last executing test programs: 1m50.055221317s ago: executing program 4 (id=1278): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 1m49.96018421s ago: executing program 4 (id=1280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000410000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x4}, 0x38) 1m49.762244739s ago: executing program 4 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x325, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x180a4}, 0x4000010) 1m49.511683152s ago: executing program 4 (id=1287): unshare(0x4020400) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/uevent_seqnum', 0x3, 0x100) vmsplice(r0, 0x0, 0x0, 0x4) 1m49.064560971s ago: executing program 4 (id=1292): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0xf9, 0x6b, 0x10, 0x9e8, 0x62, 0x80f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x3e, 0xfc}}]}}]}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1m46.119041858s ago: executing program 2 (id=1321): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) 1m45.965733718s ago: executing program 0 (id=1323): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb6}}, 0x10) 1m45.847455032s ago: executing program 4 (id=1326): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) io_setup(0x9, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x200, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m45.660999774s ago: executing program 3 (id=1327): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m45.575113481s ago: executing program 0 (id=1328): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="1a00"/12, @ANYRES32=r1, @ANYBLOB="91"], 0x20) 1m45.491718715s ago: executing program 1 (id=1329): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 1m45.300354025s ago: executing program 0 (id=1330): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)={0x20, 0x18, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m45.16289545s ago: executing program 1 (id=1331): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) bind$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x1ff, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @loopback, 0x9ce}}, 0x24) 1m44.990714474s ago: executing program 1 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x14, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@u}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1m44.730345378s ago: executing program 1 (id=1333): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f0000000040)=[{0x3, 0x3, 0x1000}, {0x2, 0x4, 0x1000}, {0x2, 0xa}, {0x4, 0x6f, 0x800}], 0x4) semctl$IPC_RMID(r0, 0x0, 0x0) 1m44.538903836s ago: executing program 1 (id=1334): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0)=0x4d, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m44.239375248s ago: executing program 1 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000300)="000380000003000000", 0x9, 0x8000}]) 1m42.790205853s ago: executing program 2 (id=1336): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) 1m42.106299761s ago: executing program 0 (id=1337): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27071c00160014000200", 0xa}, {0x0}], 0x2}, 0x24000008) 1m41.826486167s ago: executing program 2 (id=1338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x54, r1, 0x201, 0x70bd2a, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x25}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x29, 0xe, [@erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @mic={0x8c, 0x18, {0xe7a, "f4a4b0ec2344", @long="779d788579b5a92f543f515e467cee7e"}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) 1m41.648563757s ago: executing program 2 (id=1339): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) 1m36.130317409s ago: executing program 0 (id=1340): unshare(0x26020480) r0 = fanotify_init(0x4000, 0x0) fanotify_mark(r0, 0x22, 0x28, 0xffffffffffffffff, 0x0) 1m36.130057269s ago: executing program 3 (id=1341): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2000004}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) 1m36.129864149s ago: executing program 2 (id=1342): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa0}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, '\x00\x00\x00\"'}, @local=@item_012={0x1, 0x2, 0x0, "d3"}]}}, 0x0}, 0x0) 1m35.610817712s ago: executing program 3 (id=1343): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000085fde"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1m35.45442704s ago: executing program 3 (id=1344): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x2, 0x7}, 0x7f}) 1m35.304340321s ago: executing program 3 (id=1345): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0, @ANYBLOB="4b7656da"], 0x40c}}, 0x0) 1m32.615243685s ago: executing program 2 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1m30.42540807s ago: executing program 32 (id=1326): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) io_setup(0x9, &(0x7f0000000500)=0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x200, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1m28.971806022s ago: executing program 33 (id=1335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000300)="000380000003000000", 0x9, 0x8000}]) 1m28.215944233s ago: executing program 0 (id=1349): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 1m27.866506536s ago: executing program 3 (id=1350): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d56856", 0x2d}], 0x1}}], 0x2, 0x8008801) sendto$inet6(r0, &(0x7f00000001c0)="572cb07d63f9cdbeaa3342f76e81e2f26a54fab5b3fa270daf73a44c5c61c4040a5d0ea94b615f53", 0x28, 0x0, 0x0, 0x0) 57.324762236s ago: executing program 34 (id=1349): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 0s ago: executing program 35 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 89.846546][ T5822] cgroup: Unknown subsys name 'net' [ 90.152470][ T5822] cgroup: Unknown subsys name 'cpuset' [ 90.207243][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.935756][ T31] cfg80211: failed to load regulatory.db [ 92.220692][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.289314][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.291207][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.291980][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.294085][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.300279][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.397354][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.399926][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.401902][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.403161][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.404421][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.519116][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.521754][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.523462][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.529254][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.572671][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.653109][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.654997][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.678487][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.680204][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.683852][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.690681][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.692193][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.693114][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.772852][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.773666][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.590174][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 97.630298][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 98.063401][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 98.083442][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 98.138266][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 98.417934][ T59] Bluetooth: hci0: command tx timeout [ 98.487918][ T59] Bluetooth: hci1: command tx timeout [ 98.646633][ T59] Bluetooth: hci2: command tx timeout [ 98.671606][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.672761][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.673830][ T5833] bridge_slave_0: entered allmulticast mode [ 98.675842][ T5833] bridge_slave_0: entered promiscuous mode [ 98.726636][ T59] Bluetooth: hci4: command tx timeout [ 98.806657][ T59] Bluetooth: hci3: command tx timeout [ 98.814479][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.814622][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.814835][ T5837] bridge_slave_0: entered allmulticast mode [ 98.841857][ T5837] bridge_slave_0: entered promiscuous mode [ 98.860830][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.860986][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.861195][ T5833] bridge_slave_1: entered allmulticast mode [ 98.863534][ T5833] bridge_slave_1: entered promiscuous mode [ 98.902378][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.902502][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.902929][ T5837] bridge_slave_1: entered allmulticast mode [ 98.904876][ T5837] bridge_slave_1: entered promiscuous mode [ 99.552794][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.713468][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.714381][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.714647][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.714820][ T5840] bridge_slave_0: entered allmulticast mode [ 99.724106][ T5840] bridge_slave_0: entered promiscuous mode [ 99.732730][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.736766][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.736930][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.737517][ T5845] bridge_slave_0: entered allmulticast mode [ 99.740815][ T5845] bridge_slave_0: entered promiscuous mode [ 99.942171][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.943319][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.943513][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.943695][ T5840] bridge_slave_1: entered allmulticast mode [ 99.945572][ T5840] bridge_slave_1: entered promiscuous mode [ 100.067917][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.068063][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.068284][ T5845] bridge_slave_1: entered allmulticast mode [ 100.071210][ T5845] bridge_slave_1: entered promiscuous mode [ 100.072821][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.072965][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.073508][ T5843] bridge_slave_0: entered allmulticast mode [ 100.078281][ T5843] bridge_slave_0: entered promiscuous mode [ 100.378933][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.379206][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.379455][ T5843] bridge_slave_1: entered allmulticast mode [ 100.381990][ T5843] bridge_slave_1: entered promiscuous mode [ 100.486620][ T59] Bluetooth: hci0: command tx timeout [ 100.566596][ T59] Bluetooth: hci1: command tx timeout [ 100.604954][ T5833] team0: Port device team_slave_0 added [ 100.679591][ T5837] team0: Port device team_slave_0 added [ 100.683506][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.687720][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.700046][ T5833] team0: Port device team_slave_1 added [ 100.726558][ T59] Bluetooth: hci2: command tx timeout [ 100.789257][ T5837] team0: Port device team_slave_1 added [ 100.792141][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.794714][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.806597][ T59] Bluetooth: hci4: command tx timeout [ 100.862280][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.896838][ T59] Bluetooth: hci3: command tx timeout [ 101.402548][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.599561][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.599584][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.599603][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.699416][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.699434][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.699453][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.701900][ T5840] team0: Port device team_slave_0 added [ 101.704215][ T5845] team0: Port device team_slave_0 added [ 101.705512][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.705526][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.705555][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.859092][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.859111][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.859140][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.862360][ T5840] team0: Port device team_slave_1 added [ 101.865572][ T5845] team0: Port device team_slave_1 added [ 101.941288][ T5843] team0: Port device team_slave_0 added [ 102.123547][ T5843] team0: Port device team_slave_1 added [ 102.450639][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.450658][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.450686][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.453331][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.453346][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.453374][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.566676][ T59] Bluetooth: hci0: command tx timeout [ 102.646663][ T59] Bluetooth: hci1: command tx timeout [ 102.758703][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.758721][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.758749][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.760855][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.760870][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.760898][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.816554][ T59] Bluetooth: hci2: command tx timeout [ 102.869554][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.869573][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.869601][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.886606][ T59] Bluetooth: hci4: command tx timeout [ 102.966657][ T59] Bluetooth: hci3: command tx timeout [ 102.982361][ T5833] hsr_slave_0: entered promiscuous mode [ 102.984408][ T5833] hsr_slave_1: entered promiscuous mode [ 102.988590][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.988611][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.988642][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.001388][ T5837] hsr_slave_0: entered promiscuous mode [ 103.003036][ T5837] hsr_slave_1: entered promiscuous mode [ 103.004436][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 103.004575][ T5837] Cannot create hsr debugfs directory [ 103.688606][ T5840] hsr_slave_0: entered promiscuous mode [ 103.690103][ T5840] hsr_slave_1: entered promiscuous mode [ 103.691091][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 103.691115][ T5840] Cannot create hsr debugfs directory [ 103.929084][ T5845] hsr_slave_0: entered promiscuous mode [ 103.930515][ T5845] hsr_slave_1: entered promiscuous mode [ 103.931488][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 103.931512][ T5845] Cannot create hsr debugfs directory [ 104.041934][ T5843] hsr_slave_0: entered promiscuous mode [ 104.042923][ T5843] hsr_slave_1: entered promiscuous mode [ 104.043567][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 104.043590][ T5843] Cannot create hsr debugfs directory [ 104.646737][ T59] Bluetooth: hci0: command tx timeout [ 104.726822][ T59] Bluetooth: hci1: command tx timeout [ 104.886947][ T59] Bluetooth: hci2: command tx timeout [ 104.967956][ T59] Bluetooth: hci4: command tx timeout [ 105.046572][ T59] Bluetooth: hci3: command tx timeout [ 