last executing test programs: 1m19.717943963s ago: executing program 3 (id=625): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_io_uring_setup(0x275c, 0x0, 0x0, 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 1m13.064437797s ago: executing program 3 (id=635): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x600) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="610f7208deff6fc546fdfa1530638be90bf3845c52ef530bbd66a92604b159f00e0adad9618978ed7f57ce320d7840a8784c77f1531a93a6f8dd28325ae10dc5b6156a8f46079434e2155098137ae1392f4b56810541d86ebfccc59d302d55b1e16bcea32aa81ee390dcc51d9ec3d8da660f909be5f2b43eded40b823d308280329ea8115963bd7d9b3ccf5a74c7039c07037a8b2a342fb6e83b6182fd79757410b42fc4776b417bfafb3fdbe60d48bab220bbdc8b9aea898c5b74bf85c6cdd4fda6f4a3103df684959838c6c0999c9451a4419486eb253aa01c9e010c2b0fd8522037e29e", @ANYBLOB="a574ea73ddfac9c98e8335cb1b237b87a562664c3564c8196f6f4f37a294dd6a79818d8f681870f57246b48f84600fffa9ee397ffddf69fa9462d739b92c27e7f341caadb37907f6506f49ae93e5634df3ec", @ANYRES8=r0], &(0x7f0000000340)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r6, 0x0) socket(0x28, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) 1m5.245566949s ago: executing program 4 (id=645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d000110000000090400"], 0x0) syz_io_uring_setup(0x275c, 0x0, 0x0, 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 1m5.07367081s ago: executing program 2 (id=647): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) statx(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x0, 0x5ff, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') 1m3.946036015s ago: executing program 1 (id=648): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) 1m3.717156128s ago: executing program 2 (id=649): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m3.437933508s ago: executing program 1 (id=651): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000280), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\a\x00\x00'], 0x0}, 0x0) 1m3.437592616s ago: executing program 0 (id=652): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x5, 0x2) connect$pptp(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0xc0045878, &(0x7f0000000280)={'batadv_slave_1\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x13, 0x6, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x30}}, 0x0) 1m3.104778998s ago: executing program 3 (id=654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000c00)=@framed={{}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x1, 0xffffffff, &(0x7f0000000d40)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getegid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x108, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@remote, @local, 0xffffff00, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x19}, @multicast2, 0x0, 0xff, 0x5, 0x2, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x2, 0x5, 0x7, 'ip6tnl0\x00', 'veth0_to_team\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @broadcast, 0x8}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="05000000020800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="00000040010000000000000027000000f33d8e7b847ec8b36f110ab0ada0f01df04e9087"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) stat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xc) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x6, 0xd4a, 0x0, {0x77359400}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b600300e4931133f6d9919fd48557d76811cd874f23105bbfc101831026d40798a2be4cc414e022161989779bae641ed1511200"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000080) 1m1.875948914s ago: executing program 0 (id=655): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002440)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x25dfdbfd, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x6}, {0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x3, 0x0, 0x1e2}, 0x400, 0x1, 0x1, 0x1, 0x0, 0x3}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x1}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040084}, 0x24048840) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000a40)={0x1c, 0x0, 0x131, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x408d1}, 0x8880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r5, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x54}, 0x4000) getpgrp(0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 1m1.676002441s ago: executing program 4 (id=656): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r7, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m1.001837063s ago: executing program 4 (id=657): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r1, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x6}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xb75}}, './file0/file0\x00'}) sendmsg$802154_raw(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)="739be4d07f7ecc0544", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x844) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000400)) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, &(0x7f0000000100)='barrier') 1m0.525869569s ago: executing program 1 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x4080, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts={{0x18, 0x29, 0x36, {0x2c, 0x2000023f}}}], 0x18}, 0x40c0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r6, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) 58.73768641s ago: executing program 1 (id=659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) statx(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0x0, 0x5ff, 0x0) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000080)='./file0/../file0\x00') 57.280480769s ago: executing program 1 (id=660): r0 = socket(0x1d, 0x1, 0x10a0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x11, 0x3c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 55.52200646s ago: executing program 0 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x104, 0x2, 0x0, 0x1}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r2, 0x0, 0x0, 0xe0) 55.254727778s ago: executing program 0 (id=662): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x7, 0x0, 0x2, r2, 0x5}) 55.042137515s ago: executing program 0 (id=663): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 54.88347069s ago: executing program 3 (id=664): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x600) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r5, 0x0) socket(0x28, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) 54.697898932s ago: executing program 4 (id=665): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x5, 0x2) connect$pptp(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 53.750390078s ago: executing program 1 (id=667): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r7, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 53.583103652s ago: executing program 3 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xe, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe4}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x6}], &(0x7f0000000040)='GPL\x00', 0x3a2d5c65, 0x9b, &(0x7f0000000180)=""/155, 0x41100, 0x55, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x80000000, 0x40}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000380)=[{0x4, 0x2, 0xb, 0xc}, {0x4, 0x5, 0x4, 0xc}, {0x0, 0x3, 0x7, 0xc}, {0x3, 0x5, 0xe, 0x1}, {0x0, 0x5, 0xb, 0xc}, {0x3, 0x5, 0x5, 0x4}, {0x3, 0x1, 0x6, 0xa}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='rxrpc_timer\x00', r0, 0x0, 0xaa8}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback={0xfe80000000000000}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0xc0}}, 0x0) 52.545952884s ago: executing program 2 (id=669): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) 52.472563524s ago: executing program 2 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 51.211414051s ago: executing program 3 (id=671): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) 37.899844181s ago: executing program 2 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1, 0x0, 0x1000}}}}}}, 0x0) 28.031912904s ago: executing program 4 (id=673): r0 = gettid() tkill(r0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket(0x400000000010, 0x3, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffdfe, 0x0, 0x2}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 18.602404175s ago: executing program 32 (id=666): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_io_uring_setup(0x275c, 0x0, 0x0, 0x0) close(0x3) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0xf47) socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 17.423180025s ago: executing program 33 (id=667): socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000010c0)) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioprio_set$uid(0x0, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r7, 0x1) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x40000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 16.50991968s ago: executing program 34 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x1, 0x0, 0x1000}}}}}}, 0x0) 15.976872241s ago: executing program 35 (id=671): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) 15.910540571s ago: executing program 4 (id=678): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x600) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r5, 0x0) socket(0x28, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) 0s ago: executing program 36 (id=678): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x600) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c005af07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x50) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1138000, 0x800, 0x3, 0x1}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r5, 0x0) socket(0x28, 0x5, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) kernel console output (not intermixed with test programs): [ 94.192418][ T2048] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 99.196329][ T5829] cgroup: Unknown subsys name 'net' [ 99.463493][ T5829] cgroup: Unknown subsys name 'cpuset' [ 99.498367][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.503940][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.218760][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.223843][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 106.238809][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.248881][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 106.267935][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 106.288089][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.292534][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.294173][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 106.297004][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.298261][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.311785][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 106.313484][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 106.313809][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 106.343687][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 106.385671][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.389705][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.397145][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.398887][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.399212][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.493947][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 106.525621][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 106.528507][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.539432][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.551225][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.573370][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 107.630692][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 107.705472][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 107.876313][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 107.902472][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 107.912964][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 108.440528][ T5855] Bluetooth: hci0: command tx timeout [ 108.440757][ T5852] Bluetooth: hci1: command tx timeout [ 108.507770][ T5852] Bluetooth: hci2: command tx timeout [ 108.587762][ T5852] Bluetooth: hci3: command tx timeout [ 108.631467][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.632370][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.632888][ T5846] bridge_slave_0: entered allmulticast mode [ 108.635129][ T5846] bridge_slave_0: entered promiscuous mode [ 108.668079][ T5852] Bluetooth: hci4: command tx timeout [ 108.792100][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.792249][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.792453][ T5846] bridge_slave_1: entered allmulticast mode [ 108.795355][ T5846] bridge_slave_1: entered promiscuous mode [ 108.833875][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.834024][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.834173][ T5861] bridge_slave_0: entered allmulticast mode [ 108.836062][ T5861] bridge_slave_0: entered promiscuous mode [ 109.150989][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.151149][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.151384][ T5861] bridge_slave_1: entered allmulticast mode [ 109.154427][ T5861] bridge_slave_1: entered promiscuous mode [ 109.508838][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.509029][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.509203][ T5850] bridge_slave_0: entered allmulticast mode [ 109.511175][ T5850] bridge_slave_0: entered promiscuous mode [ 109.545209][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.546590][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.546743][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.546966][ T5851] bridge_slave_0: entered allmulticast mode [ 109.552565][ T5851] bridge_slave_0: entered promiscuous mode [ 109.556941][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.557111][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.557357][ T5847] bridge_slave_0: entered allmulticast mode [ 109.571098][ T5847] bridge_slave_0: entered promiscuous mode [ 109.683819][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.684025][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.684261][ T5850] bridge_slave_1: entered allmulticast mode [ 109.686647][ T5850] bridge_slave_1: entered promiscuous mode [ 109.708312][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.708601][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.708758][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.708983][ T5851] bridge_slave_1: entered allmulticast mode [ 109.712534][ T5851] bridge_slave_1: entered promiscuous mode [ 109.714858][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.715023][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.715251][ T5847] bridge_slave_1: entered allmulticast mode [ 109.730418][ T5847] bridge_slave_1: entered promiscuous mode [ 109.741427][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.196848][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.507834][ T5852] Bluetooth: hci1: command tx timeout [ 110.507875][ T5852] Bluetooth: hci0: command tx timeout [ 110.587730][ T5852] Bluetooth: hci2: command tx timeout [ 110.593589][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.595854][ T5846] team0: Port device team_slave_0 added [ 110.621988][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.626360][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.667669][ T5852] Bluetooth: hci3: command tx timeout [ 110.729810][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.732489][ T5846] team0: Port device team_slave_1 added [ 110.747877][ T5852] Bluetooth: hci4: command tx timeout [ 110.750792][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.755378][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.759250][ T5861] team0: Port device team_slave_0 added [ 111.105760][ T5861] team0: Port device team_slave_1 added [ 111.682621][ T5850] team0: Port device team_slave_0 added [ 111.684686][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.684706][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.684726][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.704676][ T5851] team0: Port device team_slave_0 added [ 111.725773][ T5847] team0: Port device team_slave_0 added [ 111.813454][ T5850] team0: Port device team_slave_1 added [ 111.817019][ T5851] team0: Port device team_slave_1 added [ 111.821299][ T5847] team0: Port device team_slave_1 added [ 111.823309][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.823328][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.823362][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.825443][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.825460][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.825491][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.103707][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.103728][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.103755][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.324479][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.324494][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.324512][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.325865][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.325890][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.325918][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.327344][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.327359][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.327387][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.351256][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.351280][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.351313][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.353400][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.353416][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.353446][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.355790][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.355806][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.355834][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.587717][ T5852] Bluetooth: hci0: command tx timeout [ 112.597718][ T5852] Bluetooth: hci1: command tx timeout [ 112.667909][ T5852] Bluetooth: hci2: command tx timeout [ 112.749636][ T5852] Bluetooth: hci3: command tx timeout [ 112.806326][ T5846] hsr_slave_0: entered promiscuous mode [ 112.814112][ T5846] hsr_slave_1: entered promiscuous mode [ 112.827734][ T5852] Bluetooth: hci4: command tx timeout [ 113.130231][ T5861] hsr_slave_0: entered promiscuous mode [ 113.131391][ T5861] hsr_slave_1: entered promiscuous mode [ 113.132185][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 113.132273][ T5861] Cannot create hsr debugfs directory [ 113.430013][ T5847] hsr_slave_0: entered promiscuous mode [ 113.431513][ T5847] hsr_slave_1: entered promiscuous mode [ 113.433958][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 113.433980][ T5847] Cannot create hsr debugfs directory [ 113.443551][ T5850] hsr_slave_0: entered promiscuous mode [ 113.445796][ T5850] hsr_slave_1: entered promiscuous mode [ 113.447014][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 113.447045][ T5850] Cannot create hsr debugfs directory [ 113.484853][ T5851] hsr_slave_0: entered promiscuous mode [ 113.486823][ T5851] hsr_slave_1: entered promiscuous mode [ 113.489371][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 113.489405][ T5851] Cannot create hsr debugfs directory [ 114.667931][ T5852] Bluetooth: hci1: command tx timeout [ 114.667942][ T5855] Bluetooth: hci0: command tx timeout [ 114.748843][ T5855] Bluetooth: hci2: command tx timeout [ 114.828047][ T5855] Bluetooth: hci3: command tx timeout [ 114.907726][ T5855] Bluetooth: hci4: command tx timeout [ 115.490207][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.545183][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.605634][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 115.635092][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 115.774697][ T5861] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.815135][ T5861] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.876599][ T5861] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.939925][ T5861] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.133054][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.184002][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.231890][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.290674][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.505181][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 116.563416][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 116.615752][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 116.685320][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 116.831510][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.891433][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 116.946714][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.002635][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.043632][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.142221][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.206604][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.207217][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.250931][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.291323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.291486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.413285][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.480216][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.480455][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.506903][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.545283][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.545452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.675645][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.710670][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.752789][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.757828][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.845567][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.845817][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.941283][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.955067][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.024878][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.025703][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.106719][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.107318][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.164979][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.244449][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.245153][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.320948][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.321106][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.412480][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.712229][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.158349][ T5861] veth0_vlan: entered promiscuous mode [ 119.243857][ T5861] veth1_vlan: entered promiscuous mode [ 119.389207][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.475250][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.534566][ T5861] veth0_macvtap: entered promiscuous mode [ 119.598990][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.602939][ T5861] veth1_macvtap: entered promiscuous mode [ 119.732476][ T5846] veth0_vlan: entered promiscuous mode [ 119.734575][ T5851] veth0_vlan: entered promiscuous mode [ 119.742142][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.796534][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.834702][ T5846] veth1_vlan: entered promiscuous mode [ 119.836549][ T5851] veth1_vlan: entered promiscuous mode [ 119.873217][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.891026][ T5847] veth0_vlan: entered promiscuous mode [ 119.892342][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.916887][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.942329][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.044835][ T5850] veth0_vlan: entered promiscuous mode [ 120.047215][ T5847] veth1_vlan: entered promiscuous mode [ 120.229162][ T5850] veth1_vlan: entered promiscuous mode [ 120.291527][ T5851] veth0_macvtap: entered promiscuous mode [ 120.296935][ T5846] veth0_macvtap: entered promiscuous mode [ 120.362353][ T5851] veth1_macvtap: entered promiscuous mode [ 120.374916][ T5846] veth1_macvtap: entered promiscuous mode [ 120.390242][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.390271][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.516688][ T5847] veth0_macvtap: entered promiscuous mode [ 120.539241][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.539275][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.603702][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.615032][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.616216][ T5847] veth1_macvtap: entered promiscuous mode [ 120.654903][ T5850] veth0_macvtap: entered promiscuous mode [ 120.671121][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.720390][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.770922][ T5850] veth1_macvtap: entered promiscuous mode [ 120.772667][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.793975][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.811506][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.832543][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.852933][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.857115][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.879843][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.940262][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.955061][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.962953][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.200661][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.204725][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.229870][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.265980][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.299183][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.422488][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.534612][ T1461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.534636][ T1461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.615604][ T3527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.699572][ T3527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.833812][ T3527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.838260][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.838286][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.866623][ T3527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.879685][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.098434][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.098459][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.467891][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.467916][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.717142][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.717165][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.887681][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.887706][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.018356][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.018376][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.241750][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 123.271056][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.271080][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.517570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.883460][ T5974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8'. [ 124.117539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.197436][ T5978] Process accounting resumed [ 124.427574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.593438][ T5981] random: crng reseeded on system resumption [ 125.195265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 125.258734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.394709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 125.727543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.827548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.897561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.333260][ T5991] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 126.397553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.443193][ T5991] batman_adv: batadv0: Adding interface: team0 [ 127.443228][ T5991] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.443250][ T5991] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 130.301586][ T6021] Process accounting resumed [ 130.322767][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.517566][ T5854] usb 1-1: Using ep0 maxpacket: 32 [ 130.574738][ T5854] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 130.603934][ T5854] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 130.603968][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 130.603991][ T5854] usb 1-1: Product: syz [ 130.604005][ T5854] usb 1-1: Manufacturer: syz [ 130.604020][ T5854] usb 1-1: SerialNumber: syz [ 130.727876][ T5854] usb 1-1: config 0 descriptor?? [ 130.753597][ T6014] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.796720][ T5854] hub 1-1:0.0: bad descriptor, ignoring hub [ 130.796752][ T5854] hub 1-1:0.0: probe with driver hub failed with error -5 [ 131.487025][ T5854] usb 1-1: USB disconnect, device number 2 [ 131.656876][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 133.094215][ T6040] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.335443][ T6040] syz.1.22 (6040) used greatest stack depth: 16536 bytes left [ 135.590986][ T6064] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.973458][ T6072] Process accounting resumed [ 136.126616][ T6069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.149876][ T6069] Bluetooth: MGMT ver 1.23 [ 136.207294][ T6069] netlink: 'syz.2.29': attribute type 29 has an invalid length. [ 136.207324][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 136.939401][ T6084] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.189389][ T5855] Bluetooth: hci0: command tx timeout [ 140.289790][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.289902][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.478394][ T6133] Zero length message leads to an empty skb [ 143.664094][ T83] Bluetooth: hci5: Frame reassembly failed (-84) [ 143.664541][ T43] Bluetooth: hci5: Frame reassembly failed (-84) [ 