last executing test programs: 3m4.259013603s ago: executing program 2 (id=49): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0xc2) 3m3.944229254s ago: executing program 2 (id=53): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1) 3m3.789513679s ago: executing program 2 (id=55): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f37, 0x7, 0x3, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x5, 0x2, 0x1, 0x200001, 0x81, 0x6, 0x101, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x92d1, 0xb, 0xe68, 0x3d, 0x8, 0x6, 0x0, 0xfffffff9]}) 3m3.248135537s ago: executing program 2 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m2.862043532s ago: executing program 2 (id=59): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, &(0x7f0000000080)) 3m1.911439878s ago: executing program 2 (id=65): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b", @ANYRESDEC]) 3m1.595592184s ago: executing program 32 (id=65): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b", @ANYRESDEC]) 1m18.528860356s ago: executing program 3 (id=1186): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x12, r1, 0x0, 0x2, 0x100006dd}) 1m18.385066079s ago: executing program 5 (id=1188): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x700, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) 1m18.226387585s ago: executing program 3 (id=1191): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) mlockall(0x7) 1m18.190460777s ago: executing program 4 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x2c, r1, 0x11, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1m18.028373185s ago: executing program 5 (id=1193): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '#[:{\x00'}, 0x0, 0x0, 0x3) 1m17.934421751s ago: executing program 3 (id=1194): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)) 1m17.746588435s ago: executing program 5 (id=1197): timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_delete(r0) 1m17.745814515s ago: executing program 4 (id=1198): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r1}) 1m17.596057909s ago: executing program 3 (id=1201): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000300010006", 0x7) 1m17.53625804s ago: executing program 4 (id=1202): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a0003aa053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1m17.484976589s ago: executing program 5 (id=1203): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000002a80)=""/97, 0x61) 1m17.368381715s ago: executing program 3 (id=1206): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x4, {0x4, 0x1, "5cc0"}}, 0x0, 0x0, 0x0}, 0x0) 1m17.216316701s ago: executing program 4 (id=1207): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) close(r0) 1m17.201524775s ago: executing program 5 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) 1m16.98031174s ago: executing program 5 (id=1211): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) fcntl$setstatus(r0, 0x4, 0x42400) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) 1m16.974073166s ago: executing program 4 (id=1212): setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) setfsuid(0xee00) 1m16.948902395s ago: executing program 1 (id=1213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 1m16.799423395s ago: executing program 0 (id=1214): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x2b, 0x4) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 1m16.425097216s ago: executing program 4 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe8803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebc, 0x0) 1m16.421456435s ago: executing program 1 (id=1216): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) 1m16.388705383s ago: executing program 0 (id=1217): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xffc, &(0x7f00000014c0)=""/4092, 0x41000}, 0x94) 1m15.945618923s ago: executing program 0 (id=1218): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0) 1m15.876396022s ago: executing program 1 (id=1219): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118a9000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb787b14416c6952f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 1m15.600261559s ago: executing program 0 (id=1220): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1, 0x0, 0xfffffffffffffeb9}, 0x0) 1m15.502585945s ago: executing program 1 (id=1221): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m15.285529567s ago: executing program 0 (id=1222): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 1m15.218436048s ago: executing program 1 (id=1223): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {r1, 0x9, "1c5665", "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"}}, 0x110) 1m14.917770532s ago: executing program 3 (id=1224): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 1m14.902623444s ago: executing program 0 (id=1225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m14.840356066s ago: executing program 1 (id=1226): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 43.489097376s ago: executing program 33 (id=1225): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 28.598134953s ago: executing program 34 (id=1226): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 0s ago: executing program 35 (id=1211): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) fcntl$setstatus(r0, 0x4, 0x42400) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. [ 86.727504][ T9] cfg80211: failed to load regulatory.db [ 87.810777][ T5825] cgroup: Unknown subsys name 'net' [ 88.088358][ T5825] cgroup: Unknown subsys name 'cpuset' [ 88.123952][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.984257][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.208190][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.209887][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.228954][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.233024][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.248576][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.250066][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.250948][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.283022][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.285604][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.286507][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.333831][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.339490][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.342306][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.355433][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.356331][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.415901][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.422604][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.424356][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.426076][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.427932][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.466176][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.468643][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.469508][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.471522][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.472406][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.315799][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 95.345841][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 95.378745][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 95.750593][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 95.768499][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 96.325244][ T59] Bluetooth: hci1: command tx timeout [ 96.325261][ T5847] Bluetooth: hci0: command tx timeout [ 96.345531][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.347433][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.347855][ T5842] bridge_slave_0: entered allmulticast mode [ 96.349953][ T5842] bridge_slave_0: entered promiscuous mode [ 96.404567][ T5847] Bluetooth: hci2: command tx timeout [ 96.467072][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.467262][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.467733][ T5845] bridge_slave_0: entered allmulticast mode [ 96.470256][ T5845] bridge_slave_0: entered promiscuous mode [ 96.483415][ T5847] Bluetooth: hci3: command tx timeout [ 96.512594][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.512776][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.512945][ T5842] bridge_slave_1: entered allmulticast mode [ 96.517715][ T5842] bridge_slave_1: entered promiscuous mode [ 96.527892][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.528024][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.528209][ T5846] bridge_slave_0: entered allmulticast mode [ 96.530802][ T5846] bridge_slave_0: entered promiscuous mode [ 96.563399][ T5847] Bluetooth: hci4: command tx timeout [ 96.586158][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.586290][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.586791][ T5845] bridge_slave_1: entered allmulticast mode [ 96.589370][ T5845] bridge_slave_1: entered promiscuous mode [ 96.684552][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.684651][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.684785][ T5846] bridge_slave_1: entered allmulticast mode [ 96.687257][ T5846] bridge_slave_1: entered promiscuous mode [ 97.131591][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.299661][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.419251][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.426740][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.426973][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.428227][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.428408][ T5852] bridge_slave_0: entered allmulticast mode [ 97.431246][ T5852] bridge_slave_0: entered promiscuous mode [ 97.439518][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.439782][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.439910][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.440074][ T5854] bridge_slave_0: entered allmulticast mode [ 97.442810][ T5854] bridge_slave_0: entered promiscuous mode [ 97.538774][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.539053][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.539465][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.539631][ T5852] bridge_slave_1: entered allmulticast mode [ 97.541724][ T5852] bridge_slave_1: entered promiscuous mode [ 97.634872][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.635003][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.635185][ T5854] bridge_slave_1: entered allmulticast mode [ 97.637976][ T5854] bridge_slave_1: entered promiscuous mode [ 98.236525][ T5842] team0: Port device team_slave_0 added [ 98.387599][ T5845] team0: Port device team_slave_0 added [ 98.403245][ T5847] Bluetooth: hci1: command tx timeout [ 98.413353][ T5847] Bluetooth: hci0: command tx timeout [ 98.470149][ T5842] team0: Port device team_slave_1 added [ 98.473934][ T5846] team0: Port device team_slave_0 added [ 98.481511][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.483422][ T5847] Bluetooth: hci2: command tx timeout [ 98.485533][ T5845] team0: Port device team_slave_1 added [ 98.494353][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.563374][ T5847] Bluetooth: hci3: command tx timeout [ 98.565948][ T5846] team0: Port device team_slave_1 added [ 98.568663][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.643957][ T5847] Bluetooth: hci4: command tx timeout [ 98.663738][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.238498][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.238515][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.238540][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.466413][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.466431][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.466457][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.469438][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.469451][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.469474][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.471419][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.471431][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.471456][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.478115][ T5852] team0: Port device team_slave_0 added [ 99.481554][ T5854] team0: Port device team_slave_0 added [ 99.484995][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.485008][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.485031][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.500899][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.500915][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.500942][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.505482][ T5852] team0: Port device team_slave_1 added [ 99.522471][ T5854] team0: Port device team_slave_1 added [ 100.067141][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.067158][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.067185][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.456300][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.456312][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.456329][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.457508][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.457522][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.457545][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.466443][ T5842] hsr_slave_0: entered promiscuous mode [ 100.467833][ T5842] hsr_slave_1: entered promiscuous mode [ 100.483286][ T59] Bluetooth: hci1: command tx timeout [ 100.483392][ T5847] Bluetooth: hci0: command tx timeout [ 100.564838][ T5847] Bluetooth: hci2: command tx timeout [ 100.643276][ T5847] Bluetooth: hci3: command tx timeout [ 100.723414][ T5847] Bluetooth: hci4: command tx timeout [ 100.740471][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.740486][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.740511][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.783808][ T5845] hsr_slave_0: entered promiscuous mode [ 100.785428][ T5845] hsr_slave_1: entered promiscuous mode [ 100.789342][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 100.789455][ T5845] Cannot create hsr debugfs directory [ 100.809414][ T5846] hsr_slave_0: entered promiscuous mode [ 100.810732][ T5846] hsr_slave_1: entered promiscuous mode [ 100.813743][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 100.813771][ T5846] Cannot create hsr debugfs directory [ 101.642929][ T5852] hsr_slave_0: entered promiscuous mode [ 101.645793][ T5852] hsr_slave_1: entered promiscuous mode [ 101.646857][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 101.646882][ T5852] Cannot create hsr debugfs directory [ 101.732630][ T5854] hsr_slave_0: entered promiscuous mode [ 101.734429][ T5854] hsr_slave_1: entered promiscuous mode [ 101.735424][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 101.735452][ T5854] Cannot create hsr debugfs directory [ 102.563575][ T5847] Bluetooth: hci0: command tx timeout [ 102.563583][ T59] Bluetooth: hci1: command tx timeout [ 102.643992][ T59] Bluetooth: hci2: command tx timeout [ 102.723345][ T59] Bluetooth: hci3: command tx timeout [ 102.813444][ T59] Bluetooth: hci4: command tx timeout [ 