105.603339][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.643827][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.675266][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.720803][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.866456][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.910387][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.953768][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.000831][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.174599][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.208356][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.249217][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.309915][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.525641][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.558105][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.604636][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.663231][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.762753][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.859736][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.900092][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.944684][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.993697][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.050198][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.113099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.113991][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.165259][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.183822][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.184085][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.300058][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.365380][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.381819][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.382308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.433622][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.433807][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.552182][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.625709][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.626650][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.659431][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.700725][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.700911][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.872988][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.908187][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.981860][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.983978][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.058033][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.058238][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.082415][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.142253][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.142682][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.181422][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.238861][ T3201] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.239130][ T3201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.539949][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.707270][ T5833] veth0_vlan: entered promiscuous mode [ 108.809294][ T5833] veth1_vlan: entered promiscuous mode [ 108.814321][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.110270][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.139795][ T5833] veth0_macvtap: entered promiscuous mode [ 109.201261][ T5833] veth1_macvtap: entered promiscuous mode [ 109.219740][ T5837] veth0_vlan: entered promiscuous mode [ 109.293409][ T5837] veth1_vlan: entered promiscuous mode [ 109.355533][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.399137][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.460312][ T1118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.465184][ T1118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.487349][ T5843] veth0_vlan: entered promiscuous mode [ 109.492998][ T1118] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.521545][ T1118] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.538158][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.629842][ T5837] veth0_macvtap: entered promiscuous mode [ 109.638855][ T5843] veth1_vlan: entered promiscuous mode [ 109.717594][ T5837] veth1_macvtap: entered promiscuous mode [ 109.852074][ T5840] veth0_vlan: entered promiscuous mode [ 109.913795][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.972720][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.972748][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.975151][ T5840] veth1_vlan: entered promiscuous mode [ 110.014740][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.105651][ T5843] veth0_macvtap: entered promiscuous mode [ 110.116656][ T78] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.135997][ T78] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.156542][ T78] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.160658][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.160678][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.165215][ T78] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.165912][ T5845] veth0_vlan: entered promiscuous mode [ 110.184470][ T5843] veth1_macvtap: entered promiscuous mode [ 110.397371][ T5845] veth1_vlan: entered promiscuous mode [ 110.443352][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.551056][ T5840] veth0_macvtap: entered promiscuous mode [ 110.586747][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.630676][ T5840] veth1_macvtap: entered promiscuous mode [ 110.711769][ T78] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.731349][ T78] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.736647][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.736666][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.765696][ T78] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.806933][ T78] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.965014][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.034138][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.076063][ T5845] veth0_macvtap: entered promiscuous mode [ 111.141083][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.141105][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.164146][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.210348][ T5845] veth1_macvtap: entered promiscuous mode [ 111.324273][ T78] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.399147][ T78] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.433390][ T78] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.454719][ T78] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.496073][ T3626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.496095][ T3626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.602539][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.667707][ T5960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.827418][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.991023][ T1125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.001173][ T3201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.001196][ T3201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.029912][ T1125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.089077][ T3626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.147236][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.155143][ T5970] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.233769][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.233793][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.557040][ T3201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.557078][ T3201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.975310][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.975332][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.180908][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.180932][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.640334][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640365][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640377][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640388][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640399][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640410][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640421][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640434][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640446][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.640457][ T6017] netlink: 'syz.2.33': attribute type 1 has an invalid length. [ 114.734102][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 115.300454][ T6034] pim6reg: entered allmulticast mode [ 115.851885][ T6049] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.46'. [ 115.852127][ T6049] openvswitch: netlink: Message has 5 unknown bytes. [ 116.792637][ T6079] fuse: Invalid rootmode [ 116.997277][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.049805][ T6086] krxrpcio/0 (6086) used greatest stack depth: 18608 bytes left [ 117.226750][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.226804][ T31] usb 5-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 117.226827][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.284634][ T31] usb 5-1: config 0 descriptor?? [ 117.811059][ T31] kye 0003:0458:5017.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 117.813315][ T31] kye 0003:0458:5017.0001: unknown main item tag 0x0 [ 117.813352][ T31] kye 0003:0458:5017.0001: unknown main item tag 0x0 [ 117.813380][ T31] kye 0003:0458:5017.0001: unknown main item tag 0x0 [ 117.813407][ T31] kye 0003:0458:5017.0001: unknown main item tag 0x0 [ 117.813435][ T31] kye 0003:0458:5017.0001: unknown main item tag 0x0 [ 117.862138][ T38] audit: type=1326 audit(1758797794.544:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862192][ T38] audit: type=1326 audit(1758797794.564:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862234][ T38] audit: type=1326 audit(1758797794.594:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862275][ T38] audit: type=1326 audit(1758797794.594:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862316][ T38] audit: type=1326 audit(1758797794.594:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862357][ T38] audit: type=1326 audit(1758797794.594:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862398][ T38] audit: type=1326 audit(1758797794.594:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 117.862439][ T38] audit: type=1326 audit(1758797794.594:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.2.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 118.081780][ T31] kye 0003:0458:5017.0001: hidraw0: USB HID v0.2f Device [HID 0458:5017] on usb-dummy_hcd.4-1/input0 [ 118.081815][ T31] kye 0003:0458:5017.0001: tablet-enabling feature report not found [ 118.081830][ T31] kye 0003:0458:5017.0001: tablet enabling failed [ 118.149495][ T31] usb 5-1: USB disconnect, device number 2 [ 118.818538][ T6124] lo speed is unknown, defaulting to 1000 [ 118.818664][ T6124] lo speed is unknown, defaulting to 1000 [ 118.847773][ T6124] lo speed is unknown, defaulting to 1000 [ 118.865182][ T6118] fido_id[6118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 118.952917][ T6124] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.013874][ T6124] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.030528][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.79'. [ 119.262435][ T6124] lo speed is unknown, defaulting to 1000 [ 119.335007][ T6124] lo speed is unknown, defaulting to 1000 [ 119.355141][ T6124] lo speed is unknown, defaulting to 1000 [ 119.385601][ T6124] lo speed is unknown, defaulting to 1000 [ 119.422384][ T6124] lo speed is unknown, defaulting to 1000 [ 119.441621][ T6139] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.126815][ T6154] validate_nla: 44 callbacks suppressed [ 120.126839][ T6154] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 121.065406][ T6183] program syz.4.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.356786][ T990] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.529542][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 121.531846][ T990] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 121.531872][ T990] usb 4-1: config 0 has no interface number 0 [ 121.565812][ T990] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 121.565841][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.565858][ T990] usb 4-1: Product: syz [ 121.565870][ T990] usb 4-1: Manufacturer: syz [ 121.565882][ T990] usb 4-1: SerialNumber: syz [ 121.625322][ T990] usb 4-1: config 0 descriptor?? [ 121.670009][ T990] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.934253][ T990] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 122.052583][ T990] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 122.274616][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 122.289896][ T5920] usb 4-1: USB disconnect, device number 2 [ 122.342785][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 122.376745][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 122.383507][ T5920] quatech2 4-1:0.51: device disconnected [ 122.554965][ T6204] gretap1: entered allmulticast mode [ 122.930915][ T6213] gretap0: entered promiscuous mode [ 123.373160][ T6231] netlink: 32 bytes leftover after parsing attributes in process `syz.2.127'. [ 123.407042][ T6232] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 123.407067][ T6232] netlink: 17 bytes leftover after parsing attributes in process `syz.4.126'. [ 123.408690][ T5920] IPVS: starting estimator thread 0... [ 123.428944][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.506987][ T6233] IPVS: using max 7 ests per chain, 16800 per kthread [ 123.556653][ T990] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.577364][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 123.582766][ T9] usb 2-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 123.582793][ T9] usb 2-1: config 0 has an invalid interface number: 150 but max is 64 [ 123.582814][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.582833][ T9] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 123.582855][ T9] usb 2-1: config 0 has no interface number 0 [ 123.582922][ T9] usb 2-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.582950][ T9] usb 2-1: config 0 interface 150 has no altsetting 0 [ 123.582986][ T9] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 123.583012][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.645901][ T9] usb 2-1: config 0 descriptor?? [ 123.706558][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 123.709260][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.709291][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.710834][ T990] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.710862][ T990] usb 1-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 123.710883][ T990] usb 1-1: Manufacturer: syz [ 123.886090][ T990] usb 1-1: config 0 descriptor?? [ 123.923425][ T990] hub 1-1:0.0: USB hub found [ 124.119497][ T5921] kernel write not supported for file 45/task/46/sched (pid: 5921 comm: kworker/0:4) [ 124.136662][ T990] hub 1-1:0.0: 1 port detected [ 124.331338][ T990] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 124.331367][ T990] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 124.354227][ T990] usbhid 1-1:0.0: can't add hid device: -71 [ 124.354379][ T990] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 124.367080][ T9] usb 2-1: USB disconnect, device number 2 [ 124.438575][ T990] usb 1-1: USB disconnect, device number 2 [ 124.631284][ T5920] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.781595][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 124.805421][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.805457][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.805481][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.805527][ T5920] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.805563][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.898271][ T5920] usb 4-1: config 0 descriptor?? [ 125.004082][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 125.260103][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 