last executing test programs: 1m42.642271133s ago: executing program 3 (id=650): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 1m42.306323924s ago: executing program 3 (id=652): r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000e000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000014}}, {{&(0x7f0000001b40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}], 0x20, 0x80}}], 0x2, 0x20044000) 1m42.003078137s ago: executing program 3 (id=654): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x10000, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}]}, 0x34}}, 0xc800) 1m41.704152744s ago: executing program 3 (id=656): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002d2b3d058778737e11000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x40000080) 1m41.487018489s ago: executing program 3 (id=657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m40.502371607s ago: executing program 0 (id=659): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000140)=0x1000201, 0x4) 1m40.297484918s ago: executing program 0 (id=660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9) 1m40.135078586s ago: executing program 0 (id=661): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001014010028bd7000fcdbdf2508004b001300000008"], 0x28}, 0x1, 0x0, 0x0, 0x4044801}, 0x4000) 1m39.970680117s ago: executing program 0 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) mq_unlink(0x0) 1m39.759204491s ago: executing program 0 (id=663): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000002c0)={@my=0x0}) 1m36.990601314s ago: executing program 0 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) 1m34.396321647s ago: executing program 3 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x9}) 1m30.219105252s ago: executing program 2 (id=687): r0 = creat(&(0x7f0000000640)='./bus\x00', 0x1a8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 1m30.033375011s ago: executing program 2 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) creat(&(0x7f0000000080)='./file0/file0\x00', 0x10) 1m29.863963659s ago: executing program 2 (id=689): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x1, 0x2de}, &(0x7f0000000000), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) 1m25.18170693s ago: executing program 2 (id=693): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) set_tid_address(0x0) 1m24.876638716s ago: executing program 2 (id=695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)) 1m24.632220025s ago: executing program 2 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x6}) 1m21.653110237s ago: executing program 32 (id=664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) 1m19.113716732s ago: executing program 33 (id=674): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x9}) 1m9.109374455s ago: executing program 34 (id=697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000080)={0xd4, 0x0, 0x6}) 49.466766926s ago: executing program 4 (id=733): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x6, @mcast2, 0xd}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000880)={0xb, {{0xa, 0x81, 0x76971c1, @mcast2}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x4, @remote, 0x6}}]}, 0x110) 49.226033867s ago: executing program 4 (id=735): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000018c0)=""/4104, 0x1008}, {&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f0000000500)=""/224, 0xe0}, {&(0x7f00000000c0)=""/237, 0xed}], 0x7}, 0x80000000}], 0x4, 0x4022, 0x0) 48.118354127s ago: executing program 4 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 37.574298768s ago: executing program 4 (id=740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 27.72464563s ago: executing program 4 (id=746): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x1, 0xffffffffffdfffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 27.636227291s ago: executing program 1 (id=747): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 27.384846845s ago: executing program 4 (id=748): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 25.665535294s ago: executing program 1 (id=749): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 24.372785926s ago: executing program 1 (id=750): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000440)={0x5}, 0x0) 24.100115866s ago: executing program 1 (id=751): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x7) 15.821948225s ago: executing program 1 (id=752): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8700000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000004000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.555619263s ago: executing program 1 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x4) 12.061339651s ago: executing program 35 (id=748): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x45}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 0s ago: executing program 36 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. [ 79.987272][ T5824] cgroup: Unknown subsys name 'net' [ 80.261352][ T5824] cgroup: Unknown subsys name 'cpuset' [ 80.368143][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.172608][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.831571][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.833884][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.837935][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.838704][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.840023][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.856548][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.876667][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.878189][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.878871][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.895384][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.900272][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.901572][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.902587][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.924745][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.926516][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.926610][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.928722][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.930075][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.931143][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.931863][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.948346][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.950222][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.950923][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.952691][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.955551][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.862743][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 85.870607][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.925639][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.189932][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.332143][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.750346][ T10] cfg80211: failed to load regulatory.db [ 86.997144][ T5155] Bluetooth: hci4: command tx timeout [ 86.997160][ T5845] Bluetooth: hci0: command tx timeout [ 87.011155][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.011934][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.012494][ T5838] bridge_slave_0: entered allmulticast mode [ 87.015444][ T5838] bridge_slave_0: entered promiscuous mode [ 87.031406][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.031591][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.031761][ T5846] bridge_slave_0: entered allmulticast mode [ 87.034387][ T5846] bridge_slave_0: entered promiscuous mode [ 87.076292][ T5845] Bluetooth: hci2: command tx timeout [ 87.076427][ T5155] Bluetooth: hci1: command tx timeout [ 87.076435][ T5845] Bluetooth: hci3: command tx timeout [ 87.166192][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.166347][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.166984][ T5838] bridge_slave_1: entered allmulticast mode [ 87.168468][ T5838] bridge_slave_1: entered promiscuous mode [ 87.169300][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.169458][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.169636][ T5846] bridge_slave_1: entered allmulticast mode [ 87.171145][ T5846] bridge_slave_1: entered promiscuous mode [ 87.278820][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.278928][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.279207][ T5834] bridge_slave_0: entered allmulticast mode [ 87.280677][ T5834] bridge_slave_0: entered promiscuous mode [ 87.525994][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.526254][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.526424][ T5834] bridge_slave_1: entered allmulticast mode [ 87.528962][ T5834] bridge_slave_1: entered promiscuous mode [ 87.699160][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.699299][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.699487][ T5837] bridge_slave_0: entered allmulticast mode [ 87.701818][ T5837] bridge_slave_0: entered promiscuous mode [ 87.852988][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.856035][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.863978][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.864103][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.864283][ T5837] bridge_slave_1: entered allmulticast mode [ 87.867753][ T5837] bridge_slave_1: entered promiscuous mode [ 88.024529][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.032460][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.117777][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.117924][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.118099][ T5835] bridge_slave_0: entered allmulticast mode [ 88.120920][ T5835] bridge_slave_0: entered promiscuous mode [ 88.130172][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.478740][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.478890][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.479072][ T5835] bridge_slave_1: entered allmulticast mode [ 88.481831][ T5835] bridge_slave_1: entered promiscuous mode [ 88.489314][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.634103][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.789481][ T5838] team0: Port device team_slave_0 added [ 88.791648][ T5846] team0: Port device team_slave_0 added [ 88.794545][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.952823][ T5838] team0: Port