last executing test programs: 4m0.471274698s ago: executing program 2 (id=769): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) 4m0.280355607s ago: executing program 2 (id=772): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080521}, 0x0) 3m58.451591464s ago: executing program 2 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000380)=""/149) 3m58.208497099s ago: executing program 2 (id=787): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 3m57.932758386s ago: executing program 2 (id=791): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 3m57.648767861s ago: executing program 2 (id=796): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m42.487728168s ago: executing program 32 (id=796): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 3m35.01498598s ago: executing program 0 (id=1037): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) 3m34.909023803s ago: executing program 0 (id=1038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) unshare(0x2c020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x27) 3m34.712794043s ago: executing program 0 (id=1040): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x2, [{{0xa, 0x4e21, 0xb, @loopback, 0x2}}, {{0xa, 0x4e24, 0x9, @loopback}}]}, 0x190) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @loopback={0xa4}, 0xfffffe01}}}, 0x108) 3m34.509736511s ago: executing program 0 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 3m34.204112407s ago: executing program 0 (id=1045): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) setreuid(0xffffffffffffffff, 0xee01) write$tcp_mem(r0, 0x0, 0x0) 3m33.210635282s ago: executing program 0 (id=1053): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/162, 0xa2}], 0x1) 3m32.622812195s ago: executing program 33 (id=1053): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) readv(r0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/162, 0xa2}], 0x1) 3m24.889913899s ago: executing program 3 (id=1105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m24.551762059s ago: executing program 3 (id=1107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009600004000002026f3"]) 3m23.776616597s ago: executing program 3 (id=1111): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 3m23.608895115s ago: executing program 3 (id=1113): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000185000000750000009500"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m23.425947092s ago: executing program 3 (id=1117): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r1, 0x0, 0x0) 3m23.115748407s ago: executing program 3 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 3m7.804848463s ago: executing program 34 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m49.581241276s ago: executing program 5 (id=1956): syz_usb_connect(0x4, 0xf5, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0xf1, 0x62, 0x20, 0xeb1a, 0x8179, 0x1e73, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3d, 0x0, 0x3, 0xf9, 0xca, 0xb4, 0x0, [], [{{0x9, 0x5, 0xc, 0x10, 0x40, 0x4, 0x2, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xc}, @generic={0x75, 0x21, "d92dc6d1c32e6aef20e42b80634656d887340dd570238e18e0ad19b34f0cd6160529793fb0a2694157fe9c05499aa4dcb0145acd36641c4867b47fb36d35778f75c08fdb7d39093d0a754dc4dfe19f9e4164e42a778c2dbc9edb0a0097bda2917e86908e943bd349452f888cda38cc94ab4fb0"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6e, 0xff}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x5, 0xcc, 0x3, [@generic={0x3a, 0x24, "8a14fe79fbcfaf694654197e1f50c420000c1c0872821becd425efbafe5700c3ec846ac0c56596aa72db2ae938fc8e7612a4c1b1af8cbea5"}]}}]}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f00000000c0)=ANY=[]) 1m47.629974141s ago: executing program 5 (id=1963): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_init(0xf00, 0x0) 1m47.488683553s ago: executing program 4 (id=1965): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000000)=@attr_arm64={0x0, 0x1, 0x1, 0x0}) 1m47.151268436s ago: executing program 4 (id=1971): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000001280), &(0x7f0000001200), 0x0}) 1m47.047889967s ago: executing program 6 (id=1972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x9) 1m46.592846493s ago: executing program 6 (id=1976): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 1m46.011764589s ago: executing program 5 (id=1982): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) 1m45.198655219s ago: executing program 4 (id=1986): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x41) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) 1m43.873144975s ago: executing program 4 (id=1989): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0x11) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x280000b, 0x11, r0, 0x0) 1m43.807340409s ago: executing program 5 (id=1990): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x80000006}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1m43.466594296s ago: executing program 1 (id=1991): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 1m43.372724679s ago: executing program 4 (id=1992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30"], 0x7c}}, 0x0) 1m43.172533536s ago: executing program 1 (id=1993): unshare(0x8000000) semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) 1m42.890831995s ago: executing program 1 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 1m42.616698453s ago: executing program 1 (id=1995): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 1m40.01243252s ago: executing program 7 (id=1996): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000480)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0\x01%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A5K\x1cxT1_\x05XCk\x1d\x1c$ZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/\x00\x00\x00\x00\x00\x00\x00\x00\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2{&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\x06\x00\x00\x00\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5XMw%x\x9f\x984\x93q\x00Ls\xaar\x9d\nJ\xf2<\xa8\x06\xa8\xcb\xbe\x96wR\xc0n`\xc7\x90e=\xb8~\x7f=\xba\xdd\x15Q\xae\xdeGUD\xca%\'\x7fk9N\xb4\xf3\x03\xcc[ee8F7\xba\xec\x95\xe3\xef\xfc\xed\xb7\xe3Q\xd7\xed\xa0\xd3t\xf8-\x04\xca!y\"\x04\x80y\xcb+\xc7rh\xd3\x85\xb1\xc7\x87\x85\x93Jt\xba?\x82Bh\x90\xc1\\3\xde~K\x91}\xdd@~r\b\x00\x00\x00MJ\x1e\x86\xdb\xa9\xbd\xdeI\xfe5\xfe\xdb\xde\xd2vY\xe7\f\x92\xa7]\xbd\xfc\x98\x1d\xfe\xb7\x1bNck\xd8\xef\xfe\xa1\x11I\x18-\x9b\xd4\xc5\xad\x8eE\xbd\x86\x81\x9a\xc8\xeav)\xd1\xdc\x8f\xe9\x05\x8c\xd3R\xe5QC\xd4\xdf\xbc\xfb.Ww\xa8Is\xcb\x96', 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0xff64000) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 1m39.755258375s ago: executing program 7 (id=1997): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="ed4e03000000bbbbbbbbbbbb86dd6a6bbe4d0064110000000000000000000000ffffac1414aaff02000000000000000000000000000142204e20006490"], 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 1m39.319629015s ago: executing program 7 (id=1998): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 1m38.582681344s ago: executing program 7 (id=1999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004) 1m38.451038352s ago: executing program 7 (id=2000): r0 = userfaultfd(0x801) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m38.317927853s ago: executing program 7 (id=2001): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) sendmmsg$unix(r0, &(0x7f0000004a80)=[{{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="bd", 0x1}], 0x1, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x533509e98f3a73c}}], 0x2, 0x1d3) 1m38.164617958s ago: executing program 6 (id=2002): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) 1m38.113880707s ago: executing program 6 (id=2003): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x48880}, 0x0) 1m38.019023218s ago: executing program 6 (id=2004): ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) r0 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) 1m37.945604073s ago: executing program 6 (id=2005): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1m35.363621121s ago: executing program 1 (id=2006): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 1m35.281400564s ago: executing program 5 (id=2007): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r0, 0x0, 0x0) 1m31.667997793s ago: executing program 5 (id=2008): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a35a, r1, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m31.667573513s ago: executing program 4 (id=2009): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m7.413458547s ago: executing program 1 (id=2010): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71181d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.199419658s ago: executing program 35 (id=2005): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 0s ago: executing program 36 (id=2008): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0)=[{}, {0x2, 0x1}]}, 0x90) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a35a, r1, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) kernel console output (not intermixed with test programs): sing dummy_hcd [ 130.535139][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 130.535165][ T44] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 130.535186][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.535672][ T6258] syz.4.129 (6258) used greatest stack depth: 18216 bytes left [ 130.540684][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.540714][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.540735][ T44] usb 4-1: Product: syz [ 130.540751][ T44] usb 4-1: Manufacturer: syz [ 130.540765][ T44] usb 4-1: SerialNumber: syz [ 131.433750][ T44] usb 4-1: 0:2 : does not exist [ 131.462599][ T6284] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.665832][ T44] usb 4-1: USB disconnect, device number 4 [ 132.747938][ T6314] capability: warning: `syz.4.153' uses deprecated v2 capabilities in a way that may be insecure [ 132.772422][ T38] audit: type=1400 audit(1756855177.197:2): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6311 comm="syz.4.153" name="27" dev="tmpfs" ino=149 [ 132.868080][ T6320] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 134.132301][ T6366] netlink: 'syz.1.175': attribute type 11 has an invalid length. [ 134.312386][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.475969][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.476013][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.481100][ T31] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 134.481131][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.481152][ T31] usb 1-1: Product: syz [ 134.481167][ T31] usb 1-1: Manufacturer: syz [ 134.481182][ T31] usb 1-1: SerialNumber: syz [ 134.544560][ T31] usb 1-1: config 0 descriptor?? [ 134.567878][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 134.619172][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.632870][ T31] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 134.632931][ T31] usb 1-1: media controller created [ 134.702969][ T38] audit: type=1326 audit(1756855179.147:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6381 comm="syz.1.182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbf993ebe9 code=0x0 [ 134.709569][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.861831][ T31] DVB: Unable to find symbol tda10046_attach() [ 134.861860][ T31] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 134.861884][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 134.971195][ T6389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.184'. [ 135.508191][ T31] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 135.542153][ T31] usb 1-1: USB disconnect, device number 3 [ 135.582399][ T3118] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.756884][ T3118] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 135.756914][ T3118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.767410][ T3118] usb 4-1: config 0 descriptor?? [ 135.790440][ T3118] cp210x 4-1:0.0: cp210x converter detected [ 136.195972][ T3118] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 136.235027][ T3118] usb 4-1: cp210x converter now attached to ttyUSB0 [ 136.414584][ T5928] usb 4-1: USB disconnect, device number 5 [ 136.459322][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 136.556883][ T38] audit: type=1804 audit(1756855181.007:4): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.207" name="/newroot/39/bus" dev="tmpfs" ino=216 res=1 errno=0 [ 136.619857][ T5928] cp210x 4-1:0.0: device disconnected [ 136.782326][ T3118] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.932374][ T3118] usb 3-1: Using ep0 maxpacket: 32 [ 136.934414][ T3118] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 136.934438][ T3118] usb 3-1: config 0 has no interface number 0 [ 136.934483][ T3118] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 136.934507][ T3118] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 136.934530][ T3118] usb 3-1: config 0 interface 126 has no altsetting 0 [ 136.937387][ T3118] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 136.937414][ T3118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.937434][ T3118] usb 3-1: Product: syz [ 136.937448][ T3118] usb 3-1: Manufacturer: syz [ 136.937463][ T3118] usb 3-1: SerialNumber: syz [ 136.951038][ T3118] usb 3-1: config 0 descriptor?? [ 136.963108][ T6436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.965107][ T6436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 137.406082][ T3118] ir_usb 3-1:0.126: IR Dongle converter detected [ 137.612674][ T3118] usb 3-1: IR Dongle converter now attached to ttyUSB0 [ 137.824123][ T44] usb 3-1: USB disconnect, device number 2 [ 137.856826][ T44] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 137.857479][ T44] ir_usb 3-1:0.126: device disconnected [ 138.032706][ T5960] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 138.175681][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.175788][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.198018][ T5960] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.198048][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.227719][ T5960] usb 5-1: config 0 descriptor?? [ 138.244927][ T5960] cp210x 5-1:0.0: cp210x converter detected [ 138.654168][ T5960] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 138.705163][ T5960] usb 5-1: cp210x converter now attached to ttyUSB0 [ 138.860594][ T5960] usb 5-1: USB disconnect, device number 2 [ 138.877224][ T5960] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 138.912501][ T5921] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.998470][ T5960] cp210x 5-1:0.0: device disconnected [ 139.096885][ T5921] usb 3-1: config 0 has no interfaces? [ 139.096924][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 139.096949][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.135279][ T5921] usb 3-1: config 0 descriptor?? [ 139.363727][ T5921] usb 3-1: USB disconnect, device number 3 [ 139.468306][ T3118] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.612514][ T3118] usb 1-1: Using ep0 maxpacket: 8 [ 139.618967][ T3118] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 139.618997][ T3118] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.619016][ T3118] usb 1-1: Product: syz [ 139.619030][ T3118] usb 1-1: Manufacturer: syz [ 139.619045][ T3118] usb 1-1: SerialNumber: syz [ 139.656299][ T3118] usb 1-1: config 0 descriptor?? [ 139.713946][ T3118] gspca_main: sq930x-2.14.0 probing 2770:930c [ 139.792461][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 139.966165][ T5921] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.966458][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.966482][ T5921] usb 5-1: Product: syz [ 139.966498][ T5921] usb 5-1: Manufacturer: syz [ 139.966514][ T5921] usb 5-1: SerialNumber: syz [ 140.041961][ T5921] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.204259][ T5928] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 140.479859][ T3118] gspca_sq930x: ucbus_write failed -71 [ 140.692456][ T3118] gspca_sq930x: Sensor ov9630 not yet treated [ 140.692658][ T3118] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 140.719422][ T3118] usb 1-1: USB disconnect, device number 4 [ 141.993794][ T5928] usb 5-1: Service connection timeout for: 257 [ 141.993818][ T5928] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 144.999452][ T3118] usb 5-1: USB disconnect, device number 3 [ 145.015673][ T5928] ath9k_htc: Failed to initialize the device [ 145.019964][ T3118] usb 5-1: ath9k_htc: USB layer deinitialized [ 145.228934][ T6540] netlink: 'syz.3.252': attribute type 83 has an invalid length. [ 145.648256][ T6556] syz.1.259 uses obsolete (PF_INET,SOCK_PACKET) [ 146.342486][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.496138][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.496175][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.496216][ T5928] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 146.496240][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.521427][ T5928] usb 2-1: config 0 descriptor?? [ 147.032313][ T5928] hid-led 0003:04D8:F372.0001: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 147.119834][ T5928] hid-led 0003:04D8:F372.0001: Greynut Luxafor initialized [ 147.212200][ T5928] usb 2-1: USB disconnect, device number 4 [ 147.252146][ T69] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 147.294211][ T13] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 147.312571][ T69] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 147.345004][ T69] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 147.361586][ T991] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 147.372187][ T991] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 147.375956][ T991] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 147.384515][ T991] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 147.396684][ T13] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 147.420058][ T69] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 147.432022][ T69] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 147.446914][ T69] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 147.452076][ T69] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 147.475166][ T991] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 147.478898][ T1028] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 147.498617][ T1028] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 147.509938][ T991] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 147.523134][ T13] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 147.802498][ T38] audit: type=1326 audit(1756855192.247:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.805045][ T38] audit: type=1326 audit(1756855192.257:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.817159][ T38] audit: type=1326 audit(1756855192.267:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.817655][ T38] audit: type=1326 audit(1756855192.267:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.840535][ T38] audit: type=1326 audit(1756855192.267:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.840601][ T38] audit: type=1326 audit(1756855192.277:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.870099][ T38] audit: type=1326 audit(1756855192.317:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.870165][ T38] audit: type=1326 audit(1756855192.317:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5b015ebe9 code=0x7ffc0000 [ 147.870645][ T38] audit: type=1326 audit(1756855192.317:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5b00fadb9 code=0x7ffc0000 [ 147.871047][ T38] audit: type=1326 audit(1756855192.317:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5b00fadb9 code=0x7ffc0000 [ 148.612431][ T5960] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.767101][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.767136][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.767174][ T5960] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 148.767197][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.818766][ T5960] usb 5-1: config 0 descriptor?? [ 148.973592][ T6632] netlink: 'syz.3.294': attribute type 3 has an invalid length. [ 148.973618][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 149.260317][ T5960] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 149.290168][ T5960] hid-thrustmaster 0003:044F:B65D.0002: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 149.290482][ T5960] hid-thrustmaster 0003:044F:B65D.0002: Wrong number of endpoints? [ 149.464458][ C1] hid-thrustmaster 0003:044F:B65D.0002: Unknown packet type 0x0, unable to proceed further with wheel init [ 149.667069][ T5960] usb 5-1: USB disconnect, device number 4 [ 151.027258][ T6668] netlink: 88 bytes leftover after parsing attributes in process `syz.0.308'. [ 151.222569][ T5698] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.393298][ T5698] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.393330][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.429881][ T5698] usb 3-1: config 0 descriptor?? [ 151.452870][ T5698] cp210x 3-1:0.0: cp210x converter detected [ 151.858874][ T5698] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 152.071991][ T5698] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 152.072018][ T5698] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 152.102720][ T5698] usb 3-1: cp210x converter now attached to ttyUSB0 [ 152.105824][ T5698] usb 3-1: USB disconnect, device number 4 [ 152.112050][ T5698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.135343][ T5698] cp210x 3-1:0.0: device disconnected [ 152.625543][ T6693] batman_adv: batadv0: Adding interface: gretap1 [ 152.625563][ T6693] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.625599][ T6693] batman_adv: batadv0: Interface activated: gretap1 [ 153.743014][ T6716] program syz.1.