125.381525][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382070][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382101][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382129][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382155][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382182][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382209][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382236][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382263][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.382287][ T5920] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 125.492703][ T5920] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 125.492739][ T5920] microsoft 0003:045E:07DA.0002: no inputs found [ 125.492754][ T5920] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 125.626777][ T5920] usb 4-1: USB disconnect, device number 3 [ 125.638378][ T6273] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.147'. [ 125.876710][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.048811][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 126.054613][ T9] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.054650][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.054686][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 126.054712][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.114019][ T6278] fido_id[6278]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 126.148208][ T9] usb 2-1: config 0 descriptor?? [ 126.245437][ T6284] use of bytesused == 0 is deprecated and will be removed in the future, [ 126.245455][ T6284] use the actual size instead. [ 126.687675][ T9] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 126.756658][ T9] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-38) [ 126.862633][ T9] corsair-psu 0003:1B1C:1C09.0003: probe with driver corsair-psu failed with error -38 [ 126.897508][ T9] usb 2-1: USB disconnect, device number 3 [ 127.000900][ T6300] bridge1: entered promiscuous mode [ 127.000932][ T6300] bridge1: entered allmulticast mode [ 127.024890][ T6300] team0: Port device bridge1 added [ 127.251050][ T5205] udevd[5205]: worker [6070] terminated by signal 33 (Unknown signal 33) [ 127.251107][ T5205] udevd[5205]: worker [6070] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B1C:1C09.0003/hidraw/hidraw0' [ 129.136482][ T38] audit: type=1326 audit(1758797805.864:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.136544][ T38] audit: type=1326 audit(1758797805.874:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.136591][ T38] audit: type=1326 audit(1758797805.874:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.136637][ T38] audit: type=1326 audit(1758797805.874:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.136682][ T38] audit: type=1326 audit(1758797805.874:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.136728][ T38] audit: type=1326 audit(1758797805.874:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.136799][ T38] audit: type=1326 audit(1758797805.874:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6363 comm="syz.3.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 129.857966][ T6386] tipc: Enabling of bearer rejected, failed to enable media [ 130.278380][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.279995][ T990] kernel write not supported for file /dsp1 (pid: 990 comm: kworker/0:2) [ 130.437496][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 130.441559][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.441593][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.441634][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 130.441657][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.503416][ T9] usb 4-1: config 0 descriptor?? [ 131.039762][ T9] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 131.188598][ T5920] usb 4-1: USB disconnect, device number 4 [ 131.570618][ T6425] netlink: 'syz.4.211': attribute type 21 has an invalid length. [ 131.625229][ T6427] netlink: 'syz.4.211': attribute type 21 has an invalid length. [ 131.625253][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 132.137884][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 132.205303][ T6438] vlan2: entered promiscuous mode [ 132.205327][ T6438] syz_tun: entered promiscuous mode [ 132.417252][ T6446] ======================================================= [ 132.417252][ T6446] WARNING: The mand mount option has been deprecated and [ 132.417252][ T6446] and is ignored by this kernel. Remove the mand [ 132.417252][ T6446] option from the mount to silence this warning. [ 132.417252][ T6446] ======================================================= [ 132.914606][ T6459] netlink: 108 bytes leftover after parsing attributes in process `syz.3.225'. [ 132.914636][ T6459] block nbd0: Unsupported socket: shutdown callout must be supported. [ 135.330773][ T6512] Invalid ELF header magic: != ELF [ 135.390644][ T6514] mmap: syz.3.249 (6514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 135.879987][ T6522] capability: warning: `syz.2.252' uses deprecated v2 capabilities in a way that may be insecure [ 136.269028][ T9] IPVS: starting estimator thread 0... [ 136.286780][ T5920] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.357472][ T6531] IPVS: using max 6 ests per chain, 14400 per kthread [ 136.438889][ T5920] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 136.438928][ T5920] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.438955][ T5920] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.438989][ T5920] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 136.439013][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.502070][ T5920] usb 5-1: config 0 descriptor?? [ 136.979705][ T5920] pantherlord 0003:0810:0002.0005: item fetching failed at offset 5/7 [ 136.980573][ T5920] pantherlord 0003:0810:0002.0005: parse failed [ 136.980647][ T5920] pantherlord 0003:0810:0002.0005: probe with driver pantherlord failed with error -22 [ 137.180128][ T5920] usb 5-1: USB disconnect, device number 3 [ 138.021648][ T6572] program syz.1.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.028017][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.028157][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.240103][ T6578] new mount options do not match the existing superblock, will be ignored [ 138.270319][ T6578] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 138.294077][ T990] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 138.471555][ T990] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 138.471587][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.512010][ T990] usb 1-1: config 0 descriptor?? [ 138.773238][ T990] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 138.978624][ T990] [drm:udl_init] *ERROR* Selecting channel failed [ 139.009930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.035955][ T990] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 139.035976][ T990] [drm] Initialized udl on minor 2 [ 139.082872][ T990] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.084551][ T990] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 139.119286][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 139.121339][ T990] usb 1-1: USB disconnect, device number 3 [ 139.141563][ T38] audit: type=1326 audit(1758797815.834:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.141908][ T38] audit: type=1326 audit(1758797815.884:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.195469][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 139.212052][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 139.288305][ T38] audit: type=1326 audit(1758797816.034:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.288362][ T38] audit: type=1326 audit(1758797816.034:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.290002][ T38] audit: type=1326 audit(1758797816.034:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.290053][ T38] audit: type=1326 audit(1758797816.034:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.343729][ T38] audit: type=1326 audit(1758797816.084:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.343794][ T38] audit: type=1326 audit(1758797816.084:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6590 comm="syz.4.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 139.456439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.456918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 139.828295][ T6598] process 'syz.4.286' launched '/dev/fd/3' with NULL argv: empty string added [ 140.275599][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 140.275818][ T6611] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 140.275852][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.366564][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 140.516492][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 140.521032][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.521068][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 140.521093][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 140.521120][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.559585][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 140.559618][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.559640][ T9] usb 3-1: Product: syz [ 140.559656][ T9] usb 3-1: Manufacturer: syz [ 140.559671][ T9] usb 3-1: SerialNumber: syz [ 140.666884][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 140.668572][ T9] usbtest 3-1:1.0: Linux user mode ISO test driver [ 140.668593][ T9] usbtest 3-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 140.859489][ T9] usb 3-1: USB disconnect, device number 2 [ 141.308112][ T6637] ptrace attach of "./syz-executor exec"[5840] was attempted by "\x09   Àÿ Àÿ Ðÿ 0 ðÿ °ÿ Àÿ ÿÿÿÿ"[6637] [ 142.380459][ T6668] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 142.399925][ T6670] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 142.399990][ T6670] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 142.400088][ T6670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 142.401971][ T6670] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 142.402033][ T6670] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 142.403331][ T6670] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 142.403510][ T6670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 142.403563][ T6670] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 142.403615][ T6670] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 142.403712][ T6670] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 142.403765][ T6670] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 142.403817][ T6670] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 142.436684][ T990] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.600913][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.600954][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.601002][ T990] usb 2-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 142.601027][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.652495][ T990] usb 2-1: config 0 descriptor?? [ 143.098456][ T6683] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 143.146667][ T990] wacom 0003:056A:0336.0006: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.1-1/input0 [ 143.298768][ T990] usb 2-1: USB disconnect, device number 4 [ 143.555516][ T6692] fido_id[6692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 144.465682][ T6715] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 145.574952][ T6747] program syz.2.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.182540][ T6760] Bluetooth: MGMT ver 1.23 [ 146.376952][ T6769] netlink: 'syz.1.363': attribute type 2 has an invalid length. [ 146.404913][ T6763] mkiss: ax0: crc mode is auto. [ 147.167393][ T6788] erspan0: entered promiscuous mode [ 147.167657][ T6788] macsec1: entered promiscuous mode [ 147.219045][ T6788] erspan0: left promiscuous mode [ 147.885755][ T6804] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 148.196785][ T6811] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 148.248651][ T59] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 148.250276][ T59] Bluetooth: hci2: command 0x0401 tx timeout [ 148.589044][ T6822] capability: warning: `syz.1.389' uses 32-bit capabilities (legacy support in use) [ 149.262782][ T38] audit: type=1326 audit(1758797825.974:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 149.296732][ T38] audit: type=1326 audit(1758797826.044:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 149.348196][ T38] audit: type=1326 audit(1758797826.094:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 149.348260][ T38] audit: type=1326 audit(1758797826.094:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 149.358521][ T38] audit: type=1326 audit(1758797826.104:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 149.377995][ T38] audit: type=1326 audit(1758797826.124:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 149.378053][ T38] audit: type=1326 audit(1758797826.124:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6841 comm="syz.2.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 150.151876][ T6867] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 150.356558][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.526142][ T5920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 150.526175][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.526195][ T5920] usb 3-1: Product: syz [ 150.526211][ T5920] usb 3-1: Manufacturer: syz [ 150.526226][ T5920] usb 3-1: SerialNumber: syz [ 150.603759][ T5920] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 150.899548][ T5906] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 151.572107][ T990] usb 3-1: USB disconnect, device number 3 [ 151.966550][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.086785][ T5906] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 152.087516][ T5906] ath9k_htc: Failed to initialize the device [ 152.116589][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 152.125936][ T990] usb 3-1: ath9k_htc: USB layer deinitialized [ 152.132096][ T5921] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 152.132127][ T5921] usb 5-1: config 0 has no interface number 0 [ 152.132183][ T5921] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.132211][ T5921] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 152.132236][ T5921] usb 5-1: config 0 interface 85 has no altsetting 0 [ 152.138504][ T5921] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 152.138536][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.138556][ T5921] usb 5-1: Product: syz [ 152.138572][ T5921] usb 5-1: Manufacturer: syz [ 152.138587][ T5921] usb 5-1: SerialNumber: syz [ 152.260355][ T5921] usb 5-1: config 0 descriptor?? [ 152.428797][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 152.507706][ T5921] appletouch 5-1:0.85: Failed to read mode from device. [ 152.507971][ T5921] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 152.626969][ T38] audit: type=1326 audit(1758797829.364:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 152.627026][ T38] audit: type=1326 audit(1758797829.364:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 152.627060][ T38] audit: type=1326 audit(1758797829.364:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6916 comm="syz.3.