device team_slave_1 added [ 88.956921][ T5846] team0: Port device team_slave_1 added [ 89.034378][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.037665][ T5834] team0: Port device team_slave_0 added [ 89.066339][ T59] Bluetooth: hci0: command tx timeout [ 89.066368][ T59] Bluetooth: hci4: command tx timeout [ 89.146311][ T5155] Bluetooth: hci1: command tx timeout [ 89.146343][ T5155] Bluetooth: hci3: command tx timeout [ 89.146363][ T5155] Bluetooth: hci2: command tx timeout [ 89.243062][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.245006][ T5834] team0: Port device team_slave_1 added [ 89.698584][ T5837] team0: Port device team_slave_0 added [ 89.838763][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.838779][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.838802][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.843257][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.843271][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.843293][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.845595][ T5837] team0: Port device team_slave_1 added [ 90.089228][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.089244][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.089267][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.090652][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.090664][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.090687][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.228346][ T5835] team0: Port device team_slave_0 added [ 90.229357][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.229370][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.229392][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.369931][ T5835] team0: Port device team_slave_1 added [ 90.371010][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.371023][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.371046][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.375638][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.375650][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.375672][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.480028][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.480043][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.480066][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.778803][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.778820][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.778843][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.930362][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.930378][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.930401][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.033810][ T5846] hsr_slave_0: entered promiscuous mode [ 91.035327][ T5846] hsr_slave_1: entered promiscuous mode [ 91.047205][ T5838] hsr_slave_0: entered promiscuous mode [ 91.048527][ T5838] hsr_slave_1: entered promiscuous mode [ 91.049546][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 91.049655][ T5838] Cannot create hsr debugfs directory [ 91.146323][ T59] Bluetooth: hci4: command tx timeout [ 91.146353][ T59] Bluetooth: hci0: command tx timeout [ 91.226433][ T5155] Bluetooth: hci2: command tx timeout [ 91.226462][ T5155] Bluetooth: hci3: command tx timeout [ 91.226478][ T5155] Bluetooth: hci1: command tx timeout [ 91.238372][ T5834] hsr_slave_0: entered promiscuous mode [ 91.239560][ T5834] hsr_slave_1: entered promiscuous mode [ 91.240344][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 91.240365][ T5834] Cannot create hsr debugfs directory [ 91.477455][ T5837] hsr_slave_0: entered promiscuous mode [ 91.478779][ T5837] hsr_slave_1: entered promiscuous mode [ 91.479691][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 91.479713][ T5837] Cannot create hsr debugfs directory [ 92.015127][ T5835] hsr_slave_0: entered promiscuous mode [ 92.015895][ T5835] hsr_slave_1: entered promiscuous mode [ 92.017215][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 92.017238][ T5835] Cannot create hsr debugfs directory [ 93.226292][ T59] Bluetooth: hci0: command tx timeout [ 93.226327][ T59] Bluetooth: hci4: command tx timeout [ 93.268360][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.304638][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.306764][ T5155] Bluetooth: hci1: command tx timeout [ 93.306791][ T5155] Bluetooth: hci3: command tx timeout [ 93.306810][ T5155] Bluetooth: hci2: command tx timeout [ 93.365290][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.426003][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.572779][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.623646][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.668834][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.726917][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.874107][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.908936][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.954378][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.994622][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.142402][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.197791][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.231731][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.286669][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.335653][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.462826][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.485753][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.530709][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.530932][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.578613][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.651998][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.652472][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.705390][ T1450] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.705516][ T1450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.752757][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.864874][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.901732][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.930119][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.930337][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.978742][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.978912][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.049772][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.169665][ T1551] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.169839][ T1551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.175535][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.252426][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.253747][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.367544][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.392140][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.417726][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.417938][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.489591][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.489796][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.529641][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.571622][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.679577][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.680242][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.771583][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.773430][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.912668][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.085131][ T5846] veth0_vlan: entered promiscuous mode [ 96.200046][ T5846] veth1_vlan: entered promiscuous mode [ 96.210105][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.526485][ T5846] veth0_macvtap: entered promiscuous mode [ 96.582438][ T5846] veth1_macvtap: entered promiscuous mode [ 96.610425][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.614790][ T5834] veth0_vlan: entered promiscuous mode [ 96.674971][ T5834] veth1_vlan: entered promiscuous mode [ 96.688857][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.723969][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.751324][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.774140][ T1345] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.800933][ T1345] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.809407][ T1345] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.829001][ T1345] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.908200][ T5838] veth0_vlan: entered promiscuous mode [ 96.983788][ T5837] veth0_vlan: entered promiscuous mode [ 97.077030][ T5838] veth1_vlan: entered promiscuous mode [ 97.085125][ T5834] veth0_macvtap: entered promiscuous mode [ 97.129794][ T5837] veth1_vlan: entered promiscuous mode [ 97.135531][ T5834] veth1_macvtap: entered promiscuous mode [ 97.207155][ T1551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.207178][ T1551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.279299][ T5835] veth0_vlan: entered promiscuous mode [ 97.313127][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.354277][ T1450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.354296][ T1450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.374262][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.390415][ T5835] veth1_vlan: entered promiscuous mode [ 97.411335][ T5838] veth0_macvtap: entered promiscuous mode [ 97.455516][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.470572][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.473446][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.474638][ T5837] veth0_macvtap: entered promiscuous mode [ 97.477068][ T5838] veth1_macvtap: entered promiscuous mode [ 97.509510][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.545841][ T5837] veth1_macvtap: entered promiscuous mode [ 97.718857][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.864433][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.867993][ T5835] veth0_macvtap: entered promiscuous mode [ 97.919108][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.967011][ T5835] veth1_macvtap: entered promiscuous mode [ 