last executing test programs: 39.281348919s ago: executing program 1 (id=451): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @private0, 0x4}}}, 0x90) 39.069955671s ago: executing program 1 (id=455): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r0, 0x701, 0x0, 0x0, {0x45}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) 38.812676343s ago: executing program 1 (id=460): r0 = syz_open_dev$rtc(&(0x7f0000000500), 0xd2a, 0x80) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_PIE_ON(r0, 0x7005) 38.662558131s ago: executing program 4 (id=462): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x58, r1, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x0) 38.524438557s ago: executing program 1 (id=463): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800010030bd7000f9dbdf250220300cfe0117070000000008001e"], 0x2c}}, 0x20008040) 38.301950189s ago: executing program 4 (id=465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) 38.085167795s ago: executing program 1 (id=467): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0x52b242d) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, r0) 37.722531398s ago: executing program 1 (id=470): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x2e, 0x44, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp={0x44, 0x48, 0x17, 0x0, 0x8, [0x8, 0x7, 0x5, 0x5, 0x0, 0x7]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 37.35970409s ago: executing program 4 (id=472): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x59f6, 0x1800, 0x42, &(0x7f0000000080)="017efbf83c2910e1879c7a0f34387670ec9d1f08ac456be6369b84c4162bd9ec49b45985e50251177fa2c532e3afb335ac2ee2c76c2dd23c56264451b2994fa3a34a"}, {0x9, 0x8000, 0x0, 0x0}], 0x2}) 35.255353568s ago: executing program 4 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x820, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.524939173s ago: executing program 2 (id=485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x125, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, r0}, 0x38) 33.967777343s ago: executing program 4 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 33.925295514s ago: executing program 2 (id=488): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) 33.281563754s ago: executing program 2 (id=489): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000010c0)={{{@in6=@remote, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {0x0, 0xfc73, 0xffffffffffffffff, 0x1, 0x8, 0x1000, 0x7f, 0x4}, {0x4, 0x8, 0xdf95, 0x81}, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x0, 0x3, 0xb, 0x3, 0xa58, 0x10000}}, 0xe8) close(r0) 33.28134974s ago: executing program 3 (id=490): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) 33.281130001s ago: executing program 4 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000510850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="b80000050000000073c430f8a2e6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 32.992610221s ago: executing program 2 (id=492): r0 = syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x1ffffe, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x2, 0x485c2ec651740288, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1800}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 32.953742818s ago: executing program 3 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4000000) 32.617347798s ago: executing program 2 (id=495): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "a8496856"}]}}, 0x0}, 0x0) 32.608373012s ago: executing program 3 (id=496): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) getsockname$packet(r0, 0x0, &(0x7f0000000240)) 31.625482227s ago: executing program 3 (id=499): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 31.07116755s ago: executing program 3 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000100)={0x54, r1, 0x1, 0xfffffffc, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth1_to_bond\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x54}}, 0x0) 30.839928056s ago: executing program 3 (id=501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.599845883s ago: executing program 2 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a) 28.53213368s ago: executing program 0 (id=513): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 27.521432636s ago: executing program 0 (id=514): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f000000", @ANYRES16=r0, @ANYBLOB="0100fcfffffffcffffff01"], 0x30}}, 0x0) 27.346738695s ago: executing program 0 (id=515): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) 21.98130359s ago: executing program 0 (id=516): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000), 0x10) 21.889325263s ago: executing program 32 (id=470): syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x2, 0x2e, 0x44, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp={0x44, 0x48, 0x17, 0x0, 0x8, [0x8, 0x7, 0x5, 0x5, 0x0, 0x7]}]}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 18.035109133s ago: executing program 33 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000510850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000800)="b80000050000000073c430f8a2e6", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.545003777s ago: executing program 0 (id=519): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000180)={0x28, 0x5, 0x0, r1, 0x0, 0x9, 0x1}) 15.456217696s ago: executing program 34 (id=503): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4a) 15.330603363s ago: executing program 35 (id=501): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 15.289186557s ago: executing program 0 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 0s ago: executing program 36 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 83.443688][ T5821] cgroup: Unknown subsys name 'net' [ 83.696941][ T5821] cgroup: Unknown subsys name 'cpuset' [ 83.752011][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.596428][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.575286][ T992] cfg80211: failed to load regulatory.db [ 88.277828][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.277884][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.280575][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.281349][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.292612][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.301729][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.339334][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.349469][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.351662][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.352572][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.404690][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.406089][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.429837][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.436864][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.441235][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.443885][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.444372][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.445285][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.460335][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.462178][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.544434][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.551240][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.566178][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.571909][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.582648][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.337597][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.415481][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 89.558975][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 89.565919][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.103727][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.139035][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.139182][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.140106][ T5833] bridge_slave_0: entered allmulticast mode [ 90.143910][ T5833] bridge_slave_0: entered promiscuous mode [ 90.250934][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.251044][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.251160][ T5833] bridge_slave_1: entered allmulticast mode [ 90.254023][ T5833] bridge_slave_1: entered promiscuous mode [ 90.413161][ T5836] Bluetooth: hci1: command tx timeout [ 90.413637][ T5152] Bluetooth: hci0: command tx timeout [ 90.492127][ T5836] Bluetooth: hci2: command tx timeout [ 90.493390][ T5152] Bluetooth: hci3: command tx timeout [ 90.633013][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.633205][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.633357][ T5834] bridge_slave_0: entered allmulticast mode [ 90.635153][ T5834] bridge_slave_0: entered promiscuous mode [ 90.662410][ T5152] Bluetooth: hci4: command tx timeout [ 90.895717][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.895933][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.896098][ T5834] bridge_slave_1: entered allmulticast mode [ 90.898003][ T5834] bridge_slave_1: entered promiscuous mode [ 90.899385][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.899539][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.899664][ T5844] bridge_slave_0: entered allmulticast mode [ 90.911684][ T5844] bridge_slave_0: entered promiscuous mode [ 90.936974][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.937134][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.937349][ T5840] bridge_slave_0: entered allmulticast mode [ 90.940803][ T5840] bridge_slave_0: entered promiscuous mode [ 90.973911][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.082504][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.082619][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.082746][ T5844] bridge_slave_1: entered allmulticast mode [ 91.084618][ T5844] bridge_slave_1: entered promiscuous mode [ 91.085625][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.085738][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.085907][ T5840] bridge_slave_1: entered allmulticast mode [ 91.087822][ T5840] bridge_slave_1: entered promiscuous mode [ 91.091200][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.488210][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.846640][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.849912][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.858575][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.871154][ T5833] team0: Port device team_slave_0 added [ 91.879144][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.879471][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.879683][ T5846] bridge_slave_0: entered allmulticast mode [ 91.890971][ T5846] bridge_slave_0: entered promiscuous mode [ 91.995736][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.998968][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.000624][ T5833] team0: Port device team_slave_1 added [ 92.001196][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.001289][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.001406][ T5846] bridge_slave_1: entered allmulticast mode [ 92.015107][ T5846] bridge_slave_1: entered promiscuous mode [ 92.384660][ T5834] team0: Port device team_slave_0 added [ 92.491662][ T5152] Bluetooth: hci0: command tx timeout [ 92.491692][ T5152] Bluetooth: hci1: command tx timeout [ 92.572691][ T5836] Bluetooth: hci3: command tx timeout [ 92.572719][ T5836] Bluetooth: hci2: command tx timeout [ 92.704152][ T5834] team0: Port device team_slave_1 added [ 92.706028][ T5844] team0: Port device team_slave_0 added [ 92.708372][ T5840] team0: Port device team_slave_0 added [ 92.731621][ T5152] Bluetooth: hci4: command tx timeout [ 92.891272][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.891286][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.891305][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.898464][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.034402][ T5844] team0: Port device team_slave_1 added [ 93.036292][ T5840] team0: Port device team_slave_1 added [ 93.038041][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.038053][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.038070][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.040979][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.412792][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.412804][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.412821][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.649470][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.649485][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.649515][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.651005][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.651017][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.651040][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.743260][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.743274][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.743298][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.763933][ T5846] team0: Port device team_slave_0 added [ 93.765281][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.765294][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.765324][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.768091][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.768104][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.768132][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.945328][ T5846] team0: Port device team_slave_1 added [ 94.178165][ T5833] hsr_slave_0: entered promiscuous mode [ 94.179251][ T5833] hsr_slave_1: entered promiscuous mode [ 94.394613][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.394630][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.394655][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.571712][ T5152] Bluetooth: hci1: command tx timeout [ 94.571741][ T5152] Bluetooth: hci0: command tx timeout [ 94.604730][ T5834] hsr_slave_0: entered promiscuous mode [ 94.605974][ T5834] hsr_slave_1: entered promiscuous mode [ 94.607518][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 94.607648][ T5834] Cannot create hsr debugfs directory [ 94.610006][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.610019][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.610044][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.661652][ T5836] Bluetooth: hci2: command tx timeout [ 94.661680][ T5836] Bluetooth: hci3: command tx timeout [ 94.811764][ T5152] Bluetooth: hci4: command tx timeout [ 94.879588][ T5844] hsr_slave_0: entered promiscuous mode [ 94.880473][ T5844] hsr_slave_1: entered promiscuous mode [ 94.881045][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 94.881064][ T5844] Cannot create hsr debugfs directory [ 94.900642][ T5840] hsr_slave_0: entered promiscuous mode [ 94.910001][ T5840] hsr_slave_1: entered promiscuous mode [ 94.910765][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 94.910786][ T5840] Cannot create hsr debugfs directory [ 95.645553][ T5846] hsr_slave_0: entered promiscuous mode [ 95.646763][ T5846] hsr_slave_1: entered promiscuous mode [ 95.647374][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 95.647395][ T5846] Cannot create hsr debugfs directory [ 96.662178][ T5152] Bluetooth: hci0: command tx timeout [ 96.662209][ T5152] Bluetooth: hci1: command tx timeout [ 96.732299][ T5836] Bluetooth: hci3: command tx timeout [ 96.732326][ T5836] Bluetooth: hci2: command tx timeout [ 96.854835][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.892280][ T5152] Bluetooth: hci4: command tx timeout [ 96.892591][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.939308][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.994392][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.146378][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.188564][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.211245][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.263134][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.392054][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.430491][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.471241][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.516248][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.666511][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.714304][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.758175][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.819208][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.973131][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.007129][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.024215][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.068273][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.095720][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.211109][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.269482][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.269675][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.300124][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.329595][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.329830][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.425127][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.436308][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.482102][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.482203][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.526960][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.527154][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.574405][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.596961][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.624053][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.624234][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.687243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.687388][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.793883][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.841314][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.900696][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.900844][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.944346][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.944496][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.044495][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.100296][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.100426][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.187992][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.215033][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.215143][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.540652][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.623998][ T5833] veth0_vlan: entered promiscuous mode [ 99.652121][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.703834][ T5833] veth1_vlan: entered promiscuous mode [ 99.889077][ T5840] veth0_vlan: entered promiscuous mode [ 99.959598][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.975612][ T5840] veth1_vlan: entered promiscuous mode [ 99.984902][ T5833] veth0_macvtap: entered promiscuous mode [ 100.018500][ T5833] veth1_macvtap: entered promiscuous mode [ 100.176241][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.233327][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.235779][ T5844] veth0_vlan: entered promiscuous mode [ 100.241013][ T5840] veth0_macvtap: entered promiscuous mode [ 100.287670][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.304564][ T1877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.308487][ T5840] veth1_macvtap: entered promiscuous mode [ 100.321605][ T1877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.329635][ T1877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.345641][ T1877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.347080][ T5844] veth1_vlan: entered promiscuous mode [ 100.454101][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.532039][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.614707][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.634563][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.657352][ T161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.679131][ T5834] veth0_vlan: entered promiscuous mode [ 100.683750][ T161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.718133][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.718156][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.769353][ T5844] veth0_macvtap: entered promiscuous mode [ 100.791110][ T5846] veth0_vlan: entered promiscuous mode [ 100.802005][ T5834] veth1_vlan: entered promiscuous mode [ 100.875000][ T5844] veth1_macvtap: entered promiscuous mode [ 100.970057][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.970076][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.996692][ T5846] veth1_vlan: entered promiscuous mode [ 101.109395][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.127344][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.127360][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.169673][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.222254][ T5834] veth0_macvtap: entered promiscuous mode [ 101.233822][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.269031][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.339270][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.341411][ T5834] veth1_macvtap: entered promiscuous mode [ 101.388294][ T5846] veth0_macvtap: entered promiscuous mode [ 101.400075][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.457353][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.457371][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.519441][ T5846] veth1_macvtap: entered promiscuous mode [ 