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 152.752716][ T5906] usb 5-1: USB disconnect, device number 4 [ 152.936564][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.094320][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 153.100159][ T5907] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 153.111993][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.112020][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.113188][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.113212][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.122188][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.122220][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.125654][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.125677][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.179219][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.179248][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.186873][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.186905][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.194636][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.194668][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.206506][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 153.216595][ T5907] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 153.216629][ T5907] usb 1-1: config 0 has no interface number 0 [ 153.224424][ T5907] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 153.224458][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.224483][ T5907] usb 1-1: Product: syz [ 153.224499][ T5907] usb 1-1: Manufacturer: syz [ 153.224516][ T5907] usb 1-1: SerialNumber: syz [ 153.252025][ T5907] usb 1-1: config 0 descriptor?? [ 153.302296][ T6932] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.302357][ T6932] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 153.302455][ T6932] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.302594][ T6932] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 153.302643][ T6932] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.302692][ T6932] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 153.302845][ T6932] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.302896][ T6932] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.302945][ T6932] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 153.303035][ T6932] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 153.303083][ T6932] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 153.303132][ T6932] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 153.358531][ T5907] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 154.254822][ T6951] netlink: 'syz.1.445': attribute type 6 has an invalid length. [ 154.476613][ T5921] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.636472][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 154.639290][ T5921] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.639328][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0 [ 154.639364][ T5921] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 154.639390][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.703528][ T5921] usb 3-1: config 0 descriptor?? [ 155.195495][ T5921] hid_parser_main: 11 callbacks suppressed [ 155.195524][ T5921] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 155.195559][ T5921] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 155.195587][ T5921] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 155.195614][ T5921] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 155.195641][ T5921] corsair-psu 0003:1B1C:1C09.0007: unknown main item tag 0x0 [ 155.294711][ T5921] corsair-psu 0003:1B1C:1C09.0007: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 155.347891][ T5921] corsair-psu 0003:1B1C:1C09.0007: unable to initialize device (-38) [ 155.353797][ T5921] corsair-psu 0003:1B1C:1C09.0007: probe with driver corsair-psu failed with error -38 [ 155.403131][ T5921] usb 3-1: USB disconnect, device number 4 [ 155.797176][ T5907] etas_es58x 1-1:0.2: could not retrieve the product info string [ 155.844535][ T5205] udevd[5205]: worker [5885] terminated by signal 33 (Unknown signal 33) [ 155.844590][ T5205] udevd[5205]: worker [5885] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1B1C:1C09.0007/hidraw/hidraw0' [ 156.150614][ T5907] usb 1-1: USB disconnect, device number 4 [ 156.165643][ T5907] etas_es58x 1-1:0.2: Disconnecting syz syz [ 156.293718][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 156.456690][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 156.460955][ T5920] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 156.460985][ T5920] usb 2-1: config 0 has no interface number 0 [ 156.464379][ T5920] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 156.464410][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.464431][ T5920] usb 2-1: Product: syz [ 156.464454][ T5920] usb 2-1: Manufacturer: syz [ 156.464469][ T5920] usb 2-1: SerialNumber: syz [ 156.487253][ T5920] usb 2-1: config 0 descriptor?? [ 156.507980][ T5920] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 156.766972][ T5920] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 156.941057][ T5920] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 157.166439][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 157.168953][ T9] usb 2-1: USB disconnect, device number 5 [ 157.263693][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 157.330551][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 157.331550][ T9] quatech2 2-1:0.51: device disconnected [ 157.373486][ T6998] syz.2.464 uses obsolete (PF_INET,SOCK_PACKET) [ 158.129379][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.138434][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.866183][ T7034] netlink: 'syz.1.482': attribute type 2 has an invalid length. [ 158.886582][ T990] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.036619][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 159.051918][ T990] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 159.051948][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.051969][ T990] usb 3-1: Product: syz [ 159.051984][ T990] usb 3-1: Manufacturer: syz [ 159.051998][ T990] usb 3-1: SerialNumber: syz [ 159.095680][ T990] usb 3-1: config 0 descriptor?? [ 159.127046][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.159511][ T990] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 159.276754][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 159.281219][ T5920] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 159.281247][ T5920] usb 1-1: config 0 has no interface number 0 [ 159.295200][ T5920] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 159.295237][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.295260][ T5920] usb 1-1: Product: syz [ 159.295278][ T5920] usb 1-1: Manufacturer: syz [ 159.295295][ T5920] usb 1-1: SerialNumber: syz [ 159.315762][ T5920] usb 1-1: config 0 descriptor?? [ 159.351981][ T5920] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 159.366714][ T990] usb 3-1: USB disconnect, device number 5 [ 159.416619][ T3117] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 159.579665][ T3117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.580445][ T3117] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.580494][ T3117] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 159.580519][ T3117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.689761][ T3117] usb 2-1: config 0 descriptor?? [ 159.743689][ T5920] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 159.821046][ T5920] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 160.109827][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 160.114428][ T5920] usb 1-1: USB disconnect, device number 5 [ 160.182924][ T3117] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 160.182962][ T3117] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 160.182989][ T3117] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 160.183015][ T3117] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 160.183041][ T3117] sunplus 0003:04FC:05D8.0008: unknown main item tag 0x0 [ 160.242712][ T3117] sunplus 0003:04FC:05D8.0008: hidraw0: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 160.261962][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 160.377310][ T9] usb 2-1: USB disconnect, device number 6 [ 160.384992][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 160.409131][ T5920] quatech2 1-1:0.51: device disconnected [ 160.516587][ T3117] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 160.644949][ T7061] fido_id[7061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 160.673557][ T3117] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.673585][ T3117] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.676164][ T3117] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.676204][ T3117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.676224][ T3117] usb 5-1: SerialNumber: syz [ 160.846587][ T5921] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.958604][ T7065] genirq: Flags mismatch irq 10. 00202000 (das16m1) vs. 00202080 (virtio2) [ 160.996583][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 160.999044][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.999076][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.999115][ T5921] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 160.999145][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.009868][ T3117] usb 5-1: 0:2 : does not exist [ 161.107631][ T5921] usb 4-1: config 0 descriptor?? [ 161.216621][ T3117] usb 5-1: USB disconnect, device number 5 [ 161.583154][ T6277] udevd[6277]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.613789][ T5921] koneplus 0003:1E7D:2D51.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 161.753321][ T5921] koneplus 0003:1E7D:2D51.0009: couldn't init struct koneplus_device [ 161.753381][ T5921] koneplus 0003:1E7D:2D51.0009: couldn't install mouse [ 161.773352][ T5921] koneplus 0003:1E7D:2D51.0009: probe with driver koneplus failed with error -71 [ 161.790009][ T5921] usb 4-1: USB disconnect, device number 5 [ 162.067582][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 162.067600][ T38] audit: type=1326 audit(1758797838.814:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 162.067650][ T38] audit: type=1326 audit(1758797838.814:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1966b9eec9 code=0x7ffc0000 [ 162.107392][ T7077] fido_id[7077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 162.548080][ T7094] program syz.0.508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.319733][ T7113] netlink: 108 bytes leftover after parsing attributes in process `syz.1.517'. [ 163.319770][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.517'. [ 163.787058][ T7125] netlink: 84 bytes leftover after parsing attributes in process `syz.0.523'. [ 163.787227][ T7125] Zero length message leads to an empty skb [ 164.043306][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 164.055137][ T7133] xt_l2tp: missing protocol rule (udp|l2tpip) [ 164.186628][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 164.189268][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 164.189320][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 164.189345][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.239698][ T9] usb 4-1: config 0 descriptor?? [ 164.694286][ T9] uclogic 0003:28BD:0055.000A: interface is invalid, ignoring [ 164.873138][ T5921] usb 4-1: USB disconnect, device number 6 [ 165.066543][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 165.217009][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 165.220350][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.220383][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.220406][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 165.220450][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 165.220473][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.300178][ T9] usb 2-1: config 0 descriptor?? [ 165.419977][ T7156] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.752898][ T9] elecom 0003:056E:00FE.000B: item fetching failed at offset 6/70 [ 165.753831][ T9] elecom 0003:056E:00FE.000B: probe with driver elecom failed with error -22 [ 165.992277][ T3117] usb 2-1: USB disconnect, device number 7 [ 166.376839][ T7177] netlink: 104 bytes leftover after parsing attributes in process `syz.4.545'. [ 166.761167][ T7184] netlink: 56 bytes leftover after parsing attributes in process `syz.0.548'. [ 166.763374][ T7184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 166.781912][ T7186] lo speed is unknown, defaulting to 1000 [ 166.782019][ T7186] lo speed is unknown, defaulting to 1000 [ 166.783516][ T7186] lo speed is unknown, defaulting to 1000 [ 166.849123][ T7186] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.918314][ T7186] lo speed is unknown, defaulting to 1000 [ 166.924404][ T7186] lo speed is unknown, defaulting to 1000 [ 166.930036][ T7186] lo speed is unknown, defaulting to 1000 [ 166.961113][ T7186] lo speed is unknown, defaulting to 1000 [ 167.011848][ T7186] lo speed is unknown, defaulting to 1000 [ 167.699258][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 168.216816][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.569'. [ 168.217507][ T7229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.569'. [ 168.328333][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 168.477438][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 168.497580][ T5920] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 168.497613][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.497634][ T5920] usb 1-1: Product: syz [ 168.497649][ T5920] usb 1-1: Manufacturer: syz [ 168.497663][ T5920] usb 1-1: SerialNumber: syz [ 168.541425][ T5920] usb 1-1: config 0 descriptor?? [ 168.579216][ T5920] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 168.592495][ T5920] usb 1-1: Detected FT4233HP [ 168.776620][ T5921] IPVS: starting estimator thread 0... [ 168.797263][ T5920] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 168.810944][ T5920] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.866698][ T7241] IPVS: using max 8 ests per chain, 19200 per kthread [ 169.018787][ T5920] usb 1-1: USB disconnect, device number 6 [ 169.091117][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.101299][ T5920] ftdi_sio 1-1:0.0: device disconnected [ 170.210795][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 170.267482][ T7279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.699385][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.597'. [ 171.478520][ T7309] netlink: 120 bytes leftover after parsing attributes in process `syz.2.606'. [ 172.437292][ T7339] netlink: 76 bytes leftover after parsing attributes in process `syz.1.620'. [ 173.018323][ T7358] program syz.0.629 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.458291][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 173.952563][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.640'. [ 174.099667][ T7395] overlayfs: workdir and upperdir must be separate subtrees [ 174.455550][ T7404] netlink: 11 bytes leftover after parsing attributes in process `syz.1.651'. [ 174.455671][ T7404] netlink: 11 bytes leftover after parsing attributes in process `syz.1.651'. [ 174.480020][ T7404] netlink: 11 bytes leftover after parsing attributes in process `syz.1.651'. [ 174.480049][ T7404] netlink: 11 bytes leftover after parsing attributes in process `syz.1.651'. [ 175.832214][ T7452] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 175.832432][ T9] kernel write not supported for file task/284/attr/keycreate (pid: 9 comm: kworker/0:0) [ 175.961024][ T7453] netlink: 'syz.1.671': attribute type 3 has an invalid length. [ 176.009414][ T7430] ceph: No mds server is up or the cluster is laggy [ 176.108363][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 176.108391][ T7460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.674'. [ 176.781188][ T38] audit: type=1400 audit(1758797853.524:41): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7477 comm="syz.4.684" src=1 dest=20000 netif=wpan0 [ 176.940198][ T7484] netlink: 348 bytes leftover after parsing attributes in process `syz.0.687'. [ 177.286346][ T7494] netlink: 'syz.4.692': attribute type 29 has an invalid length. [ 177.312396][ T7494] netlink: 'syz.4.692': attribute type 29 has an invalid length. [ 177.672047][ T7504] IPVS: Unknown mcast interface: pimreg1 [ 178.856605][ T6063] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 179.021100][ T6063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.021152][ T6063] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 179.021176][ T6063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.034499][ T6063] usb 1-1: config 0 descriptor?? [ 179.328977][ T7548] veth3: entered promiscuous mode [ 179.481097][ T6063] aquacomputer_d5next 0003:0C70:F00B.000C: item fetching failed at offset 6/7 [ 179.507231][ T6063] aquacomputer_d5next 