97.990928][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.002400][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.002498][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.002512][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.022857][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.032699][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.054376][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.122035][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.177225][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206318][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.214879][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.304475][ T1551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.304493][ T1551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.325385][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.447462][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.542536][ T5967] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.680916][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.684651][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.805925][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.836646][ T1345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.977926][ T5971] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 98.978054][ T5971] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4'. [ 99.018647][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.021505][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.161970][ T1450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.161989][ T1450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.418997][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.419023][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.547512][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.547531][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.699409][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.699429][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.884344][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.884364][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.018809][ T5848] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.187713][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 100.214076][ T5848] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 100.214106][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 100.214126][ T5848] usb 4-1: Product: syz [ 100.214140][ T5848] usb 4-1: SerialNumber: syz [ 100.290807][ T5848] usb 4-1: config 0 descriptor?? [ 100.345404][ T5848] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 100.345442][ T5848] usb 4-1: No valid video chain found. [ 100.434434][ T6001] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 100.434455][ T6001] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 100.596442][ T44] usb 4-1: USB disconnect, device number 2 [ 101.360518][ T44] kernel write not supported for file /input/event0 (pid: 44 comm: kworker/1:1) [ 101.846545][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 102.294801][ T6046] netlink: 'syz.2.42': attribute type 18 has an invalid length. [ 102.399194][ T6046] Zero length message leads to an empty skb [ 102.400789][ T6045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.41'. [ 102.401185][ T67] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401227][ T67] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401261][ T67] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401294][ T67] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.488827][ T6052] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 102.999967][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.156379][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 103.160755][ T6066] warning: `syz.4.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.167387][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 103.167416][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.167435][ T44] usb 4-1: Product: syz [ 103.167448][ T44] usb 4-1: Manufacturer: syz [ 103.167463][ T44] usb 4-1: SerialNumber: syz [ 103.238378][ T44] usb 4-1: config 0 descriptor?? [ 103.479312][ T44] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 103.699395][ T44] usb write operation failed. (-71) [ 103.730626][ T44] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.731560][ T44] dvbdev: DVB: registering new adapter (Terratec H7) [ 103.731636][ T44] usb 4-1: media controller created [ 103.772077][ T44] usb read operation failed. (-71) [ 103.772673][ T44] usb write operation failed. (-71) [ 103.800076][ T44] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 103.824663][ T44] usb 4-1: USB disconnect, device number 3 [ 104.048295][ T6087] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 104.273608][ T6097] vivid-004: disconnect [ 104.283783][ T6093] vivid-004: reconnect [ 104.445322][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.976435][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.140581][ T5853] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.140608][ T5853] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 105.140625][ T5853] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.140642][ T5853] usb 3-1: config 220 has no interface number 2 [ 105.140714][ T5853] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.140740][ T5853] usb 3-1: config 220 interface 0 has no altsetting 0 [ 105.140756][ T5853] usb 3-1: config 220 interface 76 has no altsetting 0 [ 105.140773][ T5853] usb 3-1: config 220 interface 1 has no altsetting 0 [ 105.146348][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.169723][ T5853] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 105.169752][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.169770][ T5853] usb 3-1: Product: syz [ 105.169783][ T5853] usb 3-1: Manufacturer: syz [ 105.169796][ T5853] usb 3-1: SerialNumber: syz [ 105.338481][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.338505][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.340033][ T44] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.340059][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.340078][ T44] usb 4-1: SerialNumber: syz [ 105.513179][ T5853] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 105.513212][ T5853] usb 3-1: No valid video chain found. [ 105.513279][ T5853] usb 3-1: selecting invalid altsetting 0 [ 105.560921][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.574057][ T5853] usb 3-1: selecting invalid altsetting 0 [ 105.574089][ T5853] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 105.606216][ T5853] usb 3-1: USB disconnect, device number 2 [ 105.701493][ T44] usb 4-1: 0:2 : does not exist [ 105.701881][ T44] usb 4-1: unit 48 not found! [ 105.725854][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 105.737582][ T5926] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 105.740667][ T5926] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 105.740693][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.740711][ T5926] usb 1-1: Product: syz [ 105.740723][ T5926] usb 1-1: Manufacturer: syz [ 105.740735][ T5926] usb 1-1: SerialNumber: syz [ 105.795341][ T5926] usb 1-1: config 0 descriptor?? [ 105.821472][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 105.821534][ T5926] usb 1-1: setting power ON [ 105.821968][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 105.836255][ T1229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.875814][ T44] usb 4-1: USB disconnect, device number 4 [ 105.898306][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.900211][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 105.900266][ T5926] usb 1-1: media controller created [ 105.981766][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.010935][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.010980][ T1229] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 106.011003][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.030249][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.067536][ T6125] dvb-usb: bulk message failed: -22 (3/0) [ 106.125446][ T1229] usb 2-1: config 0 descriptor?? [ 106.173408][ T5926] usb 1-1: selecting invalid altsetting 6 [ 106.173430][ T5926] usb 1-1: digital interface selection failed (-22) [ 106.173455][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 106.200313][ T5926] usb 1-1: setting power OFF [ 106.200520][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 106.200537][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 106.200549][ T5926] (NULL device *): no alternate interface [ 106.399527][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 106.408934][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 106.446231][ T5926] usb 1-1: USB disconnect, device number 2 [ 106.629121][ T1229] itetech 0003:258A:6A88.0001: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0 [ 106.778978][ T5853] usb 2-1: USB disconnect, device number 2 [ 106.941497][ T6151] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.027178][ T6147] fido_id[6147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 107.538670][ T6172] netlink: 'syz.4.101': attribute type 5 has an invalid length. [ 107.796354][ T5926] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 107.983135][ T5926] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.983167][ T5926] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 107.983192][ T5926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.983231][ T5926] usb 2-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 107.983252][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.048915][ T5926] usb 2-1: config 0 descriptor?? [ 108.055016][ T6174] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 108.509184][ T5926] uclogic 0003:5543:0005.0002: unknown main item tag 0x0 [ 108.509223][ T5926] uclogic 0003:5543:0005.0002: unknown main item tag 0x0 [ 108.509250][ T5926] uclogic 0003:5543:0005.0002: unknown main item tag 0x0 [ 108.509276][ T5926] uclogic 0003:5543:0005.0002: unknown main item tag 0x0 [ 108.509302][ T5926] uclogic 0003:5543:0005.0002: unknown main item tag 0x0 [ 108.509327][ T5926] uclogic 0003:5543:0005.0002: unknown main item tag 0x0 [ 108.513045][ T5926] uclogic 0003:5543:0005.0002: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.1-1/input0 [ 108.701494][ T990] usb 2-1: USB disconnect, device number 3 [ 108.965939][ T6199] fido_id[6199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 109.304451][ T5926] kernel write not supported for file /input/mouse0 (pid: 5926 comm: kworker/1:5) [ 109.986298][ T1229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.136870][ T1229] usb 2-1: Using ep0 maxpacket: 32 [ 110.139154][ T1229] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 110.139178][ T1229] usb 2-1: config 0 has no interface number 0 [ 110.139226][ T1229] usb 2-1: config 0 interface 12 has no altsetting 0 [ 110.156414][ T1229] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 110.156443][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.156461][ T1229] usb 2-1: Product: syz [ 110.156475][ T1229] usb 2-1: Manufacturer: syz [ 110.156488][ T1229] usb 2-1: SerialNumber: syz [ 110.242640][ T1229] usb 2-1: config 0 descriptor?? [ 110.631193][ T6253] batman_adv: batadv0: Adding interface: gretap1 [ 110.631217][ T6253] batman_adv: batadv0: Interface activated: gretap1 [ 110.867169][ T1229] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 110.867237][ T1229] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 110.867253][ T1229] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 110.867351][ T1229] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 110.906736][ T1229] usb 2-1: USB disconnect, device number 4 [ 111.030811][ T6263] netlink: 256 bytes leftover after parsing attributes in process `syz.4.141'. [ 112.356305][ T37] audit: type=1326 audit(1758542329.914:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6300 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b452ceec9 code=0x7ffc0000 [ 112.356355][ T37] audit: type=1326 audit(1758542329.