last executing test programs: 38.675065556s ago: executing program 2 (id=636): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 38.340144623s ago: executing program 2 (id=641): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 37.998476201s ago: executing program 4 (id=643): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000340), 0x8) 37.719066955s ago: executing program 4 (id=646): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) 37.283789796s ago: executing program 1 (id=648): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) 37.162316035s ago: executing program 0 (id=649): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xca762, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 37.122802504s ago: executing program 4 (id=650): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1345, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 36.931825476s ago: executing program 2 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000180)=r0}, 0x20) 36.766415507s ago: executing program 1 (id=653): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x802) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) close(r0) 36.562570589s ago: executing program 2 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001080000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000075000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 36.366298506s ago: executing program 2 (id=656): r0 = socket(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x1, 0x9, @loopback, 0xd9b}, 0x1c) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) 36.295989484s ago: executing program 1 (id=657): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 36.148737441s ago: executing program 0 (id=659): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'sh\x00', 0x0, 0x64000000, 0xe}, {@private=0xa010101, 0x4e26, 0x0, 0x3, 0x0, 0x8001}}, 0x44) 36.047957352s ago: executing program 2 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 35.667180032s ago: executing program 0 (id=662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0x1}]}}}}}}}, 0x0) 35.652665205s ago: executing program 1 (id=663): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 35.261616715s ago: executing program 0 (id=665): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) 35.084752316s ago: executing program 1 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 34.992841703s ago: executing program 4 (id=667): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000001c0)={0x5, 0x0, 0x2}) 34.755886574s ago: executing program 0 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) 34.608497529s ago: executing program 1 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd1, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) 34.519242918s ago: executing program 4 (id=670): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x100000a, 0x32, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3bf4, &(0x7f0000001d40)={0x0, 0x8da6, 0x40, 0x3, 0x3f}, &(0x7f0000001dc0), &(0x7f0000001e00)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000001e40)=@IORING_OP_POLL_ADD={0x6, 0x70, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x40}, 0x7073d652ec901ab0}) 34.199315474s ago: executing program 0 (id=672): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x644}, 0x1, 0x0, 0x0, 0x48100}, 0x8045) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001200)=ANY=[@ANYBLOB="68030000140001"], 0x368}], 0x1}, 0x0) 33.723536291s ago: executing program 4 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.417566954s ago: executing program 3 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000009000000800b0001006272696467650000100002800c0021000000eaa10004"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 20.496782348s ago: executing program 32 (id=660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 19.5148215s ago: executing program 33 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x54, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffd1, 0xb, 0x4}, {0x6}, {0x8, 0x13, 0xb}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4004000) 18.893004897s ago: executing program 34 (id=672): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44060000", @ANYRES16=0x0, @ANYBLOB="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"], 0x644}, 0x1, 0x0, 0x0, 0x48100}, 0x8045) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001200)=ANY=[@ANYBLOB="68030000140001"], 0x368}], 0x1}, 0x0) 18.521179365s ago: executing program 35 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.476816686s ago: executing program 3 (id=686): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012380)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000145c0)={0x2020}, 0x2020) 18.035766956s ago: executing program 3 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.513361119s ago: executing program 3 (id=688): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x11, 0x10, {0x10, 0x23, "ff7dbd0b342790b332d8c143e8b5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15.350094331s ago: executing program 3 (id=689): r0 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40, 0x0, 0x6a}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 15.238638324s ago: executing program 3 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) 0s ago: executing program 36 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r1}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. [ 86.230571][ T5824] cgroup: Unknown subsys name 'net' [ 86.487333][ T5824] cgroup: Unknown subsys name 'cpuset' [ 86.541950][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.644226][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.881922][ T44] cfg80211: failed to load regulatory.db [ 92.593161][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.609619][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.623872][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.641375][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.661550][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.759992][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.770754][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.772754][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.774136][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.776345][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.857354][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.861900][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.862726][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.864165][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.865066][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.929608][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.932234][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.935301][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.956119][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.958885][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.959814][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.963357][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.964921][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.980925][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.982347][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.790465][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 93.914963][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 94.070924][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 94.222954][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 94.441902][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 94.633280][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.633450][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.633982][ T5835] bridge_slave_0: entered allmulticast mode [ 94.638508][ T5835] bridge_slave_0: entered promiscuous mode [ 94.749155][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.749821][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.750179][ T5835] bridge_slave_1: entered allmulticast mode [ 94.752653][ T5837] Bluetooth: hci0: command tx timeout [ 94.754575][ T5835] bridge_slave_1: entered promiscuous mode [ 94.831467][ T5837] Bluetooth: hci1: command tx timeout [ 94.911419][ T5837] Bluetooth: hci2: command tx timeout [ 94.991413][ T5837] Bluetooth: hci3: command tx timeout [ 95.073757][ T5837] Bluetooth: hci4: command tx timeout [ 95.122278][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.122424][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.122610][ T5840] bridge_slave_0: entered allmulticast mode [ 95.125307][ T5840] bridge_slave_0: entered promiscuous mode [ 95.373922][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.374091][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.374302][ T5840] bridge_slave_1: entered allmulticast mode [ 95.377044][ T5840] bridge_slave_1: entered promiscuous mode [ 95.377988][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.378107][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.378240][ T5839] bridge_slave_0: entered allmulticast mode [ 95.380132][ T5839] bridge_slave_0: entered promiscuous mode [ 95.527324][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.617807][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.617951][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.618103][ T5839] bridge_slave_1: entered allmulticast mode [ 95.620052][ T5839] bridge_slave_1: entered promiscuous mode [ 95.719642][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.002788][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.003079][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.003281][ T5843] bridge_slave_0: entered allmulticast mode [ 96.006192][ T5843] bridge_slave_0: entered promiscuous mode [ 96.160692][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.323213][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.323415][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.323606][ T5843] bridge_slave_1: entered allmulticast mode [ 96.326639][ T5843] bridge_slave_1: entered promiscuous mode [ 96.428358][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.434360][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.441401][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.441569][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.441781][ T5842] bridge_slave_0: entered allmulticast mode [ 96.444951][ T5842] bridge_slave_0: entered promiscuous mode [ 96.555505][ T5835] team0: Port device team_slave_0 added [ 96.655747][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.656004][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.656170][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.656389][ T5842] bridge_slave_1: entered allmulticast mode [ 96.658286][ T5842] bridge_slave_1: entered promiscuous mode [ 96.776446][ T5835] team0: Port device team_slave_1 added [ 96.831922][ T5837] Bluetooth: hci0: command tx timeout [ 96.911321][ T5837] Bluetooth: hci1: command tx timeout [ 96.991394][ T5837] Bluetooth: hci2: command tx timeout [ 97.021040][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.071469][ T5837] Bluetooth: hci3: command tx timeout [ 97.122703][ T5840] team0: Port device team_slave_0 added [ 97.151317][ T5837] Bluetooth: hci4: command tx timeout [ 97.269026][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.346041][ T5840] team0: Port device team_slave_1 added [ 97.486246][ T5839] team0: Port device team_slave_0 added [ 97.490635][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.568410][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.568424][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.568443][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.675537][ T5839] team0: Port device team_slave_1 added [ 97.679086][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.782089][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.782113][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.782141][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.034532][ T5843] team0: Port device team_slave_0 added [ 98.046259][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.046281][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.046311][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.186122][ T5843] team0: Port device team_slave_1 added [ 98.188861][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.188878][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.188906][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.211334][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.211354][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.211387][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.216322][ T5842] team0: Port device team_slave_0 added [ 98.335746][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.335764][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.335792][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.338817][ T5842] team0: Port device team_slave_1 added [ 98.765101][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.765118][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.765146][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.911644][ T5837] Bluetooth: hci0: command tx timeout [ 98.991460][ T5837] Bluetooth: hci1: command tx timeout [ 98.993769][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.993786][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.993814][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.045015][ T5835] hsr_slave_0: entered promiscuous mode [ 99.046756][ T5835] hsr_slave_1: entered promiscuous mode [ 99.052459][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.052476][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.052507][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.081185][ T5837] Bluetooth: hci2: command tx timeout [ 99.151355][ T5837] Bluetooth: hci3: command tx timeout [ 99.240718][ T5837] Bluetooth: hci4: command tx timeout [ 99.253995][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.254011][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.254035][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.267044][ T5840] hsr_slave_0: entered promiscuous mode [ 99.268582][ T5840] hsr_slave_1: entered promiscuous mode [ 99.269884][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 99.270036][ T5840] Cannot create hsr debugfs directory [ 99.429250][ T5839] hsr_slave_0: entered promiscuous mode [ 99.430322][ T5839] hsr_slave_1: entered promiscuous mode [ 99.430953][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 99.430978][ T5839] Cannot create hsr debugfs directory [ 100.075518][ T5843] hsr_slave_0: entered promiscuous mode [ 100.076899][ T5843] hsr_slave_1: entered promiscuous mode [ 100.077529][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 100.077556][ T5843] Cannot create hsr debugfs directory [ 100.292622][ T5842] hsr_slave_0: entered promiscuous mode [ 100.293965][ T5842] hsr_slave_1: entered promiscuous mode [ 100.294895][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 100.294919][ T5842] Cannot create hsr debugfs directory [ 100.991388][ T5837] Bluetooth: hci0: command tx timeout [ 101.072619][ T5837] Bluetooth: hci1: command tx timeout [ 101.152687][ T5837] Bluetooth: hci2: command tx timeout [ 101.232828][ T5837] Bluetooth: hci3: command tx timeout [ 101.321668][ T5837] Bluetooth: hci4: command tx timeout [ 101.668981][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.694890][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.728172][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.770826][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.929565][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.981782][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.034538][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.086181][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.241375][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.277610][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.311766][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.372724][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.573036][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.613975][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.659681][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.725599][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.839048][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.894411][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.937104][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.996162][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.048274][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.122231][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.186410][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.187516][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.230620][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.264926][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.265257][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