102.962611][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.031830][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.050549][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.103731][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.231659][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.262931][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.315127][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.349142][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.471054][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.511896][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.555998][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.611671][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.757686][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.796446][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.842028][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.899047][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.075640][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.129517][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.166116][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.211573][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.277948][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.391779][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.406517][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.455103][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.455684][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.498785][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.499097][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.549684][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.575799][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.597767][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.598102][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.641464][ T3202] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.641698][ T3202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.706457][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.729033][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.766547][ T3202] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.766681][ T3202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.815544][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.815653][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.884644][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.899775][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.957186][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.959844][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.025630][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.025771][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.105917][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.162492][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.162774][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.224245][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.224862][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.437367][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.725820][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.752281][ T5842] veth0_vlan: entered promiscuous mode [ 105.776383][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.842977][ T5842] veth1_vlan: entered promiscuous mode [ 106.096159][ T5842] veth0_macvtap: entered promiscuous mode [ 106.099942][ T5845] veth0_vlan: entered promiscuous mode [ 106.146261][ T5842] veth1_macvtap: entered promiscuous mode [ 106.229886][ T5845] veth1_vlan: entered promiscuous mode [ 106.245926][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.289439][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.296157][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.347975][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.381994][ T1182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.396816][ T1182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.405434][ T1182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.411542][ T1182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.502183][ T5845] veth0_macvtap: entered promiscuous mode [ 106.568155][ T5845] veth1_macvtap: entered promiscuous mode [ 106.721146][ T5852] veth0_vlan: entered promiscuous mode [ 106.796868][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.826707][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.826729][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.850518][ T5852] veth1_vlan: entered promiscuous mode [ 106.862298][ T5854] veth0_vlan: entered promiscuous mode [ 106.872431][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.884395][ T5846] veth0_vlan: entered promiscuous mode [ 106.941128][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.946610][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.972517][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.991475][ T5854] veth1_vlan: entered promiscuous mode [ 107.001206][ T5846] veth1_vlan: entered promiscuous mode [ 107.002243][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.019803][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.019821][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.325022][ T5852] veth0_macvtap: entered promiscuous mode [ 107.439070][ T5852] veth1_macvtap: entered promiscuous mode [ 107.458216][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.458235][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.591653][ T5846] veth0_macvtap: entered promiscuous mode [ 107.602468][ T5854] veth0_macvtap: entered promiscuous mode [ 107.668354][ T5846] veth1_macvtap: entered promiscuous mode [ 107.678540][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.678559][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.681566][ T5854] veth1_macvtap: entered promiscuous mode [ 107.758689][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.797348][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.877165][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.877441][ T2835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.912330][ T2835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.924571][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.929995][ T2835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.945384][ T2835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.959842][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.962845][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.089870][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.115826][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.170419][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.200266][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.237910][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.254619][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.282321][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.336211][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.875334][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.875353][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.192499][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.192520][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.325578][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.325597][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.382284][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.382303][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.509994][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.510013][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.729587][ T5985] netlink: 68 bytes leftover after parsing attributes in process `syz.2.20'. [ 109.729617][ T5985] netlink: 32 bytes leftover after parsing attributes in process `syz.2.20'. [ 109.737582][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.737598][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.963605][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.240583][ T5995] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4'. [ 110.554653][ T6003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 110.658631][ T5995] syz.3.4 (5995) used greatest stack depth: 16776 bytes left [ 110.916879][ T6010] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 111.262578][ T6019] netlink: 5636 bytes leftover after parsing attributes in process `syz.4.33'. [ 112.564383][ T5882] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.736878][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.736908][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.736946][ T5882] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 112.736965][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.853512][ T5882] usb 4-1: config 0 descriptor?? [ 113.163285][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.326015][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.326039][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.327716][ T31] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 113.327758][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 113.327777][ T31] usb 5-1: SerialNumber: syz [ 113.509909][ T5882] aquacomputer_d5next 0003:0C70:F014.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0 [ 113.646963][ T31] usb 5-1: 0:2 : does not exist [ 113.647091][ T31] usb 5-1: unit 255 not found! [ 113.687891][ T5882] usb 4-1: USB disconnect, device number 2 [ 113.776430][ T5971] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.855548][ T31] usb 5-1: USB disconnect, device number 2 [ 113.878942][ T6084] fido_id[6084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 113.934183][ T5971] usb 2-1: Using ep0 maxpacket: 8 [ 113.938090][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.938120][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.938142][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 113.938183][ T5971] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 113.938205][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.985153][ T5971] usb 2-1: config 0 descriptor?? [ 114.024480][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.457507][ T5971] elecom 0003:056E:00FE.0002: item fetching failed at offset 6/70 [ 114.458347][ T5971] elecom 0003:056E:00FE.0002: probe with driver elecom failed with error -22 [ 114.522681][ T6091] binder: 6090:6091 ioctl 541b 0 returned -22 [ 114.634752][ T5906] usb 2-1: USB disconnect, device number 2 [ 115.351856][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.773534][ T6113] program syz.3.74 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.896395][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.955350][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.962442][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.979605][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.980782][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.981561][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.430321][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.689644][ T6138] binder: 6137:6138 ioctl c0306201 2000000001c0 returned -22 [ 116.733674][ T5971] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.793353][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.903290][ T5971] usb 2-1: Using ep0 maxpacket: 16 [ 116.908513][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.908544][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.908582][ T5971] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 116.908605][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.926545][ T5971] usb 2-1: config 0 descriptor?? [ 117.393401][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.455737][ T5971] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 117.455780][ T5971] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 117.455808][ T5971] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 117.455835][ T5971] konepure 0003:1E7D:2DB4.0003: unknown main item tag 0x0 [ 117.521474][ T5971] konepure 0003:1E7D:2DB4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.1-1/input0 [ 117.572893][ T5906] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 117.572924][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.572945][ T5906] usb 4-1: Product: syz [ 117.572959][ T5906] usb 4-1: Manufacturer: syz [ 117.572973][ T5906] usb 4-1: SerialNumber: syz [ 117.742670][ T5971] usb 2-1: USB disconnect, device number 3 [ 117.772138][ T5906] usb 4-1: config 0 descriptor?? [ 117.852521][ T5906] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 003 [ 118.040959][ T13] bridge_slave_1: left allmulticast mode [ 118.041254][ T13] bridge_slave_1: left promiscuous mode [ 118.042790][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.083451][ T59] Bluetooth: hci2: command tx timeout [ 118.136225][ T13] bridge_slave_0: left allmulticast mode [ 118.136258][ T13] bridge_slave_0: left promiscuous mode [ 118.136527][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.431795][ T5906] i2c i2c-1: failure reading functionality [ 118.502287][ T5906] i2c i2c-1: connected i2c-tiny-usb device [ 118.533730][ T5906] usb 4-1: USB disconnect, device number 3 [ 120.163373][ T59] Bluetooth: hci2: command tx timeout [ 120.336949][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.394136][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.417741][ T13] bond0 (unregistering): Released all slaves [ 120.779764][ T6191] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.027444][ T31] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 121.176595][ T31] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30 [ 121.176659][ T31] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 121.176686][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 121.176727][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 121.176749][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.181972][ T6203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.256697][ T31] usb 5-1: config 0 descriptor?? [ 121.723488][ T31] kye 0003:0458:501B.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 121.744650][ T31] kye 0003:0458:501B.0004: hidraw0: USB HID v8.00 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 121.744685][ T31] kye 0003:0458:501B.0004: tablet-enabling feature report not found [ 121.744699][ T31] kye 0003:0458:501B.0004: tablet enabling failed [ 121.899487][ T31] usb 5-1: USB disconnect, device number 3 [ 121.969488][ T6118] chnl_net:caif_netlink_parms(): no params data found [ 122.034452][ T6214] tipc: Enabling of bearer rejected, failed to enable media [ 122.084075][ T6215] fido_id[6215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 122.243362][ T59] Bluetooth: hci2: command tx timeout [ 122.708325][ T6234] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 122.793326][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.953315][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 122.956373][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.956405][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.956445][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.956469][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.020504][ T5906] usb 4-1: config 0 descriptor?? [ 123.071308][ T5906] hub 4-1:0.0: USB hub found [ 123.221657][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 123.272576][ T5906] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 123.479579][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 123.479704][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.527698][ T5906] usb 4-1: USB disconnect, device number 4 [ 123.666096][ T6256] Invalid ELF header magic: != ELF [ 123.687337][ T13] hsr_slave_0: left promiscuous mode [ 123.758511][ T13] hsr_slave_1: left promiscuous mode [ 123.759548][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.759621][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.801911][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.801942][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.960891][ T13] veth1_macvtap: left promiscuous mode [ 123.961127][ T13] veth0_macvtap: left promiscuous mode [ 123.961455][ T13] veth1_vlan: left promiscuous mode [ 123.961762][ T13] veth0_vlan: left promiscuous mode [ 124.142548][ T37] audit: type=1326 audit(1758186721.328:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6263 comm="syz.1.