101.640968][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.768852][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.779830][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.923734][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.967394][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.988279][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.988297][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.991416][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.034101][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.117554][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.148879][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.242115][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.271594][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.286189][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.289815][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.289834][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.805376][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.805395][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.935093][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.935113][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.991753][ T5909] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.039444][ T5971] syz.3.4 (5971) used greatest stack depth: 17496 bytes left [ 103.083316][ T1877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.083333][ T1877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.151759][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.151807][ T5909] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 103.151828][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.200744][ T5909] usb 1-1: config 0 descriptor?? [ 103.219662][ T1877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.219675][ T1877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.736370][ T5909] steelseries 0003:1038:12B6.0001: unknown main item tag 0x2 [ 103.736405][ T5909] steelseries 0003:1038:12B6.0001: item fetching failed at offset 6/7 [ 103.737270][ T5909] steelseries 0003:1038:12B6.0001: probe with driver steelseries failed with error -22 [ 103.846465][ T5980] capability: warning: `syz.3.18' uses deprecated v2 capabilities in a way that may be insecure [ 103.851123][ T5980] program syz.3.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.898941][ T9] usb 1-1: USB disconnect, device number 2 [ 104.198741][ T5988] ======================================================= [ 104.198741][ T5988] WARNING: The mand mount option has been deprecated and [ 104.198741][ T5988] and is ignored by this kernel. Remove the mand [ 104.198741][ T5988] option from the mount to silence this warning. [ 104.198741][ T5988] ======================================================= [ 105.221688][ T5896] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.376157][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 105.378538][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.378566][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.378602][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 105.378624][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.443057][ T5896] usb 3-1: config 0 descriptor?? [ 105.929680][ T5896] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 105.929716][ T5896] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 105.929741][ T5896] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 105.929765][ T5896] konepure 0003:1E7D:2DB4.0002: unknown main item tag 0x0 [ 106.018722][ T5896] konepure 0003:1E7D:2DB4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.2-1/input0 [ 106.088988][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.33'. [ 106.158867][ T5922] usb 3-1: USB disconnect, device number 2 [ 106.261997][ T6023] tipc: Started in network mode [ 106.262029][ T6023] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 106.265247][ T6023] tipc: Enabled bearer , priority 10 [ 106.525543][ T6026] fido_id[6026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 107.281651][ T1230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.382553][ T31] tipc: Node number set to 4269801494 [ 107.455920][ T1230] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 107.455948][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.455966][ T1230] usb 4-1: Product: syz [ 107.455980][ T1230] usb 4-1: Manufacturer: syz [ 107.455994][ T1230] usb 4-1: SerialNumber: syz [ 107.515987][ T1230] usb 4-1: config 0 descriptor?? [ 107.520930][ T1230] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 107.973202][ T1230] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 108.180381][ T5917] usb 4-1: USB disconnect, device number 2 [ 108.707097][ T1230] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 108.737616][ T1230] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 109.022071][ T6086] lo speed is unknown, defaulting to 1000 [ 109.022174][ T6086] lo speed is unknown, defaulting to 1000 [ 109.029272][ T6086] lo speed is unknown, defaulting to 1000 [ 109.067914][ T6086] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.070381][ T6081] fido_id[6081]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.103807][ T6089] Bluetooth: MGMT ver 1.23 [ 109.141721][ T6086] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 109.194244][ T6094] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET) [ 109.328782][ T6086] lo speed is unknown, defaulting to 1000 [ 109.357776][ T6086] lo speed is unknown, defaulting to 1000 [ 109.393122][ T6086] lo speed is unknown, defaulting to 1000 [ 109.395868][ T6086] lo speed is unknown, defaulting to 1000 [ 109.428234][ T6086] lo speed is unknown, defaulting to 1000 [ 109.521646][ T5922] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.673197][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 109.677288][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.677316][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.677336][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 109.677374][ T5922] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 109.677394][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.723749][ T5922] usb 1-1: config 0 descriptor?? [ 109.748835][ T6105] tmpfs: Cannot retroactively limit inodes [ 110.184634][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184667][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184690][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184713][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184735][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184757][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184779][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184801][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184823][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.184845][ T5922] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 110.295657][ T5922] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 110.295685][ T5922] microsoft 0003:045E:07DA.0004: no inputs found [ 110.295697][ T5922] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 110.452767][ T31] usb 1-1: USB disconnect, device number 3 [ 110.614327][ T6128] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.800802][ T6123] fido_id[6123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 111.029329][ T6140] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.033202][ T6140] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.073299][ T1230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.233463][ T1230] usb 4-1: Using ep0 maxpacket: 8 [ 111.235883][ T1230] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 111.240845][ T1230] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 111.240870][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.240888][ T1230] usb 4-1: Product: syz [ 111.240901][ T1230] usb 4-1: Manufacturer: syz [ 111.240914][ T1230] usb 4-1: SerialNumber: syz [ 111.313018][ T1230] usb 4-1: config 0 descriptor?? [ 111.332549][ T1230] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 111.332604][ T1230] usb 4-1: setting power ON [ 111.333278][ T1230] dvb-usb: bulk message failed: -22 (2/0) [ 111.391597][ T1230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 111.393798][ T1230] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 111.393876][ T1230] usb 4-1: media controller created [ 111.451919][ T5152] Bluetooth: hci4: command tx timeout [ 111.507024][ T1230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.526131][ T6136] dvb-usb: bulk message failed: -22 (3/0) [ 111.562102][ T1230] usb 4-1: selecting invalid altsetting 6 [ 111.562120][ T1230] usb 4-1: digital interface selection failed (-22) [ 111.562133][ T1230] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.563112][ T1230] usb 4-1: setting power OFF [ 111.563225][ T1230] dvb-usb: bulk message failed: -22 (2/0) [ 111.563240][ T1230] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.563252][ T1230] (NULL device *): no alternate interface [ 111.757452][ T1230] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.793128][ T1230] usb 4-1: USB disconnect, device number 3 [ 112.362517][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 112.595717][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.103'. [ 112.939143][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.940920][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.541760][ T6213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.119'. [ 113.871620][ T1230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.029073][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 114.029113][ T1230] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 114.029135][ T1230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 114.029154][ T1230] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 114.029188][ T1230] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 114.029287][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.104152][ T1230] usb 4-1: config 0 descriptor?? [ 114.342569][ T1230] hdpvr 4-1:0.0: firmware version 0x51 dated [ 114.342591][ T1230] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 114.365829][ T5896] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.522055][ T5896] usb 5-1: Using ep0 maxpacket: 32 [ 114.524796][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.524824][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.524913][ T5896] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 114.524935][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.594845][ T6242] netlink: 'syz.0.133': attribute type 1 has an invalid length. [ 114.617207][ T5896] usb 5-1: config 0 descriptor?? [ 114.898845][ T1230] hdpvr 4-1:0.0: Could not setup controls [ 114.910897][ T1230] hdpvr 4-1:0.0: registering videodev failed [ 114.929409][ T37] audit: type=1326 audit(1756515248.905:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6230 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e81c2ebe9 code=0x7fc00000 [ 115.014850][ T1230] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 115.047660][ T1230] usb 4-1: USB disconnect, device number 4 [ 