.378064][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.436367][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.436594][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.443304][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.500413][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.500576][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.583985][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.613010][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.686876][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.687552][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.758412][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.758998][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.853464][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.920396][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.920524][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.968667][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.988526][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.988684][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.166131][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.198515][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.265316][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.265562][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.355803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.355946][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.694427][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.765061][ T5835] veth0_vlan: entered promiscuous mode [ 104.877228][ T5835] veth1_vlan: entered promiscuous mode [ 104.912438][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.112358][ T5839] veth0_vlan: entered promiscuous mode [ 105.156388][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.170605][ T5835] veth0_macvtap: entered promiscuous mode [ 105.199109][ T5839] veth1_vlan: entered promiscuous mode [ 105.218408][ T5835] veth1_macvtap: entered promiscuous mode [ 105.280907][ T5843] veth0_vlan: entered promiscuous mode [ 105.320443][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.325209][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.422681][ T5843] veth1_vlan: entered promiscuous mode [ 105.437508][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.581243][ T1444] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.591807][ T5839] veth0_macvtap: entered promiscuous mode [ 105.597299][ T1444] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.622037][ T1209] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.629674][ T5840] veth0_vlan: entered promiscuous mode [ 105.647783][ T1209] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.662641][ T5839] veth1_macvtap: entered promiscuous mode [ 105.767677][ T5840] veth1_vlan: entered promiscuous mode [ 105.957616][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.958276][ T5843] veth0_macvtap: entered promiscuous mode [ 106.005320][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.007198][ T5843] veth1_macvtap: entered promiscuous mode [ 106.106318][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.106345][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.131219][ T1444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.150914][ T1444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.170583][ T1444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.201197][ T1444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.302200][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.303744][ T5840] veth0_macvtap: entered promiscuous mode [ 106.306988][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.307008][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.386367][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.387792][ T5840] veth1_macvtap: entered promiscuous mode [ 106.515406][ T5842] veth0_vlan: entered promiscuous mode [ 106.530929][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.552875][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.568665][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.598670][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.678286][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.719620][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.719642][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.726732][ T5842] veth1_vlan: entered promiscuous mode [ 106.817929][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.037725][ T1209] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.061391][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.061410][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.068533][ T1209] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.070297][ T1209] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.093017][ T1209] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.370531][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.498609][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.498631][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.622145][ T5842] veth0_macvtap: entered promiscuous mode [ 107.719035][ T5842] veth1_macvtap: entered promiscuous mode [ 107.770337][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.770358][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.954164][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.954189][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.005933][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.213207][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.282329][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.282352][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.316937][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.323480][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.323785][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.324078][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.671548][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.824124][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 108.829484][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.919290][ T5923] usb 4-1: config 4 interface 0 has no altsetting 0 [ 108.948348][ T5923] usb 4-1: string descriptor 0 read error: -22 [ 108.948464][ T5923] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 108.948491][ T5923] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 109.029699][ T5981] "syz.2.15" (5981) uses obsolete ecb(arc4) skcipher [ 109.098962][ T5979] IPVS: Scheduler module ip_vs_sip not found [ 109.271781][ T5923] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 109.360520][ T5923] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.413152][ T5923] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 109.416785][ T5923] usb 4-1: media controller created [ 109.726291][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.857995][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.858017][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.207349][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 110.208376][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 110.293638][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.293659][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.448847][ T5923] zl10353_read_register: readreg error (reg=127, ret==0) [ 110.834036][ T5923] usb 4-1: USB disconnect, device number 2 [ 111.962674][ T6040] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 112.411334][ T6049] mkiss: ax0: crc mode is auto. [ 112.701590][ T44] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 112.891474][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 112.891510][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 112.891536][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 112.899724][ T44] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 112.899753][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.899773][ T44] usb 3-1: Product: syz [ 112.899786][ T44] usb 3-1: Manufacturer: syz [ 112.899801][ T44] usb 3-1: SerialNumber: syz [ 113.004890][ T44] usb 3-1: config 0 descriptor?? [ 113.007452][ T6057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.007649][ T6057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.053425][ T44] usb 3-1: ucan: probing device on interface #0 [ 113.249438][ T6073] syz.3.52 (6073): /proc/6070/oom_adj is deprecated, please use /proc/6070/oom_score_adj instead. [ 113.308128][ T6074] process 'syz.1.53' launched '/dev/fd/3' with NULL argv: empty string added [ 113.453688][ T44] usb 3-1: ucan: device reported invalid device info [ 113.453713][ T44] usb 3-1: ucan: probe failed; try to update the device firmware [ 113.732725][ T44] usb 3-1: USB disconnect, device number 2 [ 113.862186][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.024585][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 114.024622][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.024674][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 114.024698][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.088441][ T9] usb 5-1: config 0 descriptor?? [ 114.095009][ T6068] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 114.179972][ T6091] sctp: [Deprecated]: syz.1.61 (pid 6091) Use of int in max_burst socket option. [ 114.179972][ T6091] Use struct sctp_assoc_value instead [ 114.731307][ T9] usb 5-1: string descriptor 0 read error: -71 [ 114.731923][ T9] uclogic 0003:5543:0047.0001: failed retrieving string descriptor #200: -71 [ 114.732000][ T9] uclogic 0003:5543:0047.0001: failed retrieving pen parameters: -71 [ 114.732018][ T9] uclogic 0003:5543:0047.0001: failed probing pen v2 parameters: -71 [ 114.732071][ T9] uclogic 0003:5543:0047.0001: failed probing parameters: -71 [ 114.732186][ T9] uclogic 0003:5543:0047.0001: probe with driver uclogic failed with error -71 [ 114.781822][ T9] usb 5-1: USB disconnect, device number 2 [ 115.384842][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 115.507785][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.70'. [ 115.913432][ T6126] mkiss: ax0: crc mode is auto. [ 116.055276][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.0.78'. [ 117.435059][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 117.752653][ T6189] capability: warning: `syz.4.107' uses deprecated v2 capabilities in a way that may be insecure [ 117.757563][ T38] audit: type=1326 audit(1756054614.596:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.757621][ T38] audit: type=1326 audit(1756054614.596:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.821210][ T38] audit: type=1326 audit(1756054614.656:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.821277][ T38] audit: type=1326 audit(1756054614.656:5): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.821324][ T38] audit: type=1326 audit(1756054614.656:6): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.822294][ T38] audit: type=1326 audit(1756054614.666:7): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.822346][ T38] audit: type=1326 audit(1756054614.666:8): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 117.822393][ T38] audit: type=1326 audit(1756054614.666:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6185 comm="syz.2.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95f069ebe9 code=0x7ffc0000 [ 118.801401][ T981] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.841302][ T5923] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 118.888020][ T6217] netlink: 204 bytes leftover after parsing attributes in process `syz.1.120'. [ 118.952849][ T981] usb 4-1: Using ep0 maxpacket: 16 [ 118.964269][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.964309][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.964334][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.964385][ T981] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 118.964412][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.974481][ T981] usb 4-1: config 0 descriptor?? [ 119.039071][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.039108][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.039218][ T5923] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 119.039244][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.134001][ T5923] usb 3-1: config 0 descriptor?? [ 119.562849][ T981] microsoft 0003:045E:07DA.0002: reserved main item tag 0xd [ 119.673138][ T981] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 119.673173][ T981] microsoft 0003:045E:07DA.0002: no inputs found [ 119.673188][ T981] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 119.703542][ T5923] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 119.703584][ T5923] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 119.703620][ T5923] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 119.703649][ T5923] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 119.703674][ T5923] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 119.728562][ T5923] sunplus 0003:04FC:05D8.0003: hidraw1: USB HID v0.79 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 119.757528][ T981] usb 4-1: USB disconnect, device number 3 [ 120.051299][ T5923] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 120.122198][ T6225] fido_id[6225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 120.181245][ T5168] usb 3-1: USB disconnect, device number 3 [ 120.201439][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 120.204274][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.204331][ T5923] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 120.204355][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.312506][ T5923] usb 5-1: config 0 descriptor?? [ 120.342499][ T6226] fido_id[6226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 120.353014][ T5923] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 121.013431][ T5923] gspca_vc032x: reg_r err -71 [ 121.013534][ T5923] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 121.030793][ T5923] usb 5-1: USB disconnect, device number 3 [ 122.781987][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.942187][ T44] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 122.942246][ T44] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.942276][ T44] usb 2-1: config 2 interface 0 has no altsetting 0 [ 122.950597][ T44] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 122.950629][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.950650][ T44] usb 2-1: Product: syz [ 122.950665][ T44] usb 2-1: Manufacturer: syz [ 122.950680][ T44] usb 2-1: SerialNumber: syz [ 123.278076][ T44] ims_pcu 2-1:2.0: probe with driver ims_pcu failed with error -22 [ 123.305994][ T44] usb 2-1: USB disconnect, device number 2 [ 124.092213][ T6321] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.168'. [ 124.092659][ T6321] openvswitch: netlink: Message has 5 unknown bytes. [ 125.029482][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.179'. [ 125.029508][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.179'. [ 125.029540][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.179'. [ 125.029584][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.1.179'. [ 125.120341][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 125.120364][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 125.120590][ T6348] netlink: 'syz.0.180': attribute type 12 has an invalid length. [ 125.120713][ T6348] netlink: 'syz.0.180': attribute type 14 has an invalid length. [ 125.969490][ T6375] netlink: 128 bytes leftover after parsing attributes in process `syz.3.193'. [ 126.197680][ T6381] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.195'. [ 126.197768][ T6381] netlink: zone id is out of range [ 126.197823][ T6381] netlink: get zone limit has 8 unknown bytes [ 126.872003][ T6400] Bluetooth: MGMT ver 1.23 [ 127.091245][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.253924][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 127.261930][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.261989][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.262018][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.262044][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.262071][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.265192][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.265249][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.265279][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.265306][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.265332][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.266498][ T9] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 127.266555][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.266584][ T9] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.266610][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.266637][ T9] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.288176][ T9] usb 1-1: string descriptor 0 read error: -22 [ 127.288332][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.288354][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.505500][ T9] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 127.734819][ T5922] usb 1-1: USB disconnect, device number 2 [ 128.815628][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 128.974561][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 128.974598][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 128.974625][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 128.978077][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 128.978107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.978127][ T9] usb 3-1: Product: syz [ 128.978142][ T9] usb 3-1: Manufacturer: syz [ 128.978157][ T9] usb 3-1: SerialNumber: syz [ 129.054268][ T9] usb 3-1: config 0 descriptor?? [ 129.061431][ T6435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.061620][ T6435] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.087485][ T9] usb 3-1: ucan: probing device on interface #0 [ 129.500183][ T6451] dummy0: entered promiscuous mode [ 129.757397][ T9] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 129.807981][ T9] usb 3-1: USB disconnect, device number 4 [ 129.975667][ T6458] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 130.034890][ T6458] batman_adv: batadv0: Adding interface: team0 [ 130.034907][ T6458] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.034937][ T6458] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 130.082065][ T6458] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 130.082093][ T6458] netlink: 2 bytes leftover after parsing attributes in process `syz.1.229'. [ 130.082307][ T6458] team0: entered promiscuous mode [ 130.082326][ T6458] team_slave_0: entered promiscuous mode [ 130.082603][ T6458] team_slave_1: entered promiscuous mode [ 130.104233][ T6458] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.104625][ T6458] batman_adv: batadv0: Interface activated: team0 [ 130.104674][ T6458] batman_adv: batadv0: Interface deactivated: team0 [ 130.104700][ T6458] batman_adv: batadv0: Removing interface: team0 [ 130.158122][ T6458] bridge0: port 3(team0) entered blocking state [ 130.158475][ T6458] bridge0: port 3(team0) entered disabled state [ 130.158795][ T6458] team0: entered allmulticast mode [ 130.158812][ T6458] team_slave_0: entered allmulticast mode [ 130.158836][ T6458] team_slave_1: entered allmulticast mode [ 130.217132][ T6458] bridge0: port 3(team0) entered blocking state [ 130.218785][ T6458] bridge0: port 3(team0) entered forwarding state [ 130.338905][ T6463] can0: slcan on ptm0. [ 130.590897][ T6461] can0 (unregistered): slcan off ptm0. [ 132.075656][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.249'. [ 132.353969][ T6510] netdevsim netdevsim2: Direct firmware load for . [ 132.353969][ T6510] failed with error -2 [ 132.354003][ T6510] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 132.354003][ T6510] [ 132.528282][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 133.021448][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.183653][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.183682][ T9] usb 5-1: config 0 has no interface number 0 [ 133.183733][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.183761][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.183800][ T9] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 133.183823][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.275545][ T9] usb 5-1: config 0 descriptor?? [ 133.732556][ T981] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.782564][ T9] input: HID 04d9:a055 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:04D9:A055.0004/input/input6 [ 133.891388][ T981] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 133.891421][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.930101][ T981] usb 4-1: config 0 descriptor?? [ 134.132723][ T9] holtek_kbd 0003:04D9:A055.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.4-1/input1 [ 134.178680][ T9] usb 5-1: USB disconnect, device number 4 [ 134.219247][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.371238][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 134.387509][ T44] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 134.387539][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.387559][ T44] usb 2-1: Product: syz [ 134.387574][ T44] usb 2-1: Manufacturer: syz [ 134.387588][ T44] usb 2-1: SerialNumber: syz [ 134.482585][ T981] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 134.482625][ T981] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 134.482652][ T981] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 134.482679][ T981] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 134.482706][ T981] elecom 0003:056E:00E6.0005: unknown main item tag 0x0 [ 134.527494][ T44] usb 2-1: config 0 descriptor?? [ 134.554490][ T981] elecom 0003:056E:00E6.0005: hidraw1: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.3-1/input0 [ 134.621540][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 134.621606][ T44] usb 2-1: setting power ON [ 134.622138][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 134.669343][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.683075][ T6552] fido_id[6552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 134.701951][ T5922] usb 4-1: USB disconnect, device number 4 [ 134.709498][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 134.709569][ T44] usb 2-1: media controller created [ 134.815654][ T6546] dvb-usb: bulk message failed: -22 (3/0) [ 134.852964][ T6553] fido_id[6553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 134.969980][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.977219][ T6556] Bluetooth: MGMT ver 1.23 [ 135.176261][ T44] usb 2-1: selecting invalid altsetting 6 [ 135.176291][ T44] usb 2-1: digital interface selection failed (-22) [ 135.176306][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 135.183297][ T44] usb 2-1: setting power OFF [ 135.183522][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 135.183543][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 135.183559][ T44] (NULL device *): no alternate interface [ 135.489266][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 135.535587][ T44] usb 2-1: USB disconnect, device number 3 [ 135.606368][ T6568] ======================================================= [ 135.606368][ T6568] WARNING: The mand mount option has been deprecated and [ 135.606368][ T6568] and is ignored by this kernel. Remove the mand [ 135.606368][ T6568] option from the mount to silence this warning. [ 135.606368][ T6568] ======================================================= [ 136.728432][ T6598] capability: warning: `syz.3.293' uses 32-bit capabilities (legacy support in use) [ 136.940165][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 136.940205][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 136.993164][ T5837] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 137.071223][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.186381][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 137.186465][ T6615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.303'. [ 137.471850][ T6620] vcan0: MTU too low for tipc bearer [ 137.471891][ T6620] tipc: Enabling of bearer rejected, failed to enable media [ 137.516231][ T6607] Zero length message leads to an empty skb [ 137.970777][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.970882][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.220944][ T6640] nbd: must specify a size in bytes for the device [ 138.282691][ T6643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 138.282723][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.316'. [ 138.282750][ T6643] netlink: 'syz.1.316': attribute type 11 has an invalid length. [ 138.763129][ T6653] program syz.1.