0003:0C70:F00B.000C: probe with driver aquacomputer_d5next failed with error -22 [ 179.680675][ T5907] kernel write not supported for file /302/loginuid (pid: 5907 comm: kworker/1:5) [ 179.710739][ T5921] usb 1-1: USB disconnect, device number 7 [ 180.689933][ T6063] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 180.848677][ T6063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.848714][ T6063] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.848756][ T6063] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 180.848778][ T6063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.853554][ T5920] kernel write not supported for file /sg0 (pid: 5920 comm: kworker/1:6) [ 180.861079][ T6063] usb 1-1: config 0 descriptor?? [ 181.345720][ T6063] hid_mf 0003:0079:1846.000D: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 181.345757][ T6063] hid_mf 0003:0079:1846.000D: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 181.425671][ T7605] program syz.3.742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.519240][ T5907] usb 1-1: USB disconnect, device number 8 [ 181.643164][ T7610] fido_id[7610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 182.996580][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.153800][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 183.157470][ T38] audit: type=1800 audit(1758797859.894:42): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.764" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 183.181914][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.181947][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.181990][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 183.182015][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.225561][ T31] usb 4-1: config 0 descriptor?? [ 183.674209][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674248][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674276][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674302][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674327][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674355][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674381][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674408][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674434][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.674460][ T31] logitech 0003:046D:C29C.000E: unknown main item tag 0x0 [ 183.779065][ T31] logitech 0003:046D:C29C.000E: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 183.871770][ T31] logitech 0003:046D:C29C.000E: no inputs found [ 183.896894][ T31] usb 4-1: USB disconnect, device number 7 [ 184.106896][ T7669] fido_id[7669]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 185.020521][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 185.020584][ T7694] netlink: 32 bytes leftover after parsing attributes in process `syz.3.782'. [ 185.076874][ T7690] syz.2.780 (7690) used greatest stack depth: 18600 bytes left [ 186.002954][ T7722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.794'. [ 186.216618][ T5907] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 186.370298][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.370327][ T5907] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 186.370382][ T5907] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 186.370406][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.421625][ T5907] usb 5-1: config 0 descriptor?? [ 186.456590][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 186.457022][ T5907] dvb-usb: bulk message failed: -22 (3/0) [ 186.501117][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 186.502784][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 186.502896][ T5907] usb 5-1: media controller created [ 186.535918][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.591073][ T5907] dvb-usb: bulk message failed: -22 (6/0) [ 186.591225][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 186.628121][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 186.715510][ T5907] dvb-usb: schedule remote query interval to 150 msecs. [ 186.715538][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 186.744925][ T5907] usb 5-1: USB disconnect, device number 6 [ 187.014107][ T5907] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 187.116904][ T6063] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 187.232182][ T7750] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 187.250821][ T7751] bond_slave_0: entered promiscuous mode [ 187.250879][ T7751] bond_slave_1: entered promiscuous mode [ 187.251325][ T7749] bond_slave_0: left promiscuous mode [ 187.251411][ T7749] bond_slave_1: left promiscuous mode [ 187.266665][ T6063] usb 4-1: Using ep0 maxpacket: 32 [ 187.269430][ T6063] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 187.269458][ T6063] usb 4-1: config 0 has no interface number 0 [ 187.274711][ T6063] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 187.274741][ T6063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.274762][ T6063] usb 4-1: Product: syz [ 187.274778][ T6063] usb 4-1: Manufacturer: syz [ 187.274795][ T6063] usb 4-1: SerialNumber: syz [ 187.308213][ T6063] usb 4-1: config 0 descriptor?? [ 187.430066][ T38] audit: type=1326 audit(1758797864.174:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.431580][ T38] audit: type=1326 audit(1758797864.174:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.434772][ T38] audit: type=1326 audit(1758797864.174:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.436232][ T38] audit: type=1326 audit(1758797864.174:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.492840][ T38] audit: type=1326 audit(1758797864.234:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.531348][ T38] audit: type=1326 audit(1758797864.274:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.538818][ T38] audit: type=1326 audit(1758797864.284:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.545554][ T38] audit: type=1326 audit(1758797864.284:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7752 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 187.833814][ T6063] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 187.833841][ T6063] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 188.037053][ T6063] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 188.037080][ T6063] radio-si470x 4-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 188.037449][ T6063] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 188.077615][ T6063] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 188.092194][ T6063] usb 4-1: USB disconnect, device number 8 [ 188.495386][ T7782] bridge0: entered promiscuous mode [ 188.495630][ T7782] macvlan2: entered promiscuous mode [ 189.587328][ T7806] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 189.587345][ T7806] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 189.587355][ T7806] overlayfs: missing 'lowerdir' [ 189.671756][ T7810] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.679980][ T7810] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.366514][ T5907] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.532093][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.532131][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.532174][ T5907] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 190.532199][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.580444][ T5907] usb 2-1: config 0 descriptor?? [ 190.851331][ T7835] Bluetooth: MGMT ver 1.23 [ 191.013459][ T5907] cp2112 0003:10C4:EA90.000F: item fetching failed at offset 5/7 [ 191.014266][ T5907] cp2112 0003:10C4:EA90.000F: parse failed [ 191.014420][ T5907] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -22 [ 191.246989][ T6063] usb 2-1: USB disconnect, device number 8 [ 191.412798][ T38] audit: type=1326 audit(1758797868.154:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.412859][ T38] audit: type=1326 audit(1758797868.154:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.469616][ T38] audit: type=1326 audit(1758797868.214:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.469684][ T38] audit: type=1326 audit(1758797868.214:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.469733][ T38] audit: type=1326 audit(1758797868.214:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.486582][ T3117] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.495809][ T38] audit: type=1326 audit(1758797868.224:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.495874][ T38] audit: type=1326 audit(1758797868.234:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.495926][ T38] audit: type=1326 audit(1758797868.234:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7848 comm="syz.2.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a82a3eec9 code=0x7ffc0000 [ 191.696454][ T3117] usb 4-1: Using ep0 maxpacket: 8 [ 191.707799][ T3117] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 191.707830][ T3117] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.707851][ T3117] usb 4-1: Product: syz [ 191.707867][ T3117] usb 4-1: Manufacturer: syz [ 191.707882][ T3117] usb 4-1: SerialNumber: syz [ 191.763636][ T3117] usb 4-1: config 0 descriptor?? [ 191.777715][ T3117] gspca_main: sq930x-2.14.0 probing 2770:930c [ 192.064560][ T7863] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.446099][ T7872] tipc: Enabling of bearer rejected, failed to enable media [ 192.458578][ T3117] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 192.458696][ T3117] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 192.480648][ T3117] usb 4-1: USB disconnect, device number 9 [ 193.061942][ T7892] netlink: 'syz.3.875': attribute type 2 has an invalid length. [ 193.061965][ T7892] netlink: 244 bytes leftover after parsing attributes in process `syz.3.875'. [ 193.391107][ T38] audit: type=1400 audit(1758797870.124:59): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7899 comm="syz.4.878" src=1 dest=20000 netif=wpan0 [ 193.619261][ T38] audit: type=1326 audit(1758797870.364:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7910 comm="syz.0.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974392eec9 code=0x7ffc0000 [ 193.726969][ T5921] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.788486][ T5907] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.878841][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.878906][ T5921] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.878934][ T5921] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.878958][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.878994][ T5921] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 193.879018][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.902691][ T5921] usb 4-1: config 0 descriptor?? [ 193.982944][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.983005][ T5907] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.983030][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.991943][ T5907] usb 3-1: config 0 descriptor?? [ 194.025648][ T5907] pwc: Askey VC010 type 2 USB webcam detected. [ 194.405031][ T5921] kye 0003:0458:5015.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 194.406121][ T5921] hid_parser_main: 150 callbacks suppressed [ 194.406142][ T5921] kye 0003:0458:5015.0010: unknown main item tag 0x1 [ 194.479971][ T5921] kye 0003:0458:5015.0010: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 194.480008][ T5921] kye 0003:0458:5015.0010: tablet-enabling feature report not found [ 194.480024][ T5921] kye 0003:0458:5015.0010: tablet enabling failed [ 194.619648][ T5921] usb 4-1: USB disconnect, device number 10 [ 194.737848][ T5907] pwc: recv_control_msg error -71 req 02 val 2700 [ 194.741356][ T5907] pwc: recv_control_msg error -71 req 02 val 2c00 [ 194.759570][ T5907] pwc: recv_control_msg error -71 req 04 val 1000 [ 194.760144][ T5907] pwc: recv_control_msg error -71 req 04 val 1300 [ 194.760655][ T5907] pwc: recv_control_msg error -71 req 04 val 1400 [ 194.761776][ T5907] pwc: recv_control_msg error -71 req 02 val 2000 [ 194.762281][ T5907] pwc: recv_control_msg error -71 req 02 val 2100 [ 194.762775][ T5907] pwc: recv_control_msg error -71 req 04 val 1500 [ 194.786499][ T5907] pwc: recv_control_msg error -71 req 02 val 2500 [ 194.811687][ T5907] pwc: recv_control_msg error -71 req 02 val 2400 [ 194.814232][ T5907] pwc: recv_control_msg error -71 req 02 val 2600 [ 194.814764][ T5907] pwc: recv_control_msg error -71 req 02 val 2900 [ 194.815257][ T5907] pwc: recv_control_msg error -71 req 02 val 2800 [ 194.846551][ T5907] pwc: recv_control_msg error -71 req 04 val 1100 [ 194.849090][ T5907] pwc: recv_control_msg error -71 req 04 val 1200 [ 194.877588][ T5907] pwc: Registered as video103. [ 194.881110][ T5907] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15 [ 194.911738][ T5907] usb 3-1: USB disconnect, device number 6 [ 194.962157][ T7925] fido_id[7925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 194.996520][ T3117] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 195.150381][ T3117] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 195.150412][ T3117] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 195.150433][ T3117] usb 5-1: config 0 has no interface number 0 [ 195.150481][ T3117] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 195.150504][ T3117] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.150543][ T3117] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 195.150567][ T3117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.224817][ T3117] usb 5-1: config 0 descriptor?? [ 195.899001][ T3117] usb 5-1: USB disconnect, device number 7 [ 196.908677][ T7978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.913'. [ 196.910412][ T7976] delete_channel: no stack [ 198.056475][ T5907] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.158051][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 198.218276][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.218313][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.218354][ T5907] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 198.218379][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.268697][ T5907] usb 5-1: config 0 descriptor?? [ 198.482055][ T8019] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 198.750446][ T5907] elecom 0003:056E:010D.0011: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.4-1/input0 [ 198.851256][ T8024] netlink: 'syz.3.935': attribute type 2 has an invalid length. [ 198.891636][ T10] usb 5-1: USB disconnect, device number 8 [ 198.924588][ T8026] fido_id[8026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 199.457073][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.457152][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.486590][ T5907] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 199.666488][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 199.668813][ T5907] usb 3-1: config 0 interface 0 has no altsetting 0 [ 199.668850][ T5907] usb 3-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00 [ 199.668870][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.715280][ T5907] usb 3-1: config 0 descriptor?? [ 200.198767][ T5907] lenovo 0003:17EF:61AE.0012: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.2-1/input0 [ 200.412319][ T5907] usb 3-1: USB disconnect, device number 7 [ 200.750787][ T8066] fido_id[8066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 202.182467][ T8121] netlink: 72 bytes leftover after parsing attributes in process `syz.0.980'. [ 202.236757][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 202.390752][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.390800][ T5907] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 202.390824][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.417271][ T5907] usb 3-1: config 0 descriptor?? [ 202.493894][ T8131] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 202.493917][ T8131] netlink: 216 bytes leftover after parsing attributes in process `syz.0.985'. [ 202.844180][ T5907] itetech 0003:258A:6A88.0013: unbalanced collection at end of report description [ 202.845112][ T5907] itetech 0003:258A:6A88.0013: probe with driver itetech failed with error -22 [ 202.916842][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 203.041019][ T6063] usb 3-1: USB disconnect, device number 8 [ 204.576493][ T6063] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.631283][ T8166] netlink: 'syz.2.1002': attribute type 4 has an invalid length. [ 204.726541][ T6063] usb 5-1: Using ep0 maxpacket: 8 [ 204.737531][ T6063] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 204.737562][ T6063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.737583][ T6063] usb 5-1: Product: syz [ 204.737598][ T6063] usb 5-1: Manufacturer: syz [ 204.737614][ T6063] usb 5-1: SerialNumber: syz [ 204.780021][ T6063] usb 5-1: config 0 descriptor?? [ 204.818333][ T6063] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 205.455540][ T6063] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 205.456161][ T6063] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 205.495435][ T6063] usb 5-1: USB disconnect, device number 9 [ 206.177784][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1020'. [ 207.029285][ T8227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1034'. [ 207.106977][ T8230] netlink: 'syz.4.1033': attribute type 61 has an invalid length. [ 207.201482][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 207.201514][ T8237] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1036'. [ 207.201532][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'. [ 207.798418][ T8253] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 207.820911][ T8250] [U]  [ 208.136995][ T8264] netlink: 'syz.0.1047': attribute type 3 has an invalid length. [ 208.436603][ T5907] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 208.471259][ T8275] dummy0: entered promiscuous mode [ 208.561448][ T8275] dummy0: left promiscuous mode [ 208.598638][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.598694][ T5907] usb 4-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 208.598720][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.676591][ T5907] usb 4-1: config 0 descriptor?? [ 209.156274][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.156312][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.171392][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.171426][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.171453][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.171481][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.171510][ T5907] hid-alps 0003:044E:121E.0014: unknown main item tag 0x0 [ 209.209889][ T5907] hid-alps 0003:044E:121E.0014: hidraw0: USB HID v0.05 Device [HID 044e:121e] on usb-dummy_hcd.3-1/input0 [ 209.407336][ T5907] usb 4-1: USB disconnect, device number 11 [ 209.535044][ T8293] trusted_key: encrypted_key: key user:syz not found [ 209.683942][ T8287] fido_id[8287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 210.283863][ T8308] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1024) [ 210.283891][ T8308] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 210.701920][ T8323] Bluetooth: MGMT ver 1.23 [ 211.743353][ T6063] kernel write not supported for file /vcs (pid: 6063 comm: kworker/0:7) [ 211.933993][ T8361] sp0: Synchronizing with TNC [ 211.972321][ T8359] [U] è` [ 212.652577][ T8387] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 212.660768][ T8387] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 212.741790][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 212.741808][ T38] audit: type=1326 audit(1758797889.484:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8390 comm="syz.0.1106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f974392eec9 code=0x0 [ 213.136734][ T3117] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 213.287108][ T3117] usb 4-1: Using ep0 maxpacket: 16 [ 213.298932][ T3117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.298971][ T3117] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.298995][ T3117] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 213.299045][ T3117] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.299071][ T3117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.341347][ T3117] usb 4-1: config 0 descriptor?? [ 213.770626][ T3117] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 213.770663][ T3117] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 213.770689][ T3117] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 213.819589][ T3117] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0015/input/input18 [ 213.908019][ T3117] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 213.969475][ T8417] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1117'. [ 214.013080][ T3117] usb 4-1: USB disconnect, device number 12 [ 214.404386][ T8420] fido_id[8420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 215.826622][ T3117] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 215.979266][ T3117] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.979315][ T3117] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 215.979341][ T3117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.993222][ T3117] usb 3-1: config 0 descriptor?? [ 216.328748][ T8475] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 216.454885][ T3117] kye 0003:0458:5013.0016: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 216.482897][ T3117] kye 0003:0458:5013.0016: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 216.482932][ T3117] kye 0003:0458:5013.0016: tablet-enabling feature report not found [ 216.482947][ T3117] kye 0003:0458:5013.0016: tablet enabling failed [ 216.707382][ T3117] usb 3-1: USB disconnect, device number 9 [ 216.902637][ T8487] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 218.388230][ T8531] [U]  [ 218.720626][ T8537] netlink: 'syz.0.1172': attribute type 7 has an invalid length. [ 218.720662][ T8537] netlink: 'syz.0.1172': attribute type 8 has an invalid length. [ 219.192145][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 219.192172][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1178'. [ 219.613601][ T8560] gretap0: entered promiscuous mode [ 219.614090][ T8560] vlan2: entered promiscuous mode [ 220.206586][ T5907] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 220.341772][ T8582] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1192'. [ 220.359689][ T5907] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.359726][ T5907] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 220.359755][ T5907] usb 4-1: config 0 interface 0 has no altsetting 0 [ 220.359790][ T5907] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 220.359814][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.380804][ T5907] usb 4-1: config 0 descriptor?? [ 220.382123][ T8574] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.853002][ T5907] logitech 0003:046D:C24F.0017: unbalanced collection at end of report description [ 220.853871][ T5907] logitech 0003:046D:C24F.0017: parse failed [ 220.853973][ T5907] logitech 0003:046D:C24F.0017: probe with driver logitech failed with error -22 [ 221.079025][ T5921] usb 4-1: USB disconnect, device number 13 [ 221.926729][ T5921] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 222.007125][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 222.007611][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 222.009141][ T5846] Bluetooth: hci2: command 0x0401 tx timeout [ 222.009265][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 222.077262][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 222.093182][ T5921] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.093211][ T5921] usb 2-1: config 0 has no interface number 0 [ 222.099491][ T38] audit: type=1326 audit(1758797898.844:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.3.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 222.099800][ T38] audit: type=1326 audit(1758797898.844:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.3.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 222.100111][ T38] audit: type=1326 audit(1758797898.844:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.3.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 222.101931][ T38] audit: type=1326 audit(1758797898.844:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.3.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 222.102237][ T38] audit: type=1326 audit(1758797898.844:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8618 comm="syz.3.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd7b8e7eec9 code=0x7ffc0000 [ 222.111986][ T5921] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 222.112016][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.112035][ T5921] usb 2-1: Product: syz [ 222.112047][ T5921] usb 2-1: Manufacturer: syz [ 222.112060][ T5921] usb 2-1: SerialNumber: syz [ 222.268183][ T5921] usb 2-1: config 0 descriptor?? [ 222.307696][ T5921] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 222.307730][ T5921] usb 2-1: selecting invalid altsetting 1 [ 222.307747][ T5921] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 222.341074][ T5921] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.341513][ T5921] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 222.341575][ T5921] usb 2-1: media controller created [ 222.412270][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.499172][ T5921] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 222.499234][ T5921] zl10353_read_register: readreg error (reg=127, ret==-71) [ 222.537076][ T5921] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 222.642531][ T5921] usb 2-1: USB disconnect, device number 9 [ 222.942377][ T8637] netlink: 'syz.3.1220': attribute type 30 has an invalid length. [ 223.186971][ T8643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.681762][ T8659] netlink: 'syz.2.1231': attribute type 2 has an invalid length. [ 223.779074][ T8659] bridge: entered promiscuous mode [ 223.995562][ T8666] netlink: 716 bytes leftover after parsing attributes in process `syz.3.1234'. [ 224.096661][ T8669] netlink: 'syz.3.1236': attribute type 58 has an invalid length. [ 224.096683][ T8669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1236'. [ 224.136546][ T5921] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.271817][ T8673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1238'. [ 224.305903][ T5921] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 224.305935][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.305956][ T5921] usb 2-1: Product: syz [ 224.305970][ T5921] usb 2-1: Manufacturer: syz [ 224.305985][ T5921] usb 2-1: SerialNumber: syz [ 224.376463][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 224.541112][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.541163][ T31] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 224.541188][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.548901][ T31] usb 3-1: config 0 descriptor?? [ 225.011189][ T31] uclogic 0003:5543:0522.0018: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 225.097095][ T5921] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 225.097174][ T5921] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 225.129675][ T5921] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 225.162664][ T5921] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 225.193918][ T31] usb 3-1: USB disconnect, device number 10 [ 225.234796][ T5921] usb 2-1: USB disconnect, device number 10 [ 225.300483][ T8688] fido_id[8688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 225.984482][ T38] audit: type=1326 audit(1758797902.724:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8705 comm="syz.2.1252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a82a3eec9 code=0x0 [ 227.663899][ T8754] syz_tun: entered promiscuous mode [ 227.664342][ T8753] syz_tun: left promiscuous mode [ 228.139711][ T8768] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.195734][ T8768] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.368617][ T8774] F2FS-fs: Conflicting test_dummy_encryption options [ 228.466638][ T38] audit: type=1326 audit(1758797905.214:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.466915][ T38] audit: type=1326 audit(1758797905.214:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.470243][ T38] audit: type=1326 audit(1758797905.214:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.471143][ T38] audit: type=1326 audit(1758797905.214:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.471394][ T38] audit: type=1326 audit(1758797905.214:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.472076][ T38] audit: type=1326 audit(1758797905.214:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.472378][ T38] audit: type=1326 audit(1758797905.214:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.472653][ T38] audit: type=1326 audit(1758797905.214:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8777 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1e672eec9 code=0x7ffc0000 [ 228.746874][ T8785] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 4, id = 0 [ 229.270816][ T8801] netlink: 'syz.2.1298': attribute type 2 has an invalid length. [ 229.726539][ T5907] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.876589][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 229.879047][ T5907] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 229.879075][ T5907] usb 4-1: config 0 has no interface number 0 [ 229.882391][ T5907] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 229.882421][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.882441][ T5907] usb 4-1: Product: syz [ 229.882455][ T5907] usb 4-1: Manufacturer: syz [ 229.882470][ T5907] usb 4-1: SerialNumber: syz [ 229.950022][ T5907] usb 4-1: config 0 descriptor?? [ 229.969278][ T5907] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 230.127951][ T8794] syz.1.1295 (8794): drop_caches: 2 [ 230.198549][ T5907] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 230.235867][ T5907] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 230.389496][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 230.584931][ T8818] program syz.2.1306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.597712][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 230.617252][ T5907] usb 4-1: USB disconnect, device number 14 [ 230.649504][ T5907] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 230.679220][ T5907] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 230.680322][ T5907] quatech2 4-1:0.51: device disconnected [ 231.210338][ T8831] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1311'. [ 231.439911][ T8838] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 231.634301][ T8844] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 231.662912][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 232.012328][ T8854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1324'. [ 234.016495][ T3117] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 235.871015][ T3117] usb 3-1: device not accepting address 11, error -71 [ 248.491116][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.513033][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.514390][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.516178][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.547163][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.574668][ T8904] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1345'. [ 250.951816][ T59] Bluetooth: hci5: command tx timeout [ 253.045284][ T59] Bluetooth: hci5: command tx timeout [ 253.267617][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 253.278204][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.285310][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.308319][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.313053][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.285507][ T5154] Bluetooth: hci5: command tx timeout [ 257.854622][ T5154] Bluetooth: hci5: command tx timeout [ 260.136531][ T5835] Bluetooth: hci6: command tx timeout [ 261.159915][ T8909] lo speed is unknown, defaulting to 1000 [ 261.162786][ T8909] lo