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d354eba9 code=0x0 [ 124.323308][ T59] Bluetooth: hci2: command tx timeout [ 124.563441][ T6277] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (pcl812) [ 125.377915][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.548178][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 125.548209][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 125.548250][ T31] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 125.548271][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.559216][ T31] usb 2-1: config 0 descriptor?? [ 125.777041][ T31] ath6kl: Failed to submit usb control message: -71 [ 125.777103][ T31] ath6kl: unable to send the bmi data to the device: -71 [ 125.777117][ T31] ath6kl: Unable to send get target info: -71 [ 125.779404][ T31] ath6kl: Failed to init ath6kl core: -71 [ 125.781004][ T31] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 125.823464][ T31] usb 2-1: USB disconnect, device number 4 [ 127.115185][ T13] team0 (unregistering): Port device team_slave_1 removed [ 127.335582][ T13] team0 (unregistering): Port device team_slave_0 removed [ 130.003588][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.003737][ T6118] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.003979][ T6118] bridge_slave_0: entered allmulticast mode [ 130.006625][ T6118] bridge_slave_0: entered promiscuous mode [ 130.044491][ T6118] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.044632][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.044860][ T6118] bridge_slave_1: entered allmulticast mode [ 130.066465][ T6118] bridge_slave_1: entered promiscuous mode [ 130.557221][ T6118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.580490][ T6118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.075236][ T6118] team0: Port device team_slave_0 added [ 131.111063][ T6118] team0: Port device team_slave_1 added [ 131.603311][ T5924] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 131.648745][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.648763][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.648790][ T6118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.769593][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.769641][ T5924] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 131.769662][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.811001][ T5924] usb 4-1: config 0 descriptor?? [ 131.811882][ T6365] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.839236][ T6118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.839252][ T6118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.839277][ T6118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.287268][ T5924] belkin 0003:050D:3201.0005: unknown main item tag 0x2 [ 132.287301][ T5924] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 132.390767][ T5924] belkin 0003:050D:3201.0005: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.3-1/input0 [ 132.457202][ T6118] hsr_slave_0: entered promiscuous mode [ 132.469756][ T6118] hsr_slave_1: entered promiscuous mode [ 132.478180][ T6118] debugfs: 'hsr0' already exists in 'hsr' [ 132.478214][ T6118] Cannot create hsr debugfs directory [ 132.576238][ T1232] usb 4-1: USB disconnect, device number 5 [ 132.594336][ T6389] fido_id[6389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.983338][ T5924] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.133270][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 133.135779][ T5924] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.135802][ T5924] usb 5-1: config 0 has no interface number 0 [ 133.138926][ T5924] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 133.138952][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.138972][ T5924] usb 5-1: Product: syz [ 133.138986][ T5924] usb 5-1: Manufacturer: syz [ 133.139001][ T5924] usb 5-1: SerialNumber: syz [ 133.215394][ T5924] usb 5-1: config 0 descriptor?? [ 133.237960][ T5924] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 133.237992][ T5924] usb 5-1: selecting invalid altsetting 1 [ 133.238008][ T5924] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 133.268888][ T5924] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 133.269586][ T5924] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 133.269664][ T5924] usb 5-1: media controller created [ 133.326861][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.174921][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 134.404223][ T5924] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 134.404311][ T5924] zl10353_read_register: readreg error (reg=127, ret==-110) [ 134.409835][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 134.643330][ T5924] usb 5-1: USB disconnect, device number 4 [ 134.886701][ T6440] netlink: 256 bytes leftover after parsing attributes in process `syz.1.203'. [ 134.978133][ T6118] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 135.081591][ T6118] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 135.200197][ T6118] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 135.356013][ T6118] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.398461][ T6457] netlink: 79 bytes leftover after parsing attributes in process `syz.0.211'. [ 135.398580][ T6457] netlink: 79 bytes leftover after parsing attributes in process `syz.0.211'. [ 135.897730][ T6477] capability: warning: `syz.4.215' uses deprecated v2 capabilities in a way that may be insecure [ 135.928505][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.052358][ T6118] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.145246][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.145394][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.191202][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.193087][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.389211][ T6487] capability: warning: `syz.4.218' uses 32-bit capabilities (legacy support in use) [ 137.413356][ T1232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.576931][ T1232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.576976][ T1232] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 137.576999][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.585532][ T1232] usb 5-1: config 0 descriptor?? [ 137.827908][ T6118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.934318][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.934445][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.104441][ T1232] itetech 0003:258A:6A88.0006: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 138.273355][ T992] usb 5-1: USB disconnect, device number 5 [ 138.316685][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 138.521270][ T6534] fido_id[6534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 139.362937][ T6118] veth0_vlan: entered promiscuous mode [ 139.428796][ T6118] veth1_vlan: entered promiscuous mode [ 139.601055][ T6118] veth0_macvtap: entered promiscuous mode [ 139.664632][ T6118] veth1_macvtap: entered promiscuous mode [ 139.675775][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 139.819978][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.881973][ T9] usb 5-1: string descriptor 0 read error: -22 [ 139.882154][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 139.882177][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.898488][ T6118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.917700][ T9] usb 5-1: config 0 descriptor?? [ 139.983498][ T9] usbtest 5-1:0.0: FX2 device [ 139.983519][ T9] usbtest 5-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 140.001541][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.006303][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.006981][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.007491][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.075650][ T6584] netlink: 240 bytes leftover after parsing attributes in process `syz.0.252'. [ 140.075687][ T6584] NCSI netlink: No device for ifindex 29216 [ 140.173040][ T9] usb 5-1: USB disconnect, device number 6 [ 140.698411][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.698431][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.099265][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.099285][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.229286][ T37] audit: type=1326 audit(1758186738.418:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.257705][ T37] audit: type=1326 audit(1758186738.418:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.259683][ T37] audit: type=1326 audit(1758186738.448:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.313579][ T37] audit: type=1326 audit(1758186738.448:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.313627][ T37] audit: type=1326 audit(1758186738.508:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.314874][ T37] audit: type=1326 audit(1758186738.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.314921][ T37] audit: type=1326 audit(1758186738.508:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.314964][ T37] audit: type=1326 audit(1758186738.508:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6606 comm="syz.4.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 141.422221][ T6609] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 141.422285][ T6609] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 141.422339][ T6609] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 141.422391][ T6609] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 141.422446][ T6609] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 141.422576][ T6609] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 141.422628][ T6609] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 141.422679][ T6609] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 141.855056][ T6622] netlink: 84 bytes leftover after parsing attributes in process `syz.0.267'. [ 141.855216][ T6622] Zero length message leads to an empty skb [ 142.273254][ T5971] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.468829][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.468860][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.468913][ T5971] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 142.468936][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.488195][ T5971] usb 2-1: config 0 descriptor?? [ 142.805493][ T6652] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 142.843342][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.923331][ T49] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.944448][ T5971] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x2 [ 142.973998][ T5971] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 143.026137][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 143.032450][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.032482][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.032503][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.032601][ T5882] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.032624][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.083157][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 143.105127][ T49] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 143.105177][ T49] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 143.105205][ T49] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 143.105232][ T49] usb 5-1: config 0 interface 0 has no altsetting 0 [ 143.105267][ T49] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 143.105289][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.149149][ T5971] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 143.149211][ T5971] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 143.149774][ T5882] usb 6-1: config 0 descriptor?? [ 143.157984][ T5971] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -71 [ 143.251355][ T49] usb 5-1: config 0 descriptor?? [ 143.469903][ T5971] usb 2-1: USB disconnect, device number 5 [ 143.637245][ T5882] microsoft 0003:045E:07DA.0008: report is too long [ 143.637279][ T5882] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 143.638137][ T5882] microsoft 0003:045E:07DA.0008: parse failed [ 143.653177][ T5882] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 143.731994][ T6654] fido_id[6654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.792275][ T6665] Bluetooth: MGMT ver 1.23 [ 143.803288][ T49] topre 0003:0853:0148.0009: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 143.863626][ T5971] usb 6-1: USB disconnect, device number 2 [ 143.974112][ T5882] usb 5-1: USB disconnect, device number 7 [ 144.183034][ T6678] syz.3.286 uses obsolete (PF_INET,SOCK_PACKET) [ 144.627761][ T6679] fido_id[6679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 144.891344][ T6685] pim6reg: entered allmulticast mode [ 144.912106][ T6690] pim6reg: left allmulticast mode [ 145.448006][ T6706] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 146.315271][ T5971] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 146.508324][ T5971] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 146.508358][ T5971] usb 6-1: config 0 interface 0 has no altsetting 0 [ 146.508390][ T5971] usb 6-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 146.508412][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.536985][ T5971] usb 6-1: config 0 descriptor?? [ 146.537817][ T6722] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 147.006529][ T6737] gfs2: path_lookup on c:::!(>ˆìy¢o™=O-ŽÄFm×SH_Y8yÿu [ 147.006529][ T6737] FãzR× ¶#ŸxI™6BçÙYCg)ß'!µAØ{g¥ [ 147.006529][ T6737] ¹}ÐmŒ]x®ïÏ%{qΗmÍ*©ºPNäȺ~%U5JëhBoGhÛN÷]î”.L›.`¾º$Ž returned error -2 [ 147.016138][ T5971] lenovo 0003:17EF:60A4.000A: hidraw0: USB HID v1.01 Device [HID 17ef:60a4] on usb-dummy_hcd.5-1/input0 [ 147.186595][ T49] usb 6-1: USB disconnect, device number 3 [ 147.238998][ T6740] fido_id[6740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 147.367798][ T6744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 147.400938][ T6744] vlan2: entered promiscuous mode [ 147.400958][ T6744] syz_tun: entered promiscuous mode [ 147.676682][ T6752] netlink: 'syz.0.313': attribute type 3 has an invalid length. [ 148.006893][ T6762] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 148.266350][ T1232] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.437728][ T1232] usb 4-1: Using ep0 maxpacket: 8 [ 148.440258][ T1232] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.440288][ T1232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 148.440321][ T1232] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 148.440343][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.473727][ T1232] usb 4-1: config 0 descriptor?? [ 148.969167][ T1232] uclogic 0003:5543:0042.000B: unbalanced delimiter at end of report description [ 148.969963][ T1232] uclogic 0003:5543:0042.000B: parse failed [ 148.970064][ T1232] uclogic 0003:5543:0042.000B: probe with driver uclogic failed with error -22 [ 149.165578][ T1232] usb 4-1: USB disconnect, device number 6 [ 149.613276][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 149.763244][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 149.765552][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 149.765608][ T49] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 149.765631][ T49] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 149.765654][ T49] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 149.765674][ T49] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 149.765698][ T49] usb 2-1: config 1 interface 0 has no altsetting 0 [ 149.765729][ T49] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 149.765751][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.876835][ T49] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 150.135895][ T49] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 150.172130][ T49] usb 2-1: USB disconnect, device number 6 [ 150.723845][ T49] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 150.873300][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 150.882721][ T49] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 150.882766][ T49] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 150.882787][ T49] usb 5-1: Product: syz [ 150.882802][ T49] usb 5-1: Manufacturer: syz [ 150.882816][ T49] usb 5-1: SerialNumber: syz [ 150.938823][ T49] usb 5-1: config 0 descriptor?? [ 151.210739][ T992] usb 5-1: USB disconnect, device number 8 [ 151.480157][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 151.991856][ T37] audit: type=1326 audit(1758186749.178:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.0.357" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe82102eba9 code=0x0 [ 152.248652][ T6858] netlink: 'syz.1.360': attribute type 3 has an invalid length. [ 153.826018][ T6915] program syz.5.