115.106309][ T5896] koneplus 0003:1E7D:2D51.0005: item fetching failed at offset 1/5 [ 115.107065][ T5896] koneplus 0003:1E7D:2D51.0005: parse failed [ 115.107127][ T5896] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -22 [ 115.264062][ T5922] usb 5-1: USB disconnect, device number 2 [ 115.447235][ T6261] tipc: Enabling of bearer rejected, failed to enable media [ 115.454245][ T5896] hid_parser_main: 5 callbacks suppressed [ 115.454263][ T5896] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.454288][ T5896] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.454310][ T5896] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 115.471816][ T5896] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.706504][ T6264] fido_id[6264]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 115.784044][ T6266] nbd: must specify a size in bytes for the device [ 116.285642][ T6285] process 'syz.4.153' launched '/dev/fd/3' with NULL argv: empty string added [ 118.106656][ T6342] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 118.445595][ T6355] tmpfs: Bad value for 'mpol' [ 118.461563][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.481985][ T6355] tmpfs: Bad value for 'mpol' [ 118.616750][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 118.621747][ T5896] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 118.621771][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.621788][ T5896] usb 4-1: Product: syz [ 118.621800][ T5896] usb 4-1: Manufacturer: syz [ 118.621813][ T5896] usb 4-1: SerialNumber: syz [ 118.670192][ T5896] usb 4-1: config 0 descriptor?? [ 118.687018][ T5896] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 119.135831][ T6379] new mount options do not match the existing superblock, will be ignored [ 119.141265][ T6379] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 119.145814][ T6377] netlink: 248 bytes leftover after parsing attributes in process `syz.0.198'. [ 119.145844][ T6377] netlink: 156 bytes leftover after parsing attributes in process `syz.0.198'. [ 119.316678][ T5896] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 119.317202][ T5896] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 119.339839][ T5896] usb 4-1: USB disconnect, device number 5 [ 119.416940][ T6384] mmap: syz.1.201 (6384) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.555485][ T37] audit: type=1800 audit(1756515253.525:3): pid=6390 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.203" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 120.035740][ T6403] warning: `syz.1.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.409013][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 120.493066][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.641613][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 120.644648][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.644675][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.644708][ T5909] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 120.644728][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.711771][ T5909] usb 4-1: config 0 descriptor?? [ 121.069027][ T31] kernel write not supported for file /audio (pid: 31 comm: kworker/1:0) [ 121.149077][ T5909] waltop 0003:172F:0034.0007: item fetching failed at offset 0/2 [ 121.149864][ T5909] waltop 0003:172F:0034.0007: probe with driver waltop failed with error -22 [ 121.168796][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 121.367092][ T31] usb 4-1: USB disconnect, device number 6 [ 121.920853][ T6458] netlink: 'syz.1.234': attribute type 7 has an invalid length. [ 121.920879][ T6458] netlink: 'syz.1.234': attribute type 8 has an invalid length. [ 122.117292][ T5909] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 122.265114][ T5909] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.265145][ T5909] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.265169][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 122.265200][ T5909] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 122.265221][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.320032][ T5909] usb 5-1: config 0 descriptor?? [ 122.322714][ T6455] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.739311][ T5909] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 122.739342][ T5909] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 122.739365][ T5909] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 122.739388][ T5909] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 122.739411][ T5909] microsoft 0003:045E:00F9.0008: unknown main item tag 0x0 [ 122.812031][ T5909] microsoft 0003:045E:00F9.0008: hidraw0: USB HID v0.05 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 122.812061][ T5909] microsoft 0003:045E:00F9.0008: no inputs found [ 122.812073][ T5909] microsoft 0003:045E:00F9.0008: could not initialize ff, continuing anyway [ 122.964271][ T5909] usb 5-1: USB disconnect, device number 3 [ 123.014936][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 123.212305][ T6488] fido_id[6488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 123.309252][ T6498] autofs: Bad value for 'fd' [ 123.351568][ T1230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.511653][ T1230] usb 3-1: Using ep0 maxpacket: 8 [ 123.516970][ T1230] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 123.523795][ T1230] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 123.523821][ T1230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.523838][ T1230] usb 3-1: Product: syz [ 123.523851][ T1230] usb 3-1: Manufacturer: syz [ 123.523864][ T1230] usb 3-1: SerialNumber: syz [ 123.581396][ T1230] usb 3-1: config 0 descriptor?? [ 123.656031][ T1230] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 123.656086][ T1230] usb 3-1: setting power ON [ 123.656104][ T1230] dvb-usb: bulk message failed: -22 (2/0) [ 123.681249][ T1230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.691316][ T1230] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 123.691372][ T1230] usb 3-1: media controller created [ 123.741840][ T1230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.787295][ T1230] usb 3-1: selecting invalid altsetting 6 [ 123.787314][ T1230] usb 3-1: digital interface selection failed (-22) [ 123.787328][ T1230] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 123.790133][ T1230] usb 3-1: setting power OFF [ 123.790163][ T1230] dvb-usb: bulk message failed: -22 (2/0) [ 123.790179][ T1230] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 123.790190][ T1230] (NULL device *): no alternate interface [ 123.824341][ T6493] dvb-usb: bulk message failed: -22 (3/0) [ 123.824381][ T6493] cxusb: i2c wr: len=78 is too big! [ 123.824381][ T6493] [ 123.889654][ T6510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.257'. [ 123.960113][ T1230] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 123.974531][ T1230] usb 3-1: USB disconnect, device number 3 [ 124.237879][ T6517] tipc: Started in network mode [ 124.237912][ T6517] tipc: Node identity 8e9ec7cd171a, cluster identity 4711 [ 124.238136][ T6517] tipc: Enabled bearer , priority 10 [ 125.114794][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 125.147987][ T6542] delete_channel: no stack [ 125.181652][ T1230] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.336289][ T1230] usb 3-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.336320][ T1230] usb 3-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.336341][ T1230] usb 3-1: config 2 interface 0 has no altsetting 0 [ 125.336372][ T1230] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 125.336393][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.388565][ T9] tipc: Node number set to 2575615949 [ 125.864131][ T1230] apple 0003:05AC:027A.0009: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 126.043235][ T1230] usb 3-1: USB disconnect, device number 4 [ 126.151165][ T6569] fido_id[6569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 126.421584][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.481597][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.571621][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 126.574029][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.574050][ T9] usb 5-1: config 0 has no interface number 0 [ 126.578003][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 126.578029][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.578047][ T9] usb 5-1: Product: syz [ 126.578060][ T9] usb 5-1: Manufacturer: syz [ 126.578074][ T9] usb 5-1: SerialNumber: syz [ 126.631576][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 126.634842][ T31] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.634865][ T31] usb 2-1: config 0 has no interface number 0 [ 126.634890][ T31] usb 2-1: config 0 interface 12 has no altsetting 0 [ 126.639271][ T9] usb 5-1: config 0 descriptor?? [ 126.678514][ T31] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.678540][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.678559][ T31] usb 2-1: Product: syz [ 126.678573][ T31] usb 2-1: Manufacturer: syz [ 126.678586][ T31] usb 2-1: SerialNumber: syz [ 126.741627][ T31] usb 2-1: config 0 descriptor?? [ 126.742840][ T9] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 126.742869][ T9] usb 5-1: selecting invalid altsetting 1 [ 126.742883][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 126.787663][ T31] f81534 2-1:0.12: required endpoints missing [ 126.787844][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.788236][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 126.788284][ T9] usb 5-1: media controller created [ 126.844607][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.897054][ T9] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 126.897102][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 126.919370][ T9] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 127.009978][ T9] usb 5-1: USB disconnect, device number 4 [ 127.145358][ T5917] usb 2-1: USB disconnect, device number 2 [ 127.854123][ T6615] netlink: 'syz.0.305': attribute type 3 has an invalid length. [ 127.922104][ T6618] netlink: 79 bytes leftover after parsing attributes in process `syz.1.302'. [ 127.922220][ T6618] netlink: 79 bytes leftover after parsing attributes in process `syz.1.302'. [ 128.474538][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 128.474600][ T6636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.313'. [ 128.787526][ T6647] program syz.1.