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.822467][ T6734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 155.107794][ T6742] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 155.576811][ T6758] 2g,{: renamed from lo (while UP) [ 156.749673][ T6781] loop7: detected capacity change from 0 to 7 [ 156.796252][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.796354][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.820602][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.820640][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.844377][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.844410][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.844964][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.845000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.846129][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.846158][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.846438][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.846465][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.847145][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.847174][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.847283][ T6781] ldm_validate_partition_table(): Disk read failed. [ 156.847468][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.847494][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.847716][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.847759][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.871235][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.871275][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 156.871713][ T6781] Dev loop7: unable to read RDB block 0 [ 156.878177][ T6781] loop7: unable to read partition table [ 156.878454][ T6781] loop7: partition table beyond EOD, truncated [ 156.878493][ T6781] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 157.865910][ T5921] kernel write not supported for file /sg0 (pid: 5921 comm: kworker/0:4) [ 158.498629][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.498842][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.499012][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.499175][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.499337][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.499501][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.499720][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.499923][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.500072][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.500237][ T6834] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 158.805231][ T6836] mkiss: ax0: crc mode is auto. [ 159.537610][ T6861] mmap: syz.3.388 (6861) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.712362][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 160.777918][ T6890] Zero length message leads to an empty skb [ 160.877163][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.877199][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.877240][ T31] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 160.877266][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.923798][ T31] usb 2-1: config 0 descriptor?? [ 161.386773][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.386812][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.386840][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.386867][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.386894][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.386921][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.386956][ T31] steelseries 0003:1038:12B6.0003: unknown main item tag 0x0 [ 161.391820][ T31] steelseries 0003:1038:12B6.0003: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 161.596462][ T6908] ======================================================= [ 161.596462][ T6908] WARNING: The mand mount option has been deprecated and [ 161.596462][ T6908] and is ignored by this kernel. Remove the mand [ 161.596462][ T6908] option from the mount to silence this warning. [ 161.596462][ T6908] ======================================================= [ 161.804808][ T5921] usb 2-1: USB disconnect, device number 5 [ 162.722468][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 164.581892][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 164.581921][ T7009] netlink: 'syz.2.451': attribute type 9 has an invalid length. [ 164.619498][ T7009] macvlan2: entered allmulticast mode [ 164.619519][ T7009] veth0_macvtap: entered allmulticast mode [ 164.722413][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.876943][ T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.876982][ T44] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.877026][ T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.877051][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.937430][ T7003] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.953390][ T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.205395][ T44] usb 2-1: USB disconnect, device number 6 [ 166.738596][ T7066] netlink: 'syz.4.477': attribute type 1 has an invalid length. [ 166.902447][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.919507][ T7073] netlink: 'syz.2.480': attribute type 3 has an invalid length. [ 167.060275][ T44] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 167.060306][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.060326][ T44] usb 1-1: Product: syz [ 167.060341][ T44] usb 1-1: Manufacturer: syz [ 167.060355][ T44] usb 1-1: SerialNumber: syz [ 167.106209][ T44] usb 1-1: config 0 descriptor?? [ 167.317589][ T44] usb 1-1: ignoring: probably an ADSL modem [ 167.472399][ T7091] program syz.3.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.720958][ T44] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 167.850730][ T7102] ptrace attach of "./syz-executor exec"[5842] was attempted by "TIPCv2 [ 167.929905][ T44] usb 1-1: USB disconnect, device number 5 [ 168.045470][ T7106] tun0: tun_chr_ioctl cmd 1074812118 [ 168.216842][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.221649][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.972393][ T5698] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 169.036336][ T7137] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.040292][ T7137] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.135935][ T5698] usb 2-1: config 7 has an invalid interface number: 101 but max is 0 [ 169.135966][ T5698] usb 2-1: config 7 has no interface number 0 [ 169.139235][ T5698] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 169.139263][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.139284][ T5698] usb 2-1: Product: syz [ 169.139299][ T5698] usb 2-1: Manufacturer: syz [ 169.139314][ T5698] usb 2-1: SerialNumber: syz [ 169.262369][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.416589][ T44] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 169.416679][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.470586][ T44] usb 5-1: config 0 descriptor?? [ 170.041352][ T5698] as10x_usb: device has been detected [ 170.051435][ T5698] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 170.117934][ T5698] usb 2-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 170.199395][ T44] ath6kl: mismatched byte count 0 vs. expected 12 [ 170.211256][ T44] ath6kl: Failed to init ath6kl core: -22 [ 170.229633][ T44] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 170.354152][ T5698] as10x_usb: error during firmware upload part1 [ 170.354816][ T5698] Registered device Elgato EyeTV DTT Deluxe [ 170.373755][ T5698] usb 2-1: USB disconnect, device number 7 [ 170.404446][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.406445][ T5928] usb 5-1: USB disconnect, device number 5 [ 170.454710][ T5698] Unregistered device Elgato EyeTV DTT Deluxe [ 170.456991][ T5698] as10x_usb: device has been disconnected [ 170.598882][ T5921] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.598913][ T5921] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.598932][ T5921] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.598952][ T5921] usb 4-1: config 220 has no interface number 2 [ 170.599028][ T5921] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.599055][ T5921] usb 4-1: config 220 interface 0 has no altsetting 0 [ 170.599075][ T5921] usb 4-1: config 220 interface 76 has no altsetting 0 [ 170.599094][ T5921] usb 4-1: config 220 interface 1 has no altsetting 0 [ 170.613620][ T5921] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.613655][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.613679][ T5921] usb 4-1: Product: syz [ 170.613695][ T5921] usb 4-1: Manufacturer: syz [ 170.613710][ T5921] usb 4-1: SerialNumber: syz [ 170.976430][ T5921] usb 4-1: selecting invalid altsetting 0 [ 170.995853][ T5921] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 170.995905][ T5921] usb 4-1: No valid video chain found. [ 171.071114][ T5921] usb 4-1: selecting invalid altsetting 0 [ 171.071158][ T5921] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 171.132397][ T5921] usb 4-1: USB disconnect, device number 6 [ 171.188287][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.189153][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.453299][ T7185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.531'. [ 171.453325][ T7185] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 171.972917][ T38] kauditd_printk_skb: 213 callbacks suppressed [ 171.972935][ T38] audit: type=1326 audit(1756855216.427:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.977173][ T38] audit: type=1326 audit(1756855216.427:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.977560][ T38] audit: type=1326 audit(1756855216.427:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.991380][ T38] audit: type=1326 audit(1756855216.427:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.991987][ T38] audit: type=1326 audit(1756855216.437:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.993151][ T38] audit: type=1326 audit(1756855216.447:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.993452][ T38] audit: type=1326 audit(1756855216.447:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.993906][ T38] audit: type=1326 audit(1756855216.447:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 171.997360][ T38] audit: type=1326 audit(1756855216.447:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 171.997780][ T38] audit: type=1326 audit(1756855216.447:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7194 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f891b1aebe9 code=0x7ffc0000 [ 172.262527][ T5857] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 172.426512][ T5857] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 172.426552][ T5857] usb 3-1: config 7 has no interface number 0 [ 172.429326][ T5857] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 172.429352][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.429370][ T5857] usb 3-1: Product: syz [ 172.429384][ T5857] usb 3-1: Manufacturer: syz [ 172.429397][ T5857] usb 3-1: SerialNumber: syz [ 172.620772][ T7210] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.621805][ T7210] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.293165][ T5857] as10x_usb: device has been detected [ 173.294084][ T5857] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 173.377121][ T5857] usb 3-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 173.599740][ T5857] as10x_usb: error during firmware upload part1 [ 173.600445][ T5857] Registered device Elgato EyeTV DTT Deluxe [ 173.608226][ T5857] usb 3-1: USB disconnect, device number 5 [ 173.626748][ T7240] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.555'. [ 173.711564][ T5857] Unregistered device Elgato EyeTV DTT Deluxe [ 173.763363][ T5857] as10x_usb: device has been disconnected [ 174.384252][ T7256] netlink: 71 bytes leftover after parsing attributes in process `syz.0.564'. [ 175.443610][ T5698] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 175.595170][ T5698] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 175.595200][ T5698] usb 1-1: config 7 has no interface number 0 [ 175.599488][ T5698] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 175.599514][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.599534][ T5698] usb 1-1: Product: syz [ 175.599548][ T5698] usb 1-1: Manufacturer: syz [ 175.599563][ T5698] usb 1-1: SerialNumber: syz [ 175.799665][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 176.278288][ T7315] UHID_CREATE from different security context by process 293 (syz.2.592), this is not allowed. [ 176.364363][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.364410][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.364438][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.364843][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.364872][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.364898][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.364924][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.365338][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.365367][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.365401][ T44] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 176.483045][ T5698] as10x_usb: device has been detected [ 176.484059][ T5698] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 176.487059][ T44] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 176.561751][ T5698] usb 1-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 176.592488][ T7324] program syz.1.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.786175][ T7330] net_ratelimit: 44 callbacks suppressed [ 176.786196][ T7330] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 176.817932][ T6004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 176.818128][ T5698] as10x_usb: error during firmware upload part1 [ 176.818849][ T5698] Registered device Elgato EyeTV DTT Deluxe [ 176.843763][ T5698] usb 1-1: USB disconnect, device number 6 [ 176.896734][ T5698] Unregistered device Elgato EyeTV DTT Deluxe [ 176.902029][ T5698] as10x_usb: device has been disconnected [ 177.657044][ T5857] hid-generic 0005:0B57:05DF.0005: collection stack underflow [ 177.657078][ T5857] hid-generic 0005:0B57:05DF.0005: item 0 0 0 12 parsing failed [ 177.657899][ T5857] hid-generic 0005:0B57:05DF.0005: probe with driver hid-generic failed with error -22 [ 177.844443][ T6004] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 178.484197][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.562592][ T38] audit: type=1400 audit(1756855225.007:238): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7411 comm="syz.1.635" dest=20002 netif=wpan0 [ 181.126960][ T7431] block device autoloading is deprecated and will be removed. [ 182.234823][ T7463] netlink: 'syz.2.656': attribute type 12 has an invalid length. [ 182.313978][ T7464] netlink: 'syz.3.657': attribute type 29 has an invalid length. [ 182.795870][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 182.795894][ T7480] netlink: 26 bytes leftover after parsing attributes in process `syz.2.664'. [ 182.967481][ T7484] warning: `syz.0.666' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 184.448695][ T7520] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 184.844071][ T7537] netlink: 'syz.1.690': attribute type 29 has an invalid length. [ 185.080844][ T7550] netlink: 'syz.0.695': attribute type 12 has an invalid length. [ 185.948694][ T7572] netlink: 'syz.2.705': attribute type 29 has an invalid length. [ 186.185398][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'. [ 186.185419][ T7581] netlink: 26 bytes leftover after parsing attributes in process `syz.4.708'. [ 189.242482][ T6004] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.371101][ T7650] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 189.395187][ T6004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.395222][ T6004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.395262][ T6004] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 189.395286][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.404668][ T6004] usb 1-1: config 0 descriptor?? [ 189.893952][ T6004] hid-led 0003:04D8:F372.0006: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0 [ 190.118170][ T6004] hid-led 0003:04D8:F372.0006: Greynut Luxafor initialized [ 190.128551][ T6004] usb 1-1: USB disconnect, device number 7 [ 190.224411][ T2740] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 190.239487][ T54] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 190.243521][ T54] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 190.255818][ T54] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 190.267531][ T54] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 190.277789][ T69] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 190.315505][ T2740] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 190.319069][ T152] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 190.320595][ T152] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 190.330030][ T152] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 190.357002][ T152] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 190.358438][ T152] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 190.359869][ T152] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 190.376915][ T152] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 190.400194][ T152] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 190.420444][ T2740] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 190.430086][ T69] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 190.443263][ T69] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 192.291544][ T7712] program syz.4.