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.028552][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'. [ 154.453270][ T49] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.617967][ T49] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.617993][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 154.618041][ T49] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.622503][ T49] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.622530][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.622549][ T49] usb 2-1: Product: syz [ 154.622563][ T49] usb 2-1: Manufacturer: syz [ 154.622577][ T49] usb 2-1: SerialNumber: syz [ 154.736797][ T49] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 154.736848][ T49] cdc_ncm 2-1:1.0: bind() failure [ 154.888635][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 154.964051][ T49] usb 2-1: USB disconnect, device number 7 [ 155.214176][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.4.397'. [ 155.214233][ T6955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.397'. [ 156.460238][ T6998] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.579370][ T6998] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.783258][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 157.783665][ T7050] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.433' resets device [ 157.939156][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.939188][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.939210][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.939261][ T5882] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 157.939284][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.997796][ T5882] usb 1-1: config 0 descriptor?? [ 158.073276][ T49] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.233253][ T49] usb 5-1: Using ep0 maxpacket: 32 [ 158.235747][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 158.238558][ T49] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 158.238583][ T49] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 158.238603][ T49] usb 5-1: Product: syz [ 158.238617][ T49] usb 5-1: Manufacturer: syz [ 158.238630][ T49] usb 5-1: SerialNumber: syz [ 158.272320][ T49] usb 5-1: config 0 descriptor?? [ 158.287948][ T7053] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 158.425621][ T5882] input: HID 28bd:1903 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.000C/input/input5 [ 158.464641][ T7067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 158.571883][ T5882] uclogic 0003:28BD:1903.000C: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:1903] on usb-dummy_hcd.0-1/input0 [ 158.575287][ T49] usb 5-1: USB disconnect, device number 9 [ 158.706636][ T5882] usb 1-1: USB disconnect, device number 2 [ 159.009519][ T5206] udevd[5206]: worker [5896] terminated by signal 33 (Unknown signal 33) [ 159.009573][ T5206] udevd[5206]: worker [5896] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:1903.000C/hidraw/hidraw0' [ 159.140614][ T7086] program syz.1.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.020605][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 160.020636][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 160.564118][ T7131] netlink: 88 bytes leftover after parsing attributes in process `syz.5.466'. [ 160.667208][ T7139] ======================================================= [ 160.667208][ T7139] WARNING: The mand mount option has been deprecated and [ 160.667208][ T7139] and is ignored by this kernel. Remove the mand [ 160.667208][ T7139] option from the mount to silence this warning. [ 160.667208][ T7139] ======================================================= [ 160.763808][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 160.763830][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 161.535784][ T7166] hugetlbfs: Bad value '%' for mount option 'size' [ 161.535784][ T7166] [ 161.888775][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.5.487'. [ 162.364673][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 162.364754][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 162.364785][ T7189] netlink: 1 bytes leftover after parsing attributes in process `syz.5.494'. [ 162.790320][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790359][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790383][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790407][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790432][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790456][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790480][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790504][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790528][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.790552][ T5905] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x0 [ 162.854720][ T5905] hid-generic 00A0:0008:0003.000D: hidraw0: HID v0.05 Device [syz1] on syz0 [ 163.004848][ T5905] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 163.178958][ T5905] usb 6-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 163.179019][ T5905] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 163.179042][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.213276][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 163.255023][ T7208] fido_id[7208]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 163.261736][ T5905] usb 6-1: probing VID:PID(2201:012C) [ 163.300082][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 163.327569][ T5905] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 163.327673][ T5905] vub300 6-1:64.0: probe with driver vub300 failed with error -22 [ 163.363202][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 163.365935][ T5924] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 163.365957][ T5924] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 163.365992][ T5924] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.366014][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.492876][ T5924] usb 6-1: USB disconnect, device number 4 [ 163.679155][ T5905] usb 4-1: USB disconnect, device number 7 [ 164.053211][ T37] audit: type=1326 audit(1758186761.228:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.053259][ T37] audit: type=1326 audit(1758186761.238:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.054344][ T37] audit: type=1326 audit(1758186761.248:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.054393][ T37] audit: type=1326 audit(1758186761.248:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.054445][ T37] audit: type=1326 audit(1758186761.248:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.055876][ T37] audit: type=1326 audit(1758186761.248:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.055919][ T37] audit: type=1326 audit(1758186761.248:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.055957][ T37] audit: type=1326 audit(1758186761.248:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7225 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d354eba9 code=0x7ffc0000 [ 164.426887][ T7235] vivid-002: disconnect [ 164.444692][ T7231] vivid-002: reconnect [ 165.153307][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 165.239855][ T7266] __nla_validate_parse: 1 callbacks suppressed [ 165.239874][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 165.303335][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 165.308558][ T5882] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 165.308583][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.308601][ T5882] usb 4-1: Product: syz [ 165.308613][ T5882] usb 4-1: Manufacturer: syz [ 165.308626][ T5882] usb 4-1: SerialNumber: syz [ 165.357575][ T5882] usb 4-1: config 0 descriptor?? [ 165.372855][ T5882] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 165.424935][ T992] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.573246][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 165.581618][ T992] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 165.581643][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.581661][ T992] usb 5-1: Product: syz [ 165.581674][ T992] usb 5-1: Manufacturer: syz [ 165.581687][ T992] usb 5-1: SerialNumber: syz [ 165.607910][ T992] usb 5-1: config 0 descriptor?? [ 165.640072][ T992] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.679831][ T7272] Bluetooth: MGMT ver 1.23 [ 165.741851][ T992] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 165.742427][ T5905] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 165.875807][ T5924] usb 5-1: USB disconnect, device number 10 [ 165.904757][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.948928][ T5905] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 165.948958][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.948977][ T5905] usb 1-1: Product: syz [ 165.948990][ T5905] usb 1-1: Manufacturer: syz [ 165.949004][ T5905] usb 1-1: SerialNumber: syz [ 165.996132][ T5882] gspca_stk1135: reg_w 0x3 err -71 [ 165.997192][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997204][ T5882] gspca_stk1135: Sensor write failed [ 165.997235][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997243][ T5882] gspca_stk1135: Sensor write failed [ 165.997275][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997282][ T5882] gspca_stk1135: Sensor read failed [ 165.997312][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997321][ T5882] gspca_stk1135: Sensor read failed [ 165.997327][ T5882] gspca_stk1135: Detected sensor type unknown (0x0) [ 165.997363][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997371][ T5882] gspca_stk1135: Sensor read failed [ 165.997402][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997409][ T5882] gspca_stk1135: Sensor read failed [ 165.997439][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997448][ T5882] gspca_stk1135: Sensor write failed [ 165.997489][ T5882] gspca_stk1135: serial bus timeout: status=0x00 [ 165.997498][ T5882] gspca_stk1135: Sensor write failed [ 165.997582][ T5882] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 166.000139][ T5905] usb 1-1: config 0 descriptor?? [ 166.002466][ T5882] usb 4-1: USB disconnect, device number 8 [ 166.018810][ T5905] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 166.695407][ T5905] usb 1-1: USB disconnect, device number 3 [ 167.832411][ T7315] warning: `syz.0.553' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 168.363869][ T7334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.457759][ T7296] mmap: syz.3.544 (7296) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.855644][ T7343] dummy0: entered promiscuous mode [ 168.914119][ T7343] macsec1: entered promiscuous mode [ 168.960533][ T7343] dummy0: left promiscuous mode [ 169.103855][ T5924] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 169.133695][ T49] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 169.276798][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.276821][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.278316][ T5924] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.278343][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.278362][ T5924] usb 2-1: SerialNumber: syz [ 169.307279][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 169.307316][ T49] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 169.307343][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 169.311140][ T49] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 169.311177][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.311199][ T49] usb 1-1: Product: syz [ 169.311215][ T49] usb 1-1: Manufacturer: syz [ 169.311230][ T49] usb 1-1: SerialNumber: syz [ 169.389119][ T49] usb 1-1: config 0 descriptor?? [ 169.394038][ T7348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.394413][ T7348] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 169.424795][ T49] usb 1-1: ucan: probing device on interface #0 [ 169.566519][ T5924] usb 2-1: 0:2 : does not exist [ 169.619305][ T7361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.801840][ T5924] usb 2-1: USB disconnect, device number 8 [ 170.002906][ T6076] udevd[6076]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.074257][ T49] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 170.137642][ T49] usb 1-1: USB disconnect, device number 4 [ 172.204205][ T5882] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 172.365937][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.365981][ T5882] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 172.366004][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.413350][ T5882] usb 2-1: config 0 descriptor?? [ 172.504128][ T7447] netlink: 108 bytes leftover after parsing attributes in process `syz.5.612'. [ 172.504152][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.612'. [ 172.867592][ T5882] hid_parser_main: 5 callbacks suppressed [ 172.867622][ T5882] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 172.867650][ T5882] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 172.867675][ T5882] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 172.867699][ T5882] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 172.867723][ T5882] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 172.923940][ T5882] nintendo 0003:057E:200E.000E: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 172.983865][ T5882] nintendo 0003:057E:200E.000E: Failed charging grip handshake [ 172.983893][ T5882] nintendo 0003:057E:200E.000E: Failed to initialize controller; ret=-110 [ 173.035718][ T5882] nintendo 0003:057E:200E.000E: probe - fail = -110 [ 173.035871][ T5882] nintendo 0003:057E:200E.000E: probe with driver nintendo failed with error -110 [ 173.064406][ T5882] usb 2-1: USB disconnect, device number 9 [ 173.474195][ T7467] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 173.474232][ T7467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.686067][ T7470] process 'syz.5.621' launched '/dev/fd/3' with NULL argv: empty string added [ 174.273358][ T5882] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 174.423309][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 174.425580][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.425607][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.425646][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 174.425672][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.486963][ T5882] usb 6-1: config 0 descriptor?? [ 174.926604][ T5882] logitech 0003:046D:C623.000F: unknown main item tag 0x6 [ 174.926642][ T5882] logitech 