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.785490][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 138.819376][ T6657] program syz.1.320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 138.837103][ T6657] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 139.563574][ T6678] tipc: Started in network mode [ 139.563609][ T6678] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 139.569147][ T6678] tipc: Enabled bearer , priority 2 [ 140.683821][ T981] tipc: Node number set to 10070698 [ 140.705594][ T5922] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 140.780373][ T5922] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 141.105969][ T6705] fido_id[6705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.174756][ T6743] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 142.174788][ T6743] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 143.435324][ T6781] bridge0: entered promiscuous mode [ 143.443800][ T6781] bridge0: port 3(macvlan2) entered blocking state [ 143.444093][ T6781] bridge0: port 3(macvlan2) entered disabled state [ 143.444322][ T6781] macvlan2: entered allmulticast mode [ 143.444340][ T6781] bridge0: entered allmulticast mode [ 143.504715][ T6781] macvlan2: left allmulticast mode [ 143.504738][ T6781] bridge0: left allmulticast mode [ 143.531906][ T6781] bridge0: left promiscuous mode [ 143.679665][ T6787] random: crng reseeded on system resumption [ 144.403477][ T5168] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 144.533995][ T6810] netlink: 'syz.4.395': attribute type 27 has an invalid length. [ 144.566736][ T5168] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.566763][ T5168] usb 4-1: config 0 has no interface number 0 [ 144.566813][ T5168] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.566839][ T5168] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.566888][ T5168] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 144.566911][ T5168] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.594290][ T5168] usb 4-1: config 0 descriptor?? [ 144.680233][ T6815] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.107161][ T5168] uclogic 0003:256C:006D.0007: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 145.292230][ T5909] usb 4-1: USB disconnect, device number 5 [ 145.465417][ T6826] fido_id[6826]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 146.081727][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 146.081782][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 147.452213][ T38] audit: type=1326 audit(1756054644.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6886 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f4aebe9 code=0x7ffc0000 [ 147.452363][ T38] audit: type=1326 audit(1756054644.296:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6886 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f4aebe9 code=0x7ffc0000 [ 147.458386][ T38] audit: type=1326 audit(1756054644.296:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6886 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f132f4aebe9 code=0x7ffc0000 [ 147.491237][ T38] audit: type=1326 audit(1756054644.316:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6886 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f4aebe9 code=0x7ffc0000 [ 147.491336][ T38] audit: type=1326 audit(1756054644.316:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6886 comm="syz.3.432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132f4aebe9 code=0x7ffc0000 [ 147.593267][ T6892] warning: `syz.1.434' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.472020][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.646211][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 150.646261][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.646286][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 150.646339][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 150.646363][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.724030][ T9] usb 2-1: config 0 descriptor?? [ 151.091284][ T5168] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.233762][ T9] holtek_kbd 0003:04D9:A055.0008: item fetching failed at offset 5/7 [ 151.234679][ T9] holtek_kbd 0003:04D9:A055.0008: probe with driver holtek_kbd failed with error -22 [ 151.244423][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.244463][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.244507][ T5168] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 151.244533][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.352547][ T5168] usb 1-1: config 0 descriptor?? [ 151.474885][ T9] usb 2-1: USB disconnect, device number 4 [ 151.861797][ T5168] razer 0003:1532:010E.0009: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 152.021944][ T9] usb 1-1: USB disconnect, device number 3 [ 152.108021][ T7009] fido_id[7009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 152.401873][ T5923] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 152.557975][ T5923] usb 2-1: config 13 has an invalid interface number: 144 but max is 0 [ 152.558004][ T5923] usb 2-1: config 13 has no interface number 0 [ 152.558039][ T5923] usb 2-1: config 13 interface 144 has no altsetting 0 [ 152.574933][ T7021] "syz.3.492" (7021) uses obsolete ecb(arc4) skcipher [ 152.602596][ T5923] usb 2-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.01 [ 152.602627][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.602647][ T5923] usb 2-1: Product: syz [ 152.602662][ T5923] usb 2-1: Manufacturer: syz [ 152.602677][ T5923] usb 2-1: SerialNumber: syz [ 152.966977][ T5923] usb 2-1: Found UVC 0.00 device syz (19ab:1000) [ 152.967019][ T5923] usb 2-1: No valid video chain found. [ 153.013357][ T5923] usb 2-1: USB disconnect, device number 5 [ 153.411492][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.571448][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 153.611298][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 153.611333][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 153.611360][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 153.611383][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 153.611410][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 153.688063][ T9] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 153.688097][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.688118][ T9] usb 1-1: Product: syz [ 153.688132][ T9] usb 1-1: Manufacturer: syz [ 153.688147][ T9] usb 1-1: SerialNumber: syz [ 153.738138][ T9] usb 1-1: config 0 descriptor?? [ 154.174279][ T9] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 154.174341][ T9] input input7: Device does not respond to id packet M [ 154.174673][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 154.176383][ T9] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 154.176434][ T9] input input7: Device does not respond to id packet P [ 154.176916][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.176963][ T9] input input7: Device does not respond to id packet B [ 154.177427][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.177475][ T9] input input7: Device does not respond to id packet N [ 154.177924][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.178413][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.178899][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.231290][ T9] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 154.298200][ T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 154.377976][ T9] usb 1-1: USB disconnect, device number 4 [ 155.261573][ T7084] netlink: 'syz.1.519': attribute type 1 has an invalid length. [ 156.759482][ T7136] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.807687][ T7129] sp0: Synchronizing with TNC [ 157.761562][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.551'. [ 157.784593][ T7167] netlink: 212388 bytes leftover after parsing attributes in process `syz.3.552'. [ 157.784677][ T7167] netlink: get zone limit has 8 unknown bytes [ 158.931628][ T5909] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.081562][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 159.084174][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.084207][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.084248][ T5909] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 159.084273][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.120864][ T5909] usb 5-1: config 0 descriptor?? [ 159.478313][ T7218] can0: slcan on ttyS3. [ 159.605597][ T5909] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 159.605636][ T5909] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 159.605663][ T5909] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 159.605690][ T5909] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 159.605716][ T5909] koneplus 0003:1E7D:2D51.000A: unknown main item tag 0x0 [ 159.642200][ T5909] koneplus 0003:1E7D:2D51.