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.007289][ T37] audit: type=1326 audit(1756515262.985:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6652 comm="syz.0.320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35028febe9 code=0x0 [ 129.042951][ T6655] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 129.043005][ T6655] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 129.043049][ T6655] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 129.043209][ T6655] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 129.043257][ T6655] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 129.043310][ T6655] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 129.170395][ T6659] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 129.240646][ T37] audit: type=1800 audit(1756515263.205:5): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.323" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 129.461638][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 129.593071][ T6671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.593183][ T6671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.593750][ T6671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.593810][ T6671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.594021][ T6671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.594082][ T6671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.594315][ T6671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.594370][ T6671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.596380][ T6671] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.596460][ T6671] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.634349][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 129.636715][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.636742][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.636776][ T9] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 129.636797][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.724564][ T9] usb 3-1: config 0 descriptor?? [ 130.210480][ T9] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 130.422958][ T9] usb 3-1: USB disconnect, device number 5 [ 130.682637][ T6685] fido_id[6685]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 130.734284][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.884307][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 130.884352][ T31] usb 2-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 130.884378][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.889223][ T31] usb 2-1: config 0 descriptor?? [ 130.934572][ T5909] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 131.084012][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.084044][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.084079][ T5909] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 131.084099][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.133572][ T5909] usb 4-1: config 0 descriptor?? [ 131.325131][ T31] saitek 0003:06A3:0CD7.000B: item fetching failed at offset 0/3 [ 131.325868][ T31] saitek 0003:06A3:0CD7.000B: parse failed [ 131.325961][ T31] saitek 0003:06A3:0CD7.000B: probe with driver saitek failed with error -22 [ 131.397957][ T6707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'. [ 131.399221][ T6707] netlink: 60 bytes leftover after parsing attributes in process `syz.0.346'. [ 131.520208][ T31] usb 2-1: USB disconnect, device number 3 [ 131.577327][ T5909] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x2 [ 131.591580][ T5922] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 131.623630][ T5909] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 131.765108][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 131.765139][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.767703][ T5922] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 131.767727][ T5922] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 131.767745][ T5922] usb 3-1: Manufacturer: syz [ 131.786518][ T5922] usb 3-1: config 0 descriptor?? [ 131.819323][ T5909] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 131.819371][ T5909] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 131.879893][ T5909] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 131.903980][ T5909] usb 4-1: USB disconnect, device number 7 [ 131.928740][ T6712] fido_id[6712]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 131.958505][ T6716] ipvlan2: entered promiscuous mode [ 132.265382][ T5922] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 132.265418][ T5922] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 132.265443][ T5922] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 132.265468][ T5922] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 132.265493][ T5922] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 132.296049][ T5922] cougar 0003:060B:700A.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 132.436169][ T6727] netlink: 96 bytes leftover after parsing attributes in process `syz.4.355'. [ 132.456667][ T1230] usb 3-1: USB disconnect, device number 6 [ 132.689336][ T6730] fido_id[6730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 132.871627][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 133.026267][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 133.028576][ T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 133.028598][ T9] usb 2-1: config 0 has no interface number 0 [ 133.028639][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.028675][ T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 133.028699][ T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.028723][ T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.028762][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 133.028783][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.113595][ T9] usb 2-1: config 0 descriptor?? [ 133.153305][ T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 133.375515][ T9] usb 2-1: USB disconnect, device number 4 [ 133.375820][ T6754] random: crng reseeded on system resumption [ 133.424479][ T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 133.505717][ T6759] netlink: 'syz.3.370': attribute type 13 has an invalid length. [ 133.837353][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.841226][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.404447][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.420672][ T6759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.693847][ T43] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.698271][ T43] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.699844][ T43] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.699885][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.528674][ T6809] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 136.965540][ T6830] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 137.000443][ T6831] IPVS: stopping backup sync thread 6830 ... [ 137.185385][ T6834] Bluetooth: MGMT ver 1.23 [ 137.779327][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.781634][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.156927][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 138.157272][ T6872] net_ratelimit: 1052 callbacks suppressed [ 138.157284][ T6872] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 138.157317][ T6872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.951546][ T5909] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 139.105314][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.105343][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.105375][ T5909] usb 5-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 139.105405][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.122375][ T5896] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 139.170106][ T5909] usb 5-1: config 0 descriptor?? [ 139.301549][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 139.310182][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 139.310451][ T5896] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 139.310473][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.369868][ T5896] usb 3-1: config 0 descriptor?? [ 139.677985][ T5909] semitek 0003:1EA7:0907.000E: unknown main item tag 0x0 [ 139.728257][ T5909] semitek 0003:1EA7:0907.000E: hidraw0: USB HID vf5.a3 Device [HID 1ea7:0907] on usb-dummy_hcd.4-1/input0 [ 139.791760][ T5916] usb 5-1: USB disconnect, device number 5 [ 139.882319][ T6919] fido_id[6919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 140.029789][ T31] usb 3-1: USB disconnect, device number 7 [ 141.180291][ T6959] usb usb6: usbfs: process 6959 (syz.2.461) did not claim interface 63 before use [ 141.841980][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.004565][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 142.007019][ T5896] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.007046][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 142.007077][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 142.007097][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.068147][ T5896] usb 3-1: config 0 descriptor?? [ 142.268101][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 142.717280][ T6979] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.717768][ T6979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.717781][ T6979] IPv6: NLM_F_CREATE should be set when creating new route [ 142.717932][ T6979] IPv6: NLM_F_CREATE should be set when creating new route [ 142.719309][ T6979] IPv6: NLM_F_CREATE should be set when creating new route [ 142.773506][ T6979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.773644][ T6979] Zero length message leads to an empty skb [ 142.844215][ T1230] usb 3-1: USB disconnect, device number 8 [ 142.926189][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 143.108035][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 143.134110][ T5896] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.153293][ T5896] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 143.153315][ T5896] usb 5-1: config 4 has no interface number 0 [ 143.153345][ T5896] usb 5-1: config 4 interface 30 has no altsetting 0 [ 143.187195][ T5896] usb 5-1: string descriptor 0 read error: -22 [ 143.187334][ T5896] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 143.187355][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.303543][ T5896] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 143.303594][ T5896] dw2102: su3000_power_ctrl: 1, initialized 0 [ 143.303611][ T5896] dvb-usb: bulk message failed: -22 (2/0) [ 143.337980][ T5896] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.356526][ T5896] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 143.356579][ T5896] usb 5-1: media controller created [ 143.356725][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 143.356740][ T5896] dw2102: i2c transfer failed. [ 143.356765][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 143.356779][ T5896] dw2102: i2c transfer failed. [ 143.356795][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 143.356808][ T5896] dw2102: i2c transfer failed. [ 143.356823][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 143.356836][ T5896] dw2102: i2c transfer failed. [ 143.356851][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 143.356864][ T5896] dw2102: i2c transfer failed. [ 143.356879][ T5896] dvb-usb: bulk message failed: -22 (6/0) [ 143.356892][ T5896] dw2102: i2c transfer failed. [ 143.356901][ T5896] dvb-usb: MAC address: 02:02:02:02:02:02 [ 143.502682][ T6977] dw2102: i2c wr: len=66 is too big! [ 