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6300 comm="syz.2.158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b452ceec9 code=0x7ffc0000 [ 112.545566][ T6314] xt_l2tp: wrong L2TP version: 1 [ 113.382781][ T6334] bridge0: entered promiscuous mode [ 113.383419][ T6334] macsec1: entered promiscuous mode [ 113.467770][ T6340] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 113.527605][ T37] audit: type=1800 audit(1758542331.084:4): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.177" name="bus" dev="tmpfs" ino=153 res=0 errno=0 [ 114.231510][ T6365] gretap0: entered promiscuous mode [ 114.246494][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.246981][ T6365] vlan2: entered promiscuous mode [ 114.413221][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.413253][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.413298][ T44] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 114.413320][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.431326][ T44] usb 1-1: config 0 descriptor?? [ 114.638903][ T6376] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 114.712334][ T6381] capability: warning: `syz.1.194' uses deprecated v2 capabilities in a way that may be insecure [ 114.938478][ T44] aquacomputer_d5next 0003:0C70:F00D.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 115.086250][ T990] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.169639][ T44] usb 1-1: USB disconnect, device number 3 [ 115.246218][ T990] usb 2-1: Using ep0 maxpacket: 8 [ 115.249933][ T990] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 115.252929][ T990] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 115.252957][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.252976][ T990] usb 2-1: Product: syz [ 115.252990][ T990] usb 2-1: Manufacturer: syz [ 115.253003][ T990] usb 2-1: SerialNumber: syz [ 115.394604][ T990] usb 2-1: config 0 descriptor?? [ 115.412568][ T990] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 115.412622][ T990] usb 2-1: setting power ON [ 115.412641][ T990] dvb-usb: bulk message failed: -22 (2/0) [ 115.438294][ T990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.442632][ T990] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 115.442687][ T990] usb 2-1: media controller created [ 115.500244][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.575923][ T990] usb 2-1: selecting invalid altsetting 6 [ 115.575945][ T990] usb 2-1: digital interface selection failed (-22) [ 115.575959][ T990] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 115.598290][ T990] usb 2-1: setting power OFF [ 115.598313][ T990] dvb-usb: bulk message failed: -22 (2/0) [ 115.598331][ T990] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 115.598343][ T990] (NULL device *): no alternate interface [ 115.606522][ T6383] dvb-usb: bulk message failed: -22 (3/0) [ 115.748414][ T990] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 115.770356][ T990] usb 2-1: USB disconnect, device number 5 [ 115.845200][ T6409] tunl0: entered promiscuous mode [ 115.855476][ T6410] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.894237][ T6409] team0: Device tunl0 is of different type [ 116.046344][ T6413] fido_id[6413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 116.104251][ T37] audit: type=1326 audit(1758542333.664:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457400eec9 code=0x7ffc0000 [ 116.126195][ T37] audit: type=1326 audit(1758542333.684:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457400eec9 code=0x7ffc0000 [ 116.126244][ T37] audit: type=1326 audit(1758542333.684:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f457400eec9 code=0x7ffc0000 [ 116.132453][ T37] audit: type=1326 audit(1758542333.694:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457400eec9 code=0x7ffc0000 [ 116.132500][ T37] audit: type=1326 audit(1758542333.694:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f457400eec9 code=0x7ffc0000 [ 116.132537][ T37] audit: type=1326 audit(1758542333.694:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.3.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457400eec9 code=0x7ffc0000 [ 116.229094][ T6418] ======================================================= [ 116.229094][ T6418] WARNING: The mand mount option has been deprecated and [ 116.229094][ T6418] and is ignored by this kernel. Remove the mand [ 116.229094][ T6418] option from the mount to silence this warning. [ 116.229094][ T6418] ======================================================= [ 116.284027][ T6418] option changes via remount are deprecated (pid=6417 comm=syz.0.211) [ 116.765485][ T6431] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 116.765505][ T6431] UDF-fs: Scanning with blocksize 512 failed [ 116.786450][ T6431] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 116.786470][ T6431] UDF-fs: Scanning with blocksize 1024 failed [ 116.787423][ T6431] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 116.787438][ T6431] UDF-fs: Scanning with blocksize 2048 failed [ 116.788097][ T6431] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 116.788112][ T6431] UDF-fs: Scanning with blocksize 4096 failed [ 118.428194][ T6484] Bluetooth: MGMT ver 1.23 [ 118.954840][ T6501] syz.0.248 uses obsolete (PF_INET,SOCK_PACKET) [ 118.956384][ T1229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.106246][ T1229] usb 3-1: Using ep0 maxpacket: 32 [ 119.108582][ T1229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.108613][ T1229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 119.108654][ T1229] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 119.108675][ T1229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.195069][ T1229] usb 3-1: config 0 descriptor?? [ 119.645739][ T1229] shield 0003:0955:7214.0004: item fetching failed at offset 0/1 [ 119.652279][ T1229] shield 0003:0955:7214.0004: Parse failed [ 119.652354][ T1229] shield 0003:0955:7214.0004: probe with driver shield failed with error -22 [ 119.686363][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 119.686396][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 119.879862][ T990] usb 3-1: USB disconnect, device number 3 [ 120.715792][ T6535] netlink: 'syz.2.262': attribute type 32 has an invalid length. [ 120.715813][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'. [ 120.717859][ T6535] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 121.226477][ T990] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.381482][ T990] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 121.381511][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.381530][ T990] usb 1-1: Product: syz [ 121.381543][ T990] usb 1-1: Manufacturer: syz [ 121.381557][ T990] usb 1-1: SerialNumber: syz [ 121.448390][ T990] usb 1-1: config 0 descriptor?? [ 121.453410][ T990] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 121.487889][ T990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.488805][ T990] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 121.488860][ T990] usb 1-1: media controller created [ 121.550611][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.693861][ T6545] dvb-usb: bulk message failed: -22 (7/0) [ 121.772384][ T990] DVB: Unable to find symbol mt352_attach() [ 121.862685][ T990] DVB: Unable to find symbol nxt6000_attach() [ 121.862700][ T990] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 121.916091][ T990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 121.955663][ T990] dvb-usb: schedule remote query interval to 1000 msecs. [ 121.955686][ T990] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 121.955786][ T990] dvb-usb: bulk message failed: -22 (7/0) [ 121.955802][ T990] dvb-usb: bulk message failed: -22 (7/0) [ 122.030254][ T990] usb 1-1: USB disconnect, device number 4 [ 122.316316][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 122.392746][ T990] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 122.448983][ T6002] udevd[6002]: setting owner of /dev/bus/usb/001/004 to uid=0, gid=0 failed: No such file or directory [ 122.473776][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.473822][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 122.473853][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.514237][ T9] usb 4-1: config 0 descriptor?? [ 122.887299][ T6590] loop6: detected capacity change from 0 to 524287999 [ 123.004589][ T9] uclogic 0003:5543:0522.0005: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 123.195852][ T9] usb 4-1: USB disconnect, device number 5 [ 123.634495][ T6603] fido_id[6603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.750817][ T6611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.752661][ T6614] Invalid source name [ 123.752677][ T6614] UBIFS error (pid: 6614): cannot open "usrquota", error -22 [ 124.276288][ T5853] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 124.426390][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 124.429125][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.429155][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.429191][ T5853] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 124.429213][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.452203][ T5853] usb 2-1: config 0 descriptor?? [ 