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0 [ 159.792560][ T5909] koneplus 0003:1E7D:2D51.000A: couldn't init struct koneplus_device [ 159.792619][ T5909] koneplus 0003:1E7D:2D51.000A: couldn't install mouse [ 159.793342][ T7218] can0 (unregistered): slcan off ttyS3. [ 159.799949][ T5909] koneplus 0003:1E7D:2D51.000A: probe with driver koneplus failed with error -71 [ 159.851329][ T5909] usb 5-1: USB disconnect, device number 5 [ 160.114153][ T7223] fido_id[7223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 161.635118][ T7276] overlayfs: workdir and upperdir must be separate subtrees [ 162.017710][ T7289] syz_tun: entered promiscuous mode [ 162.022100][ T7289] vlan2: entered promiscuous mode [ 162.304130][ T7296] bond0: option packets_per_slave: invalid value (18446744071562067968) [ 162.304160][ T7296] bond0: option packets_per_slave: allowed values 0 - 65535 [ 163.544348][ T7333] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 163.739019][ T7340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.614'. [ 163.740497][ T7340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.614'. [ 164.201253][ T5168] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.314640][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 164.390232][ T5168] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 164.390264][ T5168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.390284][ T5168] usb 2-1: Product: syz [ 164.390299][ T5168] usb 2-1: Manufacturer: syz [ 164.390313][ T5168] usb 2-1: SerialNumber: syz [ 164.492555][ T5168] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 164.720475][ T5922] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 164.941313][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 165.091304][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 165.106352][ T5909] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 165.106540][ T5909] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 165.107282][ T5909] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 165.107317][ T5909] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 165.107348][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0 [ 165.130474][ T5909] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 165.130511][ T5909] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 165.130534][ T5909] usb 1-1: Product: syz [ 165.130551][ T5909] usb 1-1: Manufacturer: syz [ 165.130568][ T5909] usb 1-1: SerialNumber: syz [ 165.220634][ T5909] usb 1-1: config 0 descriptor?? [ 165.279893][ T5909] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 165.379140][ T5909] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 165.441998][ T5923] usb 2-1: USB disconnect, device number 6 [ 165.519403][ T5909] usb 1-1: USB disconnect, device number 5 [ 165.618758][ T5909] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 165.882225][ T5922] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 165.885503][ T5922] ath9k_htc: Failed to initialize the device [ 165.888213][ T5923] usb 2-1: ath9k_htc: USB layer deinitialized [ 167.314356][ T38] audit: type=1326 audit(1756054664.146:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.367016][ T38] audit: type=1326 audit(1756054664.156:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.367070][ T38] audit: type=1326 audit(1756054664.206:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.367116][ T38] audit: type=1326 audit(1756054664.206:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.367159][ T38] audit: type=1326 audit(1756054664.206:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.371675][ T38] audit: type=1326 audit(1756054664.206:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.422236][ T38] audit: type=1326 audit(1756054664.266:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 167.422298][ T38] audit: type=1326 audit(1756054664.266:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be90ebe9 code=0x7ffc0000 [ 168.061305][ T5922] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 168.214621][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.214656][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 168.214789][ T5922] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 168.214814][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.270905][ T5922] usb 5-1: config 0 descriptor?? [ 168.276872][ T7435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 168.289241][ T7448] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 168.297098][ T7446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.654'. [ 168.709968][ T5922] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 168.710008][ T5922] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 168.710036][ T5922] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 168.710061][ T5922] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 168.710088][ T5922] sony 0003:1345:3008.000B: unknown main item tag 0x0 [ 168.829455][ T7459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.658'. [ 168.859501][ T5922] sony 0003:1345:3008.000B: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.4-1/input0 [ 168.859537][ T5922] sony 0003:1345:3008.000B: failed to claim input [ 168.897594][ T5168] IPVS: starting estimator thread 0... [ 168.903456][ T7460] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 169.001649][ T7464] IPVS: using max 6 ests per chain, 14400 per kthread [ 169.037924][ T5922] usb 5-1: USB disconnect, device number 6 [ 169.100402][ T7465] fido_id[7465]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 172.111311][ T5923] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 172.286232][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.286263][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.286317][ T5923] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 172.286341][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.339313][ T5923] usb 4-1: config 0 descriptor?? [ 172.842597][ T5923] hid_mf 0003:0079:1846.000C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 172.842630][ T5923] hid_mf 0003:0079:1846.000C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 173.048258][ T5923] usb 4-1: USB disconnect, device number 6 [ 173.941326][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.093693][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 174.107918][ T5923] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 174.130980][ T5923] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 174.131011][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.131031][ T5923] usb 4-1: Product: syz [ 174.131046][ T5923] usb 4-1: Manufacturer: syz [ 174.131061][ T5923] usb 4-1: SerialNumber: syz [ 174.174638][ T5923] usb 4-1: config 0 descriptor?? [ 174.194004][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 174.194057][ T5923] usb 4-1: setting power ON [ 174.194077][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 174.239861][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.255987][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 174.256047][ T5923] usb 4-1: media controller created [ 174.339360][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.416810][ T7505] dvb-usb: bulk message failed: -22 (3/0) [ 174.416838][ T7505] dvb-usb: bulk message failed: -22 (3/0) [ 174.450488][ T5923] usb 4-1: selecting invalid altsetting 6 [ 174.450512][ T5923] usb 4-1: digital interface selection failed (-22) [ 174.450528][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 174.491345][ T5923] usb 4-1: setting power OFF [ 174.491371][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 174.491389][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 174.491401][ T5923] (NULL device *): no alternate interface [ 174.657381][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 174.691948][ T5923] usb 4-1: USB disconnect, device number 7 [ 176.501934][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 176.501960][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.681'. [ 185.394064][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.411433][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.413812][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.415178][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.416066][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.859340][ T7493] netlink: 'syz.0.672': attribute type 2 has an invalid length. [ 185.859364][ T7493] netlink: 784 bytes leftover after parsing attributes in process `syz.0.672'. [ 187.481283][ T5850] Bluetooth: hci5: command tx timeout [ 187.688751][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.711595][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.714992][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.716189][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.720534][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.831297][ T5923] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 