143.502682][ T6977] [ 143.619576][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.812002][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 143.812023][ T5896] dw2102: command 0x0e transfer failed. [ 143.812031][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 143.812043][ T5896] dw2102: command 0x0e transfer failed. [ 144.128487][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 144.128509][ T5896] dw2102: command 0x0e transfer failed. [ 144.128518][ T5896] dvb-usb: bulk message failed: -22 (3/0) [ 144.128531][ T5896] dw2102: command 0x0e transfer failed. [ 144.128540][ T5896] dvb-usb: bulk message failed: -22 (1/0) [ 144.128552][ T5896] dw2102: command 0x51 transfer failed. [ 144.128561][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 144.128574][ T5896] dw2102: i2c probe for address 0x68 failed. [ 144.128584][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 144.128597][ T5896] dw2102: i2c probe for address 0x69 failed. [ 144.128607][ T5896] dvb-usb: bulk message failed: -22 (5/0) [ 144.128620][ T5896] dw2102: i2c probe for address 0x6a failed. [ 144.128630][ T5896] dw2102: probing for demodulator failed. Is the external power switched on? [ 144.128639][ T5896] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 144.693492][ T5896] rc_core: IR keymap rc-tt-1500 not found [ 144.693529][ T5896] Registered IR keymap rc-empty [ 144.729763][ T5896] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 144.780453][ T5896] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 144.830912][ T5896] dvb-usb: schedule remote query interval to 250 msecs. [ 144.830932][ T5896] dw2102: su3000_power_ctrl: 0, initialized 1 [ 144.830945][ T5896] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 144.878212][ T5896] usb 5-1: USB disconnect, device number 6 [ 145.191692][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.364633][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 145.385674][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.385715][ T5909] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 145.385735][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.461881][ T5909] usb 1-1: config 0 descriptor?? [ 146.180718][ T5909] usb 1-1: string descriptor 0 read error: -71 [ 146.231683][ T5909] uclogic 0003:5543:004D.0011: failed retrieving string descriptor #200: -71 [ 146.231739][ T5909] uclogic 0003:5543:004D.0011: failed retrieving pen parameters: -71 [ 146.231755][ T5909] uclogic 0003:5543:004D.0011: failed probing pen v2 parameters: -71 [ 146.231803][ T5909] uclogic 0003:5543:004D.0011: failed probing parameters: -71 [ 146.231911][ T5909] uclogic 0003:5543:004D.0011: probe with driver uclogic failed with error -71 [ 146.320632][ T5909] usb 1-1: USB disconnect, device number 4 [ 146.881220][ T7026] tipc: Enabling not permitted [ 146.881251][ T7026] tipc: Enabling of bearer rejected, failed to enable media [ 147.545204][ T5909] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 147.694490][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 147.697902][ T5909] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 147.697929][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 147.697959][ T5909] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 147.697979][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.765164][ T5909] usb 3-1: config 0 descriptor?? [ 148.264727][ T5909] vrc2 0003:07C0:1125.0012: fixing up VRC-2 report descriptor [ 148.332766][ T5909] input: HID 07c0:1125 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:07C0:1125.0012/input/input8 [ 150.893005][ T7071] capability: warning: `syz.0.511' uses 32-bit capabilities (legacy support in use) [ 154.330870][ T30] sched: DL replenish lagged too much [ 156.181602][ T7022] Driver unsupported XDP return value 0 on prog (id 49) dev N/A, expect packet loss! [ 156.282882][ T5909] vrc2 0003:07C0:1125.0012: input,hidraw0: USB HID v0.02 Joystick [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 156.340078][ T5896] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 156.350756][ T5909] usb 3-1: USB disconnect, device number 9 [ 156.570723][ T7082] fido_id[7082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 158.586032][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.589584][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.601246][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.619625][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.620420][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.799220][ T7086] lo speed is unknown, defaulting to 1000 [ 159.369812][ T7086] chnl_net:caif_netlink_parms(): no params data found [ 160.731738][ T5152] Bluetooth: hci5: command tx timeout [ 162.392459][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.410654][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.431777][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.433383][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.434345][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.811658][ T5836] Bluetooth: hci5: command tx timeout [ 164.518087][ T5836] Bluetooth: hci6: command tx timeout [ 164.891630][ T5836] Bluetooth: hci5: command tx timeout [ 165.453040][ T5152] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 165.455401][ T5152] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 165.456412][ T5152] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 165.457530][ T5152] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 165.458300][ T5152] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 165.805557][ T5836] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 165.820923][ T5836] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 165.829437][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 165.839295][ T5836] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 165.840329][ T5836] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 166.574350][ T5152] Bluetooth: hci6: command tx timeout [ 166.971670][ T5152] Bluetooth: hci5: command tx timeout [ 167.531676][ T5152] Bluetooth: hci7: command tx timeout [ 167.931715][ T5152] Bluetooth: hci8: command tx timeout [ 168.651763][ T5152] Bluetooth: hci6: command tx timeout [ 169.611660][ T5152] Bluetooth: hci7: command tx timeout [ 170.011646][ T5152] Bluetooth: hci8: command tx timeout [ 170.737460][ T5152] Bluetooth: hci6: command tx timeout [ 171.695194][ T5152] Bluetooth: hci7: command tx timeout [ 172.091633][ T5152] Bluetooth: hci8: command tx timeout [ 173.771564][ T5152] Bluetooth: hci7: command tx timeout [ 174.181673][ T5152] Bluetooth: hci8: command tx timeout [ 180.442693][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 180.450794][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 180.466043][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 180.467697][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 180.468595][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 187.053117][ T5836] Bluetooth: hci9: command tx timeout [ 189.131707][ T5836] Bluetooth: hci9: command tx timeout [ 191.211706][ T5836] Bluetooth: hci9: command tx timeout [ 193.291647][ T5836] Bluetooth: hci9: command tx timeout [ 199.239694][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.239785][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.531660][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 218.861992][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.864789][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.865904][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.867379][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.906679][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.977720][ T5152] Bluetooth: hci1: command tx timeout [ 222.902522][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.905972][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.907002][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.908123][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.908904][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 223.051791][ T5836] Bluetooth: hci1: command tx timeout [ 225.051562][ T5836] Bluetooth: hci2: command tx timeout [ 225.134133][ T5836] Bluetooth: hci1: command tx timeout [ 225.855927][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.874110][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.875102][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.876209][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.876975][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 226.032370][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 226.034648][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 226.035630][ T5836] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 226.063256][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 226.064599][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 227.131863][ T5152] Bluetooth: hci2: command tx timeout [ 227.211699][ T5152] Bluetooth: hci1: command tx timeout [ 228.013206][ T5152] Bluetooth: hci3: command tx timeout [ 228.091584][ T5152] Bluetooth: hci10: command tx timeout [ 229.211645][ T5152] Bluetooth: hci2: command tx timeout [ 230.091985][ T5152] Bluetooth: hci3: command tx timeout [ 230.172918][ T5152] Bluetooth: hci10: command tx timeout [ 231.291622][ T5152] Bluetooth: hci2: command tx timeout [ 232.171760][ T5152] Bluetooth: hci3: command tx timeout [ 232.254241][ T5152] Bluetooth: hci10: command tx timeout [ 234.251842][ T5152] Bluetooth: hci3: command tx timeout [ 234.331646][ T5152] Bluetooth: hci10: command tx timeout [ 237.138293][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 241.005850][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 241.022892][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 241.023998][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 241.026174][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 241.026997][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 247.939856][ T5839] Bluetooth: hci11: command tx timeout [ 250.020035][ T5839] Bluetooth: hci11: command tx timeout [ 252.100151][ T5836] Bluetooth: hci11: command tx timeout [ 254.176098][ T5836] Bluetooth: hci11: command tx timeout [ 260.672331][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.672406][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.572661][ T7131] lo speed is unknown, defaulting to 1000 [ 273.625288][ T7142] lo speed is unknown, defaulting to 1000 [ 273.647835][ T7144] lo speed is unknown, defaulting to 1000 [ 273.670000][ T7152] lo speed is unknown, defaulting to 1000 [ 273.722922][ T7135] lo speed is unknown, defaulting to 1000 [ 275.709681][ T7131] chnl_net:caif_netlink_parms(): no params data found [ 275.933208][ T7144] chnl_net:caif_netlink_parms(): no params data found [ 278.956593][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 278.959090][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 278.961307][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 278.998622][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 