144.285646][ T6151] overlayfs: failed to clone upperpath [ 145.424915][ T6161] netlink: 'syz.4.52': attribute type 4 has an invalid length. [ 145.710329][ T5855] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.731630][ T6208] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'. [ 152.055807][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.209382][ T2048] Process accounting resumed [ 152.988042][ T977] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 154.029748][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.054005][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 154.054064][ T977] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 154.054089][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.111909][ T977] usb 5-1: config 0 descriptor?? [ 154.113121][ T6239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.551126][ T977] ryos 0003:1E7D:3138.0001: unknown main item tag 0x0 [ 154.551175][ T977] ryos 0003:1E7D:3138.0001: unknown main item tag 0x1 [ 154.599428][ T977] ryos 0003:1E7D:3138.0001: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 154.789077][ T977] usb 5-1: USB disconnect, device number 2 [ 154.985151][ T6257] fido_id[6257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 156.015683][ T977] Process accounting resumed [ 157.593215][ T6285] capability: warning: `syz.0.98' uses 32-bit capabilities (legacy support in use) [ 157.823227][ T6290] usb usb8: usbfs: process 6290 (syz.1.100) did not claim interface 0 before use [ 163.219987][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 164.024953][ T6333] warning: `syz.1.109' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 168.943985][ T6354] syz.4.115 (6354) used greatest stack depth: 16176 bytes left [ 171.105931][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 173.197786][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 174.387297][ T5909] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 174.387352][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.387373][ T5909] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 174.387395][ T5909] usb 2-1: config 1 has no interface number 1 [ 174.421927][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 174.421989][ T5909] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.456871][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.456904][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.456940][ T5909] usb 2-1: Product: syz [ 174.456955][ T5909] usb 2-1: Manufacturer: syz [ 174.456970][ T5909] usb 2-1: SerialNumber: syz [ 174.840387][ T5909] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 174.840438][ T5909] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 175.281319][ T5909] usb 2-1: USB disconnect, device number 2 [ 175.327184][ T6400] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.294216][ T6402] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 176.347844][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.884207][ T6429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 178.884234][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 179.136951][ T6429] vlan2: entered promiscuous mode [ 179.137180][ T6429] vlan2: entered allmulticast mode [ 179.137192][ T6429] hsr_slave_1: entered allmulticast mode [ 179.230936][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 179.495198][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 179.547920][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.140649][ T6455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.149'. [ 182.711026][ T6440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.979537][ T5852] Bluetooth: hci4: link tx timeout [ 185.979880][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.999708][ T5855] Bluetooth: hci4: link tx timeout [ 185.999731][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 186.005960][ T5855] Bluetooth: hci4: link tx timeout [ 186.005987][ T5855] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 188.769209][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 190.074028][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 190.199378][ T6499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.161'. [ 190.199406][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 190.374955][ T6498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.495928][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 191.794422][ T6516] netlink: 32 bytes leftover after parsing attributes in process `syz.3.166'. [ 196.933581][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 197.080806][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 197.083689][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.083727][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.083751][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.083798][ T5854] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 197.083823][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.285065][ T5854] usb 4-1: config 0 descriptor?? [ 197.506907][ T6558] 9pnet_fd: Insufficient options for proto=fd [ 197.903097][ T5854] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 197.958136][ T5854] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 197.958186][ T5854] microsoft 0003:045E:07DA.0002: no inputs found [ 197.958201][ T5854] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 198.157825][ T5909] usb 4-1: USB disconnect, device number 3 [ 198.389386][ T6571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 198.389416][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.180'. [ 198.492982][ T6568] fido_id[6568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 198.703463][ T6571] vlan2: entered promiscuous mode [ 198.703743][ T6571] vlan2: entered allmulticast mode [ 198.703760][ T6571] hsr_slave_1: entered allmulticast mode [ 198.768175][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.180'. [ 198.773814][ T6575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.179'. [ 198.773840][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 199.138061][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.179'. [ 199.413231][ T6585] netlink: 32 bytes leftover after parsing attributes in process `syz.3.182'. [ 205.739654][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.739745][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.520067][ T6629] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 207.719019][ T6633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.194'. [ 207.719046][ T6633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.194'. [ 208.348054][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.194'. [ 209.301732][ T6644] bridge0: entered promiscuous mode [ 209.301961][ T6644] macvlan2: entered promiscuous mode [ 210.384131][ T6659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.199'. [ 210.384159][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'. [ 210.626341][ T6659] vlan2: entered promiscuous mode [ 210.626599][ T6659] vlan2: entered allmulticast mode [ 210.626614][ T6659] hsr_slave_1: entered allmulticast mode [ 210.666832][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 210.669828][ T5824] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.897670][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 210.900128][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.900164][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.900188][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 210.900234][ T5824] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 210.900259][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.906146][ T5824] usb 4-1: config 0 descriptor?? [ 211.354296][ T5824] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 211.354338][ T5824] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 211.386113][ T5824] microsoft 0003:045E:07DA.0003: implement() called with n (56) > 32! (kworker/1:3) [ 211.797047][ T5824] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 211.797089][ T5824] microsoft 0003:045E:07DA.0003: no inputs found [ 211.797105][ T5824] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 212.126394][ T5824] usb 4-1: USB disconnect, device number 4 [ 212.895057][ T6674] fido_id[6674]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 213.503552][ T6710] netlink: 32 bytes leftover after parsing attributes in process `syz.0.207'. [ 213.503589][ T6710] openvswitch: netlink: Missing key (keys=40, expected=100) [ 214.049332][ T6727] macvlan3: entered promiscuous mode [ 218.789911][ T6002] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 219.028085][ T6002] usb 4-1: Using ep0 maxpacket: 8 [ 219.187097][ T6002] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.187136][ T6002] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.187163][ T6002] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.187204][ T6002] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.187250][ T6002] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.187274][ T6002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.062845][ T6767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 220.062872][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.217'. [ 220.402433][ T6002] usb 4-1: GET_CAPABILITIES returned 0 [ 220.402471][ T6002] usbtmc 4-1:16.0: can't read capabilities [ 220.535724][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 222.818740][ T5929] usb 4-1: USB disconnect, device number 5 [ 223.168081][ T6800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.227'. [ 223.168119][ T6800] openvswitch: netlink: Missing key (keys=40, expected=100) [ 227.433067][ T6833] bridge0: entered promiscuous mode [ 227.434561][ T6833] macvlan2: entered promiscuous mode [ 228.688328][ T2048] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 229.141404][ T2048] usb 5-1: Using ep0 maxpacket: 8 [ 229.144110][ T2048] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 229.144144][ T2048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.144168][ T2048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.144189][ T2048] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.144238][ T2048] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.144260][ T2048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.380705][ T2048] usb 5-1: GET_CAPABILITIES returned 0 [ 229.380767][ T2048] usbtmc 5-1:16.0: can't read capabilities [ 230.083019][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 230.083064][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 230.083090][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 230.083116][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 230.121681][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.241'. [ 230.121717][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 230.121734][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 233.511553][ T977] usb 5-1: USB disconnect, device number 3 [ 235.236860][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 235.494015][ T37] audit: type=1326 audit(1756076216.504:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494088][ T37] audit: type=1326 audit(1756076216.514:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494136][ T37] audit: type=1326 audit(1756076216.524:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494183][ T37] audit: type=1326 audit(1756076216.524:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494230][ T37] audit: type=1326 audit(1756076216.524:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494276][ T37] audit: type=1326 audit(1756076216.524:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494323][ T37] audit: type=1326 audit(1756076216.534:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494377][ T37] audit: type=1326 audit(1756076216.544:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494424][ T37] audit: type=1326 audit(1756076216.544:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 235.494471][ T37] audit: type=1326 audit(1756076216.554:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6879 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe653abebe9 code=0x7ffc0000 [ 237.144549][ T6890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.249'. [ 237.144630][ T6890] openvswitch: netlink: Missing key (keys=40, expected=100) [ 238.303222][ T6894] bridge0: entered promiscuous mode [ 238.303479][ T6894] macvlan2: entered promiscuous mode [ 241.418173][ T6911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 241.418202][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 241.418219][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 241.724260][ T6916] fuse: Bad value for 'fd' [ 243.224954][ T6929] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 243.721933][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 243.723142][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 243.820511][ T6939] netlink: 'syz.1.264': attribute type 11 has an invalid length. [ 244.326117][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.420069][ T5824] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 244.552523][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 244.786817][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.490979][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.505227][ T6948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.807682][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.948267][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.101574][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.357605][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.544581][ T5824] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 246.544743][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.544793][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.544819][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 246.546543][ T5824] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 246.546573][ T5824] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 246.546595][ T5824] usb 2-1: Manufacturer: syz [ 246.593609][ T5824] usb 2-1: config 0 descriptor?? [ 246.862401][ T5824] usbhid 2-1:0.0: can't add hid device: -71 [ 246.862510][ T5824] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 246.970045][ T5824] usb 2-1: USB disconnect, device number 3 [ 247.014930][ T6955] fuse: Bad value for 'fd' [ 247.210332][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 247.210360][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 247.210377][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 248.427902][ T5824] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 248.746754][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 248.758369][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 248.812828][ T6978] overlayfs: failed to clone upperpath [ 249.769149][ T6992] netlink: 'syz.2.280': attribute type 11 has an invalid length. [ 250.768774][ T6997] fuse: Bad value for 'fd' [ 251.505326][ T7003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.284'. [ 252.467052][ T7014] 9pnet_fd: Insufficient options for proto=fd [ 253.628160][ T7022] netlink: 'syz.0.294': attribute type 11 has an invalid length. [ 253.881915][ T7031] fuse: Bad value for 'fd' [ 253.974623][ T7033] fuse: Bad value for 'fd' [ 254.055760][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.3.297'. [ 254.300289][ T7040] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.905857][ T7056] 9pnet_fd: Insufficient options for proto=fd [ 257.578583][ T7066] netlink: 