124.997963][ T5853] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 125.000099][ T6646] vlan0: entered promiscuous mode [ 125.072553][ T6646] team0: Port device vlan0 added [ 125.165966][ T31] usb 2-1: USB disconnect, device number 6 [ 125.250695][ T6647] fido_id[6647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 127.062509][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 127.062530][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.350'. [ 127.062555][ T6719] netlink: 'syz.3.350': attribute type 12 has an invalid length. [ 127.062567][ T6719] netlink: 'syz.3.350': attribute type 13 has an invalid length. [ 127.397396][ T6724] sp0: Synchronizing with TNC [ 127.856735][ T6743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 127.883678][ T6745] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 127.883733][ T6745] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 127.883782][ T6745] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 127.883829][ T6745] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 128.469054][ T6760] netlink: 'syz.3.369': attribute type 29 has an invalid length. [ 128.473000][ T6763] netlink: 'syz.3.369': attribute type 29 has an invalid length. [ 128.841924][ T6771] ipvlan2: entered promiscuous mode [ 129.486591][ T37] audit: type=1326 audit(1758542347.044:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f457400eec9 code=0x0 [ 129.967179][ T6798] binder: 6797:6798 ioctl c0306201 2000000001c0 returned -22 [ 131.652981][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'. [ 131.653038][ T6841] netlink: 'syz.3.405': attribute type 7 has an invalid length. [ 131.702347][ T37] audit: type=1800 audit(1758542349.204:12): pid=6843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.406" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 132.030919][ T6857] mmap: syz.4.413 (6857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.850961][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.851037][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.076372][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.172528][ T6901] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 133.172638][ T6901] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 133.172692][ T6901] ALSA: mixer_oss: invalid OSS volume 'GJJ³, priority 10 [ 134.866686][ T37] audit: type=1326 audit(1758542352.434:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6952 comm="syz.4.462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dcf23eec9 code=0x0 [ 135.696884][ T5853] tipc: Node number set to 1 [ 136.562916][ T7010] netlink: 'syz.1.487': attribute type 23 has an invalid length. [ 136.765511][ T7019] ntfs3: Bad value for 'gid' [ 136.765531][ T7019] ntfs3: Bad value for 'gid' [ 136.966741][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.147006][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 137.150245][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.150273][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.150309][ T5853] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 137.150331][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.209199][ T5853] usb 5-1: config 0 descriptor?? [ 137.439632][ T5853] usbhid 5-1:0.0: can't add hid device: -71 [ 137.439759][ T5853] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 137.485457][ T5853] usb 5-1: USB disconnect, device number 3 [ 137.981914][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.136320][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 138.139072][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 138.139104][ T5853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 138.139128][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.139153][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.141034][ T5853] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 138.141059][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.141077][ T5853] usb 5-1: SerialNumber: syz [ 138.244048][ T5853] usb 5-1: config 0 descriptor?? [ 138.264128][ T5853] hso 5-1:0.0: Can't find BULK OUT endpoint [ 138.481097][ T5853] usb 5-1: USB disconnect, device number 4 [ 139.114443][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.522'. [ 139.114480][ T7081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.006308][ T7111] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.191760][ T7192] loop9: detected capacity change from 0 to 7 [ 142.193258][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.193388][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.193499][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.193605][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.193744][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.193867][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.193974][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.194045][ T7192] ldm_validate_partition_table(): Disk read failed. [ 142.194093][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.194197][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.194301][ T7192] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.194451][ T7192] Dev loop9: unable to read RDB block 0 [ 142.194748][ T7192] loop9: unable to read partition table [ 142.194974][ T7192] loop9: partition table beyond EOD, truncated [ 142.195008][ T7192] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.195008][ T7192] ) failed (rc=-5) [ 142.676240][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.716703][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 142.848166][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 142.850936][ T5926] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 142.850965][ T5926] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 142.851001][ T5926] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.851024][ T5926] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.855719][ T5926] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.855745][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.855764][ T5926] usb 1-1: Product: syz [ 142.855777][ T5926] usb 1-1: Manufacturer: syz [ 142.855791][ T5926] usb 1-1: SerialNumber: syz [ 142.866394][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 142.872680][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.872709][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.872729][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.872769][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.872790][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.884711][ T31] usb 5-1: config 0 descriptor?? [ 143.334479][ T31] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 143.358897][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.358931][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.358959][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.358986][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.359012][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.359039][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.359065][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.359090][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.359117][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.359142][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 143.372093][ T5926] usb 1-1: USB disconnect, device number 5 [ 143.474521][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input8 [ 143.698344][ T31] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 143.790286][ T31] usb 5-1: USB disconnect, device number 5 [ 143.957486][ T6130] udevd[6130]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.139583][ T7230] fido_id[7230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 145.715200][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.620'. [ 145.955098][ T7302] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 145.955118][ T7302] netlink: 'syz.0.623': attribute type 2 has an invalid length. [ 145.955132][ T7302] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.623'. [ 146.668071][ T59] Bluetooth: hci0: command tx timeout [ 148.246276][ T5926] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 148.288017][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 148.407179][ T5926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.407204][ T5926] usb 1-1: config 0 has no interface number 0 [ 148.407252][ T5926] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 148.407457][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.469062][ T5926] usb 1-1: config 0 descriptor?? [ 148.508748][ T5926] usb 1-1: selecting invalid altsetting 1 [ 148.515831][ T5926] dvb_ttusb_budget: ttusb_init_controller: error [ 148.531033][ T5926] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 148.992382][ T5926] DVB: Unable to find symbol cx22700_attach() [ 149.229844][ T5926] DVB: Unable to find symbol tda10046_attach() [ 149.229859][ T5926] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 149.235610][ T5926] usb 1-1: USB disconnect, device number 6 [ 149.626431][ T7367] program syz.0.653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.886590][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 150.061098][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 155.099183][ T7397] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 155.320101][ T37] audit: type=1326 audit(1758542372.884:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.323532][ T37] audit: type=1326 audit(1758542372.884:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.374624][ T37] audit: type=1326 audit(1758542372.934:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.409688][ T37] audit: type=1326 audit(1758542372.974:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.410483][ T37] audit: type=1326 audit(1758542372.974:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.412094][ T37] audit: type=1326 audit(1758542372.974:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.412804][ T37] audit: type=1326 audit(1758542372.974:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff285fdeec9 code=0x7ffc0000 [ 155.888307][ T7403] ucma_write: process 316 (syz.1.670) changed security contexts after opening file descriptor, this is not allowed. [ 156.136215][ C0] sched: DL replenish lagged too much [ 156.286300][ T1229] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.456439][ T1229] usb 2-1: Using ep0 maxpacket: 8 [ 156.465474][ T1229] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 156.465504][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.465523][ T1229] usb 2-1: Product: syz [ 156.465536][ T1229] usb 2-1: Manufacturer: syz [ 156.465549][ T1229] usb 2-1: SerialNumber: syz [ 156.542865][ T1229] usb 2-1: config 0 descriptor?? [ 156.597349][ T1229] gspca_main: sq930x-2.14.0 probing 2770:930c [ 156.846281][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.127632][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 157.144946][ T44] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.144979][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.145014][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 157.169433][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.238480][ T1229] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 157.238582][ T1229] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 157.271755][ T44] usb 5-1: config 0 descriptor?? [ 157.291553][ T1229] usb 2-1: USB disconnect, device number 7 [ 158.071897][ T44] usb 5-1: USB disconnect, device number 6 [ 158.626306][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.680884][ T7420] process 'syz.1.678' launched './file0' with NULL argv: empty string added [ 158.831458][ T31] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 158.831489][ T31] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 158.831508][ T31] usb 3-1: Product: syz [ 158.831521][ T31] usb 3-1: Manufacturer: syz [ 158.831535][ T31] usb 3-1: SerialNumber: syz [ 158.930870][ T31] usb 3-1: config 0 descriptor?? [ 159.643316][ T31] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 159.643870][ T31] asix 3-1:0.0: probe with driver asix failed with error -71 [ 159.721590][ T31] usb 3-1: USB disconnect, device number 4 [ 162.268816][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 162.273264][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.225790][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.242805][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.244011][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.263451][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.265216][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.696983][ T7486] chnl_net:caif_netlink_parms(): no params data found [ 172.346468][ T59] Bluetooth: hci5: command tx timeout [ 173.123756][ T5155] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.140923][ T5155] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.141953][ T5155] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.143504][ T5155] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.144282][ T5155] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 174.426594][ T59] Bluetooth: hci5: command tx timeout [ 175.226427][ T59] Bluetooth: hci6: command tx timeout [ 176.506456][ T59] Bluetooth: hci5: command tx timeout [ 177.306373][ T59] Bluetooth: hci6: command tx timeout [ 178.586466][ T59] Bluetooth: hci5: command tx timeout [ 179.386330][ T59] Bluetooth: hci6: command tx timeout [ 180.472235][ T59] Bluetooth: hci4: link tx timeout [ 180.472521][ T59] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 180.474051][ T59] Bluetooth: hci4: link tx timeout [ 180.474064][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 180.955512][ T7524] loop6: detected capacity change from 0 to 7 [ 180.997073][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.997108][ C1] buffer_io_error: 4 callbacks suppressed [ 180.997119][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.000920][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.000949][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.003517][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.003546][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.004411][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.004488][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.005191][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.005218][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.007253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.007282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.132262][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.132296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.132400][ T7524] ldm_validate_partition_table(): Disk read failed. [ 181.132571][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.132595][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.132833][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.132857][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.133092][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.133116][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 181.135129][ T7524] Dev loop6: unable to read RDB block 0 [ 181.223900][ T7524] loop6: unable to read partition table [ 181.224140][ T7524] loop6: partition table beyond EOD, truncated [ 181.224172][ T7524] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 181.466590][ T5845] Bluetooth: hci6: command tx timeout [ 182.509252][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 183.781443][ T5845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.783807][ T5845] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.784841][ T5845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.786018][ T5845] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.831529][ T5845] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 188.026391][ T5155] Bluetooth: hci7: command tx timeout [ 188.948015][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 188.948053][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'. [ 190.106328][ T5155] Bluetooth: hci7: command tx timeout [ 190.666377][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 192.186447][ T5155] Bluetooth: hci7: command tx timeout [ 194.266718][ T5155] Bluetooth: hci7: command tx timeout [ 194.323828][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.323903][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.099326][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.100753][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.101010][ T7486] bridge_slave_0: entered allmulticast mode [ 203.132033][ T7486] bridge_slave_0: entered promiscuous mode [ 203.195891][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.196036][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.213883][ T7486] bridge_slave_1: entered allmulticast mode [ 203.229304][ T7486] bridge_slave_1: entered promiscuous mode [ 207.964583][ T7576] syz.1.734 (7576): drop_caches: 1 [ 211.790699][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.790737][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 211.790761][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.790813][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 223.557985][ T7591] veth3: entered promiscuous mode [ 224.206388][ T5926] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 224.404175][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.404207][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 224.404249][ T5926] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 224.404270][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.458589][ T5926] usb 2-1: config 0 descriptor?? [ 224.459643][ T7613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 224.942892][ T5926] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 224.942927][ T5926] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 224.942954][ T5926] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 224.942978][ T5926] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 224.943003][ T5926] sony 0003:1345:3008.000A: unknown main item tag 0x0 [ 225.063163][ T5926] sony 0003:1345:3008.000A: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 225.063196][ T5926] sony 0003:1345:3008.000A: failed to claim input [ 225.179052][ T5926] usb 2-1: USB disconnect, device number 8 [ 225.682767][ T7616] fido_id[7616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 231.078238][ T5155] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 231.080764][ T5155] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 231.081884][ T5155] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 231.083052][ T5155] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 231.083842][ T5155] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 233.146295][ T5155] Bluetooth: hci8: command tx timeout [ 233.692375][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 233.694732][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 233.695799][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 233.719726][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 233.720528][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 235.233970][ T59] Bluetooth: hci8: command tx timeout [ 235.786324][ T5852] Bluetooth: hci9: command tx timeout [ 237.306374][ T5852] Bluetooth: hci8: command tx timeout [ 237.872528][ T5852] Bluetooth: hci9: command tx timeout [ 239.388341][ T5852] Bluetooth: hci8: command tx timeout [ 239.948345][ T5852] Bluetooth: hci9: command tx timeout [ 240.209292][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 240.233553][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 240.234674][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 240.254069][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 240.254862][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 242.026684][ T59] Bluetooth: hci9: command tx timeout [ 242.346500][ T59] Bluetooth: hci10: command tx timeout [ 243.738740][ T5852] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 243.741500][ T5852] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 243.742566][ T5852] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 243.743717][ T5852] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 243.744495][ T5852] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 244.426375][ T5852] Bluetooth: hci10: command tx timeout [ 245.866383][ T5852] Bluetooth: hci11: command tx timeout [ 246.506494][ T5852] Bluetooth: hci10: command tx timeout [ 247.946239][ T5852] Bluetooth: hci11: command tx timeout [ 248.588599][ T5852] Bluetooth: hci10: command tx timeout [ 250.030254][ T5852] Bluetooth: hci11: command tx timeout [ 250.301015][ T7627] chnl_net:caif_netlink_parms(): no params data found [ 250.351111][ T7650] chnl_net:caif_netlink_parms(): no params data found [ 250.371552][ T7633] chnl_net:caif_netlink_parms(): no params data found [ 252.106280][ T5852] Bluetooth: hci11: command tx timeout [ 252.277411][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 