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.321545][ T7710] mkiss: ax0: crc mode is auto. [ 193.022441][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 193.192506][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 193.195051][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.195096][ T5857] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 193.195120][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.200680][ T5857] usb 5-1: config 0 descriptor?? [ 193.402466][ T5921] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 193.568123][ T5921] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 193.568264][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.568287][ T5921] usb 4-1: Product: syz [ 193.568303][ T5921] usb 4-1: Manufacturer: syz [ 193.568382][ T5921] usb 4-1: SerialNumber: syz [ 193.698915][ T5857] hid_parser_main: 73 callbacks suppressed [ 193.698940][ T5857] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 193.698971][ T5857] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 193.698998][ T5857] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 193.699024][ T5857] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 193.699050][ T5857] hid-multitouch 0003:0EEF:72C4.0007: unknown main item tag 0x0 [ 193.712540][ T5921] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.817050][ T5857] hid-multitouch 0003:0EEF:72C4.0007: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 193.823293][ T5928] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.915768][ T7743] netlink: 71 bytes leftover after parsing attributes in process `syz.1.777'. [ 194.048037][ T5921] usb 5-1: USB disconnect, device number 6 [ 194.675703][ T6004] usb 4-1: USB disconnect, device number 7 [ 194.718979][ T7754] input: syz1 as /devices/virtual/input/input6 [ 195.292311][ T5928] usb 4-1: Service connection timeout for: 257 [ 195.292342][ T5928] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 195.301504][ T5928] ath9k_htc: Failed to initialize the device [ 195.337419][ T6004] usb 4-1: ath9k_htc: USB layer deinitialized [ 196.288079][ T7802] Illegal XDP return value 4294967274 on prog (id 79) dev N/A, expect packet loss! [ 196.774589][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.774692][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.774759][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.774824][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.774889][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.774954][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.775019][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.775087][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.775159][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 196.775226][ T7821] netlink: 'syz.1.810': attribute type 3 has an invalid length. [ 197.894820][ T7852] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 198.319997][ T7866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.392369][ T5928] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.555468][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.555503][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.555545][ T5928] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 198.555570][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.565309][ T5928] usb 4-1: config 0 descriptor?? [ 199.059916][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.059954][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.059981][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.060006][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.060033][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.060059][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.060085][ T5928] steelseries 0003:1038:12B6.0008: unknown main item tag 0x0 [ 199.076382][ T5928] steelseries 0003:1038:12B6.0008: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 199.443079][ T6004] usb 4-1: USB disconnect, device number 8 [ 199.623086][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.623161][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.972499][ T5928] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.150019][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.150055][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.150095][ T5928] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 200.150119][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.170082][ T5928] usb 2-1: config 0 descriptor?? [ 200.770316][ T7904] tap0: tun_chr_ioctl cmd 1074025681 [ 200.989896][ T5928] hid-led 0003:0FC5:B080.0009: probe with driver hid-led failed with error -71 [ 201.006524][ T5928] usb 2-1: USB disconnect, device number 8 [ 201.505301][ T7920] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 201.505368][ T7920] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 201.505472][ T7920] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 202.357266][ T7945] netlink: 1 bytes leftover after parsing attributes in process `syz.0.866'. [ 203.391732][ T7982] validate_nla: 44 callbacks suppressed [ 203.391751][ T7982] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 204.112360][ T5857] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 204.132318][ T5928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 204.281384][ T5857] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.281415][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.302347][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 204.304793][ T5928] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 204.304848][ T5928] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.304875][ T5928] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.304898][ T5928] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 204.304926][ T5928] usb 1-1: config 7 interface 0 has no altsetting 0 [ 204.304960][ T5928] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 204.304983][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.314744][ T5857] usb 2-1: config 0 descriptor?? [ 204.348835][ T5857] cp210x 2-1:0.0: cp210x converter detected [ 204.499963][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 204.768942][ T5857] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 204.824837][ T5928] hid (null): invalid report_size 812540268 [ 205.000773][ T5928] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.000A/input/input7 [ 205.003269][ T5857] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 205.003297][ T5857] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 205.007739][ T5857] usb 2-1: cp210x converter now attached to ttyUSB0 [ 205.022870][ T5857] usb 2-1: USB disconnect, device number 9 [ 205.061465][ T5857] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.061954][ T5857] cp210x 2-1:0.0: device disconnected [ 205.213013][ T5928] kye 0003:0458:5010.000A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 205.292758][ T5928] usb 1-1: USB disconnect, device number 8 [ 205.938140][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 206.058601][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 206.058639][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.913'. [ 206.396148][ T8040] bridge_slave_1 (unregistering): left allmulticast mode [ 206.396182][ T8040] bridge_slave_1 (unregistering): left promiscuous mode [ 206.396313][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.616787][ T2740] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.620738][ T2740] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.620789][ T2740] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.620829][ T2740] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.642602][ T5928] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.812468][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 206.816089][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.816141][ T5928] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.816165][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.837572][ T5928] usb 1-1: config 0 descriptor?? [ 207.097904][ T5928] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 207.290289][ T5928] usb 1-1: USB disconnect, device number 9 [ 207.495838][ T38] audit: type=1326 audit(1756855251.937:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.495897][ T38] audit: type=1326 audit(1756855251.947:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498028][ T38] audit: type=1326 audit(1756855251.947:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498078][ T38] audit: type=1326 audit(1756855251.947:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498123][ T38] audit: type=1326 audit(1756855251.947:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498168][ T38] audit: type=1326 audit(1756855251.947:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498212][ T38] audit: type=1326 audit(1756855251.947:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498256][ T38] audit: type=1326 audit(1756855251.947:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498301][ T38] audit: type=1326 audit(1756855251.947:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 207.498345][ T38] audit: type=1326 audit(1756855251.947:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8064 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 207.993353][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.935'. [ 209.825669][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 211.957155][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.980418][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.990796][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.012415][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.014553][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.125134][ T44] hid-generic 0005:0B57:05DF.000B: collection stack underflow [ 212.125171][ T44] hid-generic 0005:0B57:05DF.000B: item 0 0 0 12 parsing failed [ 212.128694][ T44] hid-generic 0005:0B57:05DF.000B: probe with driver hid-generic failed with error -22 [ 213.516809][ T8171] chnl_net:caif_netlink_parms(): no params data found [ 213.614766][ T8212] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 214.085123][ T5850] Bluetooth: hci5: command tx timeout [ 214.315306][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.315542][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.315774][ T8171] bridge_slave_0: entered allmulticast mode [ 214.318610][ T8171] bridge_slave_0: entered promiscuous mode [ 214.369585][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.369748][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.369993][ T8171] bridge_slave_1: entered allmulticast mode [ 214.401288][ T8171] bridge_slave_1: entered promiscuous mode [ 214.742917][ T8249] netlink: 'syz.1.1003': attribute type 2 has an invalid length. [ 214.742942][ T8249] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1003'. [ 214.747507][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.803258][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.105604][ T8171] team0: Port device team_slave_0 added [ 215.109498][ T8171] team0: Port device team_slave_1 added [ 215.459622][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.459638][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.459663][ T8171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.462039][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.462052][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.462077][ T8171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.472328][ T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.622553][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 215.625624][ T44] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 215.625678][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 215.625714][ T44] usb 2-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 215.625738][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.631126][ T44] usb 2-1: config 0 descriptor?? [ 215.918956][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 215.919084][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.941570][ T44] usb 2-1: USB disconnect, device number 10 [ 216.130279][ T8171] hsr_slave_0: entered promiscuous mode [ 216.136978][ T8171] hsr_slave_1: entered promiscuous mode [ 216.138097][ T8171] debugfs: 'hsr0' already exists in 'hsr' [ 216.138120][ T8171] Cannot create hsr debugfs directory [ 216.162517][ T5850] Bluetooth: hci5: command tx timeout [ 216.236480][ T8281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1018'. [ 216.429215][ T8285] kvm: user requested TSC rate below hardware speed [ 217.212343][ T5960] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.362596][ T5960] usb 4-1: Using ep0 maxpacket: 8 [ 217.365502][ T5960] usb 4-1: config 0 has no interfaces? [ 217.369641][ T5960] usb 4-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 217.369671][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.369693][ T5960] usb 4-1: Product: syz [ 217.369708][ T5960] usb 4-1: Manufacturer: syz [ 217.369724][ T5960] usb 4-1: SerialNumber: syz [ 217.394126][ T5960] usb 4-1: config 0 descriptor?? [ 217.412373][ T8303] block nbd0: shutting down sockets [ 217.480840][ T8171] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.538476][ T8171] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.618333][ T5960] usb 4-1: USB disconnect, device number 9 [ 217.632109][ T8171] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.698669][ T8171] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.094767][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.200466][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.235587][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.235765][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.242523][ T5850] Bluetooth: hci5: command tx timeout [ 218.301390][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.301554][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.532438][ T5928] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 218.678234][ T8337] team0: Device gtp0 is of different type [ 218.691433][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 218.691466][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 218.691488][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 218.744884][ T5928] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 218.744914][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.744935][ T5928] usb 2-1: Product: syz [ 218.744949][ T5928] usb 2-1: Manufacturer: syz [ 218.744965][ T5928] usb 2-1: SerialNumber: syz [ 218.787070][ T5928] usb 2-1: config 0 descriptor?? [ 218.787880][ T8332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.788001][ T8332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.813660][ T5928] usb 2-1: ucan: probing device on interface #0 [ 219.423737][ T5928] ucan 2-1:0.0: probe with driver ucan failed with error -22 [ 219.502775][ T8352] program syz.4.1048 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.631829][ T6004] usb 2-1: USB disconnect, device number 11 [ 219.815479][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.832679][ T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.986889][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.986918][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.988880][ T44] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 219.988910][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.988931][ T44] usb 5-1: SerialNumber: syz [ 220.235567][ T44] usb 5-1: 0:2 : does not exist [ 220.257637][ T44] usb 5-1: USB disconnect, device number 7 [ 220.322547][ T5850] Bluetooth: hci5: command tx timeout [ 220.659191][ T8171] veth0_vlan: entered promiscuous mode [ 220.681117][ T8171] veth1_vlan: entered promiscuous mode [ 220.765476][ T8171] veth0_macvtap: entered promiscuous mode [ 220.770649][ T8171] veth1_macvtap: entered promiscuous mode [ 220.879770][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.962748][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.031121][ T991] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.042040][ T991] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.048117][ T991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.048436][ T991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.146738][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.150721][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.166744][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.169624][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.170423][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.727077][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.727099][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.048409][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.048431][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.169246][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 222.169286][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 222.169312][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 222.955289][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 223.283728][ T5845] Bluetooth: hci1: command tx timeout [ 223.804122][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.808833][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.809220][ T8377] bridge_slave_0: entered allmulticast mode [ 223.840513][ T8377] bridge_slave_0: entered promiscuous mode [ 223.858128][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.858381][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.858614][ T8377] bridge_slave_1: entered allmulticast mode [ 223.861651][ T8377] bridge_slave_1: entered promiscuous mode [ 224.122033][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.144026][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.589823][ T8377] team0: Port