27 bytes leftover after parsing attributes in process `syz.2.308'. [ 261.232206][ T7071] fuse: Bad value for 'fd' [ 262.056562][ T7089] netlink: 'syz.3.312': attribute type 11 has an invalid length. [ 262.222273][ T7097] 9pnet_fd: Insufficient options for proto=fd [ 263.161649][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.053520][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.480854][ T7120] fuse: Bad value for 'fd' [ 264.618589][ T7123] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 265.008621][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.323'. [ 268.922551][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.554299][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 269.554387][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.750435][ T7118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.411377][ T7148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.332'. [ 270.658148][ T7151] Process accounting resumed [ 270.967087][ T7156] netlink: 'syz.3.335': attribute type 11 has an invalid length. [ 272.053134][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.154867][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.353972][ T7162] netlink: 32 bytes leftover after parsing attributes in process `syz.0.337'. [ 272.354018][ T7162] openvswitch: netlink: Missing key (keys=40, expected=100) [ 273.194472][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 273.195097][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.339'. [ 273.360125][ T7169] overlayfs: failed to clone upperpath [ 274.767125][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.886601][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.374060][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.657337][ T7186] 9pnet_fd: Insufficient options for proto=fd [ 276.726182][ T7187] Process accounting resumed [ 277.038250][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.391188][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.295728][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.743640][ T7197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.349'. [ 278.743676][ T7197] openvswitch: netlink: Missing key (keys=40, expected=100) [ 278.818087][ T7203] fuse: Bad value for 'fd' [ 278.955355][ T7208] netlink: 'syz.1.351': attribute type 11 has an invalid length. [ 280.598996][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.755173][ T7227] 9pnet_fd: Insufficient options for proto=fd [ 280.865662][ T7228] Process accounting resumed [ 282.387209][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.438801][ T7240] fuse: Bad value for 'fd' [ 282.618163][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.692966][ T6005] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 282.771471][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.926591][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.034893][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.562151][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.365'. [ 285.563811][ T7252] openvswitch: netlink: Missing key (keys=40, expected=100) [ 288.762724][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 289.018849][ T7276] netlink: 'syz.4.371': attribute type 11 has an invalid length. [ 289.623388][ T7286] fuse: Bad value for 'fd' [ 290.124050][ T7292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.377'. [ 290.124090][ T7292] openvswitch: netlink: Missing key (keys=40, expected=100) [ 291.321670][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 291.322177][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 292.004795][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 292.004824][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'. [ 292.290445][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'. [ 293.309881][ T7349] 9pnet_fd: Insufficient options for proto=fd [ 294.095875][ T7356] netlink: 'syz.1.386': attribute type 11 has an invalid length. [ 294.262377][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 294.749521][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.867882][ T7361] fuse: Bad value for 'fd' [ 294.920612][ T5928] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 294.920667][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.920697][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.920733][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 294.922135][ T5928] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 294.922167][ T5928] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 294.922197][ T5928] usb 2-1: Manufacturer: syz [ 295.013992][ T5928] usb 2-1: config 0 descriptor?? [ 295.016144][ T7357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 295.630629][ T5928] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 295.677212][ T5928] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 296.863530][ T7375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.393'. [ 296.863572][ T7375] openvswitch: netlink: Missing key (keys=40, expected=100) [ 297.143288][ T7380] netlink: 104 bytes leftover after parsing attributes in process `syz.0.394'. [ 297.190463][ T50] usb 2-1: USB disconnect, device number 4 [ 297.540008][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.664624][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.771115][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.801065][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.963611][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.063826][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.347658][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.579044][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.037905][ T7397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.399'. [ 299.037933][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.399'. [ 299.228982][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.356697][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 299.965469][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.181696][ T7397] hsr_slave_1 (unregistering): left promiscuous mode [ 300.422865][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.771488][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.831705][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.935239][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.528713][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.668570][ C1] vkms_vblank_simulate: vblank timer overrun [ 302.164013][ T7426] netlink: 'syz.1.408': attribute type 11 has an invalid length. [ 302.231665][ T7427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 302.231701][ T7427] openvswitch: netlink: Missing key (keys=40, expected=100) [ 302.551848][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 302.750728][ T5928] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 302.750790][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.750819][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.750843][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 302.754205][ T5928] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 302.754240][ T5928] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 302.754262][ T5928] usb 2-1: Manufacturer: syz [ 302.849634][ T5928] usb 2-1: config 0 descriptor?? [ 303.272090][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.545717][ T5928] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 303.604275][ T5928] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 303.838939][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.034360][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.065329][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.095328][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.538413][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.145988][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.485053][ T5928] usb 2-1: USB disconnect, device number 5 [ 305.761354][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.079123][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.375730][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 306.408303][ T5928] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 306.779408][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 307.119378][ T5928] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 307.119406][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 307.119424][ T5928] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.119442][ T5928] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.119474][ T5928] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.119490][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.417698][ T5928] usb 4-1: usb_control_msg returned -71 [ 307.417738][ T5928] usbtmc 4-1:16.0: can't read capabilities [ 307.464536][ T5928] usb 4-1: USB disconnect, device number 7 [ 307.665951][ T7458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.046839][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.421'. [ 309.046868][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 309.168982][ T7481] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 309.169021][ T7481] openvswitch: netlink: Missing key (keys=40, expected=100) [ 309.334810][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.514995][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.633702][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.736598][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.838121][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.032649][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.268105][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 310.423530][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.470113][ T7502] netlink: 'syz.3.426': attribute type 11 has an invalid length. [ 313.040279][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.057681][ T6005] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 313.215214][ T6005] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 313.215272][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.215302][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.215324][ T6005] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 313.265451][ T7515] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 313.265478][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.430'. [ 313.507573][ T6005] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 313.507609][ T6005] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 313.507631][ T6005] usb 4-1: Manufacturer: syz [ 313.541949][ T6005] usb 4-1: config 0 descriptor?? [ 314.299426][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.430'. [ 314.483496][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.777047][ T6005] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 314.854726][ T6005] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 314.885361][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.017623][ T5909] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 315.043096][ T5928] usb 4-1: USB disconnect, device number 8 [ 315.164524][ T7515] hsr_slave_1 (unregistering): left promiscuous mode [ 315.187649][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 315.190599][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.190634][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.190675][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 315.190700][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.256324][ T5909] usb 2-1: config 0 descriptor?? [ 315.698914][ T5909] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 315.698959][ T5909] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 315.698987][ T5909] koneplus 0003:1E7D:2D51.0007: item fetching failed at offset 2/5 [ 315.702148][ T5909] koneplus 0003:1E7D:2D51.0007: parse failed [ 315.702236][ T5909] koneplus 0003:1E7D:2D51.0007: probe with driver koneplus failed with error -22 [ 316.364444][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.378140][ T5909] usb 2-1: USB disconnect, device number 6 [ 316.575655][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.058566][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.438'. [ 320.058593][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 320.250781][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 321.172979][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.319490][ T7564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.441'. [ 321.319529][ T7564] openvswitch: netlink: Missing key (keys=40, expected=100) [ 322.935925][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.945308][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 324.221721][ T7591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.448'. [ 324.221751][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 324.467760][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.448'. [ 326.459147][ T7612] netlink: 20 bytes leftover after parsing attributes in process `syz.1.450'. [ 327.405214][ T7616] netlink: 620 bytes leftover after parsing attributes in process `syz.0.452'. [ 330.706065][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.706153][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.926818][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.117674][ T7628] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 332.268858][ T7633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.457'. [ 332.268884][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.457'. [ 332.519589][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.608151][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.610033][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 334.146302][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.244566][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.302647][ C0] vkms_vblank_simulate: vblank timer overrun [ 335.447821][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.850791][ T7660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.461'. [ 336.850828][ T7660] openvswitch: netlink: Missing key (keys=40, expected=100) [ 337.044477][ T7665] netlink: 60 bytes leftover after parsing attributes in process `syz.4.465'. [ 339.211923][ T7691] netlink: 'syz.1.471': attribute type 11 has an invalid length. [ 339.497748][ T977] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 339.863167][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.907527][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 339.975252][ T7692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.995675][ T977] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 339.995717][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.995736][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.995751][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 340.048708][ T977] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 340.048743][ T977] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 340.048766][ T977] usb 2-1: Manufacturer: syz [ 340.081091][ T977] usb 2-1: config 0 descriptor?? [ 340.521755][ T977] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 340.561822][ T977] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 341.557649][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 341.557681][ T37] audit: type=1326 audit(1756076323.114:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.557733][ T37] audit: type=1326 audit(1756076323.114:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.616823][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 341.616848][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 341.646055][ T37] audit: type=1326 audit(1756076323.124:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.646121][ T37] audit: type=1326 audit(1756076323.204:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.646168][ T37] audit: type=1326 audit(1756076323.204:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.649530][ T37] audit: type=1326 audit(1756076323.204:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.649593][ T37] audit: type=1326 audit(1756076323.214:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.649664][ T37] audit: type=1326 audit(1756076323.214:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.673103][ T37] audit: type=1326 audit(1756076323.214:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.673176][ T37] audit: type=1326 audit(1756076323.214:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.4.