252.285306][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 252.309008][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 252.310214][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 252.311000][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 254.346452][ T59] Bluetooth: hci12: command tx timeout [ 255.718965][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719103][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.426297][ T59] Bluetooth: hci12: command tx timeout [ 258.506348][ T59] Bluetooth: hci12: command tx timeout [ 260.586350][ T59] Bluetooth: hci12: command tx timeout [ 291.427762][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.445713][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.457077][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.458351][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.465012][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 293.546229][ T5852] Bluetooth: hci3: command tx timeout [ 293.758753][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.774989][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.784322][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.809072][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.811862][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.627905][ T59] Bluetooth: hci3: command tx timeout [ 295.866760][ T59] Bluetooth: hci5: command tx timeout [ 297.706484][ T5155] Bluetooth: hci3: command tx timeout [ 297.947898][ T5155] Bluetooth: hci5: command tx timeout [ 298.746382][ T5155] Bluetooth: hci6: command 0x0406 tx timeout [ 299.786148][ T5155] Bluetooth: hci3: command tx timeout [ 300.026785][ T5155] Bluetooth: hci5: command tx timeout [ 300.283704][ T5852] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 300.304220][ T5852] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 300.305599][ T5852] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 300.321481][ T5852] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 300.322505][ T5852] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 302.108047][ T5155] Bluetooth: hci5: command tx timeout [ 302.586432][ T5155] Bluetooth: hci13: command tx timeout [ 303.799046][ T5852] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 303.819155][ T5852] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 303.820347][ T5852] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 303.821662][ T5852] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 303.822889][ T5852] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 304.666353][ T5155] Bluetooth: hci13: command tx timeout [ 304.991261][ T38] INFO: task syz.0.664:7389 blocked for more than 143 seconds. [ 304.991287][ T38] Not tainted syzkaller #0 [ 304.991298][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.991310][ T38] task:syz.0.664 state:D stack:25128 pid:7389 tgid:7389 ppid:5837 task_flags:0x400040 flags:0x00004006 [ 304.991364][ T38] Call Trace: [ 304.991371][ T38] [ 304.991384][ T38] __schedule+0x16f3/0x4c20 [ 304.991427][ T38] ? trace_sched_exit_tp+0x36/0x110 [ 304.991465][ T38] ? __lock_acquire+0xab9/0xd20 [ 304.991488][ T38] ? __pfx___schedule+0x10/0x10 [ 304.991529][ T38] ? schedule+0x91/0x360 [ 304.991556][ T38] schedule+0x165/0x360 [ 304.991582][ T38] schedule_timeout+0x9a/0x270 [ 304.991604][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 304.991640][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 304.991663][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.991684][ T38] ? wait_for_completion+0x267/0x5d0 [ 304.991710][ T38] wait_for_completion+0x2bf/0x5d0 [ 304.991747][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 304.991772][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 304.991802][ T38] rcu_barrier+0x463/0x570 [ 304.991833][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 304.991853][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 304.991877][ T38] kvm_put_kvm+0xf8e/0x1670 [ 304.991906][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 304.991929][ T38] kvm_vm_release+0x46/0x50 [ 304.991950][ T38] __fput+0x458/0xa80 [ 304.991981][ T38] task_work_run+0x1d4/0x260 [ 304.992003][ T38] ? __pfx_task_work_run+0x10/0x10 [ 304.992035][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 304.992061][ T38] exit_to_user_mode_loop+0xec/0x110 [ 304.992084][ T38] do_syscall_64+0x2bd/0x3b0 [ 304.992101][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.992124][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.992142][ T38] ? clear_bhb_loop+0x60/0xb0 [ 304.992163][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.992181][ T38] RIP: 0033:0x7fda3d06eec9 [ 304.992201][ T38] RSP: 002b:00007ffe5bf0f858 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 304.992219][ T38] RAX: 0000000000000000 RBX: 0000000000025b39 RCX: 00007fda3d06eec9 [ 304.992232][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 304.992243][ T38] RBP: 00007fda3d2c7da0 R08: 0000000000000001 R09: 000000035bf0fb4f [ 304.992255][ T38] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007fda3d2c5fac [ 304.992268][ T38] R13: 00007fda3d2c5fa0 R14: ffffffffffffffff R15: 00007ffe5bf0f970 [ 304.992299][ T38] [ 304.992306][ T38] INFO: task syz.3.674:7409 blocked for more than 143 seconds. [ 304.992319][ T38] Not tainted syzkaller #0 [ 304.992328][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.992336][ T38] task:syz.3.674 state:D stack:23592 pid:7409 tgid:7409 ppid:5834 task_flags:0x400040 flags:0x00004006 [ 304.992376][ T38] Call Trace: [ 304.992382][ T38] [ 304.992394][ T38] __schedule+0x16f3/0x4c20 [ 304.992445][ T38] ? __pfx___schedule+0x10/0x10 [ 304.992493][ T38] rt_mutex_schedule+0x77/0xf0 [ 304.992511][ [ 304.992511][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 304.992546][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 304.992572][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 304.992595][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 304.992617][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 304.992649][ T38] ? rcu_barrier+0x4c/0x570 [ 304.992675][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 304.992700][ T38] ? rcu_barrier+0x4c/0x570 [ 304.992716][ T38] mutex_lock_nested+0x16a/0x1d0 [ 304.992736][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 304.992761][ T38] rcu_barrier+0x4c/0x570 [ 304.992790][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 304.992809][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 304.992833][ T38] kvm_put_kvm+0xf8e/0x1670 [ 304.992862][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 304.992884][ T38] kvm_vm_release+0x46/0x50 [ 304.992904][ T38] __fput+0x458/0xa80 [ 304.992935][ T38] task_work_run+0x1d4/0x260 [ 304.992956][ T38] ? __pfx_task_work_run+0x10/0x10 [ 304.992981][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 304.993007][ T38] exit_to_user_mode_loop+0xec/0x110 [ 304.993035][ T38] do_syscall_64+0x2bd/0x3b0 [ 304.993051][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.993074][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.993092][ T38] ? clear_bhb_loop+0x60/0xb0 [ 304.993113][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.993130][ T38] RIP: 0033:0x7f457400eec9 [ 304.993145][ T38] RSP: 002b:00007ffffee5c408 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 304.993162][ T38] RAX: 0000000000000000 RBX: 00007f4574267da0 RCX: 00007f457400eec9 [ 304.993175][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 304.993185][ T38] RBP: 00007f4574267da0 R08: 0000000000003c44 R09: 00000003fee5c6ff [ 304.993197][ T38] R10: 00000000005f9f64 R11: 0000000000000246 R12: 0000000000026958 [ 304.993209][ T38] R13: 00007f4574266090 R14: ffffffffffffffff R15: 00007ffffee5c520 [ 304.993241][ T38] [ 304.993271][ T38] [ 304.993271][ T38] Showing all locks held in the system: [ 304.993280][ T38] 3 locks held by kworker/0:1/10: [ 304.993292][ T38] 3 locks held by kworker/u8:1/13: [ 304.993302][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 304.993350][ T38] #1: ffffc90000127bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 304.993394][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 304.993435][ T38] 7 locks held by ktimers/0/16: [ 304.993446][ T38] 2 locks held by rcuc/0/20: [ 304.993458][ T38] 1 lock held by khungtaskd/38: [ 304.993468][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 304.993510][ T38] 3 locks held by kworker/u8:2/43: [ 304.993520][ T38] #0: ffff88802fd0d938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 304.993564][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 304.993609][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 304.993655][ T38] 4 locks held by kworker/u9:0/59: [ 304.993664][ T38] #0: ffff8880331fa938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 304.993709][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 304.993753][ T38] #2: ffff8880388c4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 304.993796][ T38] #3: ffff8880388c40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 304.993852][ T38] 3 locks held by kworker/u8:10/1509: [ 304.993875][ T38] 2 locks held by getty/5597: [ 304.993885][ T38] #0: ffff88823bf328a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 304.993932][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 304.993977][ T38] 1 lock held by syz-executor/5838: [ 304.993987][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 304.994045][ T38] 1 lock held by syz.0.664/7389: [ 304.994055][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 304.994096][ T38] 1 lock held by syz.3.674/7409: [ 304.994106][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 304.994147][ T38] 1 lock held by syz.2.697/7469: [ 304.994157][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 304.994198][ T38] 1 lock held by syz-executor/7486: [ 304.994208][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 304.994253][ T38] 2 locks held by syz-executor/7492: [ 304.994263][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 304.994307][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 304.994353][ T38] 2 locks held by syz-executor/7543: [ 304.994363][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 304.994406][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 304.994451][ T38] 2 locks held by kworker/0:16/7607: [ 304.994461][ T38] 2 locks held by syz-executor/7627: [ 304.994470][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 304.994522][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 304.994566][ T38] 2 locks held