speed is unknown, defaulting to 1000 [ 262.789292][ T5835] Bluetooth: hci6: command tx timeout [ 265.366635][ T59] Bluetooth: hci6: command tx timeout [ 267.459544][ T59] Bluetooth: hci6: command tx timeout [ 274.246383][ C0] sched: DL replenish lagged too much [ 284.020525][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.029551][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.597375][ T5154] Bluetooth: hci4: command 0x0405 tx timeout [ 365.234586][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.387353][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.376556][ T5849] Bluetooth: hci5: command 0x0406 tx timeout [ 381.282256][ T8573] Bluetooth: hci6: command 0x0406 tx timeout [ 397.080850][ T39] INFO: task syz.1.1335:8876 blocked for more than 143 seconds. [ 397.080882][ T39] Not tainted syzkaller #0 [ 397.080894][ T39] Blocked by coredump. [ 397.080901][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.080914][ T39] task:syz.1.1335 state:D stack:25128 pid:8876 tgid:8876 ppid:5837 task_flags:0x40044c flags:0x00004004 [ 397.080995][ T39] Call Trace: [ 397.081003][ T39] [ 397.081018][ T39] __schedule+0x16f3/0x4c20 [ 397.081082][ T39] ? __lock_acquire+0xab9/0xd20 [ 397.081115][ T39] ? __pfx___schedule+0x10/0x10 [ 397.081166][ T39] ? schedule+0x91/0x360 [ 397.081208][ T39] schedule+0x165/0x360 [ 397.081242][ T39] schedule_timeout+0x9a/0x270 [ 397.081274][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 397.081320][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.081354][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.081385][ T39] ? wait_for_completion+0x[ 397.081385][ T39] ? wait_for_completion+0x267/0x5d0 [ 397.081421][ T39] wait_for_completion+0x2bf/0x5d0 [ 397.081470][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 397.081520][ T39] exit_aio+0x2f1/0x3b0 [ 397.081558][ T39] ? __pfx_exit_aio+0x10/0x10 [ 397.081602][ T39] ? uprobe_clear_state+0x280/0x2a0 [ 397.081625][ T39] ? mm_update_next_owner+0xa7/0x870 [ 397.081653][ T39] __mmput+0x68/0x3d0 [ 397.081684][ T39] exit_mm+0x1da/0x2c0 [ 397.081709][ T39] ? __pfx_exit_mm+0x10/0x10 [ 397.081733][ T39] ? rcu_is_watching+0x15/0xb0 [ 397.081772][ T39] do_exit+0x648/0x2300 [ 397.081793][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.081835][ T39] ? __lock_acquire+0xab9/0xd20 [ 397.081867][ T39] ? __pfx_do_exit+0x10/0x10 [ 397.081885][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 397.081917][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 397.081957][ T39] do_group_exit+0x21c/0x2d0 [ 397.081985][ T39] get_signal+0x125e/0x1310 [ 397.082039][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 397.082067][ T39] ? task_work_run+0x1d4/0x260 [ 397.082087][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 397.082114][ T39] ? kmem_cache_free+0x402/0x510 [ 397.082147][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.082192][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 397.082233][ T39] exit_to_user_mode_loop+0x75/0x110 [ 397.082264][ T39] do_syscall_64+0x2bd/0x3b0 [ 397.082285][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.082318][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.082339][ T39] ? clear_bhb_loop+0x60/0xb0 [ 397.082367][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.082394][ T39] RIP: 0033:0x7fc1e672eec9 [ 397.082417][ T39] RSP: 002b:00007ffdf22c7528 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 397.082440][ T39] RAX: 0000000000000000 RBX: 0000000000038f79 RCX: 00007fc1e672eec9 [ 397.082455][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 397.082469][ T39] RBP: 00007fc1e6987da0 R08: 0000000000000001 R09: 00000003f22c781f [ 397.082484][ T39] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007fc1e6985fac [ 397.082499][ T39] R13: 00007fc1e6985fa0 R14: ffffffffffffffff R15: 00007ffdf22c7640 [ 397.082535][ T39] [ 397.082567][ T39] [ 397.082567][ T39] Showing all locks held in the system: [ 397.082577][ T39] 4 locks held by kworker/0:0/9: [ 397.082589][ T39] #0: ffff88805bf05d38 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.082654][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.082729][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.082785][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.082842][ T39] 4 locks held by kworker/0:1/10: [ 397.082855][ T39] #0: ffff888034521538 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.082916][ T39] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.082992][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.083047][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.083105][ T39] 5 locks held by kworker/u8:1/13: [ 397.083117][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.083173][ T39] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.083238][ T39] #2: ffff88804c5e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.083299][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.083354][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.083411][ T39] 2 locks held by ksoftirqd/0/15: [ 397.083423][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.083478][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.083535][ T39] 2 locks held by rcuc/0/20: [ 397.083546][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.083602][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.083659][ T39] 2 locks held by rcuc/1/28: [ 397.083671][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.083726][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.083782][ T39] 2 locks held by ksoftirqd/1/30: [ 397.083794][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.083849][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.083906][ T39] 5 locks held by kworker/u8:2/37: [ 397.083919][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.083975][ T39] #1: ffffc90000ae7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.084032][ T39] #2: ffff88805ee40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.084091][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.084146][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.084208][ T39] 1 lock held by khungtaskd/39: [ 397.084221][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 397.084273][ T39] 5 locks held by kworker/u8:3/57: [ 397.084285][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.084341][ T39] #1: ffffc9000123fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.084398][ T39] #2: ffff88805f090898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.084457][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.084513][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.084570][ T39] 5 locks held by kworker/u9:0/59: [ 397.084582][ T39] #0: ffff88802870c138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.084638][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.084695][ T39] #2: ffff88805b1f4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 397.084749][ T39] #3: ffff88805b1f40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 397.084810][ T39] #4: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 397.084874][ T39] 5 locks held by kworker/u8:4/67: [ 397.084886][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.084943][ T39] #1: ffffc9000152fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.085002][ T39] #2: ffff88805ec00898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.085062][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.085119][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.085177][ T39] 5 locks held by kworker/u8:5/78: [ 397.085189][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.085253][ T39] #1: ffffc9000157fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.085311][ T39] #2: ffff888060430898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.085371][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.085427][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.085489][ T39] 5 locks held by kworker/0:2/990: [ 397.085502][ T39] #0: ffff88805c4b5d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.085565][ T39] #1: ffffc90004a47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.085645][ T39] #2: ffff88805df56de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 397.085703][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.085759][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.085819][ T39] 5 locks held by kworker/u8:6/1118: [ 397.085831][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.085889][ T39] #1: ffffc90004e47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.085946][ T39] #2: ffff8880600e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.086006][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.086062][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.086120][ T39] 5 locks held by kworker/u8:7/1125: [ 397.086133][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.086191][ T39] #1: ffffc90004dd7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.136158][ T39] #2: ffff888048240898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.147403][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.147474][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.147534][ T39] 2 locks held by aoe_tx0/1321: [ 397.147547][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.147602][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.147658][ T39] 5 locks held by kworker/u8:8/1374: [ 397.147671][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.147727][ T39] #1: ffffc90005607bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.147783][ T39] #2: ffff88805f9b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.147844][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.147898][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.147953][ T39] 4 locks held by kworker/u8:9/1427: [ 397.147966][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.148021][ T39] #1: ffffc900057e7bc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.148077][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.148131][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.148223][ T39] 5 locks held by kworker/1:2/3117: [ 397.148236][ T39] #0: ffff88805c13dd38 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.148298][ T39] #1: ffffc9000d52fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.148379][ T39] #2: ffff88805de51928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 397.148436][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.148493][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.148550][ T39] 4 locks held by kworker/u8:10/3201: [ 397.148563][ T39] #0: ffff888030deb138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.148621][ T39] #1: ffffc9000d6efbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.148680][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.148737][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.148795][ T39] 5 locks held by kworker/u8:11/3626: [ 397.148808][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.148865][ T39] #1: ffffc9000deefbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.148924][ T39] #2: ffff88805f310898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.148984][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.149041][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.149099][ T39] 5 locks held by kworker/u9:1/5154: [ 397.149112][ T39] #0: ffff888029032138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.149177][ T39] #1: ffffc9000ff77bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.149235][ T39] #2: ffff888062704e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 397.149290][ T39] #3: ffff8880627040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 397.149350][ T39] #4: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 397.149416][ T39] 3 locks held by dhcpcd/5500: [ 397.149428][ T39] #0: ffff888030847150 (sk_lock-AF_UNIX){+.+.}-{0:0}, at: sk_setsockopt+0xc2f/0x2a70 [ 397.149489][ T39] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.149546][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.149603][ T39] 2 locks held by getty/5596: [ 397.149615][ T39] #0: ffff88823bf740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 397.149680][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 397.149737][ T39] 2 locks held by dhcpcd/5597: [ 397.149749][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.149805][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.149863][ T39] 6 locks held by syz-executor/5822: [ 397.149876][ T39] 4 locks held by syz-executor/5833: [ 397.149888][ T39] #0: ffff88803fae4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 397.149944][ T39] #1: ffff88803fae40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 397.150003][ T39] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 397.150055][ T39] #3: ffff8880290e0358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 397.150109][ T39] 4 locks held by kworker/u9:2/5835: [ 397.150122][ T39] #0: ffff888030c93138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.150189][ T39] #1: ffffc900048ffbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.150247][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.150302][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.150361][ T39] 5 locks held by kworker/u9:4/5849: [ 397.150374][ T39] #0: ffff88803cd3a938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.150431][ T39] #1: ffffc90004a87bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.150489][ T39] #2: ffff88803b260e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 397.150542][ T39] #3: ffff88803b2600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 397.150603][ T39] #4: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 397.150668][ T39] 2 locks held by kworker/1:3/5876: [ 397.150682][ T39] 2 locks held by kworker/0:3/5893: [ 397.150694][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.150752][ T39] #1: ffffc90004dc7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.150811][ T39] 2 locks held by napi/wg2-0/5919: [ 397.150824][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.150889][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.150947][ T39] 4 locks held by kworker/0:4/5921: [ 397.150959][ T39] #0: ffff88805c13dd38 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.151022][ T39] #1: ffffc90004fb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.151102][ T39] #2: ffff8880259255f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 397.151159][ T39] #3: ffff88805de51928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 397.151223][ T39] 4 locks held by kworker/0:5/5948: [ 397.151236][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.151295][ T39] #1: ffffc90005097bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.151354][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.151410][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.151468][ T39] 4 locks held by kworker/0:6/6044: [ 397.151480][ T39] #0: ffff888036a7d138 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.151543][ T39] #1: ffffc90005117bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.151622][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.151675][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.151730][ T39] 5 locks held by kworker/u8:12/7055: [ 397.151743][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.151801][ T39] #1: ffffc90003c7fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.151859][ T39] #2: ffff88805fd10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 397.151926][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.151983][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.152043][ T39] 3 locks held by syz.4.1326/8855: [ 397.152056][ T39] #0: ffff88803faf8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 397.152113][ T39] #1: ffff88803faf80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 397.152180][ T39] #2: ffffffff8ee3b398 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 397.152240][ T39] 3 locks held by kworker/1:8/8890: [ 397.152253][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.152323][ T39] #1: ffffc900054f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.152381][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 397.152435][ T39] 2 locks held by kworker/1:9/8896: [ 397.152449][ T39] 2 locks held by syz-executor/8909: [ 397.152462][ T39] #0: ffffffff8ecc6a20 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 397.152537][ T39] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 397.152594][ T39] 3 locks held by syz-executor/8917: [ 397.152607][ T39] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 397.152667][ T39] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.152724][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.152807][ T39] 6 locks held by kworker/u8:13/8918: [ 397.152821][ T39] #0: ffff888036453138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.152878][ T39] #1: ffffc90005167bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.152938][ T39] #2: ffff88803b3195f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 397.152995][ T39] #3: ffff88805df51928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 397.153052][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.153119][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.153183][ T39] 4 locks held by kworker/u8:14/8919: [ 397.153196][ T39] #0: ffff88802f84f938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.153259][ T39] #1: ffffc900056a7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.153318][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.153374][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.153432][ T39] 3 locks held by kworker/u8:15/8920: [ 397.153445][ T39] #0: ffff88814d0e2138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.153503][ T39] #1: ffffc900056b7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.153563][ T39] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 397.153621][ T39] 7 locks held by kworker/u8:17/8922: [ 397.153634][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.153691][ T39] #1: ffffc900056d7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.153751][ T39] #2: ffff88805d566300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 397.153815][ T39] #3: ffff88805d5ae520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 397.153878][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 397.153934][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.153991][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.154049][ T39] 6 locks held by kworker/u8:19/8926: [ 397.154062][ T39] #0: ffff88802f84b138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.154125][ T39] #1: ffffc90005707bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.154190][ T39] #2: ffff88803bcc15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 397.154247][ T39] #3: ffff88805de523c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 397.154302][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.154358][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.154416][ T39] 6 locks held by kworker/u8:20/8927: [ 397.154428][ T39] #0: ffff88802f848938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.154491][ T39] #1: ffffc90005717bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.154550][ T39] #2: ffff8880259255f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 397.154608][ T39] #3: ffff88805df52e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 397.154663][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.154718][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.154788][ T39] 6 locks held by kworker/u8:21/8928: [ 397.154800][ T39] #0: ffff888036788138 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.154860][ T39] #1: ffffc90003c4fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.154917][ T39] #2: ffff8880353595f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 397.154972][ T39] #3: ffff88805df54e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 397.155026][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.155080][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.155157][ T39] 7 locks held by kworker/u8:24/8931: [ 397.155175][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.155233][ T39] #1: ffffc900054e7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.155292][ T39] #2: ffff88801a7a0300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 397.155359][ T39] #3: ffff88805dc89920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 397.155422][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 397.155479][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.155535][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.155594][ T39] 4 locks held by kworker/u8:25/8932: [ 397.155606][ T39] #0: ffff88805c558938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.155668][ T39] #1: ffffc90005cb7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.155728][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.155784][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.155842][ T39] 6 locks held by kworker/u8:26/8933: [ 397.155855][ T39] 1 lock held by dhcpcd/8934: [ 397.155867][ T39] #0: ffff88805db3c5f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 397.155929][ T39] 6 locks held by kworker/u8:29/8938: [ 397.155942][ T39] #0: ffff888036452938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.156005][ T39] #1: ffffc90005d17bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.156063][ T39] #2: ffff88802f8c55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 397.156120][ T39] #3: ffff88805de558b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 397.156184][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.667098][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.667186][ T39] 1 lock held by dhcpcd/8940: [ 397.667200][ T39] #0: ffff88805db3b1b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 397.667263][ T39] 4 locks held by kworker/1:11/8941: [ 397.667276][ T39] #0: ffff88805bf04938 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.667341][ T39] #1: ffffc90005d37bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.667419][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.667476][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.667534][ T39] 4 locks held by kworker/1:12/8942: [ 397.667546][ T39] #0: ffff888034521138 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.667610][ T39] #1: ffffc90005697bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.667689][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.667745][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.667802][ T39] 4 locks held by kworker/1:13/8943: [ 397.667815][ T39] #0: ffff888036a7d138 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.667877][ T39] #1: ffffc90005e07bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.667957][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.668014][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.668072][ T39] 1 lock held by syz-executor/8944: [ 397.668085][ T39] 1 lock held by dhcpcd/8945: [ 397.668097][ T39] #0: ffff8880266c0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 397.668163][ T39] 3 locks held by kworker/0:9/8946: [ 397.668176][ T39] 3 locks held by kworker/0:10/8947: [ 397.668189][ T39] 7 locks held by kworker/u8:30/8948: [ 397.668202][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.668260][ T39] #1: ffffc90005e17bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.668320][ T39] #2: ffff888023672300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 397.668390][ T39] #3: ffff88805e286520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 397.668453][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 397.668510][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.668566][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.668624][ T39] 7 locks held by kworker/u8:31/8949: [ 397.668637][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.668696][ T39] #1: ffffc90005e6fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.668755][ T39] #2: ffff88803a1f6300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 397.668823][ T39] #3: ffff888036a61120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 397.668886][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 397.668931][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.668987][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.669044][ T39] 5 locks held by kworker/0:11/8950: [ 397.669058][ T39] 1 lock held by dhcpcd/8952: [ 397.669070][ T39] #0: ffff8880300ae350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 397.669126][ T39] 5 locks held by syz-executor/8953: [ 397.669139][ T39] #0: ffffffff8da61a50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 397.669204][ T39] #1: ffff8880359818d0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1a90 [ 397.669254][ T39] #2: ffff888036285110 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1a90 [ 397.669307][ T39] #3: ffffffff8dac5728 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 397.669360][ T39] #4: ffff88801d2d2858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 397.669413][ T39] 7 locks held by kworker/u8:33/8955: [ 397.669426][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.669482][ T39] #1: ffffc900061b7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.669527][ T39] #2: ffff88801a351300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 397.669577][ T39] #3: ffff88805dd5f920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 397.669622][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 397.669662][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.669702][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.669745][ T39] 1 lock held by dhcpcd/8956: [ 397.669754][ T39] #0: ffff888035da8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 397.669796][ T39] 4 locks held by kworker/1:14/8957: [ 397.669805][ T39] #0: ffff88805bf07938 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 397.669851][ T39] #1: ffffc90005eafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 397.669912][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 397.669954][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 397.670004][ T39] [ 397.670008][ T39] ============================================= [ 397.670008][ T39] [ 397.670035][ T39] NMI backtrace for cpu 1 [ 397.670057][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 397.670083][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.670094][ T39] Call Trace: [ 397.670102][ T39] [ 397.670110][ T39] dump_stack_lvl+0x189/0x250 [ 397.670140][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.670182][ T39] ? __pfx__printk+0x10/0x10 [ 397.670213][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 397.670240][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 397.670266][ T39] ? __pfx__printk+0x10/0x10 [ 397.670290][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.670316][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 397.670342][ T39] watchdog+0xf93/0xfe0 [ 397.670370][ T39] ? watchdog+0x1de/0xfe0 [ 397.670398][ T39] kthread+0x70e/0x8a0 [ 397.670425][ T39] ? __pfx_watchdog+0x10/0x10 [ 397.670447][ T39] ? __pfx_kthread+0x10/0x10 [ 397.670479][ T39] ? __pfx_kthread+0x10/0x10 [ 397.670507][ T39] ret_from_fork+0x436/0x7d0 [ 397.670534][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 397.670562][ T39] ? __switch_to_asm+0x39/0x70 [ 397.670580][ T39] ? __switch_to_asm+0x33/0x70 [ 397.670597][ T39] ? __pfx_kthread+0x10/0x10 [ 397.670627][ T39] ret_from_fork_asm+0x1a/0x30 [ 397.670663][ T39] [ 397.670675][ T39] Sending NMI from CPU 1 to CPUs 0: [ 397.670702][ C0] NMI backtrace for cpu 0 [ 397.670720][ C0] CPU: 0 UID: 0 PID: 8950 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 397.670755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.670773][ C0] Workqueue: events rht_deferred_worker [ 397.670798][ C0] RIP: 0010:migrate_disable+0x6/0x190 [ 397.670822][ C0] Code: 80 c1 03 38 c1 7c c6 48 89 ef e8 45 8b 8d 00 eb bc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 41 55 41 54 53 49 bc 00 00 00 00 00 fc ff df 65 48 8b 1c 25 [ 397.670838][ C0] RSP: 0018:ffffc900048bf610 EFLAGS: 00000202 [ 397.670853][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: abdf3bfa98bcc600 [ 397.670867][ C0] RDX: 0000000000000000 RSI: ffffffff8b621660 RDI: ffffffff8b621620 [ 397.670880][ C0] RBP: ffffc900048bf6d0 R08: 0000000000000000 R09: ffffffff8af95c4b [ 397.670893][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ac67 R12: 0000000000000a02 [ 397.670916][ C0] R13: ffffc900048bf668 R14: 1ffff92000917ecd R15: ffffc900048bf660 [ 397.670931][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 397.670946][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.670959][ C0] CR2: 00007f7188468000 CR3: 000000006f13e000 CR4: 00000000003526f0 [ 397.670975][ C0] Call Trace: [ 397.670982][ C0] [ 397.670990][ C0] rt_spin_lock+0x223/0x2c0 [ 397.671014][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 397.671036][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 397.671064][ C0] put_cpu_partial+0x3d/0x100 [ 397.671084][ C0] __slab_free+0x2b3/0x390 [ 397.671106][ C0] ? qlist_free_all+0x8c/0x140 [ 397.671128][ C0] qlist_free_all+0x97/0x140 [ 397.671151][ C0] kasan_quarantine_reduce+0x148/0x160 [ 397.671174][ C0] __kasan_kmalloc+0x22/0xb0 [ 397.671198][ C0] __kvmalloc_node_noprof+0x28d/0x550 [ 397.671223][ C0] ? rhashtable_rehash_alloc+0x9f/0x2a0 [ 397.671248][ C0] rhashtable_rehash_alloc+0x9f/0x2a0 [ 397.671270][ C0] ? rht_deferred_worker+0x20d7/0x2430 [ 397.671292][ C0] rht_deferred_worker+0x4f8/0x2430 [ 397.671312][ C0] ? look_up_lock_class+0x74/0x170 [ 397.671353][ C0] ? __pfx_rht_deferred_worker+0x10/0x10 [ 397.671377][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.671404][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 397.671426][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 397.671450][ C0] process_scheduled_works+0xade/0x17b0 [ 397.671489][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.671521][ C0] worker_thread+0x8a0/0xda0 [ 397.671547][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 397.671580][ C0] ? __kthread_parkme+0x7b/0x200 [ 397.671610][ C0] kthread+0x70e/0x8a0 [ 397.671639][ C0] ? __pfx_worker_thread+0x10/0x10 [ 397.671662][ C0] ? __pfx_kthread+0x10/0x10 [ 397.671692][ C0] ? __pfx_kthread+0x10/0x10 [ 397.671720][ C0] ret_from_fork+0x436/0x7d0 [ 397.671745][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 397.671771][ C0] ? __switch_to_asm+0x39/0x70 [ 397.671788][ C0] ? __switch_to_asm+0x33/0x70 [ 397.671803][ C0] ? __pfx_kthread+0x10/0x10 [ 397.671831][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.671858][ C0] [ 398.648656][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 398.648682][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 398.648711][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.648725][ T39] Call Trace: [ 398.648734][ T39] [ 398.648744][ T39] dump_stack_lvl+0x99/0x250 [ 398.648784][ T39] ? __asan_memcpy+0x40/0x70 [ 398.648810][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.648844][ T39] ? __pfx__printk+0x10/0x10 [ 398.648882][ T39] vpanic+0x281/0x750 [ 398.648918][ T39] ? __pfx_vpanic+0x10/0x10 [ 398.648948][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 398.648971][ T39] ? preempt_schedule+0xae/0xc0 [ 398.649007][ T39] ? preempt_schedule_common+0x83/0xd0 [ 398.649055][ T39] panic+0xb9/0xc0 [ 398.649086][ T39] ? __pfx_panic+0x10/0x10 [ 398.649121][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 398.649155][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 398.649188][ T39] watchdog+0xfd2/0xfe0 [ 398.649223][ T39] ? watchdog+0x1de/0xfe0 [ 398.649258][ T39] kthread+0x70e/0x8a0 [ 398.649295][ T39] ? __pfx_watchdog+0x10/0x10 [ 398.649322][ T39] ? __pfx_kthread+0x10/0x10 [ 398.649361][ T39] ? __pfx_kthread+0x10/0x10 [ 398.649397][ T39] ret_from_fork+0x436/0x7d0 [ 398.649429][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 398.649464][ T39] ? __switch_to_asm+0x39/0x70 [ 398.649484][ T39] ? __switch_to_asm+0x33/0x70 [ 398.649504][ T39] ? __pfx_kthread+0x10/0x10 [ 398.649539][ T39] ret_from_fork_asm+0x1a/0x30 [ 398.649578][ T39] [ 398.649932][ T39] Kernel Offset: disabled