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 341.780259][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 342.203741][ T5909] usb 2-1: USB disconnect, device number 7 [ 342.381000][ T7719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.479'. [ 342.381053][ T7719] openvswitch: netlink: Missing key (keys=40, expected=100) [ 343.242206][ T7737] capability: warning: `syz.1.482' uses deprecated v2 capabilities in a way that may be insecure [ 344.369879][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.370971][ C0] vkms_vblank_simulate: vblank timer overrun [ 347.014588][ C0] vkms_vblank_simulate: vblank timer overrun [ 350.261321][ T7761] netlink: 'syz.4.490': attribute type 11 has an invalid length. [ 351.816030][ T7775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.492'. [ 351.816057][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.492'. [ 354.189411][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 354.471703][ T7788] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 356.217718][ T7799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.499'. [ 356.217758][ T7799] openvswitch: netlink: Missing key (keys=40, expected=100) [ 357.750211][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.501'. [ 357.778201][ T7812] No control pipe specified [ 358.373039][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.505'. [ 359.909501][ C1] vkms_vblank_simulate: vblank timer overrun [ 359.927695][ T7829] netlink: 'syz.3.504': attribute type 11 has an invalid length. [ 360.186342][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 360.227601][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 361.295729][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 361.295894][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.295924][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.295947][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 361.303204][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 361.303244][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 361.303269][ T10] usb 4-1: Manufacturer: syz [ 361.352180][ T10] usb 4-1: config 0 descriptor?? [ 361.394058][ T7832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.874130][ T10] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 361.996309][ T10] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 362.762973][ T7084] usb 4-1: USB disconnect, device number 9 [ 363.152038][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.513'. [ 363.152079][ T7849] openvswitch: netlink: Missing key (keys=40, expected=100) [ 364.048917][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 364.736822][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.913229][ T7869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.517'. [ 364.915134][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.128000][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.232850][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.309852][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.375426][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.536674][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.554069][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 365.741877][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.788795][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 366.238801][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.580967][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.633683][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.740249][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.067628][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.105346][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.398714][ T10] usb 4-1: device descriptor read/all, error -71 [ 369.910314][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 371.527900][ T7894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.152874][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.530'. [ 376.173623][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.529'. [ 376.173666][ T7922] openvswitch: netlink: Missing key (keys=40, expected=100) [ 376.468159][ T7925] bridge2: entered promiscuous mode [ 376.641085][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 380.607239][ T7955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 383.558205][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.544'. [ 383.878776][ T7971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.545'. [ 383.878816][ T7971] openvswitch: netlink: Missing key (keys=40, expected=100) [ 388.925755][ T8001] process 'syz.1.551' launched './file0' with NULL argv: empty string added [ 391.509223][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.509322][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.148267][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.553'. [ 392.587614][ T50] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 392.742676][ T50] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.742830][ T50] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.742858][ T50] usb 4-1: config 0 interface 0 has no altsetting 0 [ 392.742898][ T50] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 392.742924][ T50] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.810041][ T50] usb 4-1: config 0 descriptor?? [ 394.040003][ T50] usb 4-1: string descriptor 0 read error: -22 [ 394.388104][ T50] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input5 [ 394.544393][ T50] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input6 [ 394.583097][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.558'. [ 394.583144][ T8028] openvswitch: netlink: Missing key (keys=40, expected=100) [ 394.641419][ T50] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input7 [ 395.558670][ T50] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000A/input/input8 [ 395.811620][ T50] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 396.437217][ T8046] ip6erspan0: entered allmulticast mode [ 397.258387][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 397.288100][ T10] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 397.307571][ T10] usb 4-1: device reset changed ep0 maxpacket size! [ 397.388696][ T50] usb 4-1: USB disconnect, device number 12 [ 397.735283][ T8056] netlink: 20 bytes leftover after parsing attributes in process `syz.4.562'. [ 397.735309][ T8056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 399.010279][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 399.538730][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.566'. [ 399.702108][ T8061] fido_id[8061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 404.292362][ T8101] netem: change failed [ 407.219525][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.583'. [ 407.219552][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.583'. [ 407.323336][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.583'. [ 407.404805][ T8135] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.585'. [ 413.345677][ T8167] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 413.348041][ T8167] hfsplus: unable to find HFS+ superblock [ 414.483288][ T8173] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.596'. [ 417.867979][ T8193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.601'. [ 417.868005][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.601'. [ 418.012023][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.601'. [ 420.177860][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 422.007692][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 422.007712][ T37] audit: type=1326 audit(1756076403.554:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 422.007782][ T37] audit: type=1326 audit(1756076403.554:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 422.007841][ T37] audit: type=1326 audit(1756076403.554:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce3ff6d69f code=0x7ffc0000 [ 422.007899][ T37] audit: type=1326 audit(1756076403.554:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 422.007959][ T37] audit: type=1326 audit(1756076403.554:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8209 comm="syz.4.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3ff6ebe9 code=0x7ffc0000 [ 423.430619][ T6005] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 424.405233][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.405272][ T6005] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.405315][ T6005] usb 2-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00 [ 424.405342][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.605506][ T6005] usb 2-1: config 0 descriptor?? [ 427.804549][ T6005] usbhid 2-1:0.0: can't add hid device: -71 [ 427.804699][ T6005] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 427.917942][ T6005] usb 2-1: USB disconnect, device number 8 [ 428.939700][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 432.148138][ T5824] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 433.317522][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 433.320243][ T5824] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 433.320328][ T5824] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 433.320354][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.685858][ T5824] usb 4-1: USB disconnect, device number 14 [ 437.397545][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 437.397629][ T8301] bridge_slave_1: left allmulticast mode [ 437.397660][ T8301] bridge_slave_1: left promiscuous mode [ 437.400896][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.614257][ T8301] bridge_slave_0: left allmulticast mode [ 437.614296][ T8301] bridge_slave_0: left promiscuous mode [ 437.614613][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.357550][ T2048] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 440.509891][ T2048] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.509921][ T2048] usb 2-1: config 0 has no interfaces? [ 440.509959][ T2048] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 440.509977][ T2048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.584073][ T2048] usb 2-1: config 0 descriptor?? [ 440.818593][ T977] usb 2-1: USB disconnect, device number 9 [ 447.689595][ T2048] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 448.007856][ T2048] usb 2-1: Using ep0 maxpacket: 16 [ 448.308522][ T2048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.308575][ T2048] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 448.308601][ T2048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.392052][ T2048] usb 2-1: config 0 descriptor?? [ 449.071655][ T2048] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 449.071699][ T2048] uclogic 0003:5543:0064.000B: unknown main item tag 0x0 [ 449.071728][ T2048] uclogic 0003:5543:0064.000B: item fetching failed at offset 2/7 [ 449.113757][ T2048] uclogic 0003:5543:0064.000B: parse failed [ 449.113893][ T2048] uclogic 0003:5543:0064.000B: probe with driver uclogic failed with error -22 [ 449.272484][ T977] usb 2-1: USB disconnect, device number 10 [ 451.969888][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 453.230631][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 472.127361][ C1] sched: DL replenish lagged too much [ 496.922280][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.946805][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.956605][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.971124][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.972355][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 497.028786][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 497.057018][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 497.068125][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 497.069566][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 497.070633][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 497.742335][ T5157] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 497.782758][ T5157] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 497.786324][ T5157] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 497.810906][ T5157] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 497.811845][ T5157] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 498.041675][ T5157] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 498.045119][ T5157] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 498.046475][ T5157] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 498.084461][ T5157] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 498.085383][ T5157] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 499.150473][ T5862] Bluetooth: hci6: command tx timeout [ 499.307703][ T5862] Bluetooth: hci5: command tx timeout [ 499.948259][ T5862] Bluetooth: hci7: command tx timeout [ 500.193257][ T5862] Bluetooth: hci8: command tx timeout [ 501.232385][ T5157] Bluetooth: hci6: command tx timeout [ 501.397194][ T5862] Bluetooth: hci5: command tx timeout [ 502.027535][ T5862] Bluetooth: hci7: command tx timeout [ 502.056341][ T8462] chnl_net:caif_netlink_parms(): no params data found [ 502.267640][ T5862] Bluetooth: hci8: command tx timeout [ 503.307510][ T5862] Bluetooth: hci6: command tx timeout [ 503.467729][ T5862] Bluetooth: hci5: command tx timeout [ 504.107576][ T5862] Bluetooth: hci7: command tx timeout [ 504.349542][ T5862] Bluetooth: hci8: command tx timeout [ 505.387764][ T5862] Bluetooth: hci6: command tx timeout [ 505.547657][ T5862] Bluetooth: hci5: command tx timeout [ 506.187878][ T5862] Bluetooth: hci7: command tx timeout [ 506.427760][ T5862] Bluetooth: hci8: command tx timeout [ 511.755031][ T5157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 511.773593][ T5157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 511.774927][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 511.776200][ T5157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 511.779580][ T5157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 513.947629][ T5862] Bluetooth: hci9: command tx timeout [ 516.027750][ T5862] Bluetooth: hci9: command tx timeout [ 518.109889][ T5862] Bluetooth: hci9: command tx timeout [ 519.285611][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 520.187679][ T5862] Bluetooth: hci9: command tx timeout [ 557.380117][ T5157] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 557.403622][ T5157] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 557.405307][ T5157] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 