0003:046D:C623.000F: collection stack underflow [ 174.926663][ T5882] logitech 0003:046D:C623.000F: item 0 4 0 12 parsing failed [ 174.927356][ T5882] logitech 0003:046D:C623.000F: parse failed [ 174.927482][ T5882] logitech 0003:046D:C623.000F: probe with driver logitech failed with error -22 [ 175.153311][ T5924] usb 6-1: USB disconnect, device number 5 [ 175.389666][ T7520] fuse: Invalid rootmode [ 175.554433][ T7526] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 177.230984][ T7573] netlink: 32 bytes leftover after parsing attributes in process `syz.5.669'. [ 177.336995][ T7575] veth1_macvtap: left promiscuous mode [ 177.337019][ T7575] macsec0: entered allmulticast mode [ 177.469101][ T7576] veth1_macvtap: entered promiscuous mode [ 177.469129][ T7576] veth1_macvtap: entered allmulticast mode [ 177.469253][ T7576] macsec0: left allmulticast mode [ 177.469266][ T7576] veth1_macvtap: left allmulticast mode [ 177.862811][ T7587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 178.023348][ T5882] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 178.188133][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 178.191647][ T5882] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 178.208731][ T5882] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 178.208773][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.208793][ T5882] usb 5-1: Product: syz [ 178.208806][ T5882] usb 5-1: Manufacturer: syz [ 178.208819][ T5882] usb 5-1: SerialNumber: syz [ 178.274325][ T5882] usb 5-1: config 0 descriptor?? [ 178.280784][ T5882] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 178.280847][ T5882] usb 5-1: setting power ON [ 178.281423][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 178.334901][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.335778][ T5882] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 178.335829][ T5882] usb 5-1: media controller created [ 178.387747][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.435888][ T5882] usb 5-1: selecting invalid altsetting 6 [ 178.435910][ T5882] usb 5-1: digital interface selection failed (-22) [ 178.435923][ T5882] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 178.436990][ T5882] usb 5-1: setting power OFF [ 178.437111][ T5882] dvb-usb: bulk message failed: -22 (2/0) [ 178.437129][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 178.437140][ T5882] (NULL device *): no alternate interface [ 178.489570][ T7585] dvb-usb: bulk message failed: -22 (3/0) [ 178.558728][ T5882] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 178.573872][ T5882] usb 5-1: USB disconnect, device number 11 [ 178.826562][ T7611] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 178.826596][ T7611] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 178.826617][ T7611] bridge_slave_0: default FDB implementation only supports local addresses [ 179.048619][ T7616] netlink: 'syz.5.688': attribute type 1 has an invalid length. [ 179.048641][ T7616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.688'. [ 179.048658][ T7616] nbd: illegal input index 65544 [ 179.098297][ T992] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.264101][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 179.267122][ T992] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 179.267168][ T992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.267190][ T992] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 179.267214][ T992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 179.267236][ T992] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 179.267258][ T992] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 179.268829][ T992] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 179.268855][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 179.268875][ T992] usb 1-1: SerialNumber: syz [ 179.360377][ T992] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 179.401997][ T992] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 179.608880][ T5882] usb 1-1: USB disconnect, device number 5 [ 180.374846][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 181.621623][ T37] audit: type=1326 audit(1758186778.798:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 181.621673][ T37] audit: type=1326 audit(1758186778.808:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 181.621715][ T37] audit: type=1326 audit(1758186778.808:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 181.621762][ T37] audit: type=1326 audit(1758186778.808:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 181.621803][ T37] audit: type=1326 audit(1758186778.808:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 181.682475][ T37] audit: type=1326 audit(1758186778.858:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 181.682529][ T37] audit: type=1326 audit(1758186778.868:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7683 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 182.338223][ T7700] netlink: 'syz.0.727': attribute type 66 has an invalid length. [ 182.684535][ T7712] netlink: 'syz.4.733': attribute type 15 has an invalid length. [ 183.139590][ T7725] ipvlan2: entered promiscuous mode [ 183.276085][ T7731] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 184.585580][ T5882] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 184.741486][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.741545][ T5882] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 184.741565][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.823772][ T5882] usb 2-1: config 0 descriptor?? [ 185.049479][ T7784] xfs: Unexpected value for 'discard' [ 185.146456][ T7787] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 185.146480][ T7787] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 185.279611][ T5882] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 185.279650][ T5882] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 185.279674][ T5882] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 185.279698][ T5882] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 185.279720][ T5882] elecom 0003:056E:00FC.0010: unknown main item tag 0x0 [ 185.321031][ T5882] elecom 0003:056E:00FC.0010: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 185.473908][ T5882] usb 2-1: USB disconnect, device number 10 [ 186.403443][ T49] IPVS: starting estimator thread 0... [ 186.503726][ T7827] IPVS: using max 7 ests per chain, 16800 per kthread [ 187.341939][ T7859] tipc: Started in network mode [ 187.341970][ T7859] tipc: Node identity ac141413, cluster identity 4711 [ 187.361009][ T7859] tipc: New replicast peer: 10.1.1.2 [ 187.361684][ T7859] tipc: Enabled bearer , priority 10 [ 188.299678][ T7896] netlink: 'syz.0.817': attribute type 2 has an invalid length. [ 188.379986][ T7896] k›*·]‘: entered promiscuous mode [ 188.474949][ T49] tipc: Node number set to 2886997011 [ 188.623296][ T5882] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 188.773221][ T49] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.779983][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 188.801082][ T5882] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 188.801110][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.801130][ T5882] usb 6-1: Product: syz [ 188.801145][ T5882] usb 6-1: Manufacturer: syz [ 188.801159][ T5882] usb 6-1: SerialNumber: syz [ 188.854049][ T5882] usb 6-1: config 0 descriptor?? [ 188.925537][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.925570][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.925706][ T49] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 188.925735][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.952147][ T49] usb 2-1: config 0 descriptor?? [ 189.280801][ T5882] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a [ 189.280825][ T5882] airspy 6-1:0.0: Could not detect board [ 189.280925][ T5882] airspy 6-1:0.0: probe with driver airspy failed with error -71 [ 189.314669][ T5882] usb 6-1: USB disconnect, device number 6 [ 189.441479][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 189.441593][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 189.470756][ T49] usb 2-1: USB disconnect, device number 11 [ 189.755310][ T5971] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 189.907666][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.907716][ T5971] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 189.907737][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.946767][ T5971] usb 1-1: config 0 descriptor?? [ 190.253492][ T992] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 190.412735][ T5971] logitech 0003:046D:C295.0011: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 190.412781][ T5971] logitech 0003:046D:C295.0011: no inputs found [ 190.429749][ T992] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.429781][ T992] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.429803][ T992] usb 6-1: config 0 interface 0 has no altsetting 0 [ 190.429838][ T992] usb 6-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 190.429862][ T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.510413][ T992] usb 6-1: config 0 descriptor?? [ 190.629014][ T5971] usb 1-1: USB disconnect, device number 6 [ 190.936813][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 190.936833][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 191.007502][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007543][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007570][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007596][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007622][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007647][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007673][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.007695][ T992] holtek_mouse 0003:04D9:A067.0012: unknown main item tag 0x0 [ 191.100179][ T7940] fido_id[7940]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 191.109962][ T992] holtek_mouse 0003:04D9:A067.0012: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.5-1/input0 [ 191.190849][ T5882] usb 6-1: USB disconnect, device number 7 [ 191.655187][ T7956] fido_id[7956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 191.786309][ T992] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 191.879597][ T992] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 191.944863][ T7972] netlink: 100 bytes leftover after parsing attributes in process `syz.1.850'. [ 192.251774][ T7980] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 192.251774][ T7980] [ 192.462682][ T7979] fido_id[7979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 192.669818][ T5971] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 192.840941][ T5971] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 192.840973][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.872388][ T5971] usb 6-1: config 0 descriptor?? [ 192.907780][ T5971] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 193.504613][ T5971] gspca_cpia1: usb_control_msg 01, error -71 [ 193.504632][ T5971] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 193.542749][ T5971] usb 6-1: USB disconnect, device number 8 [ 193.690833][ T8022] netlink: 165 bytes leftover after parsing attributes in process `syz.4.875'. [ 193.971052][ T8032] program syz.3.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.456154][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.886'. [ 194.561726][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 194.561749][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.888'. [ 194.561786][ T8051] netlink: 'syz.1.888': attribute type 7 has an invalid length. [ 194.773276][ T5882] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.923231][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 194.929439][ T5882] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 194.929462][ T5882] usb 4-1: config 0 has no interface number 0 [ 194.929508][ T5882] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.929532][ T5882] usb 4-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.929554][ T5882] usb 4-1: config 0 interface 1 has no altsetting 0 [ 194.929586][ T5882] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 194.929607][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.943403][ T992] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 195.019209][ T5882] usb 4-1: config 0 descriptor?? [ 195.103319][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 195.106492][ T992] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.109459][ T992] usb 1-1: config 4 interface 0 has no altsetting 0 [ 195.125920][ T992] usb 1-1: string descriptor 0 read error: -22 [ 195.126075][ T992] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 195.126100][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.212370][ T992] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 195.260352][ T992] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.260753][ T992] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 195.260814][ T992] usb 1-1: media controller created [ 195.371678][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.466065][ T5882] chicony 0003:04F2:0418.0014: item fetching failed at offset 0/4 [ 195.466846][ T5882] chicony 0003:04F2:0418.0014: Chicony hid parse failed: -22 [ 195.466915][ T5882] chicony 0003:04F2:0418.0014: probe with driver chicony failed with error -22 [ 195.672504][ T49] usb 4-1: USB disconnect, device number 9 [ 195.681712][ T992] zl10353_read_register: readreg error (reg=127, ret==0) [ 195.918196][ T992] usb 1-1: USB disconnect, device number 7 [ 196.833236][ T992] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 196.995113][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 197.001940][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.001969][ T992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 197.002008][ T992] usb 5-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 197.002029][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.037849][ T992] usb 5-1: config 0 descriptor?? [ 197.173307][ T5924] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 197.323243][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 197.329060][ T5924] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.329092][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.329181][ T5924] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 197.329204][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.445064][ T5924] usb 4-1: config 0 descriptor?? [ 197.456808][ T992] smartjoyplus 0003:0925:0005.0015: item fetching failed at offset 3/5 [ 197.457587][ T992] smartjoyplus 0003:0925:0005.0015: parse failed [ 197.457666][ T992] smartjoyplus 0003:0925:0005.0015: probe with driver smartjoyplus failed with error -22 [ 197.673732][ T1232] usb 5-1: USB disconnect, device number 12 [ 197.942578][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: unknown main item tag 0x0 [ 197.942614][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: unknown main item tag 0x0 [ 197.942639][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: unknown main item tag 0x0 [ 197.942665][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: unknown main item tag 0x0 [ 197.942690][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: unknown main item tag 0x0 [ 197.942715][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: unknown main item tag 0x0 [ 197.983843][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: hidraw0: USB HID v0.05 Device [HID 1b1c:0a16] on usb-dummy_hcd.3-1/input0 [ 198.136312][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: failed to request firmware (reason: -71) [ 198.136728][ T5882] usb 4-1: USB disconnect, device number 10 [ 198.137080][ T5924] hid-corsair-void 0003:1B1C:0A16.0016: failed to request battery (reason: -19) [ 198.417062][ T8142] fido_id[8142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 198.752802][ T8148] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 198.786639][ T8148] team0: Device ipvlan3 is already an upper device of the team interface [ 199.373156][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.373433][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.259462][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 202.511033][ T8260] nbd: must specify a size in bytes for the device [ 202.820145][ T8269] hub 9-0:1.0: USB hub found [ 202.825182][ T8269] hub 9-0:1.0: 1 port detected [ 203.131292][ T8274] netlink: 'syz.1.991': attribute type 29 has an invalid length. [ 203.163297][ T5882] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.314344][ T37] audit: type=1326 audit(1758186800.508:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.314633][ T37] audit: type=1326 audit(1758186800.508:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.318202][ T37] audit: type=1326 audit(1758186800.508:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.318598][ T37] audit: type=1326 audit(1758186800.508:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.318853][ T37] audit: type=1326 audit(1758186800.508:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.319301][ T37] audit: type=1326 audit(1758186800.508:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.320750][ T37] audit: type=1326 audit(1758186800.508:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8281 comm="syz.5.