device team_slave_0 added [ 224.594830][ T8377] team0: Port device team_slave_1 added [ 225.086703][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.086723][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.086751][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.140188][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.140206][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.140246][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.375135][ T5845] Bluetooth: hci1: command tx timeout [ 225.847332][ T8377] hsr_slave_0: entered promiscuous mode [ 225.848801][ T8377] hsr_slave_1: entered promiscuous mode [ 225.849867][ T8377] debugfs: 'hsr0' already exists in 'hsr' [ 225.849891][ T8377] Cannot create hsr debugfs directory [ 226.323284][ T5857] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 226.477071][ T5857] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 226.477099][ T5857] usb 5-1: config 0 has no interface number 0 [ 226.480196][ T5857] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 226.480222][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.480240][ T5857] usb 5-1: Product: syz [ 226.480252][ T5857] usb 5-1: Manufacturer: syz [ 226.480264][ T5857] usb 5-1: SerialNumber: syz [ 226.528090][ T5928] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.549225][ T5857] usb 5-1: config 0 descriptor?? [ 226.693669][ T5928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 226.693701][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.693784][ T5928] usb 2-1: Product: syz [ 226.693800][ T5928] usb 2-1: Manufacturer: syz [ 226.693815][ T5928] usb 2-1: SerialNumber: syz [ 226.702387][ T5698] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 226.813753][ T5928] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 226.859496][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 226.862825][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.862859][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.862950][ T5698] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.862977][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.931652][ T3118] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 226.952683][ T5698] usb 4-1: config 0 descriptor?? [ 226.964927][ T5698] hub 4-1:0.0: USB hub found [ 227.256381][ T5698] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 227.419708][ T5857] usb 5-1: Firmware version (0.0) predates our first public release. [ 227.419736][ T5857] usb 5-1: Please update to version 0.2 or newer [ 227.442343][ T5845] Bluetooth: hci1: command tx timeout [ 227.492559][ T5698] usbhid 4-1:0.0: can't add hid device: -71 [ 227.492689][ T5698] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 227.515414][ T5698] usb 4-1: USB disconnect, device number 10 [ 227.927058][ T5698] usb 2-1: USB disconnect, device number 12 [ 228.324361][ T5857] usb 5-1: USB disconnect, device number 8 [ 228.344752][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.344907][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.344980][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.345047][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.345126][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.345196][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.345286][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.345353][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.345419][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.349939][ T8496] netlink: 'syz.3.1105': attribute type 3 has an invalid length. [ 228.569692][ T3118] usb 2-1: Service connection timeout for: 257 [ 228.569717][ T3118] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 228.570446][ T3118] ath9k_htc: Failed to initialize the device [ 228.602474][ T5698] usb 2-1: ath9k_htc: USB layer deinitialized [ 228.995045][ T8377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 229.046756][ T8377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 229.076620][ T8377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 229.108884][ T8377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 229.463753][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.522931][ T5845] Bluetooth: hci1: command tx timeout [ 229.574157][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.594800][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.602513][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.679837][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.679985][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.508849][ T8377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.023096][ T8584] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 233.037850][ T8584] macsec1: entered promiscuous mode [ 233.038266][ T8584] macsec1: entered allmulticast mode [ 233.038285][ T8584] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 233.138805][ T8377] veth0_vlan: entered promiscuous mode [ 233.177496][ T8377] veth1_vlan: entered promiscuous mode [ 233.179979][ T5698] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 233.326659][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.326695][ T5698] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.326736][ T5698] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 233.326760][ T5698] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.352599][ T5698] usb 6-1: config 0 descriptor?? [ 233.381587][ T8377] veth0_macvtap: entered promiscuous mode [ 233.408916][ T8377] veth1_macvtap: entered promiscuous mode [ 233.456310][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.542002][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.655133][ T8589] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 233.733939][ T67] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.733991][ T67] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.750360][ T54] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.756773][ T54] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.833834][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.833880][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.833909][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.833938][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.833966][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.833994][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.834021][ T5698] steelseries 0003:1038:12B6.000C: unknown main item tag 0x0 [ 233.847907][ T5698] steelseries 0003:1038:12B6.000C: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.5-1/input0 [ 234.231357][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.231378][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.257346][ T5921] usb 6-1: USB disconnect, device number 2 [ 234.304228][ T2740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.304250][ T2740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.008005][ T8606] validate_nla: 43 callbacks suppressed [ 235.008025][ T8606] netlink: 'syz.1.1145': attribute type 1 has an invalid length. [ 235.952441][ T5960] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.104609][ T5960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.104636][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.107301][ T5960] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 236.107328][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 236.107347][ T5960] usb 2-1: SerialNumber: syz [ 236.406802][ T5960] usb 2-1: 0:2 : does not exist [ 236.443046][ T5960] usb 2-1: USB disconnect, device number 13 [ 237.159517][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 241.146817][ T8724] autofs4:pid:8724:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.4), cmd(0xc018937e) [ 241.146850][ T8724] autofs4:pid:8724:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 241.414329][ T8732] Bluetooth: MGMT ver 1.23 [ 241.994301][ T3118] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 242.145279][ T3118] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 242.145310][ T3118] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.188850][ T3118] usb 2-1: config 0 descriptor?? [ 242.210443][ T3118] gspca_main: spca508-2.14.0 probing 8086:0110 [ 242.314332][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1214'. [ 242.344193][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.437246][ T3118] gspca_spca508: reg_read err -32 [ 242.439620][ T3118] gspca_spca508: reg_read err -32 [ 242.646015][ T3118] gspca_spca508: reg_read err -71 [ 242.646543][ T3118] gspca_spca508: reg_read err -71 [ 242.646982][ T3118] gspca_spca508: reg write: error -71 [ 242.647072][ T3118] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 242.692374][ T3118] usb 2-1: USB disconnect, device number 14 [ 242.805349][ T8753] bridge_slave_1 (unregistering): left allmulticast mode [ 242.805383][ T8753] bridge_slave_1 (unregistering): left promiscuous mode [ 242.805506][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.933366][ T8759] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 242.933471][ T8759] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 245.695878][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.137490][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 246.509120][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.533344][ T6004] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 246.551408][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.563317][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.571682][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.587752][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.702482][ T6004] usb 5-1: Using ep0 maxpacket: 8 [ 246.705410][ T6004] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.705439][ T6004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.705466][ T6004] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.705491][ T6004] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.705536][ T6004] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.705560][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.001252][ T6004] usb 5-1: GET_CAPABILITIES returned 0 [ 247.001307][ T6004] usbtmc 5-1:16.0: can't read capabilities [ 247.024507][ T8798] bridge_slave_1 (unregistering): left allmulticast mode [ 247.024536][ T8798] bridge_slave_1 (unregistering): left promiscuous mode [ 247.024649][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.215386][ T31] usb 5-1: USB disconnect, device number 9 [ 247.327937][ T8812] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1239'. [ 247.329402][ T6004] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 247.475195][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 247.475228][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 247.475268][ T6004] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 247.475289][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.523601][ T6004] usb 6-1: config 0 descriptor?? [ 247.524634][ T8806] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 247.940651][ T6004] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 247.940801][ T6004] cm6533_jd 0003:0D8C:0022.000D: item fetching failed at offset 4/5 [ 247.941702][ T6004] cm6533_jd 0003:0D8C:0022.000D: parse failed [ 247.941812][ T6004] cm6533_jd 0003:0D8C:0022.000D: probe with driver cm6533_jd failed with error -22 [ 248.146164][ T3118] usb 6-1: USB disconnect, device number 3 [ 248.535655][ T1515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.535694][ T1515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.642886][ T5156] Bluetooth: hci4: command tx timeout [ 248.704836][ T3118] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 248.895280][ T3118] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 248.895311][ T3118] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.900730][ T3118] usb 7-1: config 0 descriptor?? [ 248.915284][ T3118] cp210x 7-1:0.0: cp210x converter detected [ 248.961453][ T1515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.961490][ T1515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.014065][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.178850][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.178885][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.178923][ T5921] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 249.179009][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.262107][ T5921] usb 5-1: config 0 descriptor?? [ 249.398518][ T3118] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 249.547617][ T1515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.547654][ T1515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.617629][ T3118] cp210x 7-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 249.617661][ T3118] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 249.722824][ T3118] usb 7-1: cp210x converter now attached to ttyUSB0 [ 249.740510][ T3118] usb 7-1: USB disconnect, device number 2 [ 249.836494][ T3118] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.837450][ T3118] cp210x 7-1:0.0: device disconnected [ 250.071043][ T1515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.071080][ T1515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.105132][ T5921] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -71 [ 250.129153][ T5921] usb 5-1: USB disconnect, device number 10 [ 250.595903][ T8803] chnl_net:caif_netlink_parms(): no params data found [ 250.723942][ T5156] Bluetooth: hci4: command tx timeout [ 250.971573][ T1515] bridge_slave_1: left allmulticast mode [ 250.971856][ T1515] bridge_slave_1: left promiscuous mode [ 250.976737][ T1515] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.070790][ T1515] bridge_slave_0: left allmulticast mode [ 251.070826][ T1515] bridge_slave_0: left promiscuous mode [ 251.071128][ T1515] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.678657][ T6004] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.822546][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 251.828136][ T6004] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.828162][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.860911][ T6004] usb 5-1: config 0 descriptor?? [ 251.877334][ T6004] cp210x 5-1:0.0: cp210x converter detected [ 251.993277][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.993311][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.993351][ T31] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 251.993439][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.080762][ T31] usb 7-1: config 0 descriptor?? [ 252.312797][ T6004] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.514718][ T6004] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 252.514808][ T6004] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 252.593202][ T6004] usb 5-1: cp210x converter now attached to ttyUSB0 [ 252.601052][ T6004] usb 5-1: USB disconnect, device number 11 [ 252.666294][ T6004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.667116][ T6004] cp210x 5-1:0.0: device disconnected [ 252.804470][ T5156] Bluetooth: hci4: command tx timeout [ 252.942404][ T31] hid-led 0003:0FC5:B080.000F: probe with driver hid-led failed with error -71 [ 252.951114][ T31] usb 7-1: USB disconnect, device number 3 [ 254.124817][ T1515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.186063][ T1515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.229883][ T1515] bond0 (unregistering): Released all slaves [ 254.360553][ T8909] pimreg: tun_chr_ioctl cmd 1074025673 [ 254.882903][ T5156] Bluetooth: hci4: command tx timeout [ 255.066686][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.066927][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.067258][ T8803] bridge_slave_0: entered allmulticast mode [ 255.069726][ T8803] bridge_slave_0: entered promiscuous mode [ 255.075335][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.075559][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.075794][ T8803] bridge_slave_1: entered allmulticast mode [ 255.078965][ T8803] bridge_slave_1: entered promiscuous mode [ 255.614595][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.660559][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.982547][ T1515] hsr_slave_0: left promiscuous mode [ 256.002386][ T1515] hsr_slave_1: left promiscuous mode [ 256.003959][ T1515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.004069][ T1515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.055681][ T1515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.055715][ T1515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.178493][ T1515] veth1_macvtap: left promiscuous mode [ 256.178788][ T1515] veth0_macvtap: left promiscuous mode [ 256.179138][ T1515] veth1_vlan: left promiscuous mode [ 256.179503][ T1515] veth0_vlan: left promiscuous mode [ 258.615300][ T1515] team0 (unregistering): Port device team_slave_1 removed [ 258.876190][ T1515] team0 (unregistering): Port device team_slave_0 removed [ 261.053554][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.053633][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.395768][ T8803] team0: Port device team_slave_0 added [ 261.425677][ T8803] team0: Port device team_slave_1 added [ 261.625555][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.625573][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.625601][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.627987][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.627998][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.628017][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.900710][ T8803] hsr_slave_0: entered promiscuous mode [ 261.902147][ T8803] hsr_slave_1: entered promiscuous mode [ 261.915119][ T8803] debugfs: 'hsr0' already exists in 'hsr' [ 261.915147][ T8803] Cannot create hsr debugfs directory [ 262.673769][ T8803] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.717695][ T8803] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 262.741424][ T8803] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 262.789723][ T8803] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 262.978083][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.018071][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.036002][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.036232][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.054322][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.054769][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.448717][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.830425][ T8803] veth0_vlan: entered promiscuous mode [ 263.858553][ T8803] veth1_vlan: entered promiscuous mode [ 263.905186][ T8803] veth0_macvtap: entered promiscuous mode [ 263.919898][ T8803] veth1_macvtap: entered promiscuous mode [ 263.957422][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.983781][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.008479][ T2740] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.009583][ T69] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.011166][ T69] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.041834][ T69] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.354941][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.354962][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.409582][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.409602][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.672027][ T8936] netlink: 16215 bytes leftover after parsing attributes in process `syz.6.1289'. [ 266.617660][ T8988] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1305'. [ 266.716590][ T8989] openvswitch: netlink: Multiple metadata blocks provided [ 267.100843][ T9009] netem: change failed [ 267.408740][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 267.408761][ T38] audit: type=1400 audit(1756855311.847:251): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=9018 comm="syz.6.1319" opid=9018 ocomm="syz.6.1319" [ 268.027843][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1330'. [ 269.113616][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1344'. [ 271.201768][ T38] audit: type=1326 audit(1756855315.647:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 271.201858][ T38] audit: type=1326 audit(1756855315.647:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 271.220182][ T38] audit: type=1326 audit(1756855315.667:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 271.221042][ T38] audit: type=1326 audit(1756855315.667:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 271.226161][ T38] audit: type=1326 audit(1756855315.667:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 271.226772][ T38] audit: type=1326 audit(1756855315.677:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 271.294785][ T38] audit: type=1326 audit(1756855315.737:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9113 comm="syz.1.