557.436820][ T5157] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 557.445302][ T5157] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 557.591699][ T5862] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 557.627238][ T5862] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 557.638299][ T5862] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 557.641043][ T5862] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 557.642097][ T5862] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 557.699744][ T5157] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 557.734634][ T5157] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 557.757663][ T5157] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 557.792703][ T5157] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 557.793578][ T5157] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 557.993447][ T5157] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 558.017898][ T5157] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 558.020177][ T5157] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 558.022173][ T5157] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 558.065141][ T5157] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 559.547616][ T5157] Bluetooth: hci10: command tx timeout [ 559.867717][ T5157] Bluetooth: hci12: command tx timeout [ 559.868310][ T5157] Bluetooth: hci11: command tx timeout [ 560.187777][ T5862] Bluetooth: hci13: command tx timeout [ 561.627870][ T5862] Bluetooth: hci10: command tx timeout [ 561.947826][ T5862] Bluetooth: hci11: command tx timeout [ 561.947865][ T5862] Bluetooth: hci12: command tx timeout [ 562.267641][ T5157] Bluetooth: hci13: command tx timeout [ 563.707785][ T5157] Bluetooth: hci10: command tx timeout [ 564.027634][ T5157] Bluetooth: hci12: command tx timeout [ 564.027673][ T5157] Bluetooth: hci11: command tx timeout [ 564.347708][ T5862] Bluetooth: hci13: command tx timeout [ 565.787888][ T5862] Bluetooth: hci10: command tx timeout [ 566.107755][ T5862] Bluetooth: hci11: command tx timeout [ 566.107792][ T5862] Bluetooth: hci12: command tx timeout [ 566.429415][ T5157] Bluetooth: hci13: command tx timeout [ 573.024352][ T5862] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 573.045790][ T5862] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 573.047151][ T5862] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 573.065739][ T5862] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 573.066596][ T5862] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 575.147753][ T5157] Bluetooth: hci14: command tx timeout [ 577.228028][ T5157] Bluetooth: hci14: command tx timeout [ 579.307908][ T5157] Bluetooth: hci14: command tx timeout [ 580.612305][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.387984][ T5157] Bluetooth: hci14: command tx timeout [ 614.908708][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 614.920764][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 614.922172][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 614.923595][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 614.924894][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.234639][ T5855] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 618.265444][ T5855] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 618.266857][ T5855] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 618.289948][ T5855] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 618.296206][ T5855] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 618.455768][ T8533] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 618.477854][ T8533] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 618.479566][ T8533] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 618.481367][ T8533] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 618.482688][ T8533] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 618.710924][ T8541] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 618.733703][ T8541] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 618.735095][ T8541] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 618.736373][ T8541] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 618.761295][ T8541] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 623.719965][ T8545] Bluetooth: hci6: command 0x0406 tx timeout [ 623.720011][ T8545] Bluetooth: hci5: command 0x0406 tx timeout [ 623.720039][ T8545] Bluetooth: hci7: command 0x0406 tx timeout [ 623.720066][ T8545] Bluetooth: hci8: command 0x0406 tx timeout [ 634.382653][ T8545] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 634.386310][ T8545] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 634.404062][ T8545] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 634.406375][ T8545] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 634.412833][ T8545] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 642.035653][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 643.627635][ T8550] Bluetooth: hci9: command 0x0406 tx timeout [ 662.513367][ T38] INFO: task kworker/1:2:2048 blocked for more than 143 seconds. [ 662.513412][ T38] Not tainted syzkaller #0 [ 662.513424][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.513435][ T38] task:kworker/1:2 state:D stack:20696 pid:2048 tgid:2048 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 662.513590][ T38] Workqueue: events switchdev_deferred_process_work [ 662.513757][ T38] Call Trace: [ 662.513771][ T38] [ 662.513792][ T38] __schedule+0x16f3/0x4c20 [ 662.513864][ T38] ? __pfx___schedule+0x10/0x10 [ 662.513918][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.513951][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.513990][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.514012][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 662.514068][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.514093][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.514117][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.514152][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 662.514191][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.514225][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 662.514254][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.514274][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.514302][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.514332][ T38] switchdev_deferred_process_work+0xe/0x20 [ 662.514363][ T38] process_scheduled_works+0xade/0x17b0 [ 662.514431][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 662.514480][ T38] worker_thread+0x8a0/0xda0 [ 662.514538][ T38] kthread+0x711/0x8a0 [ 662.514576][ T38] ? __pfx_worker_thread+0x10/0x10 [ 662.514604][ T38] ? __pfx_kthread+0x10/0x10 [ 662.514641][ T38] ? __pfx_kthread+0x10/0x10 [ 662.514676][ T38] ret_from_fork+0x3fc/0x770 [ 662.514710][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 662.514746][ T38] ? __switch_to_asm+0x39/0x70 [ 662.514773][ T38] ? __switch_to_asm+0x33/0x70 [ 662.514792][ T38] ? __pfx_kthread+0x10/0x10 [ 662.514832][ T38] ret_from_fork_asm+0x1a/0x30 [ 662.514872][ T38] [ 662.514969][ T38] INFO: task kworker/1:3:5824 blocked for more than 143 seconds. [ 662.514985][ T38] Not tainted syzkaller #0 [ 662.514996][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.515007][ T38] task:kworker/1:3 state:D stack:22248 pid:5824 tgid:5824 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 662.515067][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 662.515111][ T38] Call Trace: [ 662.515118][ T38] [ 662.515131][ T38] __schedule+0x16f3/0x4c20 [ 662.515187][ T38] ? __pfx___schedule+0x10/0x10 [ 662.515234][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.515266][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.515286][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.515309][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 662.515359][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.515381][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.515409][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.515428][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.515471][ T38] ? reg_check_chans_work+0x95/0xf30 [ 662.515505][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.515540][ T38] ? reg_check_chans_work+0x95/0xf30 [ 662.515565][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.515585][ T38] ? do_raw_spin_lock+0x121/0x290 [ 662.515615][ T38] reg_check_chans_work+0x95/0xf30 [ 662.515651][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.515689][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 662.515718][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.515753][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.515779][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.515805][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.515834][ T38] process_scheduled_works+0xade/0x17b0 [ 662.515895][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 662.515943][ T38] worker_thread+0x8a0/0xda0 [ 662.516000][ T38] kthread+0x711/0x8a0 [ 662.516037][ T38] ? __pfx_worker_thread+0x10/0x10 [ 662.516065][ T38] ? __pfx_kthread+0x10/0x10 [ 662.516104][ T38] ? __pfx_kthread+0x10/0x10 [ 662.516139][ T38] ret_from_fork+0x3fc/0x770 [ 662.516171][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 662.516207][ T38] ? __switch_to_asm+0x39/0x70 [ 662.516227][ T38] ? __switch_to_asm+0x33/0x70 [ 662.516246][ T38] ? __pfx_kthread+0x10/0x10 [ 662.516280][ T38] ret_from_fork_asm+0x1a/0x30 [ 662.516320][ T38] [ 662.516367][ T38] INFO: task kworker/u8:19:6721 blocked for more than 143 seconds. [ 662.516383][ T38] Not tainted syzkaller #0 [ 662.516406][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.516416][ T38] task:kworker/u8:19 state:D stack:18888 pid:6721 tgid:6721 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 662.516472][ T38] Workqueue: events_unbound linkwatch_event [ 662.516520][ T38] Call Trace: [ 662.516527][ T38] [ 662.516541][ T38] __schedule+0x16f3/0x4c20 [ 662.516582][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 662.516620][ T38] ? __pfx___schedule+0x10/0x10 [ 662.516673][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.516694][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.516732][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 662.516758][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.516783][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.516806][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.516841][ T38] ? linkwatch_event+0xe/0x60 [ 662.516879][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.516912][ T38] ? linkwatch_event+0xe/0x60 [ 662.516941][ T38] mutex_lo[ 662.516941][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.516960][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.516988][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 662.517018][ T38] linkwatch_event+0xe/0x60 [ 662.517048][ T38] process_scheduled_works+0xade/0x17b0 [ 662.517110][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 662.517157][ T38] worker_thread+0x8a0/0xda0 [ 662.517216][ T38] kthread+0x711/0x8a0 [ 662.665129][ T38] ? __pfx_worker_thread+0x10/0x10 [ 662.665176][ T38] ? __pfx_kthread+0x10/0x10 [ 662.665216][ T38] ? __pfx_kthread+0x10/0x10 [ 662.665250][ T38] ret_from_fork+0x3fc/0x770 [ 662.665284][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 662.665320][ T38] ? __switch_to_asm+0x39/0x70 [ 662.665341][ T38] ? __switch_to_asm+0x33/0x70 [ 662.665360][ T38] ? __pfx_kthread+0x10/0x10 [ 662.665403][ T38] ret_from_fork_asm+0x1a/0x30 [ 662.665443][ T38] [ 662.665470][ T38] INFO: task syz-executor:8464 blocked for more than 143 seconds. [ 662.665487][ T38] Not tainted syzkaller #0 [ 662.665498][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.665509][ T38] task:syz-executor state:D stack:20960 pid:8464 tgid:8464 ppid:1 task_flags:0x400140 flags:0x00004004 [ 662.665569][ T38] Call Trace: [ 662.665577][ T38] [ 662.665590][ T38] __schedule+0x16f3/0x4c20 [ 662.665633][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 662.665675][ T38] ? __pfx___schedule+0x10/0x10 [ 662.665732][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.665764][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.665785][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.665813][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 662.665868][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.665894][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.665917][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.665936][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.665978][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 662.666006][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 662.666057][ T38] ? bpf_lsm_capable+0x9/0x20 [ 662.666090][ T38] ? security_capable+0x7e/0x2e0 [ 662.666131][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 662.666154][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.666182][ T38] rtnl_newlink+0x8db/0x1c70 [ 662.666215][ T38] ? rtnl_newlink+0x8a1/0x1c70 [ 662.666240][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666271][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 662.666313][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666349][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666398][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666450][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 662.666487][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 662.666516][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 662.666556][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666614][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 662.666639][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 662.666664][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666695][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 662.666721][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.666767][ T38] netlink_rcv_skb+0x205/0x470 [ 662.666803][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.666831][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.666860][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.666900][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.666936][ T38] netlink_unicast+0x843/0xa10 [ 662.666971][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 662.666996][ T38] ? netlink_sendmsg+0x642/0xb30 [ 662.667021][ T38] ? skb_put+0x11b/0x210 [ 662.667060][ T38] netlink_sendmsg+0x805/0xb30 [ 662.667098][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.667135][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.667167][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.667196][ T38] __sock_sendmsg+0x219/0x270 [ 662.667225][ T38] __sys_sendto+0x3c7/0x520 [ 662.817319][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 662.817385][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 662.817456][ T38] ? rcu_is_watching+0x15/0xb0 [ 662.817498][ T38] __x64_sys_sendto+0xde/0x100 [ 662.817540][ T38] do_syscall_64+0xfa/0x3b0 [ 662.817569][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.817598][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.817626][ T38] ? clear_bhb_loop+0x60/0xb0 [ 662.817653][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.817754][ T38] RIP: 0033:0x7f3b33e20a7c [ 662.817807][ T38] RSP: 002b:00007ffdae7c0d90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 662.817843][ T38] RAX: ffffffffffffffda RBX: 00007f3b34b74620 RCX: 00007f3b33e20a7c [ 662.817859][ T38] RDX: 000000000000003c RSI: 00007f3b34b74670 RDI: 0000000000000003 [ 662.817873][ T38] RBP: 0000000000000000 R08: 00007ffdae7c0de4 R09: 000000000000000c [ 662.817887][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 662.817900][ T38] R13: 0000000000000000 R14: 00007f3b34b74670 R15: 0000000000000000 [ 662.817934][ T38] [ 662.817949][ T38] INFO: task syz-executor:8470 blocked for more than 143 seconds. [ 662.817965][ T38] Not tainted syzkaller #0 [ 662.817976][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.817987][ T38] task:syz-executor state:D stack:22632 pid:8470 tgid:8470 ppid:1 task_flags:0x400140 flags:0x00004006 [ 662.818047][ T38] Call Trace: [ 662.818054][ T38] [ 662.818068][ T38] __schedule+0x16f3/0x4c20 [ 662.818125][ T38] ? __pfx___schedule+0x10/0x10 [ 662.818172][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.818204][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.818227][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.818249][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 662.818305][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.818331][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.818354][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.818411][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.818453][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 662.818505][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 662.818540][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 662.818571][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.818605][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 662.818650][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.818704][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.818737][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 662.818764][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.818796][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 662.818821][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.818867][ T38] netlink_rcv_skb+0x205/0x470 [ 662.818892][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.818922][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.818950][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.818989][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.819025][ T38] netlink_unicast+0x843/0xa10 [ 662.819060][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 662.819092][ T38] ? netlink_sendmsg+0x642/0xb30 [ 662.819115][ T38] ? skb_put+0x11b/0x210 [ 662.819149][ T38] netlink_sendmsg+0x805/0xb30 [ 662.819187][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.819224][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.819246][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.819275][ T38] __sock_sendmsg+0x219/0x270 [ 662.819303][ T38] __sys_sendto+0x3c7/0x520 [ 662.819335][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 662.819401][ T38] ? exc_page_fault+0x76/0xf0 [ 662.819433][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 662.819467][ T38] __x64_sys_sendto+0xde/0x100 [ 662.819500][ T38] do_syscall_64+0xfa/0x3b0 [ 662.819530][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.819557][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.819580][ T38] ? clear_bhb_loop+0x60/0xb0 [ 662.819607][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.819628][ T38] RIP: 0033:0x7fe346000a7c [ 662.819646][ T38] RSP: 002b:00007ffec59775d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 662.819668][ T38] RAX: ffffffffffffffda RBX: 00007fe346d54620 RCX: 00007fe346000a7c [ 662.819684][ T38] RDX: 0000000000000028 RSI: 00007fe346d54670 RDI: 0000000000000003 [ 662.819698][ T38] RBP: 0000000000000000 R08: 00007ffec5977624 R09: 000000000000000c [ 662.819712][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 662.819725][ T38] R13: 0000000000000000 R14: 00007fe346d54670 R15: 0000000000000000 [ 662.819758][ T38] [ 662.819768][ T38] INFO: task syz-executor:8472 blocked for more than 143 seconds. [ 662.819784][ T38] Not tainted syzkaller #0 [ 662.819794][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.819804][ T38] task:syz-executor state:D stack:21544 pid:8472 tgid:8472 ppid:1 task_flags:0x400140 flags:0x00004004 [ 662.819861][ T38] Call Trace: [ 662.819868][ T38] [ 662.819881][ T38] __schedule+0x16f3/0x4c20 [ 662.819930][ T38] ? __kernel_text_address+0xd/0x40 [ 662.819957][ T38] ? __pfx___schedule+0x10/0x10 [ 662.820003][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.820035][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.820056][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.820078][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 662.820134][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.820159][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.820182][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.820202][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.820269][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 662.820296][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 662.820325][ T38] ? bpf_lsm_capable+0x9/0x20 [ 662.820353][ T38] ? security_capable+0x7e/0x2e0 [ 662.820403][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 662.820426][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.820454][ T38] rtnl_newlink+0x8db/0x1c70 [ 662.820495][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 662.820534][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.820568][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.820610][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.820664][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 662.820700][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 662.820728][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 662.820768][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.820826][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 662.820852][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 662.820877][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.820908][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 662.820933][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.820980][ T38] netlink_rcv_skb+0x205/0x470 [ 662.821004][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.821033][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.821061][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.821100][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.821136][ T38] netlink_unicast+0x843/0xa10 [ 662.821178][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 662.821204][ T38] ? netlink_sendmsg+0x642/0xb30 [ 662.821229][ T38] ? skb_put+0x11b/0x210 [ 662.821262][ T38] netlink_sendmsg+0x805/0xb30 [ 662.821300][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.821337][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.821366][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.821394][ T38] __sock_sendmsg+0x219/0x270 [ 662.821422][ T38] __sys_sendto+0x3c7/0x520 [ 662.821453][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 662.821514][ T38] ? fd_install+0x9a/0x550 [ 662.821545][ T38] ? fd_install+0x313/0x550 [ 662.821584][ T38] __x64_sys_sendto+0xde/0x100 [ 662.821617][ T38] do_syscall_64+0xfa/0x3b0 [ 662.821646][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.821673][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.821695][ T38] ? clear_bhb_loop+0x60/0xb0 [ 662.821722][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.821744][ T38] RIP: 0033:0x7f123b8d0a7c [ 662.821762][ T38] RSP: 002b:00007ffc41dfacd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 662.821784][ T38] RAX: ffffffffffffffda RBX: 00007f123c624620 RCX: 00007f123b8d0a7c [ 662.821800][ T38] RDX: 0000000000000044 RSI: 00007f123c624670 RDI: 0000000000000003 [ 662.821814][ T38] RBP: 0000000000000000 R08: 00007ffc41dfad24 R09: 000000000000000c [ 662.821828][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 662.821841][ T38] R13: 0000000000000000 R14: 00007f123c624670 R15: 0000000000000000 [ 662.821885][ T38] [ 662.821896][ T38] INFO: task syz-executor:8483 blocked for more than 143 seconds. [ 662.821911][ T38] Not tainted syzkaller #0 [ 662.821922][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 662.821931][ T38] task:syz-executor state:D stack:26952 pid:8483 tgid:8483 ppid:1 task_flags:0x400140 flags:0x00004004 [ 662.821993][ T38] Call Trace: [ 662.822000][ T38] [ 662.822014][ T38] __schedule+0x16f3/0x4c20 [ 662.822070][ T38] ? __pfx___schedule+0x10/0x10 [ 662.822117][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 662.822149][ T38] rt_mutex_schedule+0x77/0xf0 [ 662.822169][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 662.822191][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 662.822247][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 662.822272][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 662.822295][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 662.822315][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.822364][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 662.822406][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 662.822440][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 662.822471][ T38] mutex_lock_nested+0x16a/0x1d0 [ 662.822498][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 662.822542][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.822597][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 662.822630][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 662.822655][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.822686][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 662.822711][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.822757][ T38] netlink_rcv_skb+0x205/0x470 [ 662.822781][ T38] ? __lock_acquire+0xab9/0xd20 [ 662.822810][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 662.822839][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.822878][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 662.822915][ T38] netlink_unicast+0x843/0xa10 [ 662.822949][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 662.822975][ T38] ? netlink_sendmsg+0x642/0xb30 [ 662.822999][ T38] ? skb_put+0x11b/0x210 [ 662.823032][ T38] netlink_sendmsg+0x805/0xb30 [ 662.823071][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.823107][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 662.823129][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.823157][ T38] __sock_sendmsg+0x219/0x270 [ 662.823185][ T38] __sys_sendto+0x3c7/0x520 [ 662.823216][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 662.823276][ T38] ? exc_page_fault+0x76/0xf0 [ 662.823307][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 662.823352][ T38] __x64_sys_sendto+0xde/0x100 [ 662.823395][ T38] do_syscall_64+0xfa/0x3b0 [ 662.823423][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.823450][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.823472][ T38] ? clear_bhb_loop+0x60/0xb0 [ 662.823499][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.823521][ T38] RIP: 0033:0x7fb8b7970a7c [ 662.823538][ T38] RSP: 002b:00007ffd8d726ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 662.823560][ T38] RAX: ffffffffffffffda RBX: 00007fb8b86c4620 RCX: 00007fb8b7970a7c [ 662.823576][ T38] RDX: 0000000000000028 RSI: 00007fb8b86c4670 RDI: 0000000000000003 [ 662.823595][ T38] RBP: 0000000000000000 R08: 00007ffd8d726f14 R09: 000000000000000c [ 662.823608][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 662.823622][ T38] R13: 0000000000000000 R14: 00007fb8b86c4670 R15: 0000000000000000 [ 662.823655][ T38] [ 662.823705][ T38] [ 662.823705][ T38] Showing all locks held in the system: [ 662.823718][ T38] 4 locks held by pr/legacy/17: [ 662.823733][ T38] 14 locks held by rcuc/1/28: [ 662.823746][ T38] 2 locks held by ksoftirqd/1/30: [ 662.823759][ T38] 1 lock held by khungtaskd/38: [ 662.823770][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 662.823838][ T38] 2 locks held by kworker/1:1/50: [ 662.823850][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.823906][ T38] #1: ffffc90000bc7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.823978][ T38] 3 locks held by kworker/1:2/2048: [ 662.823990][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.824045][ T38] #1: ffffc90005f97bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.824101][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 662.824180][ T38] 4 locks held by kworker/u9:1/5157: [ 662.824192][ T38] #0: ffff88805ae83938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.824253][ T38] #1: ffffc9000fb4fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.824310][ T38] #2: ffff8880792980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 662.824376][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 662.824429][ T38] 1 lock held by syslogd/5190: [ 662.824440][ T38] #0: ffff888149864418 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 662.824496][ T38] 3 locks held by klogd/5197: [ 662.824509][ T38] 2 locks held by getty/5599: [ 662.824521][ T38] #0: ffff88823bf928a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 662.824595][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 662.824649][ T38] 3 locks held by kworker/1:3/5824: [ 662.824661][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.824718][ T38] #1: ffffc900047f7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.824774][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 662.824833][ T38] 4 locks held by syz-executor/5847: [ 662.824845][ T38] #0: ffff88803929ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 662.824896][ T38] #1: ffff88803929c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 662.824956][ T38] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 662.825015][ T38] #3: ffff8880278cab58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 662.825082][ T38] 3 locks held by syz-executor/5850: [ 662.825094][ T38] #0: ffff888035560e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 662.825144][ T38] #1: ffff8880355600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 662.825198][ T38] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 662.825257][ T38] 4 locks held by kworker/u9:4/5855: [ 662.825270][ T38] #0: ffff88808c37c938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.825331][ T38] #1: ffffc90004b37bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.825394][ T38] #2: ffff888049ba80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 662.825444][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 662.825496][ T38] 4 locks held by kworker/u9:7/5862: [ 662.825508][ T38] #0: ffff888028c6c938 ((wq_completion)hci4#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.825569][ T38] #1: ffffc90004ac7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.825632][ T38] #2: ffff88808147c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 662.825681][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 662.825742][ T38] 3 locks held by kworker/u8:19/6721: [ 662.825754][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.825810][ T38] #1: ffffc9000d3f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.825866][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 662.825926][ T38] 3 locks held by kworker/u8:23/6731: [ 662.825939][ T38] #0: ffff88802f7f3138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.825995][ T38] #1: ffffc9000d477bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.826052][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 662.826110][ T38] 4 locks held by kworker/1:7/6862: [ 662.826122][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 662.826178][ T38] #1: ffffc9000d787bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 662.826234][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 662.826290][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 662.826346][ T38] 3 locks held by syz.1.292/7036: [ 662.826365][ T38] #0: ffff888056e08e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 662.826415][ T38] #1: ffff888056e080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 662.826468][ T38] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 662.826529][ T38] 1 lock held by syz.3.671/8442: [ 662.826542][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 662.826612][ T38] 1 lock held by dhcpcd/8445: [ 662.826623][ T38] #0: ffff88802fa6e7b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 662.826679][ T38] 2 locks held by syz-executor/8462: [ 662.826691][ T38] #0: ffffffff8e43a940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 662.826752][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 662.826805][ T38] 1 lock held by syz-executor/8464: [ 662.826817][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 662.826870][ T38] 1 lock held by syz-executor/8470: [ 662.826883][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 662.826943][ T38] 2 locks held by syz-executor/8472: [ 662.826955][ T38] #0: ffffffff8f1ef1d0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 662.827016][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 662.827070][ T38] 1 lock held by syz-executor/8483: [ 662.827087][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 662.827148][ T38] 1 lock held by dhcpcd/8488: [ 662.827160][ T38] #0: ffff88803d985378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 662.827215][ T38] 1 lock held by dhcpcd/8489: [ 662.827227][ T38] #0: ffff88803d982af8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.087697][ T38] 1 lock held by dhcpcd/8490: [ 663.087712][ T38] #0: ffff88803d99bf38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.087768][ T38] 1 lock held by dhcpcd/8491: [ 663.087780][ T38] #0: ffff88803d99ee78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.087835][ T38] 1 lock held by dhcpcd/8492: [ 663.087846][ T38] #0: ffff88803d99ccb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 663.087902][ T38] 1 lock held by syz-executor/8497: [ 663.087914][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.087978][ T38] 1 lock held by syz-executor/8500: [ 663.087990][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.088052][ T38] 1 lock held by syz-executor/8501: [ 663.088064][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.088125][ T38] 1 lock held by syz-executor/8507: [ 663.088137][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.088198][ T38] 1 lock held by syz-executor/8512: [ 663.088210][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.088273][ T38] 4 locks held by kworker/1:4/8519: [ 663.088286][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.088357][ T38] #1: ffffc9001d36fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.088415][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 663.088470][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 663.088530][ T38] 1 lock held by syz-executor/8524: [ 663.088542][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.088605][ T38] 1 lock held by syz-executor/8531: [ 663.088618][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.088681][ T38] 4 locks held by kworker/u9:0/8533: [ 663.088693][ T38] #0: ffff888020fca938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.088768][ T38] #1: ffffc9000d7b7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.088826][ T38] #2: ffff88803413c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.088878][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.088929][ T38] 1 lock held by syz-executor/8534: [ 663.088942][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.089004][ T38] 5 locks held by kworker/u9:2/8538: [ 663.089017][ T38] #0: ffff888031fff938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.089073][ T38] #1: ffffc9000d777bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.089132][ T38] #2: ffff88805dc28e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 663.089194][ T38] #3: ffff88805dc280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 663.089250][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 663.089307][ T38] 1 lock held by syz-executor/8539: [ 663.089320][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.137374][ T38] 5 locks held by kworker/u9:3/8541: [ 663.137389][ T38] #0: ffff88805e764138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.137467][ T38] #1: ffffc9000d767bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.137526][ T38] #2: ffff8880393a8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 663.137589][ T38] #3: ffff8880393a80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 663.137645][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 663.137703][ T38] 5 locks held by kworker/u9:5/8542: [ 663.137716][ T38] #0: ffff888037b4d138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.137773][ T38] #1: ffffc9000d797bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.137830][ T38] #2: ffff888074a5ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 663.137892][ T38] #3: ffff888074a5c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 663.137947][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 663.138003][ T38] 4 locks held by kworker/u9:6/8543: [ 663.138017][ T38] #0: ffff88803360c138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.138079][ T38] #1: ffffc9000d757bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.138135][ T38] #2: ffff88804d2b40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 663.138186][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 663.138238][ T38] 5 locks held by kworker/u9:8/8544: [ 663.138251][ T38] #0: ffff888031931938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.138306][ T38] #1: ffffc9000d747bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.138376][ T38] #2: ffff88803916ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 663.138436][ T38] #3: ffff88803916c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 663.138492][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 663.138549][ T38] 5 locks held by kworker/u9:9/8545: [ 663.138562][ T38] #0: ffff88802938d938 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.138618][ T38] #1: ffffc9000d737bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.138676][ T38] #2: ffff888033b14e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 663.138736][ T38] #3: ffff888033b140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 663.138792][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 663.138849][ T38] 2 locks held by kworker/1:5/8546: [ 663.138863][ T38] 1 lock held by syz-executor/8548: [ 663.138875][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 663.138938][ T38] 4 locks held by kworker/1:8/8553: [ 663.138950][ T38] #0: ffff888059a2f138 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 663.139008][ T38] #1: ffffc9000d6f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 663.139086][ T38] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 663.139142][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 663.139199][ T38] 2 locks held by kworker/1:10/8555: [ 663.139216][ T38] [ 663.139222][ T38] ============================================= [ 663.139222][ T38] [ 663.139245][ T38] NMI backtrace for cpu 0 [ 663.139385][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.139410][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.139424][ T38] Call Trace: [ 663.139448][ T38] [ 663.139459][ T38] dump_stack_lvl+0x189/0x250 [ 663.139497][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.139530][ T38] ? __pfx__printk+0x10/0x10 [ 663.139571][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 663.139600][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 663.139626][ T38] ? __pfx__printk+0x10/0x10 [ 663.139654][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 663.139685][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 663.139712][ T38] watchdog+0xf93/0xfe0 [ 663.139747][ T38] ? watchdog+0x1de/0xfe0 [ 663.139780][ T38] kthread+0x711/0x8a0 [ 663.139818][ T38] ? __pfx_watchdog+0x10/0x10 [ 663.139844][ T38] ? __pfx_kthread+0x10/0x10 [ 663.139881][ T38] ? __pfx_kthread+0x10/0x10 [ 663.139915][ T38] ret_from_fork+0x3fc/0x770 [ 663.139946][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 663.139982][ T38] ? __switch_to_asm+0x39/0x70 [ 663.140001][ T38] ? __switch_to_asm+0x33/0x70 [ 663.140020][ T38] ? __pfx_kthread+0x10/0x10 [ 663.140053][ T38] ret_from_fork_asm+0x1a/0x30 [ 663.140091][ T38] [ 663.140100][ T38] Sending NMI from CPU 0 to CPUs 1: [ 663.140144][ C1] NMI backtrace for cpu 1 [ 663.140164][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.140211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.140223][ C1] RIP: 0010:lock_acquire+0x154/0x360 [ 663.140257][ C1] Code: 8d e8 40 7b 5a 09 b8 ff ff ff ff 65 0f c1 05 a3 2f 5a 10 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 [ 663.140278][ C1] RSP: 0018:ffffc90000a2eb90 EFLAGS: 00000046 [ 663.140294][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a9aa7dcf67d4e900 [ 663.140307][ C1] RDX: 0000000000000000 RSI: ffffffff8d2185e9 RDI: ffffffff8b620c80 [ 663.140320][ C1] RBP: ffffffff89424e45 R08: 0000000000000000 R09: ffffffff89424e45 [ 663.140333][ C1] R10: 0000000000000100 R11: 000000000000dd86 R12: 0000000000000002 [ 663.140344][ C1] R13: ffffffff8d9a8b80 R14: 0000000000000000 R15: 0000000000000246 [ 663.140356][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 663.140371][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 663.140383][ C1] CR2: 00007fff0deb1d94 CR3: 000000003a722000 CR4: 00000000003526f0 [ 663.140400][ C1] Call Trace: [ 663.140407][ C1] [ 663.140417][ C1] ? __asan_memset+0x22/0x50 [ 663.140437][ C1] ? synproxy_pernet+0x45/0x270 [ 663.140473][ C1] synproxy_pernet+0x61/0x270 [ 663.140499][ C1] ? synproxy_pernet+0x45/0x270 [ 663.140526][ C1] nft_synproxy_eval_v6+0x108/0x560 [ 663.140557][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 663.140593][ C1] ? nf_ip_checksum+0x13c/0x510 [ 663.140623][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 663.140649][ C1] ? __lock_acquire+0xab9/0xd20 [ 663.140674][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 663.140711][ C1] nft_do_chain+0x40c/0x1920 [ 663.140750][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 663.140778][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 663.140818][ C1] ? __lock_acquire+0xab9/0xd20 [ 663.140846][ C1] nft_do_chain_inet+0x25d/0x340 [ 663.140873][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.140900][ C1] ? __lock_acquire+0xab9/0xd20 [ 663.140929][ C1] ? NF_HOOK+0x9a/0x3a0 [ 663.140949][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 663.140977][ C1] nf_hook_slow+0xc5/0x220 [ 663.141002][ C1] NF_HOOK+0x206/0x3a0 [ 663.141023][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 663.141044][ C1] ? NF_HOOK+0x9a/0x3a0 [ 663.141062][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 663.141083][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 663.141110][ C1] ip6_input+0x16a/0x270 [ 663.141130][ C1] ? ip6_input+0x23/0x270 [ 663.141151][ C1] NF_HOOK+0x309/0x3a0 [ 663.141170][ C1] ? skb_orphan+0xaf/0xd0 [ 663.141190][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 663.141209][ C1] ? NF_HOOK+0x9a/0x3a0 [ 663.141228][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 663.141248][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 663.141275][ C1] __netif_receive_skb+0xd3/0x380 [ 663.141295][ C1] ? rt_spin_unlock+0x65/0x80 [ 663.141316][ C1] ? process_backlog+0x27b/0x900 [ 663.141336][ C1] process_backlog+0x31e/0x900 [ 663.141363][ C1] __napi_poll+0xb6/0x540 [ 663.141384][ C1] net_rx_action+0x707/0xe00 [ 663.141403][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 663.141431][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 663.141453][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 663.141480][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 663.141508][ C1] ? kasan_save_track+0x4f/0x80 [ 663.141527][ C1] ? kasan_save_track+0x3e/0x80 [ 663.141546][ C1] ? kasan_save_free_info+0x46/0x50 [ 663.141563][ C1] ? smpboot_thread_fn+0x542/0xa60 [ 663.141599][ C1] handle_softirqs+0x22c/0x710 [ 663.141628][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 663.141656][ C1] __local_bh_enable_ip+0x179/0x270 [ 663.141678][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 663.141706][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 663.141733][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 663.141757][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 663.141787][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 663.141818][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 663.141845][ C1] ? __lock_acquire+0xab9/0xd20 [ 663.141868][ C1] ? __pfx___schedule+0x10/0x10 [ 663.141897][ C1] ? schedule+0x91/0x360 [ 663.141925][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 663.141946][ C1] smpboot_thread_fn+0x542/0xa60 [ 663.141969][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 663.141996][ C1] kthread+0x711/0x8a0 [ 663.142024][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 663.142046][ C1] ? __pfx_kthread+0x10/0x10 [ 663.142075][ C1] ? __pfx_kthread+0x10/0x10 [ 663.142102][ C1] ret_from_fork+0x3fc/0x770 [ 663.142126][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 663.142152][ C1] ? __switch_to_asm+0x39/0x70 [ 663.142168][ C1] ? __switch_to_asm+0x33/0x70 [ 663.142184][ C1] ? __pfx_kthread+0x10/0x10 [ 663.142211][ C1] ret_from_fork_asm+0x1a/0x30 [ 663.142237][ C1] [ 663.143142][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 663.143165][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 663.143190][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 663.143203][ T38] Call Trace: [ 663.143212][ T38] [ 663.143221][ T38] dump_stack_lvl+0x99/0x250 [ 663.143254][ T38] ? __asan_memcpy+0x40/0x70 [ 663.143278][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.143310][ T38] ? __pfx__printk+0x10/0x10 [ 663.143354][ T38] vpanic+0x281/0x750 [ 663.143390][ T38] ? __pfx_vpanic+0x10/0x10 [ 663.143420][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 663.143443][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 663.143483][ T38] panic+0xb9/0xc0 [ 663.143514][ T38] ? __pfx_panic+0x10/0x10 [ 663.143548][ T38] ? irq_work_queue+0xc3/0x140 [ 663.143581][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 663.143609][ T38] watchdog+0xfd2/0xfe0 [ 663.143642][ T38] ? watchdog+0x1de/0xfe0 [ 663.143676][ T38] kthread+0x711/0x8a0 [ 663.143712][ T38] ? __pfx_watchdog+0x10/0x10 [ 663.143738][ T38] ? __pfx_kthread+0x10/0x10 [ 663.143776][ T38] ? __pfx_kthread+0x10/0x10 [ 663.143810][ T38] ret_from_fork+0x3fc/0x770 [ 663.143841][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 663.143876][ T38] ? __switch_to_asm+0x39/0x70 [ 663.143896][ T38] ? __switch_to_asm+0x33/0x70 [ 663.143915][ T38] ? __pfx_kthread+0x10/0x10 [ 663.143949][ T38] ret_from_fork_asm+0x1a/0x30 [ 663.143987][ T38] [ 663.144507][ T38] Kernel Offset: disabled