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf74eba9 code=0x7ffc0000 [ 203.433152][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.433182][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.433203][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.433243][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.433264][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.541827][ T5882] usb 1-1: config 0 descriptor?? [ 203.603581][ T992] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 203.775954][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.775987][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.776026][ T992] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 203.776049][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.788072][ T992] usb 4-1: config 0 descriptor?? [ 203.931319][ T8299] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 203.986466][ T5882] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x2 [ 203.986505][ T5882] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x6 [ 204.070481][ T5882] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 204.180640][ T5882] usb 1-1: USB disconnect, device number 8 [ 204.305233][ T992] hid-u2fzero 0003:10C4:8ACF.0018: unknown main item tag 0x3 [ 204.305285][ T992] hid-u2fzero 0003:10C4:8ACF.0018: item fetching failed at offset 4/5 [ 204.306189][ T992] hid-u2fzero 0003:10C4:8ACF.0018: probe with driver hid-u2fzero failed with error -22 [ 204.499229][ T992] usb 4-1: USB disconnect, device number 11 [ 204.512937][ T8302] fido_id[8302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 205.688891][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 206.683268][ T5924] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.841230][ T5924] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 206.841260][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.841281][ T5924] usb 1-1: Product: syz [ 206.841295][ T5924] usb 1-1: Manufacturer: syz [ 206.841310][ T5924] usb 1-1: SerialNumber: syz [ 206.905614][ T8385] IPVS: Error connecting to the multicast addr [ 206.913394][ T5924] usb 1-1: config 0 descriptor?? [ 206.922044][ T5924] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 206.995536][ T8386] syz.3.1045 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 207.294048][ T992] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 207.371793][ T5924] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 207.431218][ T37] audit: type=1326 audit(1758186804.608:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8398 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 207.431273][ T37] audit: type=1326 audit(1758186804.618:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8398 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 207.443709][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 207.446459][ T992] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 207.446485][ T992] usb 2-1: config 0 has no interface number 0 [ 207.452515][ T992] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 207.452550][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.452570][ T992] usb 2-1: Product: syz [ 207.452585][ T992] usb 2-1: Manufacturer: syz [ 207.452600][ T992] usb 2-1: SerialNumber: syz [ 207.466893][ T37] audit: type=1326 audit(1758186804.658:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8398 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f69b4b2eba9 code=0x7ffc0000 [ 207.486159][ T992] usb 2-1: config 0 descriptor?? [ 207.515789][ T992] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 207.600870][ T5924] usb 1-1: USB disconnect, device number 9 [ 207.795175][ T992] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 207.976651][ T992] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 208.163627][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 208.173719][ T992] usb 2-1: USB disconnect, device number 12 [ 208.314584][ T992] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 208.357596][ T992] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 208.358688][ T992] quatech2 2-1:0.51: device disconnected [ 208.708393][ T8431] QAT: Invalid ioctl 21531 [ 209.478533][ T1232] kernel write not supported for file /input/event0 (pid: 1232 comm: kworker/0:2) [ 210.054756][ T8475] tipc: New replicast peer: 255.255.255.255 [ 210.593230][ T5971] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 210.759127][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 210.759143][ T37] audit: type=1326 audit(1758186807.948:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8496 comm="syz.4.1098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69b4b2eba9 code=0x0 [ 210.760656][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.760703][ T5971] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 210.760725][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.835377][ T5971] usb 2-1: config 0 descriptor?? [ 210.978955][ T37] audit: type=1800 audit(1758186808.158:41): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1100" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 211.271559][ T5971] kye 0003:0458:501B.0019: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 211.311466][ T5971] kye 0003:0458:501B.0019: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 211.311499][ T5971] kye 0003:0458:501B.0019: tablet-enabling feature report not found [ 211.311513][ T5971] kye 0003:0458:501B.0019: tablet enabling failed [ 211.483294][ T5924] usb 2-1: USB disconnect, device number 13 [ 211.870887][ T8517] netlink: 161716 bytes leftover after parsing attributes in process `syz.3.1106'. [ 212.125326][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1109'. [ 212.383701][ T8534] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 212.383728][ T8534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 212.421399][ T8534] vhci_hcd vhci_hcd.0: Device attached [ 212.432141][ T8535] vhci_hcd: cannot find the pending unlink 2869 [ 212.442596][ T8535] vhci_hcd: connection closed [ 212.473045][ T12] vhci_hcd: stop threads [ 212.479219][ T12] vhci_hcd: release socket [ 212.479291][ T12] vhci_hcd: disconnect device [ 213.139406][ T8558] program syz.5.1124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.693419][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 213.693445][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 213.758321][ T8581] macvlan2: entered promiscuous mode [ 214.557127][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1148'. [ 214.633196][ T5971] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.805963][ T5971] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.805997][ T5971] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.806022][ T5971] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.806055][ T5971] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 214.806076][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.866234][ T5971] usb 5-1: config 0 descriptor?? [ 215.002210][ T8621] sp0: Synchronizing with TNC [ 215.043978][ T8618] [U] è [ 215.333814][ T5971] itetech 0003:06CB:73F6.001A: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.4-1/input0 [ 215.539891][ T992] usb 5-1: USB disconnect, device number 13 [ 215.632457][ T8633] fido_id[8633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 216.434874][ T8656] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 216.553379][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.703294][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 216.705876][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.705904][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.705939][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 216.705959][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.764908][ T5882] usb 5-1: config 0 descriptor?? [ 216.785926][ T5882] hub 5-1:0.0: USB hub found [ 216.803254][ T8615] Bluetooth: hci4: command 0x0406 tx timeout [ 216.813338][ T8615] Bluetooth: hci0: command 0x0406 tx timeout [ 216.813462][ T8615] Bluetooth: hci1: command 0x0406 tx timeout [ 216.813541][ T8615] Bluetooth: hci3: command 0x0406 tx timeout [ 216.994945][ T5882] hub 5-1:0.0: 1 port detected [ 217.197895][ T5882] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 217.197919][ T5882] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 217.223349][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 217.223467][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 217.254326][ T5882] usb 5-1: USB disconnect, device number 14 [ 218.465522][ T8703] use of bytesused == 0 is deprecated and will be removed in the future, [ 218.465537][ T8703] use the actual size instead. [ 218.893898][ T8719] netlink: 794 bytes leftover after parsing attributes in process `syz.0.1196'. [ 219.168806][ T8730] Bluetooth: MGMT ver 1.23 [ 219.212030][ T8731] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1202'. [ 219.545735][ T5971] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 219.717811][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 219.717846][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 219.717873][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 219.717917][ T5971] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 219.717940][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.786250][ T5971] usb 4-1: config 0 descriptor?? [ 219.787458][ T8735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 221.822808][ T5971] sigmamicro 0003:1C4F:0059.001B: unknown main item tag 0x0 [ 222.826133][ T5971] sigmamicro 0003:1C4F:0059.001B: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 224.157559][ T5971] usb 4-1: USB disconnect, device number 12 [ 229.113115][ C1] sched: DL replenish lagged too much [ 230.160178][ T8791] fido_id[8791]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 254.559543][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 261.337058][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.400200][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.582495][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.599137][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.038794][ T38] INFO: task syz.4.1215:8756 blocked for more than 145 seconds. [ 376.038822][ T38] Not tainted syzkaller #0 [ 376.038832][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.038844][ T38] task:syz.4.1215 state:D stack:24520 pid:8756 tgid:8756 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 376.038912][ T38] Call Trace: [ 376.038919][ T38] [ 376.038932][ T38] __schedule+0x16f3/0x4c20 [ 376.038988][ T38] ? __lock_acquire+0xab9/0xd20 [ 376.039016][ T38] ? __pfx___schedule+0x10/0x10 [ 376.039059][ T38] ? schedule+0x91/0x360 [ 376.039089][ T38] schedule+0x165/0x360 [ 376.039118][ T38] schedule_timeout+0x9a/0x270 [ 376.039144][ T38] ? __pfx_schedule_timeout[ 376.039144][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 376.039183][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.039211][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.039238][ T38] ? wait_for_completion+0x267/0x5d0 [ 376.039267][ T38] wait_for_completion+0x2bf/0x5d0 [ 376.039308][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 376.039338][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 376.039369][ T38] rcu_barrier+0x463/0x570 [ 376.039400][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 376.039422][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 376.039448][ T38] kvm_put_kvm+0xf8e/0x1670 [ 376.039480][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 376.039505][ T38] kvm_vm_release+0x46/0x50 [ 376.039529][ T38] __fput+0x458/0xa80 [ 376.039569][ T38] task_work_run+0x1d4/0x260 [ 376.039592][ T38] ? __pfx_task_work_run+0x10/0x10 [ 376.039617][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 376.039646][ T38] exit_to_user_mode_loop+0xec/0x110 [ 376.039672][ T38] do_syscall_64+0x2bd/0x3b0 [ 376.039706][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.039735][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.039756][ T38] ? clear_bhb_loop+0x60/0xb0 [ 376.039780][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.039805][ T38] RIP: 0033:0x7f69b4b2eba9 [ 376.039826][ T38] RSP: 002b:00007ffd9efa4368 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 376.039846][ T38] RAX: 0000000000000000 RBX: 0000000000035ba3 RCX: 00007f69b4b2eba9 [ 376.039859][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 376.039872][ T38] RBP: 00007f69b4d77da0 R08: 0000000000000001 R09: 000000039efa465f [ 376.039885][ T38] R10: 0000001b31120000 R11: 0000000000000246 R12: 00007f69b4d75fac [ 376.039899][ T38] R13: 00007f69b4d75fa0 R14: ffffffffffffffff R15: 00007ffd9efa4480 [ 376.039932][ T38] [ 376.039955][ T38] [ 376.039955][ T38] Showing all locks held in the system: [ 376.039964][ T38] 2 locks held by kthreadd/2: [ 376.039977][ T38] 6 locks held by kworker/0:0/9: [ 376.039988][ T38] #0: ffff88805b3e3938 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.040047][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.040115][ T38] #2: ffff88805b4f15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 376.040167][ T38] #3: ffff88805d1f23c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 376.040216][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.040266][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.040318][ T38] 5 locks held by kworker/0:1/10: [ 376.040329][ T38] 6 locks held by kworker/u8:0/12: [ 376.040340][ T38] #0: ffff88805aa3b138 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.040391][ T38] #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.040443][ T38] #2: ffff88805ad115f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.040510][ T38] #3: ffff88805d1f6de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.040569][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.040623][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.040677][ T38] 7 locks held by kworker/u8:1/13: [ 376.040689][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.040744][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.040800][ T38] #2: ffff88805c264300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 376.040866][ T38] #3: ffff88805dfacd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 