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 272.221823][ T9131] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 274.374750][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1400'. [ 274.631285][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 274.722410][ T5929] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 274.872619][ T5929] usb 6-1: Using ep0 maxpacket: 8 [ 274.884598][ T5929] usb 6-1: unable to get BOS descriptor or descriptor too short [ 274.887985][ T5929] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 274.888053][ T5929] usb 6-1: config 7 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 274.888084][ T5929] usb 6-1: No eUSB2 isoc ep 7 companion for config 7 interface 0 altsetting 0 [ 274.888109][ T5929] usb 6-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.908965][ T5929] usb 6-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 274.909000][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.909025][ T5929] usb 6-1: Product: syz [ 274.909044][ T5929] usb 6-1: Manufacturer: syz [ 274.909062][ T5929] usb 6-1: SerialNumber: syz [ 275.232832][ T5929] usb 6-1: USB disconnect, device number 4 [ 275.383621][ T5960] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 275.383789][ T5960] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 275.383819][ T5960] hid-generic 0003:0004:0000.0010: unknown main item tag 0x0 [ 275.429100][ T5960] hid-generic 0003:0004:0000.0010: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 275.622426][ T6004] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 275.772316][ T6004] usb 2-1: Using ep0 maxpacket: 16 [ 275.774922][ T6004] usb 2-1: config 0 has no interfaces? [ 275.774960][ T6004] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 275.774985][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.782113][ T6004] usb 2-1: config 0 descriptor?? [ 276.038741][ T31] usb 2-1: USB disconnect, device number 15 [ 276.915351][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1427'. [ 278.302362][ T9311] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1448'. [ 278.614660][ T9318] netlink: 'syz.5.1451': attribute type 1 has an invalid length. [ 278.614685][ T9318] netlink: 'syz.5.1451': attribute type 2 has an invalid length. [ 278.900644][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1456'. [ 278.969354][ T9326] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 278.969548][ T9326] syzkaller0: linktype set to 7 [ 279.416433][ T9341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1462'. [ 279.416469][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1462'. [ 280.612449][ T6004] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 280.772598][ T6004] usb 6-1: Using ep0 maxpacket: 16 [ 280.775243][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.775276][ T6004] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.775299][ T6004] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.775345][ T6004] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.775369][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.780984][ T6004] usb 6-1: config 0 descriptor?? [ 281.295428][ T6004] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 281.295466][ T6004] microsoft 0003:045E:07DA.0011: no inputs found [ 281.295481][ T6004] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 281.487412][ T31] usb 6-1: USB disconnect, device number 5 [ 282.441171][ T9425] ip6gretap1: entered allmulticast mode [ 282.442996][ T5929] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 282.609066][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.609133][ T5929] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.609159][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.628480][ T5929] usb 7-1: config 0 descriptor?? [ 282.658121][ T5929] pwc: Askey VC010 type 2 USB webcam detected. [ 283.075476][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00 [ 283.278901][ T5929] pwc: recv_control_msg error -71 req 02 val 2c00 [ 283.279564][ T5929] pwc: recv_control_msg error -71 req 04 val 1000 [ 283.280089][ T5929] pwc: recv_control_msg error -71 req 04 val 1300 [ 283.280811][ T5929] pwc: recv_control_msg error -71 req 04 val 1400 [ 283.283572][ T5929] pwc: recv_control_msg error -71 req 02 val 2000 [ 283.284078][ T5929] pwc: recv_control_msg error -71 req 02 val 2100 [ 283.284574][ T5929] pwc: recv_control_msg error -71 req 04 val 1500 [ 283.285867][ T5929] pwc: recv_control_msg error -71 req 02 val 2500 [ 283.286899][ T5929] pwc: recv_control_msg error -71 req 02 val 2400 [ 283.287414][ T5929] pwc: recv_control_msg error -71 req 02 val 2600 [ 283.290406][ T5929] pwc: recv_control_msg error -71 req 02 val 2900 [ 283.291064][ T5929] pwc: recv_control_msg error -71 req 02 val 2800 [ 283.302119][ T5929] pwc: recv_control_msg error -71 req 04 val 1100 [ 283.304882][ T5929] pwc: recv_control_msg error -71 req 04 val 1200 [ 283.368297][ T5929] pwc: Registered as video103. [ 283.401223][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 283.444730][ T5845] Bluetooth: hci3: command 0x1003 tx timeout [ 283.456676][ T5156] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 283.580464][ T5929] usb 7-1: USB disconnect, device number 4 [ 284.617048][ T5929] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 284.686791][ T9475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.689886][ T9475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.690249][ T9475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.690592][ T9475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.690957][ T9475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.691318][ T9475] Dead loop on virtual device ip6_vti0, fix it urgently! [ 284.792880][ T5929] usb 7-1: Using ep0 maxpacket: 8 [ 284.803318][ T5929] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 284.803353][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.803378][ T5929] usb 7-1: Product: syz [ 284.803395][ T5929] usb 7-1: Manufacturer: syz [ 284.803412][ T5929] usb 7-1: SerialNumber: syz [ 284.819716][ T5929] usb 7-1: config 0 descriptor?? [ 285.120068][ T5929] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 285.727016][ T5929] gspca_sunplus: reg_w_riv err -71 [ 285.727112][ T5929] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 285.764110][ T5929] usb 7-1: USB disconnect, device number 5 [ 285.782437][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 285.932625][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 285.943282][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 285.943312][ T31] usb 2-1: config 0 has no interface number 0 [ 285.943370][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.943401][ T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.943447][ T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 285.943475][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.977445][ T31] usb 2-1: config 0 descriptor?? [ 286.624716][ T31] uclogic 0003:28BD:0094.0012: pen parameters not found [ 286.624753][ T31] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring [ 286.629870][ T31] usb 2-1: USB disconnect, device number 16 [ 287.148921][ T9522] bond0: entered promiscuous mode [ 287.148944][ T9522] bond_slave_0: entered promiscuous mode [ 287.149195][ T9522] bond_slave_1: entered promiscuous mode [ 287.213533][ T9522] bond0: left promiscuous mode [ 287.213559][ T9522] bond_slave_0: left promiscuous mode [ 287.213847][ T9522] bond_slave_1: left promiscuous mode [ 287.424491][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 287.474785][ T5921] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.543887][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1549'. [ 287.622413][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 287.625423][ T5921] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 287.625454][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.642459][ T5921] usb 5-1: config 0 descriptor?? [ 287.864644][ T5960] kernel write not supported for file /vcsu (pid: 5960 comm: kworker/1:5) [ 287.876964][ T5921] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 287.895502][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.920482][ T5921] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 287.920542][ T5921] usb 5-1: media controller created [ 288.075460][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 288.226809][ T5921] az6027: usb out operation failed. (-71) [ 288.233731][ T5921] az6027: usb out operation failed. (-71) [ 288.233751][ T5921] stb0899_attach: Driver disabled by Kconfig [ 288.233765][ T5921] az6027: no front-end attached [ 288.233765][ T5921] [ 288.234945][ T5921] az6027: usb out operation failed. (-71) [ 288.234963][ T5921] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 288.244473][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 288.252608][ T5921] dvb-usb: schedule remote query interval to 400 msecs. [ 288.252634][ T5921] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 288.256422][ T5921] usb 5-1: USB disconnect, device number 12 [ 288.265676][ T5929] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 288.432322][ T5929] usb 7-1: Using ep0 maxpacket: 32 [ 288.437927][ T5929] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 288.437956][ T5929] usb 7-1: config 0 has no interface number 0 [ 288.438003][ T5929] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.438033][ T5929] usb 7-1: config 0 interface 85 has no altsetting 0 [ 288.441392][ T5929] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 288.441421][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.441443][ T5929] usb 7-1: Product: syz [ 288.441458][ T5929] usb 7-1: Manufacturer: syz [ 288.441473][ T5929] usb 7-1: SerialNumber: syz [ 288.461994][ T5929] usb 7-1: config 0 descriptor?? [ 288.833104][ T5921] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 289.092842][ T5929] appletouch 7-1:0.85: Geyser mode initialized. [ 289.096280][ T5929] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input12 [ 289.344376][ T31] usb 7-1: USB disconnect, device number 6 [ 289.344679][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 289.505207][ T31] appletouch 7-1:0.85: input: appletouch disconnected [ 291.123020][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1582'. [ 291.332362][ T5960] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 291.442898][ T38] audit: type=1326 audit(1756855335.867:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9629 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 291.442953][ T38] audit: type=1326 audit(1756855335.887:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9629 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 291.447267][ T38] audit: type=1326 audit(1756855335.897:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9629 comm="syz.5.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 291.447322][ T38] audit: type=1326 audit(1756855335.897:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9629 comm="syz.5.1586" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff324c3ebe9 code=0x0 [ 291.487028][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.487065][ T5960] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 291.487116][ T5960] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 291.487142][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.515048][ T5960] usb 5-1: config 0 descriptor?? [ 291.580017][ T9635] sit0: entered promiscuous mode [ 291.673683][ T9635] netlink: 'syz.6.1587': attribute type 1 has an invalid length. [ 291.673774][ T9635] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1587'. [ 292.017223][ T5960] hid-rmi 0003:1532:011D.0013: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0 [ 292.193083][ T5960] usb 5-1: USB disconnect, device number 13 [ 292.982319][ T38] audit: type=1326 audit(1756855337.427:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8151b2ebe9 code=0x7ffc0000 [ 292.982612][ T38] audit: type=1326 audit(1756855337.427:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8151b2ebe9 code=0x7ffc0000 [ 292.987384][ T38] audit: type=1326 audit(1756855337.437:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8151b2ebe9 code=0x7ffc0000 [ 292.987697][ T38] audit: type=1326 audit(1756855337.437:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8151b2ebe9 code=0x7ffc0000 [ 293.095373][ T38] audit: type=1326 audit(1756855337.437:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8151b2ebe9 code=0x7ffc0000 [ 293.095713][ T38] audit: type=1326 audit(1756855337.547:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.4.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f8151b2ebe9 code=0x7ffc0000 [ 293.292353][ T5928] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 293.492850][ T5928] usb 7-1: config 0 has no interfaces? [ 293.519393][ T5928] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 293.519432][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.519453][ T5928] usb 7-1: Product: syz [ 293.519468][ T5928] usb 7-1: Manufacturer: syz [ 293.519484][ T5928] usb 7-1: SerialNumber: syz [ 293.576604][ T5928] usb 7-1: config 0 descriptor?? [ 293.715656][ T9695] netlink: 'syz.5.1605': attribute type 2 has an invalid length. [ 293.715680][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 293.812896][ T5960] usb 7-1: USB disconnect, device number 7 [ 294.907748][ T9720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 294.907766][ T9720] IPv6: NLM_F_CREATE should be set when creating new route [ 294.908018][ T9720] IPv6: NLM_F_CREATE should be set when creating new route [ 294.908051][ T9720] IPv6: NLM_F_CREATE should be set when creating new route [ 294.992594][ T5929] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 295.142299][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 295.144872][ T5929] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 295.144903][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.151107][ T5929] usb 6-1: config 0 descriptor?? [ 295.216313][ T5929] gspca_main: sunplus-2.14.0 probing 041e:400b [ 295.255234][ T31] IPVS: starting estimator thread 0... [ 295.296235][ T9730] netlink: 'syz.1.1618': attribute type 83 has an invalid length. [ 295.373592][ T9729] IPVS: using max 7 ests per chain, 16800 per kthread [ 296.057525][ T5929] gspca_sunplus: reg_w_riv err -71 [ 296.057628][ T5929] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 296.061163][ T5929] usb 6-1: USB disconnect, device number 6 [ 297.440165][ T9797] binder: 9795:9797 ioctl 40046205 0 returned -22 [ 297.512100][ T9793] syz.7.1649 (9793) used greatest stack depth: 17304 bytes left [ 297.810551][ T9808] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1656'. [ 298.620131][ T9818] erspan0: entered promiscuous mode [ 299.412552][ T6004] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 299.565558][ T6004] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 299.565586][ T6004] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 299.565605][ T6004] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 299.565624][ T6004] usb 6-1: config 1 has no interface number 0 [ 299.565669][ T6004] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 299.565692][ T6004] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 299.565734][ T6004] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 299.565755][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.617955][ T6004] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 299.969454][ T5156] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 300.217051][ T6004] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 300.443708][ T6004] usb 6-1: USB disconnect, device number 7 [ 300.460830][ T6004] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 300.994399][ T9889] vim2m vim2m.0: vidioc_s_fmt queue busy [ 301.018120][ T9890] vivid-002: disconnect [ 301.018992][ T9885] vivid-002: reconnect [ 301.654738][ T9916] capability: warning: `syz.5.1703' uses 32-bit capabilities (legacy support in use) [ 302.216281][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1713'. [ 302.236266][ T9936] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1713'. [ 302.481828][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1717'. [ 302.481938][ T9945] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1717'. [ 302.518582][ T9948] vxcan0: tx address claim with dest, not broadcast [ 302.743857][ T5960] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 302.782336][ T6004] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 302.895612][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 302.898190][ T5960] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 302.898233][ T5960] usb 2-1: config 0 has no interface number 0 [ 302.898286][ T5960] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 302.898314][ T5960] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 302.908103][ T5960] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 302.908137][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.908160][ T5960] usb 2-1: Product: syz [ 302.908177][ T5960] usb 2-1: Manufacturer: syz [ 302.908194][ T5960] usb 2-1: SerialNumber: syz [ 302.935412][ T6004] usb 7-1: Using ep0 maxpacket: 8 [ 302.937655][ T5960] usb 2-1: config 0 descriptor?? [ 302.957179][ T9947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.958785][ T9947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 302.973866][ T6004] usb 7-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 302.973903][ T6004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.973927][ T6004] usb 7-1: Product: syz [ 302.973944][ T6004] usb 7-1: Manufacturer: syz [ 302.973962][ T6004] usb 7-1: SerialNumber: syz [ 303.048537][ T6004] usb 7-1: config 0 descriptor?? [ 303.106908][ T6004] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 303.215635][ T9968] netlink: 47 bytes leftover after parsing attributes in process `syz.7.1729'. [ 303.225274][ T9947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.226650][ T9947] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.275912][ T6004] gspca_sn9c2028: read1 error -32 [ 303.280419][ T6004] gspca_sn9c2028: read1 error -32 [ 303.514843][ T3118] usb 7-1: USB disconnect, device number 8 [ 303.653442][ T5960] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 303.653741][ T5960] asix 2-1:0.251: probe with driver asix failed with error -524 [ 303.883476][ T3118] usb 2-1: USB disconnect, device number 17 [ 305.130534][T10012] sctp: [Deprecated]: syz.4.1749 (pid 10012) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.130534][T10012] Use struct sctp_sack_info instead [ 305.899433][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 305.899454][T10037] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1760'. [ 305.899476][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 306.412304][ T5921] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 306.576645][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.576696][ T5921] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 306.576722][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.594819][ T5921] usb 6-1: config 0 descriptor?? [ 306.812490][ T5960] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 306.962664][ T5960] usb 2-1: Using ep0 maxpacket: 8 [ 306.968322][ T5960] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 306.968353][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.968376][ T5960] usb 2-1: Product: syz [ 306.968391][ T5960] usb 2-1: Manufacturer: syz [ 306.968406][ T5960] usb 2-1: SerialNumber: syz [ 307.020822][ T5960] usb 2-1: config 0 descriptor?? [ 307.033442][ T5960] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 307.079920][ T5921] nintendo 0003:057E:200E.0014: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 307.144783][ T5921] nintendo 0003:057E:200E.0014: Failed charging grip handshake [ 307.144807][ T5921] nintendo 0003:057E:200E.0014: Failed to initialize controller; ret=-110 [ 307.177545][ T5921] nintendo 0003:057E:200E.0014: probe - fail = -110 [ 307.177805][ T5921] nintendo 0003:057E:200E.0014: probe with driver nintendo failed with error -110 [ 307.230340][ T5921] usb 6-1: USB disconnect, device number 8 [ 307.277911][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.277965][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.277991][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278017][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278043][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278070][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278097][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278125][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278151][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.278177][ T5928] hid-generic 00A0:0008:0003.0015: unknown main item tag 0x0 [ 307.286728][ T5928] hid-generic 00A0:0008:0003.0015: hidraw0: HID v0.05 Device [syz1] on syz0 [ 307.771986][ T5960] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 307.784122][ T5960] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 307.841019][ T5960] usb 2-1: USB disconnect, device number 18 [ 308.963088][ T6004] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 309.509488][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 309.509507][ T38] audit: type=1326 audit(1756855353.957:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 309.509814][ T38] audit: type=1326 audit(1756855353.957:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 309.547113][ T38] audit: type=1326 audit(1756855353.997:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 309.547169][ T38] audit: type=1326 audit(1756855353.997:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 309.547215][ T38] audit: type=1326 audit(1756855353.997:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbf993ebe9 code=0x7ffc0000 [ 309.557178][ T38] audit: type=1326 audit(1756855353.997:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbf9940b07 code=0x7ffc0000 [ 309.557236][ T38] audit: type=1326 audit(1756855353.997:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdbf9940a7c code=0x7ffc0000 [ 309.557281][ T38] audit: type=1326 audit(1756855353.997:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdbf99409b4 code=0x7ffc0000 [ 309.557326][ T38] audit: type=1326 audit(1756855353.997:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdbf99409b4 code=0x7ffc0000 [ 309.557372][ T38] audit: type=1326 audit(1756855353.997:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10111 comm="syz.1.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbf993d84a code=0x7ffc0000 [ 309.887212][T10117] input: syz0 as /devices/virtual/input/input16 [ 310.892753][ T3201] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.901087][ T3201] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.901138][ T3201] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.901177][ T3201] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 310.982530][ T3118] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 311.153312][ T3118] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 311.153346][ T3118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.158777][ T3118] usb 6-1: config 0 descriptor?? [ 311.190586][ T3118] gspca_main: spca508-2.14.0 probing 8086:0110 [ 311.386925][ T3118] gspca_spca508: reg_read err -71 [ 311.387351][ T3118] gspca_spca508: reg_read err -71 [ 311.387747][ T3118] gspca_spca508: reg_read err -71 [ 311.388141][ T3118] gspca_spca508: reg_read err -71 [ 311.388542][ T3118] gspca_spca508: reg_read err -71 [ 311.418756][ T3118] gspca_spca508: reg write: error -71 [ 311.418849][ T3118] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 311.444007][ T3118] usb 6-1: USB disconnect, device number 9 [ 311.474216][T10151] binder: 10150:10151 ioctl c0306201 200000000640 returned -22 [ 313.400356][T10199] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1832'. [ 313.472367][ T6004] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 313.622706][ T6004] usb 6-1: Using ep0 maxpacket: 16 [ 313.625235][ T6004] usb 6-1: config 0 has an invalid interface number: 24 but max is 0 [ 313.625262][ T6004] usb 6-1: config 0 has no interface number 0 [ 313.625311][ T6004] usb 6-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.625339][ T6004] usb 6-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.625379][ T6004] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 313.625409][ T6004] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.649261][ T6004] usb 6-1: config 0 descriptor?? [ 314.074225][T10217] syz.6.1840 (10217) used greatest stack depth: 16760 bytes left [ 314.115406][ T6004] hid (null): unknown global tag 0x39 [ 314.115443][ T6004] hid (null): report_id 0 is invalid [ 314.296334][ T6004] usb 6-1: USB disconnect, device number 10 [ 314.682427][ T5921] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 314.832794][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 314.837200][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.840724][ T5921] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 314.840748][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.840770][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.895087][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.895120][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.895142][ T5921] usb 5-1: Product: syz [ 314.895157][ T5921] usb 5-1: Manufacturer: syz [ 314.895172][ T5921] usb 5-1: SerialNumber: syz [ 315.112410][T10250] netlink: 'syz.5.1855': attribute type 2 has an invalid length. [ 315.112433][T10250] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1855'. [ 315.119428][T10250] netlink: 'syz.5.1855': attribute type 2 has an invalid length. [ 315.119451][T10250] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1855'. [ 315.190841][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.191317][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.230620][ T5921] usb 5-1: 0:2 : does not exist [ 315.288399][ T5921] usb 5-1: USB disconnect, device number 14 [ 315.792411][ T5921] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 315.956707][ T5921] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 315.956736][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.956757][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 315.962006][ T5921] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 315.962032][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.962051][ T5921] usb 5-1: Product: syz [ 315.962065][ T5921] usb 5-1: Manufacturer: syz [ 315.962079][ T5921] usb 5-1: SerialNumber: syz [ 316.237049][ T5921] usb 5-1: 0:2 : does not exist [ 316.456452][ T5921] usb 5-1: USB disconnect, device number 15 [ 316.976146][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1877'. [ 316.976337][T10298] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1877'. [ 317.782530][ T3118] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 317.991988][ T3118] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.992017][ T3118] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.001904][ T3118] usb 6-1: config 0 descriptor?? [ 318.038067][ T3118] cp210x 6-1:0.0: cp210x converter detected [ 318.131911][T10323] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 318.146932][ T2740] Bluetooth: hci3: Frame reassembly failed (-84) [ 318.435636][ T3118] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 318.474107][ T3118] usb 6-1: cp210x converter now attached to ttyUSB0 [ 318.579418][T10334] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1893'. [ 318.659752][ T6004] usb 6-1: USB disconnect, device number 11 [ 318.673229][ T6004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.743391][ T31] kernel write not supported for file /binder/transactions (pid: 31 comm: kworker/1:0) [ 318.803047][ T6004] cp210x 6-1:0.0: device disconnected [ 319.101214][T10353] netlink: 'syz.6.1913': attribute type 2 has an invalid length. [ 320.162481][ T5156] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 321.126312][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1924'. [ 321.126347][T10396] netlink: 'syz.5.1924': attribute type 30 has an invalid length. [ 321.126364][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1924'. [ 322.488508][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.488586][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.372972][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 323.372990][ T38] audit: type=1326 audit(1756855367.817:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10464 comm="syz.5.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 323.373255][ T38] audit: type=1326 audit(1756855367.827:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10464 comm="syz.5.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 323.373621][ T38] audit: type=1326 audit(1756855367.827:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10464 comm="syz.5.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 323.375071][ T38] audit: type=1326 audit(1756855367.827:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10464 comm="syz.5.1953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff324c3ebe9 code=0x7ffc0000 [ 323.922454][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 323.962443][ T31] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 324.113910][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 324.116571][ T31] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 324.116598][ T31] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 324.116620][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 324.116642][ T31] usb 6-1: config 1 has no interface number 0 [ 324.116702][ T31] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.116729][ T31] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 324.116772][ T31] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 324.116797][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.214020][ T31] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 324.232552][ T5921] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 324.382341][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 324.388324][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.388355][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.388384][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 324.388427][ T5921] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 324.388448][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.411873][ T5921] usb 2-1: config 0 descriptor?? [ 324.464345][ T31] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 324.632705][ T5928] kernel read not supported for file /dsp1 (pid: 5928 comm: kworker/0:5) [ 324.900283][ T5921] HID 045e:07da: Invalid code 65791 type 1 [ 324.922467][ T31] usb 6-1: USB disconnect, device number 12 [ 324.928348][ T31] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 324.943747][ T5921] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0017/input/input17 [ 324.976311][ T5921] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 325.111580][ T5921] usb 2-1: USB disconnect, device number 19 [ 327.183125][T10526] vlan2: entered promiscuous mode [ 327.183150][T10526] veth1: entered promiscuous mode [ 329.898148][T10551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1992'. [ 333.833348][ C0] sched: DL replenish lagged too much [ 337.909796][ T38] audit: type=1326 audit(1756855382.357:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10582 comm="syz.5.2007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff324c3ebe9 code=0x0 [ 346.795121][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 350.387645][ T59] Bluetooth: hci5: command 0x0406 tx timeout [ 383.944328][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 425.520424][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 425.529223][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.682550][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.468589][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.972661][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.986805][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.993339][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.466235][T10642] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 453.503419][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 453.512667][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.919916][ T39] INFO: task syz.6.2005:10578 blocked for more than 143 seconds. [ 481.919953][ T39] Not tainted syzkaller #0 [ 481.919966][ T39] Blocked by coredump. [ 481.919973][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 481.919987][ T39] task:syz.6.2005 state:D stack:25128 pid:10578 tgid:10578 ppid:8377 task_flags:0x40004c flags:0x00004000 [ 481.920063][ T39] Call Trace: [ 481.920071][ T39] [ 481.920088][ T39] __schedule+0x16f3/0x4c20 [ 481.920157][ T39] ? __lock_acquire+0xab9/0xd20 [ 481.920191][ T39] ? __pfx___schedule+0x10/0x10 [ 481.920238][ T39] ? schedule+0x91/0x360 [ 481.920270][ T39] schedule+0x165/0x360 [ 481.920300][ T39] schedule_timeout+0x9a/0x270 [ 481.920329][ [ 481.920329][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 481.920372][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 481.920402][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.920429][ T39] ? wait_for_completion+0x267/0x5d0 [ 481.920462][ T39] wait_for_completion+0x2bf/0x5d0 [ 481.920506][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 481.920552][ T39] exit_aio+0x2f1/0x3b0 [ 481.920590][ T39] ? __pfx_exit_aio+0x10/0x10 [ 481.920634][ T39] ? uprobe_clear_state+0x280/0x2a0 [ 481.920657][ T39] ? mm_update_next_owner+0xa7/0x870 [ 481.920681][ T39] __mmput+0x68/0x3d0 [ 481.920710][ T39] exit_mm+0x1da/0x2c0 [ 481.920733][ T39] ? __pfx_exit_mm+0x10/0x10 [ 481.920758][ T39] ? rcu_is_watching+0x15/0xb0 [ 481.920796][ T39] do_exit+0x648/0x2300 [ 481.920815][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 481.920851][ T39] ? rt_mutex_slowunlock+0x668/0x8a0 [ 481.920879][ T39] ? __pfx_do_exit+0x10/0x10 [ 481.920900][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 481.920935][ T39] ? __rcu_read_unlock+0x84/0xe0 [ 481.920967][ T39] do_group_exit+0x21c/0x2d0 [ 481.920995][ T39] __x64_sys_exit_group+0x3f/0x40 [ 481.921017][ T39] x64_sys_call+0x21f7/0x2200 [ 481.921038][ T39] do_syscall_64+0xfa/0x3b0 [ 481.921069][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 481.921098][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.921121][ T39] ? clear_bhb_loop+0x60/0xb0 [ 481.921156][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.921185][ T39] RIP: 0033:0x7fe7c34bebe9 [ 481.921208][ T39] RSP: 002b:00007ffcc2622e08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 481.921231][ T39] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7c34bebe9 [ 481.921248][ T39] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 481.921262][ T39] RBP: 00007ffcc2622e6c R08: 00000004c2622eff R09: 00000000000927c0 [ 481.921278][ T39] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000aa [ 481.921292][ T39] R13: 00000000000927c0 R14: 0000000000051bcd R15: 00007ffcc2622ec0 [ 481.921328][ T39] [ 481.921373][ T39] [ 481.921373][ T39] Showing all locks held in the system: [ 481.921384][ T39] 5 locks held by kworker/u8:0/12: [ 481.921397][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.921458][ T39] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.921516][ T39] #2: ffff88805b840898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.921571][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.921627][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.921685][ T39] 5 locks held by kworker/u8:1/13: [ 481.921698][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.921755][ T39] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.921813][ T39] #2: ffff88804db00898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.921868][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.921924][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.921983][ T39] 2 locks held by rcuc/1/28: [ 481.921995][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.922050][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.957265][ T39] 2 locks held by ksoftirqd/1/30: [ 481.957279][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.957336][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.957392][ T39] 4 locks held by kworker/1:0/31: [ 481.957404][ T39] #0: ffff888030081938 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.957466][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.957542][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.957597][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.957653][ T39] 1 lock held by