by syz-executor/7633: [ 304.994576][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 304.994625][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 304.994669][ T38] 1 lock held by syz.1.753/7637: [ 304.994678][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 304.994720][ T38] 2 locks held by syz-executor/7640: [ 304.994730][ T38] #0: ffffffff8f1f4108 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 304.994779][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 304.994823][ T38] 2 locks held by kworker/0:18/7644: [ 304.994833][ T38] 2 locks held by kworker/0:19/7645: [ 304.994843][ T38] 3 locks held by kworker/u8:13/7648: [ 304.994853][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 304.994898][ T38] #1: ffffc9000d577bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 304.994941][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 304.994982][ T38] 2 locks held by syz-executor/7650: [ 304.994992][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 304.995048][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 304.995095][ T38] 1 lock held by syz-executor/7676: [ 304.995104][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 304.995149][ T38] 1 lock held by syz-executor/7685: [ 304.995159][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 304.995201][ T38] 1 lock held by syz-executor/7690: [ 304.995211][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 304.995253][ T38] 1 lock held by syz-executor/7693: [ 304.995262][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 304.995303][ T38] 1 lock held by syz-executor/7698: [ 304.995313][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 304.995355][ T38] [ 304.995360][ T38] ============================================= [ 304.995360][ T38] [ 304.995376][ T38] NMI backtrace for cpu 1 [ 304.995398][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.995418][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.995427][ T38] Call Trace: [ 304.995434][ T38] [ 304.995441][ T38] dump_stack_lvl+0x189/0x250 [ 304.995468][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.995491][ T38] ? __pfx__printk+0x10/0x10 [ 304.995523][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 304.995547][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 304.995571][ T38] ? __pfx__printk+0x10/0x10 [ 304.995594][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 304.995617][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 304.995641][ T38] watchdog+0xf93/0xfe0 [ 304.995667][ T38] ? watchdog+0x1de/0xfe0 [ 304.995693][ T38] kthread+0x70e/0x8a0 [ 304.995719][ T38] ? __pfx_watchdog+0x10/0x10 [ 304.995738][ T38] ? __pfx_kthread+0x10/0x10 [ 304.995766][ T38] ? __pfx_kthread+0x10/0x10 [ 304.995790][ T38] ret_from_fork+0x436/0x7d0 [ 304.995815][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 304.995842][ T38] ? __switch_to_asm+0x39/0x70 [ 304.995856][ T38] ? __switch_to_asm+0x33/0x70 [ 304.995871][ T38] ? __pfx_kthread+0x10/0x10 [ 304.995895][ T38] ret_from_fork_asm+0x1a/0x30 [ 304.995926][ T38] [ 304.995933][ T38] Sending NMI from CPU 1 to CPUs 0: [ 304.995958][ C0] NMI backtrace for cpu 0 [ 304.995971][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 304.995988][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.995997][ C0] RIP: 0010:__lock_acquire+0x316/0xd20 [ 304.996016][ C0] Code: 8b 54 24 0c 83 e2 01 c1 e2 12 44 09 e2 41 c1 e6 14 41 09 d6 8b 54 24 10 c1 e2 13 c1 e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 <45> 89 44 c7 24 4c 89 7c 24 10 4d 8d 34 c7 81 e5 ff 1f 00 00 48 0f [ 304.996032][ C0] RSP: 0018:ffffc900001569a8 EFLAGS: 00000002 [ 304.996044][ C0] RAX: 000000000000001e RBX: ffffffff8d9a8d80 RCX: 000000000000000b [ 304.996053][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801ae85940 [ 304.996062][ C0] RBP: 000000000002000b R08: 0000000000000000 R09: ffffffff8172c165 [ 304.996071][ C0] R10: ffffc90000156bf8 R11: ffffffff81aaf310 R12: 0000000000020000 [ 304.996082][ C0] R13: 0000000000000000 R14: 0000000000020000 R15: ffff88801ae86460 [ 304.996092][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 304.996104][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.996115][ C0] CR2: 00005592f56b33e8 CR3: 00000000265b6000 CR4: 00000000003526f0 [ 304.996129][ C0] Call Trace: [ 304.996134][ C0] [ 304.996144][ C0] ? unwind_next_frame+0xa5/0x2390 [ 304.996162][ C0] lock_acquire+0x120/0x360 [ 304.996178][ C0] ? unwind_next_frame+0xa5/0x2390 [ 304.996199][ C0] ? unwind_next_frame+0xa5/0x2390 [ 304.996216][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 304.996231][ C0] ? unwind_next_frame+0xa5/0x2390 [ 304.996248][ C0] unwind_next_frame+0xc2/0x2390 [ 304.996265][ C0] ? unwind_next_frame+0xa5/0x2390 [ 304.996290][ C0] ? unwind_next_frame+0xa5/0x2390 [ 304.996307][ C0] ? nft_do_chain+0x409/0x1920 [ 304.996324][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.996340][ C0] arch_stack_walk+0x11c/0x150 [ 304.996361][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 304.996377][ C0] stack_trace_save+0x9c/0xe0 [ 304.996392][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 304.996405][ C0] ? kasan_save_free_info+0x46/0x50 [ 304.996420][ C0] ? consume_skb+0x9e/0xf0 [ 304.996437][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 304.996452][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 304.996469][ C0] ? __lock_acquire+0xab9/0xd20 [ 304.996485][ C0] kasan_save_track+0x3e/0x80 [ 304.996500][ C0] ? kasan_save_track+0x3e/0x80 [ 304.996514][ C0] ? kasan_save_free_info+0x46/0x50 [ 304.996527][ C0] ? __kasan_slab_free+0x5b/0x80 [ 304.996542][ C0] ? kmem_cache_free+0x195/0x510 [ 304.996559][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 304.996573][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 304.996587][ C0] ? nft_do_chain+0x409/0x1920 [ 304.996600][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 304.996634][ C0] kasan_save_free_info+0x46/0x50 [ 304.996647][ C0] __kasan_slab_free+0x5b/0x80 [ 304.996662][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 304.996676][ C0] kmem_cache_free+0x195/0x510 [ 304.996696][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 304.996713][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 304.996729][ C0] ? nf_ip_checksum+0x13c/0x510 [ 304.996746][ C0] nft_synproxy_do_eval+0x345/0x570 [ 304.996763][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 304.996786][ C0] nft_do_chain+0x409/0x1920 [ 304.996806][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 304.996832][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 304.996853][ C0] nft_do_chain_inet+0x25d/0x340 [ 304.996868][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 304.996882][ C0] ? __lock_acquire+0xab9/0xd20 [ 304.996903][ C0] ? NF_HOOK+0x9a/0x3a0 [ 304.996920][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 304.996935][ C0] nf_hook_slow+0xc2/0x220 [ 304.996955][ C0] NF_HOOK+0x206/0x3a0 [ 304.996973][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 304.996990][ C0] ? NF_HOOK+0x9a/0x3a0 [ 304.997006][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 304.997022][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 304.997041][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 304.997059][ C0] ? skb_dst+0x4f/0xd0 [ 304.997076][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 304.997094][ C0] NF_HOOK+0x30c/0x3a0 [ 304.997112][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 304.997128][ C0] ? NF_HOOK+0x9a/0x3a0 [ 304.997144][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 304.997162][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 304.997183][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 304.997199][ C0] __netif_receive_skb+0x143/0x380 [ 304.997216][ C0] ? rt_spin_unlock+0x65/0x80 [ 304.997233][ C0] ? process_backlog+0x27b/0x900 [ 304.997250][ C0] process_backlog+0x31e/0x900 [ 304.997272][ C0] __napi_poll+0xb6/0x540 [ 304.997294][ C0] net_rx_action+0x707/0xe00 [ 304.997318][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 304.997349][ C0] handle_softirqs+0x22f/0x710 [ 304.997370][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 304.997391][ C0] run_ktimerd+0xcf/0x190 [ 304.997408][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 304.997426][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 304.997442][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 304.997459][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 304.997474][ C0] smpboot_thread_fn+0x53f/0xa60 [ 304.997490][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 304.997510][ C0] kthread+0x70e/0x8a0 [ 304.997529][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 304.997545][ C0] ? __pfx_kthread+0x10/0x10 [ 304.997565][ C0] ? __pfx_kthread+0x10/0x10 [ 304.997584][ C0] ret_from_fork+0x436/0x7d0 [ 304.997601][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 304.997620][ C0] ? __switch_to_asm+0x39/0x70 [ 304.997633][ C0] ? __switch_to_asm+0x33/0x70 [ 304.997645][ C0] ? __pfx_kthread+0x10/0x10 [ 304.997664][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.997683][ C0] [ 305.316086][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 305.316104][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.316125][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.316136][ T38] Call Trace: [ 305.316144][ T38] [ 305.316152][ T38] dump_stack_lvl+0x99/0x250 [ 305.316180][ T38] ? __asan_memcpy+0x40/0x70 [ 305.316200][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.316223][ T38] ? __pfx__printk+0x10/0x10 [ 305.316254][ T38] vpanic+0x281/0x750 [ 305.316279][ T38] ? __pfx_vpanic+0x10/0x10 [ 305.316301][ T38] ? preempt_schedule+0xae/0xc0 [ 305.316326][ T38] ? preempt_schedule_common+0x83/0xd0 [ 305.316355][ T38] panic+0xb9/0xc0 [ 305.316376][ T38] ? __pfx_panic+0x10/0x10 [ 305.316400][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 305.316426][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 305.316450][ T38] watchdog+0xfd2/0xfe0 [ 305.316476][ T38] ? watchdog+0x1de/0xfe0 [ 305.316502][ T38] kthread+0x70e/0x8a0 [ 305.316529][ T38] ? __pfx_watchdog+0x10/0x10 [ 305.316549][ T38] ? __pfx_kthread+0x10/0x10 [ 305.316576][ T38] ? __pfx_kthread+0x10/0x10 [ 305.316601][ T38] ret_from_fork+0x436/0x7d0 [ 305.316625][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 305.316653][ T38] ? __switch_to_asm+0x39/0x70 [ 305.316667][ T38] ? __switch_to_asm+0x33/0x70 [ 305.316682][ T38] ? __pfx_kthread+0x10/0x10 [ 305.316706][ T38] ret_from_fork_asm+0x1a/0x30 [ 305.316738][ T38] [ 305.317010][ T38] Kernel Offset: disabled