376.040945][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 376.040999][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.041055][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.041111][ T38] 1 lock held by kworker/R-mm_pe/14: [ 376.041123][ T38] #0: ffffffff8d8527f8 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x2e/0x3a0 [ 376.041180][ T38] 2 locks held by ksoftirqd/0/15: [ 376.041192][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.041248][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.041306][ T38] 2 locks held by rcuc/0/20: [ 376.041318][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.041373][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.041430][ T38] 2 locks held by rcuc/1/28: [ 376.041442][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.041497][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.041560][ T38] 2 locks held by ksoftirqd/1/30: [ 376.041572][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.041627][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.041695][ T38] 4 locks held by kworker/1:0/31: [ 376.041707][ T38] #0: ffff88805aae9138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.041767][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.041840][ T38] #2: ffff8880378f95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 376.041905][ T38] #3: ffff88805c7d2e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 376.041956][ T38] 1 lock held by khungtaskd/38: [ 376.041967][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 376.042013][ T38] 5 locks held by kworker/u8:2/43: [ 376.042024][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.042075][ T38] #1: ffffc90000b47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.042126][ T38] #2: ffff88805f0d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.042179][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.042229][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.042281][ T38] 5 locks held by kworker/1:1/49: [ 376.042292][ T38] #0: ffff88803440c538 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.042347][ T38] #1: ffffc90000bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.042426][ T38] #2: ffff88805c7d6de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 376.042490][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.042545][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.042596][ T38] 3 locks held by kworker/u8:3/57: [ 376.042608][ T38] 2 locks held by kworker/u9:0/59: [ 376.042620][ T38] 5 locks held by kworker/u8:4/86: [ 376.042635][ T38] 4 locks held by kworker/1:2/992: [ 376.042647][ T38] #0: ffff888027e1dd38 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.042702][ T38] #1: ffffc90004a7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.042770][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.042838][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.042895][ T38] 5 locks held by kworker/u8:6/1110: [ 376.042907][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.042962][ T38] #1: ffffc90004dffbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.043119][ T38] #2: ffff88805e6f0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.043181][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.043235][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.043289][ T38] 4 locks held by kworker/u8:7/1125: [ 376.043301][ T38] #0: ffff88814d943138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.043356][ T38] #1: ffffc90004e9fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.043412][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.043466][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.043521][ T38] 5 locks held by kworker/u8:8/1182: [ 376.043533][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.043596][ T38] #1: ffffc9000509fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.043652][ T38] #2: ffff88805df10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.043708][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.043771][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.043824][ T38] 4 locks held by kworker/0:2/1232: [ 376.043836][ T38] #0: ffff88805b39b538 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.043924][ T38] #1: ffffc900051ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.043992][ T38] #2: ffff88803b0dd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 376.044043][ T38] #3: ffff88805d1f1928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 376.044095][ T38] 5 locks held by kworker/u8:9/1267: [ 376.044106][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.044166][ T38] #1: ffffc9000531fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.044214][ T38] #2: ffff88805f490898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.044264][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.044311][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.044359][ T38] 2 locks held by aoe_tx0/1325: [ 376.044370][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.044416][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.044474][ T38] 5 locks held by kworker/u8:11/3202: [ 376.044485][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.044532][ T38] #1: ffffc9000d5a7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.044587][ T38] #2: ffff88805edb0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.044636][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.044683][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.044733][ T38] 5 locks held by kworker/u8:12/3645: [ 376.044744][ T38] 2 locks held by jbd2/sda1-8/5168: [ 376.044754][ T38] #0: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.044818][ T38] #1: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 376.044865][ T38] 3 locks held by dhcpcd/5500: [ 376.044876][ T38] #0: ffffffff8e0b0a30 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x1bc/0x5a0 [ 376.044925][ T38] #1: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.044973][ T38] #2: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 376.045019][ T38] 5 locks held by dhcpcd/5501: [ 376.045030][ T38] #0: ffffffff8da61a50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 376.045082][ T38] #1: ffff88803668e790 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1a90 [ 376.045136][ T38] #2: ffff8880198745d0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1a90 [ 376.045181][ T38] #3: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.045225][ T38] #4: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 376.045269][ T38] 2 locks held by getty/5599: [ 376.045279][ T38] #0: ffff88823bf588a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 376.045333][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 376.045381][ T38] 6 locks held by syz-executor/5825: [ 376.045391][ T38] #0: ffff88803811b110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 376.045439][ T38] #1: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 376.045482][ T38] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 376.045523][ T38] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 376.045574][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.045622][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.045670][ T38] 6 locks held by kworker/u9:2/5844: [ 376.045681][ T38] #0: ffff888036a17938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.045729][ T38] #1: ffffc90004b0fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.045777][ T38] #2: ffff88805dd50e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 376.045821][ T38] #3: ffff88805dd500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 376.045872][ T38] #4: ffffffff8ee3b218 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 376.045924][ T38] #5: ffff88805df32b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 376.045982][ T38] 6 locks held by kworker/1:3/5853: [ 376.045992][ T38] #0: ffff88805aae8538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.046045][ T38] #1: ffffc90004bcfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.046112][ T38] #2: ffff88802d0f15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 376.046161][ T38] #3: ffff88803c88a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 376.046208][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.046255][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.046307][ T38] 5 locks held by kworker/0:3/5882: [ 376.046317][ T38] #0: ffff88805aae8538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.046370][ T38] #1: ffffc90004dbfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.046437][ T38] #2: ffff88805c7d23c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 376.046484][ T38] #3: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.046528][ T38] #4: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 376.046598][ T38] 4 locks held by kworker/1:4/5905: [ 376.046610][ T38] #0: ffff888028706d38 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.046666][ T38] #1: ffffc90004f2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.046737][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.046787][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.046836][ T38] 4 locks held by kworker/1:5/5906: [ 376.046847][ T38] #0: ffff888032c35d38 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.046904][ T38] #1: ffffc90004f3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.046975][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.047026][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.047080][ T38] 2 locks held by kworker/0:4/5923: [ 376.047092][ T38] 5 locks held by kworker/1:6/5924: [ 376.047104][ T38] #0: ffff88805aca5138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.047160][ T38] #1: ffffc900050cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.047241][ T38] #2: ffff88805c7d0e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 376.047308][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.047359][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.047412][ T38] 4 locks held by kworker/0:5/5971: [ 376.047423][ T38] #0: ffff888028706d38 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.047490][ T38] #1: ffffc900052bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.047579][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.047629][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.047682][ T38] 2 locks held by napi/wg2-0/6466: [ 376.047694][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.047745][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.047798][ T38] 5 locks held by kworker/u8:13/8077: [ 376.047810][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.047861][ T38] #1: ffffc90004aafbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.047913][ T38] #2: ffff88805e440898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.047968][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.048019][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.048071][ T38] 1 lock held by syz.4.1215/8756: [ 376.048082][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 376.048130][ T38] 2 locks held by kworker/0:6/8780: [ 376.048142][ T38] 6 locks held by kworker/u8:14/8783: [ 376.048154][ T38] #0: ffff888035c88938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.048206][ T38] #1: ffffc90003c77bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.048260][ T38] #2: ffff88803974d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.048311][ T38] #3: ffff88805c7d1928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.048362][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.048412][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.048464][ T38] 6 locks held by kworker/u8:15/8784: [ 376.048476][ T38] #0: ffff888035999938 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.048532][ T38] #1: ffffc90003a37bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.048591][ T38] #2: ffff8880397155f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.048651][ T38] #3: ffff88805d1f03f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.048699][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.048745][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.048793][ T38] 5 locks held by kworker/u8:16/8785: [ 376.048803][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.048852][ T38] #1: ffffc900015afbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.048900][ T38] #2: ffff88805dd90898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.048951][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.048998][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.049046][ T38] 5 locks held by kworker/u8:17/8786: [ 376.049056][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.049104][ T38] #1: ffffc90003c67bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.049154][ T38] #2: ffff88805efc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 376.049205][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.049253][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.049302][ T38] 6 locks held by kworker/u8:18/8787: [ 376.049312][ T38] #0: ffff88805b2fc938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.049366][ T38] #1: ffffc90003c57bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.049416][ T38] #2: ffff8880397115f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.049464][ T38] #3: ffff88805c7d7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.049510][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.049565][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.049613][ T38] 4 locks held by kworker/u8:19/8788: [ 376.049624][ T38] #0: ffff888060861138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.049678][ T38] #1: ffffc90003c47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.049728][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.049775][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.049824][ T38] 5 locks held by kworker/u8:20/8789: [ 376.049836][ T38] 7 locks held by kworker/u8:23/8793: [ 376.049846][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.049895][ T38] #1: ffffc90003b17bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.049946][ T38] #2: ffff888036cee300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 376.050003][ T38] #3: ffff88805cdf0520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 376.050057][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 376.050104][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.050152][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.050202][ T38] 4 locks held by kworker/0:7/8794: [ 376.050213][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.050262][ T38] #1: ffffc90003cc7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.050312][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.050361][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.050410][ T38] 4 locks held by kworker/1:7/8795: [ 376.050420][ T38] #0: ffff88805cd85938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.050475][ T38] #1: ffffc90004dafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.050547][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.050595][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.050644][ T38] 4 locks held by kworker/u8:25/8797: [ 376.050654][ T38] #0: ffff888035c88938 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.050703][ T38] #1: ffffc90003cb7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.050753][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.050801][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.050850][ T38] 4 locks held by kworker/u8:26/8798: [ 376.050861][ T38] #0: ffff8880357cc138 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.050913][ T38] #1: ffffc90004a07bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.050963][ T38] #2: ffff88802d0f15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.051011][ T38] #3: ffff88803c88a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.051059][ T38] 2 locks held by syz-executor/8799: [ 376.051070][ T38] #0: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.051115][ T38] #1: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 376.051177][ T38] 6 locks held by kworker/u8:27/8800: [ 376.051188][ T38] #0: ffff8880357cc938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.051244][ T38] #1: ffffc9000549fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.051297][ T38] #2: ffff8880378f95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.051348][ T38] #3: ffff88805c7d2e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.051399][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.051450][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.051501][ T38] 5 locks held by kworker/1:8/8801: [ 376.051514][ T38] 2 locks held by kworker/u8:28/8802: [ 376.051525][ T38] 4 locks held by kworker/u8:30/8804: [ 376.051543][ T38] 1 lock held by dhcpcd/8805: [ 376.051554][ T38] #0: ffff888021ece350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 376.051606][ T38] 2 locks held by syz-executor/8806: [ 376.051617][ T38] #0: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.051666][ T38] #1: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0 [ 376.051710][ T38] 6 locks held by kworker/u8:31/8807: [ 376.051721][ T38] #0: ffff888035129938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.051777][ T38] #1: ffffc9000546fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.051829][ T38] #2: ffff88803b0dd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.051881][ T38] #3: ffff88805d3e03f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.051932][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.051983][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.052036][ T38] 5 locks held by kworker/1:9/8808: [ 376.052047][ T38] #0: ffff88805acba538 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.052103][ T38] #1: ffffc90003aa7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.052174][ T38] #2: ffff88803974d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 376.052227][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.052278][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.052330][ T38] 6 locks held by kworker/u8:32/8809: [ 376.052342][ T38] #0: ffff888060861138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.052406][ T38] #1: ffffc90004f7fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.052455][ T38] #2: ffff888035e295f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 376.052503][ T38] #3: ffff88805d1f58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 376.052554][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.052602][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.052651][ T38] 7 locks held by kworker/u8:33/8810: [ 376.052662][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.052728][ T38] #1: ffffc90003b77bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.052782][ T38] #2: ffff88805cf3c300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 376.052844][ T38] #3: ffff88805cda2120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 376.052901][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 376.052951][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.053001][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.220575][ T38] 4 locks held by kworker/0:8/8811: [ 376.220588][ T38] #0: ffff88805aae9138 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.220648][ T38] #1: ffffc900050dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.220720][ T38] #2: ffff8880378f95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 376.220773][ T38] #3: ffff88805c7d2e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 376.220825][ T38] 3 locks held by syz-executor/8812: [ 376.220836][ T38] #0: ffff888021b80d08 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x19f/0x3d0 [ 376.220882][ T38] #1: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 376.220931][ T38] #2: ffff88801d28e858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0 [ 376.220976][ T38] 4 locks held by kworker/1:10/8813: [ 376.220987][ T38] #0: ffff88805ac0a138 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 376.221044][ T38] #1: ffffc900050efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 376.221116][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 376.221166][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 376.221218][ T38] 1 lock held by kworker/1:11/8815: [ 376.221232][ T38] [ 376.221237][ T38] ============================================= [ 376.221237][ T38] [ 376.221265][ T38] NMI backtrace for cpu 0 [ 376.221293][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.221334][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.221354][ T38] Call Trace: [ 376.221368][ T38] [ 376.221383][ T38] dump_stack_lvl+0x189/0x250 [ 376.221444][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.221497][ T38] ? __pfx__printk+0x10/0x10 [ 376.221538][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 376.221568][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 376.221597][ T38] ? __pfx__printk+0x10/0x10 [ 376.221623][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 376.221651][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 376.221680][ T38] watchdog+0xf93/0xfe0 [ 376.221722][ T38] ? watchdog+0x1de/0xfe0 [ 376.221753][ T38] kthread+0x70e/0x8a0 [ 376.221784][ T38] ? __pfx_watchdog+0x10/0x10 [ 376.221808][ T38] ? __pfx_kthread+0x10/0x10 [ 376.221840][ T38] ? __pfx_kthread+0x10/0x10 [ 376.221870][ T38] ret_from_fork+0x439/0x7d0 [ 376.221898][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 376.221928][ T38] ? __switch_to_asm+0x39/0x70 [ 376.221944][ T38] ? __switch_to_asm+0x33/0x70 [ 376.221960][ T38] ? __pfx_kthread+0x10/0x10 [ 376.221990][ T38] ret_from_fork_asm+0x1a/0x30 [ 376.222023][ T38] [ 376.222030][ T38] Sending NMI from CPU 0 to CPUs 1: [ 376.222057][ C1] NMI backtrace for cpu 1 [ 376.222069][ C1] CPU: 1 UID: 0 PID: 8801 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.222087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.222098][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 376.222122][ C1] RIP: 0010:mark_lock+0x9b/0x190 [ 376.222146][ C1] Code: 00 75 19 90 48 c7 c7 89 9e 21 8d 48 c7 c6 af 88 11 8d e8 c8 0b e7 ff 90 0f 0b 90 90 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 <85> 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 376.222159][ C1] RSP: 0018:ffffc900052cdcd0 EFLAGS: 00000002 [ 376.222171][ C1] RAX: 0000000000000001 RBX: 0000000000000009 RCX: ffffffff929efb88 [ 376.222182][ C1] RDX: 0000000000000008 RSI: ffff88802466e5a0 RDI: ffff88802466d940 [ 376.222193][ C1] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff8172c165 [ 376.222204][ C1] R10: ffffc900052cdf58 R11: ffffffff81aaf310 R12: 0000000000000003 [ 376.222215][ C1] R13: 0000000000000001 R14: ffff88802466e5a0 R15: ffff88802466e5c0 [ 376.222227][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 376.222240][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 376.222255][ C1] CR2: 00007fec6f085f40 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 376.222270][ C1] Call Trace: [ 376.222275][ C1] [ 376.222283][ C1] __lock_acquire+0x6a8/0xd20 [ 376.222307][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.222328][ C1] lock_acquire+0x120/0x360 [ 376.222347][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.222372][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.222393][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 376.222410][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.222431][ C1] unwind_next_frame+0xc2/0x2390 [ 376.222452][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.222476][ C1] ? unwind_next_frame+0xa5/0x2390 [ 376.222498][ C1] ? nft_do_chain+0x409/0x1920 [ 376.222516][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.222534][ C1] arch_stack_walk+0x11c/0x150 [ 376.222558][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 376.222575][ C1] stack_trace_save+0x9c/0xe0 [ 376.222591][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 376.222612][ C1] kasan_save_track+0x3e/0x80 [ 376.222628][ C1] ? kasan_save_track+0x3e/0x80 [ 376.222645][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 376.222663][ C1] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 376.222685][ C1] ? __alloc_skb+0x112/0x2d0 [ 376.222707][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 376.222730][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 376.222746][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 376.222762][ C1] ? nft_do_chain+0x409/0x1920 [ 376.222776][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 376.222811][ C1] __kasan_slab_alloc+0x6c/0x80 [ 376.222830][ C1] ? __alloc_skb+0x112/0x2d0 [ 376.222851][ C1] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 376.222876][ C1] __alloc_skb+0x112/0x2d0 [ 376.222899][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 376.222945][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 376.222970][ C1] ? synproxy_pernet+0x40/0x270 [ 376.222987][ C1] ? synproxy_pernet+0x45/0x270 [ 376.223007][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 376.223032][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 376.223054][ C1] ? nf_ip_checksum+0x13c/0x510 [ 376.223073][ C1] nft_synproxy_do_eval+0x345/0x570 [ 376.223093][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 376.223111][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 376.223141][ C1] nft_do_chain+0x409/0x1920 [ 376.223157][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 376.223179][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 376.223196][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 376.223211][ C1] ? stack_trace_save+0x9c/0xe0 [ 376.223246][ C1] nft_do_chain_inet+0x25d/0x340 [ 376.223269][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 376.223285][ C1] ? __lock_acquire+0xab9/0xd20 [ 376.223312][ C1] ? NF_HOOK+0x9a/0x3a0 [ 376.223334][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 376.223352][ C1] nf_hook_slow+0xc5/0x220 [ 376.223377][ C1] NF_HOOK+0x206/0x3a0 [ 376.223400][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 376.223423][ C1] ? NF_HOOK+0x9a/0x3a0 [ 376.223454][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 376.223474][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 376.223497][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 376.223521][ C1] ? skb_dst+0x4f/0xd0 [ 376.223542][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 376.223564][ C1] NF_HOOK+0x309/0x3a0 [ 376.223586][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 376.223607][ C1] ? NF_HOOK+0x9a/0x3a0 [ 376.223627][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 376.223648][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 376.223674][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 376.223694][ C1] __netif_receive_skb+0x143/0x380 [ 376.223713][ C1] ? rt_spin_unlock+0x65/0x80 [ 376.223734][ C1] ? process_backlog+0x27b/0x900 [ 376.223755][ C1] process_backlog+0x31e/0x900 [ 376.223780][ C1] __napi_poll+0xb3/0x540 [ 376.223801][ C1] net_rx_action+0x707/0xe00 [ 376.223829][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 376.223851][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 376.223877][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 376.223898][ C1] handle_softirqs+0x22f/0x710 [ 376.223938][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 376.223963][ C1] __local_bh_enable_ip+0x179/0x270 [ 376.223984][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 376.224003][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 376.224032][ C1] ? wg_index_hashtable_lookup+0x27/0x450 [ 376.224059][ C1] ? wg_index_hashtable_lookup+0x27/0x450 [ 376.224083][ C1] ? wg_index_hashtable_lookup+0x27/0x450 [ 376.224107][ C1] wg_index_hashtable_lookup+0x3c6/0x450 [ 376.224133][ C1] wg_noise_handshake_consume_response+0x242/0xb00 [ 376.224157][ C1] ? __pfx_wg_noise_handshake_consume_response+0x10/0x10 [ 376.224177][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 376.224201][ C1] ? preempt_schedule+0xae/0xc0 [ 376.224224][ C1] ? preempt_schedule_common+0x83/0xd0 [ 376.224246][ C1] ? preempt_schedule+0xae/0xc0 [ 376.224271][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 376.224297][ C1] ? kernel_fpu_begin_mask+0x2ed/0x3e0 [ 376.224312][ C1] ? kernel_fpu_end+0x121/0x130 [ 376.224327][ C1] ? __pfx_kernel_fpu_begin_mask+0x10/0x10 [ 376.224342][ C1] ? kernel_fpu_end+0x126/0x130 [ 376.224357][ C1] ? kernel_fpu_end+0xdf/0x130 [ 376.224370][ C1] ? __pfx_kernel_fpu_end+0x10/0x10 [ 376.224390][ C1] ? __asan_memset+0x22/0x50 [ 376.224422][ C1] ? blake2s_final+0x14c/0x260 [ 376.224445][ C1] ? compute_mac1+0x152/0x1a0 [ 376.224469][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 376.224491][ C1] ? __crypto_memneq+0x42/0x470 [ 376.224517][ C1] ? __pfx_wg_cookie_validate_packet+0x10/0x10 [ 376.224541][ C1] wg_packet_handshake_receive_worker+0x6ca/0xfa0 [ 376.224567][ C1] ? wg_packet_handshake_receive_worker+0x14c/0xfa0 [ 376.224596][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 376.224620][ C1] ? register_lock_class+0x51/0x320 [ 376.224645][ C1] ? __lock_acquire+0xab9/0xd20 [ 376.224671][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 376.224694][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 376.224718][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 376.224738][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 376.224759][ C1] process_scheduled_works+0xade/0x17b0 [ 376.224792][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 376.224821][ C1] worker_thread+0x8a0/0xda0 [ 376.224853][ C1] kthread+0x70e/0x8a0 [ 376.224879][ C1] ? __pfx_worker_thread+0x10/0x10 [ 376.224899][ C1] ? __pfx_kthread+0x10/0x10 [ 376.224924][ C1] ? __pfx_kthread+0x10/0x10 [ 376.224950][ C1] ret_from_fork+0x439/0x7d0 [ 376.224972][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 376.224995][ C1] ? __switch_to_asm+0x39/0x70 [ 376.225010][ C1] ? __switch_to_asm+0x33/0x70 [ 376.225025][ C1] ? __pfx_kthread+0x10/0x10 [ 376.225048][ C1] ret_from_fork_asm+0x1a/0x30 [ 376.225071][ C1] [ 376.226073][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 376.226089][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 376.226112][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.226124][ T38] Call Trace: [ 376.226131][ T38] [ 376.226140][ T38] dump_stack_lvl+0x99/0x250 [ 376.226189][ T38] ? __asan_memcpy+0x40/0x70 [ 376.226212][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.226243][ T38] ? __pfx__printk+0x10/0x10 [ 376.226280][ T38] vpanic+0x281/0x750 [ 376.226315][ T38] ? __pfx_vpanic+0x10/0x10 [ 376.226346][ T38] ? preempt_schedule+0xae/0xc0 [ 376.226379][ T38] ? preempt_schedule_common+0x83/0xd0 [ 376.226417][ T38] panic+0xb9/0xc0 [ 376.226447][ T38] ? __pfx_panic+0x10/0x10 [ 376.226480][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 376.226520][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 376.226553][ T38] watchdog+0xfd2/0xfe0 [ 376.226586][ T38] ? watchdog+0x1de/0xfe0 [ 376.226621][ T38] kthread+0x70e/0x8a0 [ 376.226657][ T38] ? __pfx_watchdog+0x10/0x10 [ 376.226684][ T38] ? __pfx_kthread+0x10/0x10 [ 376.226722][ T38] ? __pfx_kthread+0x10/0x10 [ 376.226756][ T38] ret_from_fork+0x439/0x7d0 [ 376.226787][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 376.226822][ T38] ? __switch_to_asm+0x39/0x70 [ 376.226859][ T38] ? __switch_to_asm+0x33/0x70 [ 376.226879][ T38] ? __pfx_kthread+0x10/0x10 [ 376.226928][ T38] ret_from_fork_asm+0x1a/0x30 [ 376.226965][ T38] [ 376.227312][ T38] Kernel Offset: disabled