khungtaskd/39: [ 481.957666][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 481.957716][ T39] 4 locks held by kworker/1:1/44: [ 481.957728][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.957784][ T39] #1: ffffc90000b57bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.957839][ T39] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 481.957896][ T39] #3: ffff88805f3e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 481.957955][ T39] 5 locks held by kworker/u8:3/54: [ 481.957968][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.958023][ T39] #1: ffffc9000120fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.958079][ T39] #2: ffff88805ce70898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.958132][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.958194][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.958249][ T39] 4 locks held by kworker/u9:0/59: [ 481.958262][ T39] #0: ffff888030cc1138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.958317][ T39] #1: ffffc9000125fbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.958373][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.958426][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.958481][ T39] 4 locks held by kworker/u8:4/67: [ 481.958493][ T39] 4 locks held by kworker/u8:5/69: [ 481.958505][ T39] #0: ffff888066e68938 ((wq_completion)wg-kex-wg2#15){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.958565][ T39] #1: ffffc9000154fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.958621][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.958673][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.958731][ T39] 5 locks held by kworker/u8:6/152: [ 481.958742][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.958796][ T39] #1: ffffc90003a4fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.958851][ T39] #2: ffff88805bcc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.958906][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.958959][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.959016][ T39] 7 locks held by kworker/u8:9/1028: [ 481.959029][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.959084][ T39] #1: ffffc90004a5fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.959141][ T39] #2: ffff888024356300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 481.959209][ T39] #3: ffff88805b7ce120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 481.959267][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 481.959317][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.959371][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.959430][ T39] 5 locks held by kworker/u8:10/1515: [ 481.959442][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.959498][ T39] #1: ffffc9000593fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.959552][ T39] #2: ffff88805bf40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.959606][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.959660][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.959726][ T39] 5 locks held by kworker/u8:12/3201: [ 481.959738][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.959793][ T39] #1: ffffc9000d39fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.959849][ T39] #2: ffff88804f350898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.959903][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.959956][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.960012][ T39] 5 locks held by kworker/u8:13/3554: [ 481.960025][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.960080][ T39] #1: ffffc9000d9bfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.960135][ T39] #2: ffff8880415c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 481.960196][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.960249][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.960304][ T39] 5 locks held by kworker/u9:1/5156: [ 481.960317][ T39] #0: ffff888061d26138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.960371][ T39] #1: ffffc9000fce7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.960427][ T39] #2: ffff88804caf4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 481.960475][ T39] #3: ffff88804caf40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 481.960531][ T39] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 481.960588][ T39] 2 locks held by getty/5603: [ 481.960599][ T39] #0: ffff88823bf7c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 481.960656][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 481.960709][ T39] 4 locks held by kworker/1:3/5698: [ 481.960721][ T39] #0: ffff888030080d38 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.960780][ T39] #1: ffffc900043afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.960856][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.960910][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.960966][ T39] 6 locks held by syz-executor/5828: [ 481.960977][ T39] #0: ffff888030fd21d0 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 481.961028][ T39] #1: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 481.961087][ T39] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x60/0x3c0 [ 481.961152][ T39] #3: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x11d0 [ 481.961201][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.961255][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.961310][ T39] 4 locks held by syz-executor/5839: [ 481.961322][ T39] #0: ffff888059bf7538 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 481.961377][ T39] #1: ffff888030781290 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 481.961429][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.961483][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.961537][ T39] 4 locks held by syz-executor/5842: [ 481.961549][ T39] #0: ffff888059bf5a38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 481.961601][ T39] #1: ffff888030780350 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 481.961651][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 481.961703][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 481.961757][ T39] 4 locks held by kworker/u9:3/5845: [ 481.961769][ T39] #0: ffff88802a7a5938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.961822][ T39] #1: ffffc90004a9fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 481.961876][ T39] #2: ffff88805e2dce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 481.961923][ T39] #3: ffff88805e2dc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 481.961977][ T39] 6 locks held by kworker/u9:4/5847: [ 481.961988][ T39] #0: ffff8880381ac138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 481.962042][ T39] #1: ffffc90004acfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.057398][ T39] #2: ffff8880329e4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 482.057467][ T39] #3: ffff8880329e40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 482.057526][ T39] #4: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 482.057584][ T39] #5: ffff88805e098b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 482.057653][ T39] 4 locks held by kworker/R-wg-cr/5876: [ 482.057667][ T39] #0: ffff88802f5c2938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.057725][ T39] #1: ffffc90004c4fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.057783][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.057849][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.057904][ T39] 4 locks held by kworker/R-wg-cr/5883: [ 482.057917][ T39] #0: ffff888058cc4138 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.057977][ T39] #1: ffffc90004ccfba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.058053][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.058107][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.058170][ T39] 4 locks held by kworker/R-wg-cr/5887: [ 482.058183][ T39] #0: ffff888059087938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.058242][ T39] #1: ffffc90004cefba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.058298][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.058352][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.058407][ T39] 2 locks held by napi/wg0-0/5895: [ 482.058419][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.058474][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.058529][ T39] 2 locks held by napi/wg0-0/5903: [ 482.058541][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.058595][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.058649][ T39] 2 locks held by kworker/1:4/5908: [ 482.058664][ T39] 4 locks held by kworker/0:5/5928: [ 482.058676][ T39] #0: ffff88805afa5938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.058736][ T39] #1: ffffc9000502fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.058811][ T39] #2: ffff88802f9115f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.058862][ T39] #3: ffff88805aeb4e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 482.058914][ T39] 4 locks held by kworker/0:6/5929: [ 482.058927][ T39] 4 locks held by kworker/1:5/5960: [ 482.058939][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.058994][ T39] #1: ffffc9000505fbc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.059050][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.059103][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.059166][ T39] 4 locks held by kworker/R-wg-cr/8226: [ 482.059179][ T39] #0: ffff888036bfd938 ((wq_completion)wg-crypt-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.059238][ T39] #1: ffffc9000521fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.059313][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.059367][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.059422][ T39] 4 locks held by kworker/R-wg-cr/8228: [ 482.059435][ T39] #0: ffff8880315da938 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.059494][ T39] #1: ffffc900048c7ba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.059550][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.059605][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.059662][ T39] 4 locks held by kworker/R-wg-cr/8874: [ 482.059675][ T39] #0: ffff888063c4c538 ((wq_completion)wg-crypt-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.059735][ T39] #1: ffffc90004affba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.059810][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.059864][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.059919][ T39] 2 locks held by napi/wg2-0/8921: [ 482.059931][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.059985][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.060040][ T39] 4 locks held by kworker/0:7/10561: [ 482.060052][ T39] #0: ffff888059087538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.060112][ T39] #1: ffffc90005ac7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.060194][ T39] #2: ffff8880333e15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 482.060265][ T39] #3: ffff88803d2b58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 482.060318][ T39] 4 locks held by kworker/0:8/10580: [ 482.060331][ T39] #0: ffff88805ab42538 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.060394][ T39] #1: ffffc9000588fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.060472][ T39] #2: ffff88801a3655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.060526][ T39] #3: ffff88805aeb7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 482.060580][ T39] 5 locks held by kworker/u8:2/10587: [ 482.060593][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.060651][ T39] #1: ffffc90005a97bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.060716][ T39] #2: ffff88805ca50898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 482.060770][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.060822][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.060877][ T39] 5 locks held by kworker/u8:14/10588: [ 482.060889][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.060944][ T39] #1: ffffc90005a77bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.060998][ T39] #2: ffff88805f3e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 482.061051][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.061104][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.061183][ T39] 5 locks held by kworker/u8:15/10589: [ 482.061195][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.061249][ T39] #1: ffffc90005907bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.061301][ T39] #2: ffff88805ba30898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 482.061354][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.061407][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.061460][ T39] 6 locks held by kworker/u8:16/10590: [ 482.061473][ T39] #0: ffff888030791138 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.061532][ T39] #1: ffffc900058e7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.061586][ T39] #2: ffff88803bbd15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.061634][ T39] #3: ffff88805a851928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.061682][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.061735][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.061790][ T39] 7 locks held by kworker/u8:18/10592: [ 482.061803][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.061857][ T39] #1: ffffc9000589fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.061914][ T39] #2: ffff888027a03300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 482.061977][ T39] #3: ffff888034487120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 482.062035][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 482.275464][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.275554][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.275613][ T39] 6 locks held by kworker/u8:19/10593: [ 482.275626][ T39] #0: ffff888038ad9138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.275690][ T39] #1: ffffc9000587fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.275749][ T39] #2: ffff88802449d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.275805][ T39] #3: ffff888037d18e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.275857][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.275912][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.275971][ T39] 6 locks held by kworker/u8:20/10594: [ 482.275984][ T39] #0: ffff8880291ea938 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.276047][ T39] #1: ffffc90005b07bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.276105][ T39] #2: ffff8880275f55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.276166][ T39] #3: ffff888039a583f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.276219][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.276275][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.276333][ T39] 3 locks held by kworker/u8:21/10596: [ 482.276346][ T39] #0: ffff888030450938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.276403][ T39] #1: ffffc90005ab7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.276462][ T39] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 482.276516][ T39] 5 locks held by kworker/u8:22/10597: [ 482.276529][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.276585][ T39] #1: ffffc90005917bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.276643][ T39] #2: ffff888068e00898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 482.276700][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.276767][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.276823][ T39] 4 locks held by kworker/u8:23/10599: [ 482.276835][ T39] #0: ffff888030797938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.276894][ T39] #1: ffffc9000556fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.276951][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.277005][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.277060][ T39] 4 locks held by kworker/1:7/10601: [ 482.277073][ T39] 6 locks held by kworker/1:8/10602: [ 482.277085][ T39] #0: ffff888059087538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.277153][ T39] #1: ffffc900054f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.277229][ T39] #2: ffff8880333e15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 482.277280][ T39] #3: ffff88803d2b58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 482.277331][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.277385][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.277440][ T39] 5 locks held by kworker/1:9/10603: [ 482.277453][ T39] #0: ffff88805afa5938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.277513][ T39] #1: ffffc900055bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.277589][ T39] #2: ffff88805aeb4e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 482.277639][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.277693][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.277748][ T39] 6 locks held by kworker/u8:26/10606: [ 482.277761][ T39] #0: ffff888064d33138 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.277821][ T39] #1: ffffc9000575fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.277878][ T39] #2: ffff888033be95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.277929][ T39] #3: ffff88805aeb58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.277980][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.278034][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.278088][ T39] 4 locks held by kworker/0:12/10607: [ 482.278101][ T39] #0: ffff888033bae138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.278168][ T39] #1: ffffc9000583fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.278242][ T39] #2: ffff888033be95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.278294][ T39] #3: ffff88805aeb6350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 482.278347][ T39] 7 locks held by kworker/u8:27/10608: [ 482.278359][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.278413][ T39] #1: ffffc9000577fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.278481][ T39] #2: ffff8880233f8300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 482.278535][ T39] #3: ffff888031654920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 482.278589][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 482.278637][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.278687][ T39] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.278739][ T39] 4 locks held by kworker/u8:28/10609: [ 482.278750][ T39] #0: ffff888064d32138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.278806][ T39] #1: ffffc900056d7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.278859][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.278908][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.278960][ T39] 4 locks held by kworker/0:13/10610: [ 482.278971][ T39] #0: ffff888058b8b538 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.279026][ T39] #1: ffffc900056c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.279096][ T39] #2: ffff888039f455f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.279165][ T39] #3: ffff88805a850e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 482.279213][ T39] 7 locks held by kworker/u8:29/10612: [ 482.279225][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.279276][ T39] #1: ffffc9000574fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.279329][ T39] #2: ffff88805a88a300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 482.279388][ T39] #3: ffff88805a661d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 482.279441][ T39] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 482.279487][ T39] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.279538][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.279589][ T39] 4 locks held by kworker/0:14/10613: [ 482.279600][ T39] #0: ffff888058ba5d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.279656][ T39] #1: ffffc900055dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.279727][ T39] #2: ffff88803bbd15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.279775][ T39] #3: ffff88805a851928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 482.279825][ T39] 8 locks held by kworker/0:15/10615: [ 482.279837][ T39] 4 locks held by kworker/u8:32/10617: [ 482.279848][ T39] #0: ffff888039fa9138 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.279905][ T39] #1: ffffc900055afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.279957][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.280007][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.280059][ T39] 4 locks held by kworker/u8:33/10618: [ 482.280070][ T39] #0: ffff888064d32138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.280131][ T39] #1: ffffc9000559fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.280184][ T39] #2: ffff88802f9115f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.280232][ T39] #3: ffff88805aeb4e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.280280][ T39] 6 locks held by kworker/u8:34/10619: [ 482.280291][ T39] #0: ffff88802a111138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.280347][ T39] #1: ffffc9000558fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.280399][ T39] #2: ffff88802a1955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.280447][ T39] #3: ffff88803d2b7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.280494][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.280545][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.280597][ T39] 4 locks held by kworker/u8:36/10621: [ 482.280608][ T39] #0: ffff88805dd26138 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.280665][ T39] #1: ffffc9000553fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.280717][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.280767][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.280819][ T39] 4 locks held by kworker/0:17/10623: [ 482.280831][ T39] #0: ffff888058ba4d38 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.280886][ T39] #1: ffffc90003f4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.280958][ T39] #2: ffff88803b7955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.281007][ T39] #3: ffff88803d2b23c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 482.281055][ T39] 3 locks held by dhcpcd/10624: [ 482.281066][ T39] #0: ffff888019f16350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 482.281114][ T39] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.281170][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.281223][ T39] 4 locks held by kworker/0:18/10626: [ 482.281234][ T39] #0: ffff888063c4c138 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.281291][ T39] #1: ffffc900056b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.281361][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.281412][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.281464][ T39] 1 lock held by dhcpcd/10632: [ 482.281475][ T39] #0: ffff88803507c350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 482.281524][ T39] 6 locks held by kworker/u8:37/10633: [ 482.281535][ T39] #0: ffff88802d347938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.281586][ T39] #1: ffffc9000caafbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.281639][ T39] #2: ffff88803b7955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.281686][ T39] #3: ffff88803d2b23c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.281734][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.281784][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.281835][ T39] 4 locks held by kworker/u8:38/10634: [ 482.281846][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.281898][ T39] #1: ffffc90005647bc0 ((work_completion)(&port->bc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.281950][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.282001][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.282052][ T39] 4 locks held by kworker/1:10/10635: [ 482.282063][ T39] #0: ffff888058ba4d38 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.682260][ T39] #1: ffffc9000555fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.682347][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.682408][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.682471][ T39] 1 lock held by dhcpcd/10637: [ 482.682485][ T39] #0: ffff888021ba8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 482.682546][ T39] 4 locks held by kworker/1:11/10638: [ 482.682559][ T39] #0: ffff888033bae138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.682629][ T39] #1: ffffc90005497bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.682710][ T39] #2: ffff888033be95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 482.682770][ T39] #3: ffff88805aeb58b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 482.682826][ T39] 5 locks held by kworker/1:12/10640: [ 482.682839][ T39] #0: ffff888063c4c138 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.682906][ T39] #1: ffffc9000543fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.682987][ T39] #2: ffff8880652ad5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.683043][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.683111][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.683172][ T39] 5 locks held by kworker/1:13/10641: [ 482.683185][ T39] #0: ffff8880315da538 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.683269][ T39] #1: ffffc900053ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.683353][ T39] #2: ffff88805aeb6de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 482.683413][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.683472][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.683537][ T39] 4 locks held by kworker/u8:39/10643: [ 482.683551][ T39] #0: ffff88802d347938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.683614][ T39] #1: ffffc9000552fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.683678][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.683759][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.683818][ T39] 4 locks held by kworker/u8:40/10644: [ 482.683832][ T39] #0: ffff888039fae938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.683897][ T39] #1: ffffc900052efbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.683960][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.684019][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.684088][ T39] 4 locks held by kworker/1:14/10645: [ 482.684101][ T39] #0: ffff888058b9e138 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.684167][ T39] #1: ffffc900052dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.684248][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.684307][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.684366][ T39] 6 locks held by kworker/1:15/10646: [ 482.684379][ T39] #0: ffff88805bf05d38 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.684446][ T39] #1: ffffc900052cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.684527][ T39] #2: ffff8880275f55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 482.684584][ T39] #3: ffff888037d19928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 482.684640][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.684699][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.684761][ T39] 2 locks held by kworker/1:16/10647: [ 482.684774][ T39] 4 locks held by kworker/u8:41/10650: [ 482.684789][ T39] #0: ffff88802a111138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.684853][ T39] #1: ffffc90005487bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.684914][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.684974][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.685033][ T39] 4 locks held by syz-executor/10651: [ 482.685048][ T39] 4 locks held by kworker/u8:42/10652: [ 482.685063][ T39] #0: ffff888038ad9138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.685134][ T39] #1: ffffc900052afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.685196][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.685271][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.685337][ T39] 5 locks held by kworker/1:17/10653: [ 482.685352][ T39] #0: ffff888058ba5d38 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.685420][ T39] #1: ffffc90003b8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.685507][ T39] #2: ffff88803bbd15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 482.685566][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.685628][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.685690][ T39] 4 locks held by kworker/0:21/10654: [ 482.685705][ T39] #0: ffff888030081938 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.685772][ T39] #1: ffffc9000516fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.685857][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.685918][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.685982][ T39] 1 lock held by dhcpcd/10655: [ 482.685996][ T39] #0: ffff8880610c8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 482.686054][ T39] 1 lock held by dhcpcd/10656: [ 482.686078][ T39] #0: ffff888024e5c350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 482.686137][ T39] 5 locks held by kworker/1:18/10658: [ 482.686152][ T39] #0: ffff88805aa57538 ((wq_completion)wg-kex-wg1#15){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.686219][ T39] #1: ffffc90005097bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.686306][ T39] #2: ffff888061a055f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 482.686364][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.686425][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.686487][ T39] 6 locks held by kworker/u8:43/10659: [ 482.686502][ T39] #0: ffff888030794938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.686572][ T39] #1: ffffc90005087bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.686635][ T39] #2: ffff888035ea15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.686705][ T39] #3: ffff88805a852e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.686763][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.686825][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.686897][ T39] 5 locks held by kworker/1:19/10661: [ 482.686909][ T39] #0: ffff88803042d938 ((wq_completion)wg-kex-wg2#16){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.686971][ T39] #1: ffffc9000500fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.687047][ T39] #2: ffff8880623515f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 482.687146][ T39] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.687203][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.687265][ T39] 4 locks held by kworker/1:20/10663: [ 482.687278][ T39] #0: ffff8880315da938 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.687345][ T39] #1: ffffc90004fcfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.687426][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.687484][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.687545][ T39] 4 locks held by kworker/u8:45/10666: [ 482.687560][ T39] #0: ffff88814cf61138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.687621][ T39] #1: ffffc90004defbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.687682][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.687740][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.687800][ T39] 4 locks held by kworker/0:25/10667: [ 482.687813][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.687875][ T39] #1: ffffc90004dcfbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.687937][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.687996][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.688057][ T39] 6 locks held by kworker/u8:47/10669: [ 482.688079][ T39] #0: ffff888036157138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.688142][ T39] #1: ffffc900041afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.688206][ T39] #2: ffff888039f455f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.688262][ T39] #3: ffff88805a850e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.688316][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.688375][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.688434][ T39] 6 locks held by kworker/u8:48/10670: [ 482.688449][ T39] #0: ffff888064d33138 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 482.688515][ T39] #1: ffffc9000418fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 482.688575][ T39] #2: ffff888033be95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 482.688631][ T39] #3: ffff88805aeb6350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 482.688697][ T39] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 482.688751][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 482.688809][ T39] [ 482.688815][ T39] ============================================= [ 482.688815][ T39] [ 482.688836][ T39] NMI backtrace for cpu 0 [ 482.688861][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.688887][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.688901][ T39] Call Trace: [ 482.688910][ T39] [ 482.688919][ T39] dump_stack_lvl+0x189/0x250 [ 482.688957][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.688994][ T39] ? __pfx__printk+0x10/0x10 [ 482.689032][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 482.689062][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 482.689098][ T39] ? __pfx__printk+0x10/0x10 [ 482.689126][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 482.689157][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 482.689185][ T39] watchdog+0xf93/0xfe0 [ 482.689219][ T39] ? watchdog+0x1de/0xfe0 [ 482.689253][ T39] kthread+0x70e/0x8a0 [ 482.689290][ T39] ? __pfx_watchdog+0x10/0x10 [ 482.689316][ T39] ? __pfx_kthread+0x10/0x10 [ 482.689354][ T39] ? __pfx_kthread+0x10/0x10 [ 482.689387][ T39] ret_from_fork+0x3f9/0x770 [ 482.689418][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 482.689454][ T39] ? __switch_to_asm+0x39/0x70 [ 482.689473][ T39] ? __switch_to_asm+0x33/0x70 [ 482.689493][ T39] ? __pfx_kthread+0x10/0x10 [ 482.689526][ T39] ret_from_fork_asm+0x1a/0x30 [ 482.689565][ T39] [ 482.689573][ T39] Sending NMI from CPU 0 to CPUs 1: [ 482.689599][ C1] NMI backtrace for cpu 1 [ 482.689614][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.689643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.689659][ C1] RIP: 0010:delay_tsc+0x5b/0xc0 [ 482.689681][ C1] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 82 60 9a f6 65 8b 05 ab 91 00 07 85 c0 74 1c f3 90 01 00 00 00 e8 bb 5e 9a f6 e8 46 3c 01 00 39 c5 75 0e 0f 01 f9 [ 482.689696][ C1] RSP: 0018:ffffc90000167890 EFLAGS: 00000286 [ 482.689710][ C1] RAX: 0000000080000000 RBX: 0000000000000899 RCX: 0000000000000000 [ 482.689722][ C1] RDX: 00000000000000f9 RSI: ffffffff8b620e60 RDI: 00000000ffffffff [ 482.689733][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 482.689743][ C1] R10: dffffc0000000000 R11: ffffffff8af55e30 R12: 1ffffffff327530a [ 482.689756][ C1] R13: 00000000ffffffff R14: 000000f98da515de R15: 0000000000000464 [ 482.689768][ C1] FS: 0000000000000000(0000) GS:ffff8881269c1000(0000) knlGS:0000000000000000 [ 482.689781][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 482.689792][ C1] CR2: 00007f13ab2c5f40 CR3: 000000006e8b2000 CR4: 00000000003526f0 [ 482.689807][ C1] Call Trace: [ 482.689813][ C1] [ 482.689820][ C1] wait_for_lsr+0x166/0x2f0 [ 482.689845][ C1] serial8250_console_write+0x1341/0x1b40 [ 482.689881][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 482.689908][ C1] ? console_flush_all+0x13a/0xcd0 [ 482.689930][ C1] ? console_flush_all+0x476/0xcd0 [ 482.689951][ C1] console_flush_all+0x698/0xcd0 [ 482.689970][ C1] ? console_flush_all+0x13a/0xcd0 [ 482.689991][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 482.690010][ C1] ? __lock_acquire+0xab9/0xd20 [ 482.690038][ C1] __console_flush_and_unlock+0xa4/0x240 [ 482.690058][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 482.690083][ C1] legacy_kthread_func+0x13b/0x1a0 [ 482.690123][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 482.690145][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 482.690169][ C1] ? __kthread_parkme+0x7b/0x200 [ 482.690193][ C1] ? __kthread_parkme+0x1a1/0x200 [ 482.690220][ C1] kthread+0x70e/0x8a0 [ 482.690249][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 482.690271][ C1] ? __pfx_kthread+0x10/0x10 [ 482.690301][ C1] ? __pfx_kthread+0x10/0x10 [ 482.690334][ C1] ret_from_fork+0x3f9/0x770 [ 482.690358][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 482.690384][ C1] ? __switch_to_asm+0x39/0x70 [ 482.690400][ C1] ? __switch_to_asm+0x33/0x70 [ 482.690416][ C1] ? __pfx_kthread+0x10/0x10 [ 482.690442][ C1] ret_from_fork_asm+0x1a/0x30 [ 482.690468][ C1] [ 482.690604][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 482.690621][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 482.690648][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.690662][ T39] Call Trace: [ 482.690672][ T39] [ 482.690681][ T39] dump_stack_lvl+0x99/0x250 [ 482.690716][ T39] ? __asan_memcpy+0x40/0x70 [ 482.690742][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.690777][ T39] ? __pfx__printk+0x10/0x10 [ 482.690816][ T39] vpanic+0x281/0x750 [ 482.690855][ T39] ? __pfx_vpanic+0x10/0x10 [ 482.690885][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 482.690910][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.690955][ T39] panic+0xb9/0xc0 [ 482.690987][ T39] ? __pfx_panic+0x10/0x10 [ 482.691026][ T39] ? irq_work_queue+0xc3/0x140 [ 482.691061][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 482.691099][ T39] watchdog+0xfd2/0xfe0 [ 482.691134][ T39] ? watchdog+0x1de/0xfe0 [ 482.691171][ T39] kthread+0x70e/0x8a0 [ 482.691218][ T39] ? __pfx_watchdog+0x10/0x10 [ 482.691248][ T39] ? __pfx_kthread+0x10/0x10 [ 482.691289][ T39] ? __pfx_kthread+0x10/0x10 [ 482.691401][ T39] ret_from_fork+0x3f9/0x770 [ 482.691453][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 482.691492][ T39] ? __switch_to_asm+0x39/0x70 [ 482.691515][ T39] ? __switch_to_asm+0x33/0x70 [ 482.691536][ T39] ? __pfx_kthread+0x10/0x10 [ 482.691575][ T39] ret_from_fork_asm+0x1a/0x30 [ 482.691617][ T39] [ 482.692059][ T39] Kernel Offset: disabled