0: ffff88803d5d1290 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 453.913856][ T38] #1: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 453.913913][ T38] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 453.913966][ T38] #3: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 453.914014][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.914065][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.914119][ T38] 3 locks held by syz-executor/5841: [ 453.914130][ T38] #0: ffff888056dece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.914190][ T38] #1: ffff888056dec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.914243][ T38] #2: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.914300][ T38] 6 locks held by kworker/1:3/5846: [ 453.914313][ T38] 4 locks held by kworker/u9:4/5851: [ 453.914324][ T38] #0: ffff888035183138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.914381][ T38] #1: ffffc90004bdfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.914434][ T38] #2: ffff888034ef40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 453.914487][ T38] #3: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 453.914537][ T38] 4 locks held by kworker/u9:5/5853: [ 453.914548][ T38] #0: ffff888049950938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.914605][ T38] #1: ffffc90004c2fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.914657][ T38] #2: ffff8880697340a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.914706][ T38] #3: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.914755][ T38] 4 locks held by kworker/u9:6/5855: [ 453.914767][ T38] #0: ffff8880399d3138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.914821][ T38] #1: ffffc90004c3fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.914875][ T38] #2: ffff88804d67ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 453.914931][ T38] #3: ffff88804d67c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 453.914980][ T38] 4 locks held by kworker/u9:9/5858: [ 453.914991][ T38] #0: ffff88803df90938 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.915044][ T38] #1: ffffc90004cbfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.915095][ T38] #2: ffff88804ea500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 453.915144][ T38] #3: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 453.915204][ T38] 3 locks held by kworker/1:5/5918: [ 453.915216][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.915269][ T38] #1: ffffc90004fffbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.915321][ T38] #2: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 453.915376][ T38] 4 locks held by kworker/0:3/5932: [ 453.915388][ T38] 4 locks held by kworker/0:4/5934: [ 453.915399][ T38] #0: ffff888058f39938 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.915457][ T38] #1: ffffc900051efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.915527][ T38] #2: ffff88803b6555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 453.915578][ T38] #3: ffff888036f183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 453.915634][ T38] 5 locks held by kworker/0:7/6034: [ 453.915646][ T38] 1 lock held by syz-executor/7350: [ 453.915658][ T38] #0: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 453.915713][ T38] 2 locks held by napi/wg2-0/7819: [ 453.915724][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.915776][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.915828][ T38] 4 locks held by syz.1.1098/8627: [ 453.915840][ T38] #0: ffff888034ecce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 453.915887][ T38] #1: ffff888034ecc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 453.915936][ T38] #2: ffffffff8ee399b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 453.915980][ T38] #3: ffff8880289a3b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 453.916056][ T38] 6 locks held by kworker/u8:17/9189: [ 453.916067][ T38] #0: ffff888035c45138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.916124][ T38] #1: ffffc9000501fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.916212][ T38] #2: ffff888027c415f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 453.916273][ T38] #3: ffff8880233083f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 453.916332][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.916384][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.916437][ T38] 7 locks held by kworker/u8:18/9190: [ 453.916449][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.916501][ T38] #1: ffffc90004dffbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.916556][ T38] #2: ffff88803b7e5300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 453.916615][ T38] #3: ffff888031031520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 453.916670][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 453.916717][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.916768][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.916821][ T38] 4 locks held by kworker/u8:19/9191: [ 453.916833][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.916885][ T38] #1: ffffc9000505fbc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.916935][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.916986][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.917039][ T38] 4 locks held by kworker/u8:20/9192: [ 453.917050][ T38] #0: ffff888028f1c138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.917108][ T38] #1: ffffc90006287bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.917161][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.917221][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.917275][ T38] 6 locks held by kworker/u8:21/9193: [ 453.917286][ T38] #0: ffff888028f1c138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.917344][ T38] #1: ffffc900061b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.917398][ T38] #2: ffff8880398015f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 453.917460][ T38] #3: ffff88805b5e8e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 453.917521][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 453.917573][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 453.917627][ T38] 4 locks held by kworker/u8:22/9194: [ 453.917638][ T38] #0: ffff888024257138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 453.917697][ T38] #1: ffffc900061a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 453.917749][ T38] #2: ffff88801cf595f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 453.917810][ T38] #3: ffff88802330ce20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.420862][ T38] 4 locks held by kworker/u8:23/9195: [ 454.420877][ T38] #0: ffff88814d9c7138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.420936][ T38] #1: ffffc90006197bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.420991][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.421044][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.421099][ T38] 4 locks held by kworker/u8:24/9196: [ 454.421113][ T38] 1 lock held by syz-executor/9201: [ 454.421125][ T38] #0: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 454.421178][ T38] 4 locks held by kworker/0:10/9204: [ 454.421190][ T38] #0: ffff88805d427d38 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.421257][ T38] #1: ffffc90006087bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.421329][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.421381][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.421435][ T38] 6 locks held by kworker/u8:25/9205: [ 454.421447][ T38] #0: ffff8880397d9938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.421505][ T38] #1: ffffc90004a8fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.421560][ T38] #2: ffff8880398855f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.421622][ T38] #3: ffff88805b5ea3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.421691][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.421743][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.421796][ T38] 6 locks held by kworker/u8:26/9206: [ 454.421807][ T38] #0: ffff88803b6c8138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.421860][ T38] #1: ffffc9000d56fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.421923][ T38] #2: ffff88803b6555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.421984][ T38] #3: ffff888036f183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.422043][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.422094][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.422148][ T38] 3 locks held by dhcpcd/9207: [ 454.422160][ T38] #0: ffff8880316f2350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 454.422208][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.422269][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.422323][ T38] 6 locks held by kworker/u8:27/9208: [ 454.422334][ T38] #0: ffff888035ded938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.422391][ T38] #1: ffffc90005fbfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.422445][ T38] #2: ffff88803b6515f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.422504][ T38] #3: ffff88805aa9c388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.422565][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.422615][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.422669][ T38] 7 locks held by kworker/u8:28/9209: [ 454.422681][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.422733][ T38] #1: ffffc90005f37bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.422787][ T38] #2: ffff88805b2a5300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 454.422847][ T38] #3: ffff88805b234920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 454.422902][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 454.422950][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.422999][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.423051][ T38] 4 locks held by kworker/0:11/9210: [ 454.423063][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.423115][ T38] #1: ffffc90005f27bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.423177][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.423229][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.423289][ T38] 6 locks held by kworker/u8:29/9211: [ 