279.021705][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 282.570478][ T5152] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 282.591988][ T5152] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 282.593033][ T5152] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 282.594157][ T5152] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 282.595234][ T5152] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 283.264946][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 283.409176][ T7142] chnl_net:caif_netlink_parms(): no params data found [ 286.443770][ T5837] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 286.459856][ T5837] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 286.461299][ T5837] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 286.486041][ T5837] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 286.501611][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 286.700563][ T7198] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 286.726224][ T7198] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 286.727275][ T7198] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 286.728917][ T7198] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 286.757776][ T7198] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 288.340709][ T7198] Bluetooth: hci6: command 0x0406 tx timeout [ 288.340831][ T7198] Bluetooth: hci8: command 0x0406 tx timeout [ 292.732697][ T5836] Bluetooth: hci12: command tx timeout [ 294.811955][ T5836] Bluetooth: hci12: command tx timeout [ 296.891969][ T5836] Bluetooth: hci12: command tx timeout [ 298.971891][ T5836] Bluetooth: hci12: command tx timeout [ 301.549873][ T5836] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 301.570181][ T5836] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 301.571288][ T5836] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 301.588482][ T5836] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 301.589922][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 302.141541][ T7185] lo speed is unknown, defaulting to 1000 [ 302.179517][ T7182] lo speed is unknown, defaulting to 1000 [ 302.224163][ T7205] lo speed is unknown, defaulting to 1000 [ 302.255746][ T7197] lo speed is unknown, defaulting to 1000 [ 302.317953][ T7192] lo speed is unknown, defaulting to 1000 [ 302.778858][ T5152] Bluetooth: hci13: command tx timeout [ 304.111815][ T7185] chnl_net:caif_netlink_parms(): no params data found [ 304.284786][ T7182] chnl_net:caif_netlink_parms(): no params data found [ 304.813861][ T59] Bluetooth: hci14: command tx timeout [ 304.814155][ T59] Bluetooth: hci13: command tx timeout [ 304.814237][ T59] Bluetooth: hci15: command tx timeout [ 306.895061][ T5152] Bluetooth: hci15: command tx timeout [ 306.895094][ T5152] Bluetooth: hci13: command tx timeout [ 306.895114][ T5152] Bluetooth: hci14: command tx timeout [ 308.655340][ T38] INFO: task kworker/u8:7:1355 blocked for more than 143 seconds. [ 308.655372][ T38] Not tainted syzkaller #0 [ 308.655383][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.655396][ T38] task:kworker/u8:7 state:D stack:20264 pid:1355 tgid:1355 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 308.655453][ T38] Workqueue: events_unbound bpf_map_free_deferred [ 308.655494][ T38] Call Trace: [ 308.655501][ T38] [ 308.655513][ T38] __schedule+0x16f3/0x4c20 [ 308.655565][ T38] ? __pfx___schedule+0x10/0x10 [ 308.655612][ T38] rt_mutex_schedule+0x77/0xf0 [ 308.655631][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 308.655665][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 308.655694][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 308.655716][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 308.655737][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 308.655755][ T38] ? __lock_acquire+0xab9/0xd20 [ 308.655791][ T38] ? rcu_barrier+0x4c/0x570 [ 308.655813][ T38] ? __lock_acquire+0xab9/0xd20 [ 308.655845][ T38] ? rcu_barrier+0x4c/0x570 [ 308.655861][ T38] mutex_lock_nested+0x16a/0x1d0 [ 308.655879][ T38] ? synchronize_rcu+0x11a/0x310 [ 308.655901][ T38] rcu_barrier+0x4c/0x570 [ 308.655930][ T38] dev_map_free+0x11f/0x6a0 [ 308.655966][ T38] bpf_map_free_deferred+0x110/0x140 [ 308.655986][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 308.656012][ T38] process_scheduled_works+0xade/0x17b0 [ 308.656064][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 308.656105][ T38] worker_thread+0x8a0/0xda0 [ 308.656132][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 308.656165][ T38] ? __kthread_parkme+0x7b/0x200 [ 308.656200][ T38] kthread+0x711/0x8a0 [ 308.656231][ T38] ? __pfx_worker_thread+0x10/0x10 [ 308.656255][ T38] ? __pfx_kthread+0x10/0x10 [ 308.656288][ T38] ? __pfx_kthread+0x10/0x10 [ 308.656316][ T38] ret_from_fork+0x3fc/0x770 [ 308.656344][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 308.656374][ T38] ? __switch_to_asm+0x39/0x70 [ 308.656391][ T38] ? __switch_to_asm+0x33/0x70 [ 308.656408][ T38] ? __pfx_kthread+0x10/0x10 [ 308.656437][ T38] ret_from_fork_asm+0x1a/0x30 [ 308.656471][ T38] [ 308.656559][ T38] INFO: task syz.2.503:7049 blocked for more than 143 seconds. [ 308.656572][ T38] Not tainted syzkaller #0 [ 308.656581][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.656589][ T38] task:syz.2.503 state:D stack:25128 pid:7049 tgid:7049 ppid:5846 task_flags:0x400040 flags:0x00004006 [ 308.656641][ T38] Call Trace: [ 308.656647][ T38] [ 308.656659][ T38] __schedule+0x16f3/0x4c20 [ 308.656711][ T38] ? __lock_acquire+0xab9/0xd20 [ 308.656736][ T38] ? __pfx___schedule+0x10/0x10 [ 308.656775][ T38] ? schedule+0x91/0x360 [ 308.656801][ T38] schedule+0x165/0x360 [ 308.656826][ T38] schedule_timeout+0x9a/0x270 [ 308.656848][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 308.656883][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 308.656907][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.656929][ T38] ? wait_for_completion+0x267/0x5d0 [ 308.656955][ T38] wait_for_completion+0x2bf/0x5d0 [ 308.656992][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 308.657019][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 308.657049][ T38] rcu_barrier+0x463/0x570 [ 308.657078][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 308.657099][ T38] kvm_arch_destroy_vm+0x23d/0x280 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 308.657125][ T38] kvm_put_kvm+0xf8e/0x1670 [ 308.657157][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 308.657181][ T38] kvm_vm_release+0x46/0x50 [ 308.657205][ T38] __fput+0x45b/0xa80 [ 308.657236][ T38] task_work_run+0x1d4/0x260 [ 308.657258][ T38] ? __pfx_task_work_run+0x10/0x10 [ 308.657283][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 308.657311][ T38] exit_to_user_mode_loop+0xec/0x110 [ 308.657336][ T38] do_syscall_64+0x2bd/0x3b0 [ 308.657362][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.657386][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.657405][ T38] ? clear_bhb_loop+0x60/0xb0 [ 308.657439][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.657458][ T38] RIP: 0033:0x7f369d13ebe9 [ 308.657479][ T38] RSP: 002b:00007ffe13662b78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 308.657498][ T38] RAX: 0000000000000000 RBX: 0000000000024602 RCX: 00007f369d13ebe9 [ 308.657517][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 308.657528][ T38] RBP: 00007f369d377da0 R08: 0000000000000001 R09: 0000000313662e6f [ 308.657540][ T38] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007f369d37609c [ 308.657552][ T38] R13: 00007f369d376090 R14: ffffffffffffffff R15: 00007ffe13662c90 [ 308.657582][ T38] [ 308.657615][ T38] [ 308.657615][ T38] Showing all locks held in the system: [ 308.657625][ T38] 1 lock held by khungtaskd/38: [ 308.657636][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 308.657687][ T38] 3 locks held by kworker/u8:2/43: [ 308.657697][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.657745][ T38] #1: ffffc90000b47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.657791][ T38] #2: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 308.657849][ T38] 2 locks held by kworker/1:2/992: [ 308.657862][ T38] 3 locks held by kworker/0:2/1230: [ 308.657872][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.657920][ T38] #1: ffffc90004a9fbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.657967][ T38] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.658010][ T38] 3 locks held by kworker/u8:7/1355: [ 308.658020][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.658067][ T38] #1: ffffc90004d3fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.658113][ T38] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.658167][ T38] 2 locks held by getty/5598: [ 308.658177][ T38] #0: ffff88823bf4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 308.658246][ T38] #1: ffffc9000418b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 308.658294][ T38] 4 locks held by kworker/u9:2/5836: [ 308.658305][ T38] #0: ffff888087622938 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.658359][ T38] #1: ffffc90004e7fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.658416][ T38] #2: ffff88806b92c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 308.658464][ T38] #3: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 308.658516][ T38] 2 locks held by kworker/0:4/5909: [ 308.658527][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 308.658576][ T38] #1: ffffc9000563fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 308.658626][ T38] 3 locks held by kworker/u8:10/5964: [ 308.658637][ T38] 1 lock held by syz.1.470/6975: [ 308.658648][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.658700][ T38] 1 lock held by syz.4.491/7022: [ 308.658710][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.658756][ T38] 1 lock held by syz.3.501/7047: [ 308.658766][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.658811][ T38] 1 lock held by syz.2.503/7049: [ 308.658822][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.658867][ T38] 3 locks held by syz-executor/7086: [ 308.658877][ T38] #0: ffff888034934e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 308.658925][ T38] #1: ffff8880349340a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 308.658975][ T38] #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 308.659030][ T38] 8 locks held by kworker/1:11/7094: [ 308.659041][ T38] 2 locks held by syz-executor/7095: [ 308.659051][ T38] #0: ffffffff8ecc53c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 308.659110][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 308.659151][ T38] 1 lock held by syz.0.522/7102: [ 308.659161][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 308.659204][ T38] 2 locks held by syz-executor/7106: [ 308.659214][ T38] #0: ffffffff8ecc53c0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 308.659258][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 308.659299][ T38] 2 locks held by syz-executor/7131: [ 308.659309][ T38] #0: ffff88805448ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 308.659352][ T38] #1: ffff88805448c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 308.659399][ T38] 4 locks held by syz-executor/7135: [ 308.659409][ T38] #0: ffff8880523a0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 308.659453][ T38] #1: ffff8880523a00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 308.659499][ T38] #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 308.659549][ T38] #3: ffff888023708358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 308.659602][ T38] 3 locks held by syz-executor/7142: [ 308.659612][ T38] #0: ffff88802b0d4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 308.659655][ T38] #1: ffff88802b0d40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 308.659708][ T38] #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 308.659760][ T38] 3 locks held by syz-executor/7144: [ 308.659770][ T38] #0: ffff88804f99ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 308.659812][ T38] #1: ffff88804f99c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 308.659859][ T38] #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 308.659910][ T38] 3 locks held by syz-executor/7152: [ 308.659920][ T38] #0: ffff88803e1e8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 308.659968][ T38] #1: ffff88803e1e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 308.660015][ T38] #2: ffffffff8ee39c38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 308.660066][ T38] 2 locks held by syz-executor/7182: [ 308.660076][ T38] #0: ffffffff8e447e20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 308.660129][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 308.660175][ T38] 2 locks held by syz-executor/7185: [ 308.660185][ T38] #0: ffffffff8e43ac20 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 308.660236][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 308.660282][ T38] 2 locks held by syz-executor/7192: [ 308.660292][ T38] #0: ffffffff8f1d62d8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 308.660343][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 308.660389][ T38] 2 locks held by syz-executor/7197: [ 308.660399][ T38] #0: ffffffff8f1f2908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 308.660451][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 308.660496][ T38] 2 locks held by syz-executor/7205: [ 308.660506][ T38] #0: ffffffff8f1f2908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 308.660568][ T38] #1: ffffffff8ecd22b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 308.660613][ T38] [ 308.660618][ T38] ============================================= [ 308.660618][ T38] [ 308.660634][ T38] NMI backtrace for cpu 0 [ 308.660655][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.660681][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.660691][ T38] Call Trace: [ 308.660697][ T38] [ 308.660704][ T38] dump_stack_lvl+0x189/0x250 [ 308.660734][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.660761][ T38] ? __pfx__printk+0x10/0x10 [ 308.660793][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 308.660816][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 308.660839][ T38] ? __pfx__printk+0x10/0x10 [ 308.660863][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.660888][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 308.660910][ T38] watchdog+0xf93/0xfe0 [ 308.660939][ T38] ? watchdog+0x1de/0xfe0 [ 308.660968][ T38] kthread+0x711/0x8a0 [ 308.660998][ T38] ? __pfx_watchdog+0x10/0x10 [ 308.661020][ T38] ? __pfx_kthread+0x10/0x10 [ 308.661052][ T38] ? __pfx_kthread+0x10/0x10 [ 308.661080][ T38] ret_from_fork+0x3fc/0x770 [ 308.661106][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 308.661135][ T38] ? __switch_to_asm+0x39/0x70 [ 308.661151][ T38] ? __switch_to_asm+0x33/0x70 [ 308.661167][ T38] ? __pfx_kthread+0x10/0x10 [ 308.661195][ T38] ret_from_fork_asm+0x1a/0x30 [ 308.661227][ T38] [ 308.661233][ T38] Sending NMI from CPU 0 to CPUs 1: [ 308.661256][ C1] NMI backtrace for cpu 1 [ 308.661268][ C1] CPU: 1 UID: 0 PID: 7094 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.661285][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.661295][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 308.661316][ C1] RIP: 0010:get_stack_info+0x6/0xf0 [ 308.661337][ C1] Code: d0 5b 94 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 57 <41> 56 41 55 41 54 53 48 89 cb 49 89 d6 49 89 f7 48 85 f6 74 07 48 [ 308.661353][ C1] RSP: 0018:ffffc9002162e678 EFLAGS: 00000246 [ 308.661367][ C1] RAX: 1ffff920042c5ce4 RBX: ffffc9002162e6e8 RCX: ffffc9002162e708 [ 308.661380][ C1] RDX: ffffc9002162e6e8 RSI: ffff8880267cbb80 RDI: ffffc9002162e688 [ 308.661393][ C1] RBP: ffffc9002162e701 R08: ffffc9002162e747 R09: 0000000000000000 [ 308.661404][ C1] R10: ffffc9002162e6e8 R11: fffff520042c5ce9 R12: ffffc9002162e688 [ 308.661415][ C1] R13: ffffc9002162e708 R14: ffffc9002162e710 R15: 1ffff920042c5ce2 [ 308.661436][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 308.661448][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.661458][ C1] CR2: 00007f55006ea450 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 308.661472][ C1] Call Trace: [ 308.661477][ C1] [ 308.661483][ C1] __unwind_start+0x43f/0x760 [ 308.661508][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.661526][ C1] arch_stack_walk+0xe4/0x150 [ 308.661551][ C1] ? __unwind_start+0xf8/0x760 [ 308.661574][ C1] stack_trace_save+0x9c/0xe0 [ 308.661590][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 308.661611][ C1] kasan_save_track+0x3e/0x80 [ 308.661656][ C1] __kasan_slab_alloc+0x6c/0x80 [ 308.661674][ C1] ? __alloc_skb+0x112/0x2d0 [ 308.661694][ C1] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 308.661719][ C1] __alloc_skb+0x112/0x2d0 [ 308.661740][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 308.661768][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 308.661788][ C1] ? nft_osf_init+0xd0/0x240 [ 308.661810][ C1] ? synproxy_pernet+0x45/0x270 [ 308.661836][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 308.661863][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 308.661888][ C1] ? nf_ip_checksum+0x13c/0x510 [ 308.661914][ C1] nft_synproxy_do_eval+0x345/0x570 [ 308.661940][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 308.661973][ C1] nft_do_chain+0x409/0x1920 [ 308.662003][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 308.662037][ C1] ? rcu_is_watching+0x15/0xb0 [ 308.662060][ C1] ? trace_irq_disable+0x37/0x110 [ 308.662079][ C1] ? preempt_schedule_irq+0xde/0x150 [ 308.662101][ C1] nft_do_chain_inet+0x25d/0x340 [ 308.662124][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 308.662147][ C1] ? __lock_acquire+0xab9/0xd20 [ 308.662172][ C1] ? NF_HOOK+0x9a/0x3a0 [ 308.662191][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 308.662214][ C1] nf_hook_slow+0xc5/0x220 [ 308.662236][ C1] NF_HOOK+0x206/0x3a0 [ 308.662255][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 308.662273][ C1] ? NF_HOOK+0x9a/0x3a0 [ 308.662290][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 308.662306][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 308.662327][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 308.662346][ C1] ? skb_dst+0x4f/0xd0 [ 308.662364][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 308.662383][ C1] NF_HOOK+0x30c/0x3a0 [ 308.662402][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 308.662420][ C1] ? NF_HOOK+0x9a/0x3a0 [ 308.662442][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 308.662460][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 308.662484][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 308.662500][ C1] __netif_receive_skb+0x143/0x380 [ 308.662516][ C1] ? rt_spin_unlock+0x65/0x80 [ 308.662534][ C1] ? process_backlog+0x27b/0x900 [ 308.662550][ C1] process_backlog+0x31e/0x900 [ 308.662574][ C1] __napi_poll+0xb6/0x540 [ 308.662592][ C1] net_rx_action+0x707/0xe00 [ 308.662619][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 308.662638][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 308.662661][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 308.662694][ C1] handle_softirqs+0x22c/0x710 [ 308.662718][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 308.662742][ C1] __local_bh_enable_ip+0x179/0x270 [ 308.662760][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 308.662779][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 308.662794][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 308.662820][ C1] ? neigh_periodic_work+0x57/0xe90 [ 308.662839][ C1] neigh_periodic_work+0xc37/0xe90 [ 308.662858][ C1] ? neigh_periodic_work+0x57/0xe90 [ 308.662876][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 308.662896][ C1] process_scheduled_works+0xade/0x17b0 [ 308.662928][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 308.662955][ C1] worker_thread+0x8a0/0xda0 [ 308.662987][ C1] kthread+0x711/0x8a0 [ 308.663011][ C1] ? __pfx_worker_thread+0x10/0x10 [ 308.663030][ C1] ? __pfx_kthread+0x10/0x10 [ 308.663054][ C1] ? __pfx_kthread+0x10/0x10 [ 308.663077][ C1] ret_from_fork+0x3fc/0x770 [ 308.663098][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 308.663120][ C1] ? __switch_to_asm+0x39/0x70 [ 308.663134][ C1] ? __switch_to_asm+0x33/0x70 [ 308.663147][ C1] ? __pfx_kthread+0x10/0x10 [ 308.663170][ C1] ret_from_fork_asm+0x1a/0x30 [ 308.663192][ C1] [ 308.971615][ T5152] Bluetooth: hci13: command tx timeout [ 308.971650][ T5152] Bluetooth: hci14: command tx timeout [ 308.971669][ T5152] Bluetooth: hci15: command tx timeout [ 309.071476][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 309.071495][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 309.071517][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.071528][ T38] Call Trace: [ 309.071535][ T38] [ 309.071543][ T38] dump_stack_lvl+0x99/0x250 [ 309.071576][ T38] ? __asan_memcpy+0x40/0x70 [ 309.071596][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.071623][ T38] ? __pfx__printk+0x10/0x10 [ 309.071664][ T38] vpanic+0x281/0x750 [ 309.071693][ T38] ? __pfx_vpanic+0x10/0x10 [ 309.071720][ T38] ? preempt_schedule+0xae/0xc0 [ 309.071745][ T38] ? preempt_schedule_common+0x83/0xd0 [ 309.071774][ T38] panic+0xb9/0xc0 [ 309.071799][ T38] ? __pfx_panic+0x10/0x10 [ 309.071828][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 309.071855][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 309.071879][ T38] watchdog+0xfd2/0xfe0 [ 309.071908][ T38] ? watchdog+0x1de/0xfe0 [ 309.071936][ T38] kthread+0x711/0x8a0 [ 309.071967][ T38] ? __pfx_watchdog+0x10/0x10 [ 309.071990][ T38] ? __pfx_kthread+0x10/0x10 [ 309.072022][ T38] ? __pfx_kthread+0x10/0x10 [ 309.072050][ T38] ret_from_fork+0x3fc/0x770 [ 309.072077][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 309.072106][ T38] ? __switch_to_asm+0x39/0x70 [ 309.072122][ T38] ? __switch_to_asm+0x33/0x70 [ 309.072138][ T38] ? __pfx_kthread+0x10/0x10 [ 309.072166][ T38] ret_from_fork_asm+0x1a/0x30 [ 309.072199][ T38] [ 309.072542][ T38] Kernel Offset: disabled