454.423301][ T38] #0: ffff88805a5b1138 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.423359][ T38] #1: ffffc900048b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.423413][ T38] #2: ffff888035cb95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.423472][ T38] #3: ffff888036f1d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.423532][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.423583][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.423637][ T38] 2 locks held by syz-executor/9214: [ 454.423649][ T38] 1 lock held by syz-executor/9215: [ 454.423661][ T38] #0: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 454.423720][ T38] 6 locks held by kworker/u8:30/9216: [ 454.423731][ T38] #0: ffff888024252138 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.423789][ T38] #1: ffffc90004acfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.423844][ T38] #2: ffff88805b2655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.423903][ T38] #3: ffff88802330b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.423963][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.424012][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.424065][ T38] 3 locks held by dhcpcd/9218: [ 454.424076][ T38] #0: ffff88803162c350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 454.424124][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.424175][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.424228][ T38] 1 lock held by syz-executor/9219: [ 454.424239][ T38] #0: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 454.424306][ T38] 3 locks held by syz-executor/9221: [ 454.424317][ T38] #0: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 454.424368][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.424419][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.424481][ T38] 4 locks held by kworker/0:14/9226: [ 454.424493][ T38] #0: ffff88805d429938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.424551][ T38] #1: ffffc9000500fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.424620][ T38] #2: ffff88801cfc55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 454.424669][ T38] #3: ffff88802330ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 454.424717][ T38] 1 lock held by dhcpcd/9227: [ 454.424729][ T38] #0: ffff88802fbfa350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 454.424778][ T38] 1 lock held by dhcpcd/9228: [ 454.424790][ T38] #0: ffff888033194350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 454.424838][ T38] 6 locks held by kworker/u8:31/9229: [ 454.424850][ T38] #0: ffff888058e2c938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.424907][ T38] #1: ffffc90004e5fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.424961][ T38] #2: ffff888058ef15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.425027][ T38] #3: ffff888036f18e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.425087][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.425139][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.425192][ T38] 1 lock held by dhcpcd/9230: [ 454.425203][ T38] #0: ffff88805bd1e350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 454.425259][ T38] 1 lock held by dhcpcd/9231: [ 454.425271][ T38] #0: ffff88802ced4350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 454.425319][ T38] 3 locks held by syz-executor/9232: [ 454.425332][ T38] 7 locks held by kworker/u8:32/9233: [ 454.425343][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.425396][ T38] #1: ffffc9000cbd7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.425451][ T38] #2: ffff8880588f9300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 454.425510][ T38] #3: ffff888058970120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 454.425573][ T38] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 454.425618][ T38] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.425671][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.425724][ T38] 3 locks held by syz-executor/9234: [ 454.425744][ T38] #0: ffff888028ef7350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 454.425799][ T38] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.425851][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.425903][ T38] 6 locks held by kworker/u8:33/9235: [ 454.425915][ T38] #0: ffff888058e2c938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.425972][ T38] #1: ffffc9000c87fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.426024][ T38] #2: ffff888058ef15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.426076][ T38] #3: ffff88805aa9b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.426135][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.426186][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.426237][ T38] 4 locks held by kworker/u8:34/9236: [ 454.426258][ T38] #0: ffff888035c45138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.426315][ T38] #1: ffffc9000c81fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.426369][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.426421][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.426473][ T38] 2 locks held by syz-executor/9239: [ 454.426485][ T38] 3 locks held by kworker/u8:35/9240: [ 454.426497][ T38] #0: ffff88814d135138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.426550][ T38] #1: ffffc90004cffbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.426605][ T38] #2: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 454.426653][ T38] 6 locks held by kworker/1:9/9241: [ 454.426665][ T38] #0: ffff88805d429938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.426721][ T38] #1: ffffc9000c7afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.426791][ T38] #2: ffff88801cfc55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 454.426841][ T38] #3: ffff88802330ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 454.426890][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.426941][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.426994][ T38] 3 locks held by kworker/1:10/9242: [ 454.427005][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.427057][ T38] #1: ffffc9000c397bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.427109][ T38] #2: ffffffff8ecd20b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 454.427168][ T38] 6 locks held by kworker/u8:36/9246: [ 454.427180][ T38] #0: ffff88805a5b1138 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 454.427237][ T38] #1: ffffc9000a377bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 454.427299][ T38] #2: ffff888035cb95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 454.427356][ T38] #3: ffff88802330f880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 454.427415][ T38] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 454.427467][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 454.427524][ T38] [ 454.427530][ T38] ============================================= [ 454.427530][ T38] [ 454.427540][ T38] NMI backtrace for cpu 0 [ 454.427556][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.427585][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.427596][ T38] Call Trace: [ 454.427604][ T38] [ 454.427613][ T38] dump_stack_lvl+0x189/0x250 [ 454.427644][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.427674][ T38] ? __pfx__printk+0x10/0x10 [ 454.427711][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 454.427738][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 454.427763][ T38] ? __pfx__printk+0x10/0x10 [ 454.427799][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 454.427827][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 454.427853][ T38] watchdog+0xf93/0xfe0 [ 454.427886][ T38] ? watchdog+0x1de/0xfe0 [ 454.427931][ T38] kthread+0x711/0x8a0 [ 454.427966][ T38] ? __pfx_watchdog+0x10/0x10 [ 454.427991][ T38] ? __pfx_kthread+0x10/0x10 [ 454.428025][ T38] ? __pfx_kthread+0x10/0x10 [ 454.428057][ T38] ret_from_fork+0x3fc/0x770 [ 454.428087][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 454.428120][ T38] ? __switch_to_asm+0x39/0x70 [ 454.428139][ T38] ? __switch_to_asm+0x33/0x70 [ 454.428156][ T38] ? __pfx_kthread+0x10/0x10 [ 454.428187][ T38] ret_from_fork_asm+0x1a/0x30 [ 454.428225][ T38] [ 454.428286][ T38] Sending NMI from CPU 0 to CPUs 1: [ 454.428317][ C1] NMI backtrace for cpu 1 [ 454.428334][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.428353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.428363][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 454.428383][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 ab 1e 39 f6 cc [ 454.428396][ C1] RSP: 0000:ffffc90000a3e740 EFLAGS: 00000292 [ 454.428412][ C1] RAX: 00000000902cd301 RBX: ffffc90000a3e800 RCX: 9cac7b22cfe6e500 [ 454.428425][ C1] RDX: 0000000000000007 RSI: ffffffff8d2187b4 RDI: ffff88801cab9dc0 [ 454.428436][ C1] RBP: ffffc90000a3e7d0 R08: ffffc90000a3ead0 R09: 0000000000000000 [ 454.428448][ C1] R10: ffffc90000a3e798 R11: fffff52000147cf5 R12: ffff88801cab9dc0 [ 454.428460][ C1] R13: dffffc0000000000 R14: ffffffff81aae030 R15: ffffc90000a3e748 [ 454.428472][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 454.428485][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 454.428497][ C1] CR2: 00007f5365b25f40 CR3: 000000006a278000 CR4: 00000000003526f0 [ 454.428513][ C1] Call Trace: [ 454.428519][ C1] [ 454.428525][ C1] arch_stack_walk+0x11c/0x150 [ 454.428551][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 454.428577][ C1] stack_trace_save+0x9c/0xe0 [ 454.428594][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 454.428614][ C1] ref_tracker_alloc+0x195/0x450 [ 454.428636][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 454.428655][ C1] ? dst_init+0xd9/0x450 [ 454.428675][ C1] ? dst_alloc+0x12a/0x170 [ 454.428695][ C1] ? ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 454.428722][ C1] ? dst_alloc+0x105/0x170 [ 454.428743][ C1] ? dst_alloc+0x105/0x170 [ 454.428764][ C1] dst_init+0xd9/0x450 [ 454.428787][ C1] dst_alloc+0x12a/0x170 [ 454.428809][ C1] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 454.428836][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 454.428859][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 454.428881][ C1] ? __lock_acquire+0xab9/0xd20 [ 454.428901][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 454.428927][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 454.428946][ C1] ip_route_output_flow+0x2a/0x150 [ 454.428966][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 454.428982][ C1] ip_route_me_harder+0x6d2/0x1030 [ 454.429010][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 454.429038][ C1] synproxy_send_tcp+0x359/0x6c0 [ 454.429062][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 454.429088][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 454.429106][ C1] ? nft_tproxy_eval+0xe8/0x1c00 [ 454.429128][ C1] ? synproxy_pernet+0x45/0x270 [ 454.429152][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 454.429177][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 454.429200][ C1] ? nf_ip_checksum+0x13c/0x510 [ 454.429224][ C1] nft_synproxy_do_eval+0x345/0x570 [ 454.429249][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 454.429279][ C1] nft_do_chain+0x40c/0x1920 [ 454.429307][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 454.429332][ C1] ? stack_depot_save_flags+0x40/0x860 [ 454.429359][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 454.429380][ C1] nft_do_chain_inet+0x25d/0x340 [ 454.429401][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 454.429422][ C1] ? __lock_acquire+0xab9/0xd20 [ 454.429446][ C1] ? NF_HOOK+0x9a/0x3a0 [ 454.429463][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 454.429486][ C1] nf_hook_slow+0xc5/0x220 [ 454.429506][ C1] NF_HOOK+0x206/0x3a0 [ 454.429525][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 454.429543][ C1] ? NF_HOOK+0x9a/0x3a0 [ 454.429559][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 454.429575][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 454.429595][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 454.429614][ C1] ? skb_dst+0x4f/0xd0 [ 454.429632][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 454.429651][ C1] NF_HOOK+0x309/0x3a0 [ 454.429669][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 454.429686][ C1] ? NF_HOOK+0x9a/0x3a0 [ 454.429702][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 454.429721][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 454.429743][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 454.429760][ C1] __netif_receive_skb+0x143/0x380 [ 454.429776][ C1] ? rt_spin_unlock+0x65/0x80 [ 454.429794][ C1] ? process_backlog+0x27b/0x900 [ 454.429811][ C1] process_backlog+0x31e/0x900 [ 454.429834][ C1] __napi_poll+0xb6/0x540 [ 454.429852][ C1] net_rx_action+0x707/0xe00 [ 454.429877][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 454.429896][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 454.429919][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 454.429950][ C1] handle_softirqs+0x22c/0x710 [ 454.429973][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 454.430003][ C1] run_ktimerd+0xcf/0x190 [ 454.430023][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 454.430047][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 454.430065][ C1] smpboot_thread_fn+0x542/0xa60 [ 454.430084][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 454.430106][ C1] kthread+0x711/0x8a0 [ 454.430129][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 454.430148][ C1] ? __pfx_kthread+0x10/0x10 [ 454.430171][ C1] ? __pfx_kthread+0x10/0x10 [ 454.430193][ C1] ret_from_fork+0x3fc/0x770 [ 454.430213][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 454.430235][ C1] ? __switch_to_asm+0x39/0x70 [ 454.430250][ C1] ? __switch_to_asm+0x33/0x70 [ 454.430263][ C1] ? __pfx_kthread+0x10/0x10 [ 454.430285][ C1] ret_from_fork_asm+0x1a/0x30 [ 454.430307][ C1] [ 454.442887][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 454.442911][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 454.442937][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.442950][ T38] Call Trace: [ 454.442959][ T38] [ 454.442968][ T38] dump_stack_lvl+0x99/0x250 [ 454.443002][ T38] ? __asan_memcpy+0x40/0x70 [ 454.443026][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.443055][ T38] ? __pfx__printk+0x10/0x10 [ 454.443092][ T38] vpanic+0x281/0x750 [ 454.443126][ T38] ? __pfx_vpanic+0x10/0x10 [ 454.443153][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 454.443174][ T38] ? preempt_schedule+0xae/0xc0 [ 454.443201][ T38] ? preempt_schedule_common+0x83/0xd0 [ 454.443234][ T38] panic+0xb9/0xc0 [ 454.443358][ T38] ? __pfx_panic+0x10/0x10 [ 454.443390][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 454.443419][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 454.443445][ T38] watchdog+0xfd2/0xfe0 [ 454.443478][ T38] ? watchdog+0x1de/0xfe0 [ 454.443509][ T38] kthread+0x711/0x8a0 [ 454.443543][ T38] ? __pfx_watchdog+0x10/0x10 [ 454.443569][ T38] ? __pfx_kthread+0x10/0x10 [ 454.443602][ T38] ? __pfx_kthread+0x10/0x10 [ 454.443631][ T38] ret_from_fork+0x3fc/0x770 [ 454.443661][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 454.443709][ T38] ? __switch_to_asm+0x39/0x70 [ 454.443729][ T38] ? __switch_to_asm+0x33/0x70 [ 454.443747][ T38] ? __pfx_kthread+0x10/0x10 [ 454.443780][ T38] ret_from_fork_asm+0x1a/0x30 [ 454.443819][ T38] [ 454.444279][ T38] Kernel Offset: disabled