188.028487][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 188.038271][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.038304][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.038344][ T5923] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 188.038368][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.107832][ T5923] usb 4-1: config 0 descriptor?? [ 188.653531][ T5923] hid-multitouch 0003:1FD2:6007.000D: unknown main item tag 0x1 [ 188.653580][ T5923] hid-multitouch 0003:1FD2:6007.000D: item fetching failed at offset 1/5 [ 188.654533][ T5923] hid-multitouch 0003:1FD2:6007.000D: probe with driver hid-multitouch failed with error -22 [ 188.871384][ T9] usb 4-1: USB disconnect, device number 8 [ 189.020296][ T7518] chnl_net:caif_netlink_parms(): no params data found [ 189.034368][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.062239][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.063336][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.065546][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.067890][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.551356][ T5850] Bluetooth: hci5: command tx timeout [ 189.659451][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 189.689616][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 189.699680][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 189.710428][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 189.721977][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 189.793237][ T5850] Bluetooth: hci6: command tx timeout [ 191.151366][ T5837] Bluetooth: hci7: command tx timeout [ 191.631286][ T5837] Bluetooth: hci5: command tx timeout [ 191.793902][ T5837] Bluetooth: hci8: command tx timeout [ 191.871575][ T5837] Bluetooth: hci6: command tx timeout [ 193.233350][ T5837] Bluetooth: hci7: command tx timeout [ 193.711421][ T5837] Bluetooth: hci5: command tx timeout [ 193.871642][ T5837] Bluetooth: hci8: command tx timeout [ 193.951436][ T5837] Bluetooth: hci6: command tx timeout [ 195.321451][ T5837] Bluetooth: hci7: command tx timeout [ 195.951323][ T5837] Bluetooth: hci8: command tx timeout [ 196.031607][ T5837] Bluetooth: hci6: command tx timeout [ 197.391295][ T5837] Bluetooth: hci7: command tx timeout [ 198.032097][ T5837] Bluetooth: hci8: command tx timeout [ 199.398816][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.398897][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.860567][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 205.876081][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 205.877181][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 205.878475][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 205.912765][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 216.842224][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.574583][ T7518] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.574817][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.575050][ T7518] bridge_slave_0: entered allmulticast mode [ 236.578236][ T7518] bridge_slave_0: entered promiscuous mode [ 244.338134][ T5837] Bluetooth: hci9: command tx timeout [ 245.922998][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.945220][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.946425][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.947984][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.948837][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.361748][ T5850] Bluetooth: hci9: command tx timeout [ 247.230206][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.250405][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.258984][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.260482][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.277522][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.983031][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 247.999975][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 248.011591][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 248.013593][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 248.014563][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 248.446767][ T5155] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 248.461399][ T5155] Bluetooth: hci9: command tx timeout [ 248.465023][ T5155] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 248.466214][ T5155] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 248.467692][ T7572] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 248.470028][ T7572] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 250.511581][ T7572] Bluetooth: hci9: command tx timeout [ 259.631282][ T5850] Bluetooth: hci11: command tx timeout [ 259.631621][ T5850] Bluetooth: hci10: command tx timeout [ 259.631778][ T5850] Bluetooth: hci1: command tx timeout [ 259.631919][ T5850] Bluetooth: hci4: command tx timeout [ 260.849232][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.849314][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.711316][ T7572] Bluetooth: hci4: command tx timeout [ 261.711347][ T7572] Bluetooth: hci1: command tx timeout [ 261.711364][ T7572] Bluetooth: hci10: command tx timeout [ 261.711390][ T7572] Bluetooth: hci11: command tx timeout [ 263.791286][ T5850] Bluetooth: hci11: command tx timeout [ 263.791338][ T5850] Bluetooth: hci10: command tx timeout [ 263.791361][ T5850] Bluetooth: hci1: command tx timeout [ 263.791383][ T5850] Bluetooth: hci4: command tx timeout [ 265.881217][ T7572] Bluetooth: hci4: command tx timeout [ 265.881255][ T7572] Bluetooth: hci1: command tx timeout [ 265.881279][ T7572] Bluetooth: hci10: command tx timeout [ 265.881303][ T7572] Bluetooth: hci11: command tx timeout [ 266.337715][ T7572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.355046][ T7572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.369837][ T7572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 266.389070][ T7572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 266.407744][ T7572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.597723][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.597872][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.598102][ T7518] bridge_slave_1: entered allmulticast mode [ 267.630430][ T7518] bridge_slave_1: entered promiscuous mode [ 268.431287][ T7572] Bluetooth: hci0: command tx timeout [ 270.511298][ T7572] Bluetooth: hci0: command tx timeout [ 272.591479][ T7572] Bluetooth: hci0: command tx timeout [ 274.673259][ T7572] Bluetooth: hci0: command tx timeout [ 276.281068][ C1] sched: DL replenish lagged too much [ 308.293206][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.306806][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.309951][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.314718][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.315795][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.387241][ T7572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.390950][ T7572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.399465][ T7572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.431575][ T7572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.449141][ T7572] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.584922][ T7572] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 308.608144][ T7572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 308.609326][ T7572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 308.621394][ T7572] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 308.636652][ T7572] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.069275][ T5850] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 309.085260][ T5850] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 309.086382][ T5850] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 309.115770][ T5850] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 309.117335][ T5850] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 310.353097][ T7572] Bluetooth: hci2: command tx timeout [ 310.511382][ T7572] Bluetooth: hci3: command tx timeout [ 310.672595][ T7572] Bluetooth: hci5: command tx timeout [ 311.161673][ T7572] Bluetooth: hci12: command tx timeout [ 312.431545][ T5850] Bluetooth: hci2: command tx timeout [ 312.591536][ T5850] Bluetooth: hci3: command tx timeout [ 312.751489][ T5850] Bluetooth: hci5: command tx timeout [ 313.231929][ T5850] Bluetooth: hci12: command tx timeout [ 314.125911][ T5846] Bluetooth: hci7: command 0x0406 tx timeout [ 314.125967][ T5850] Bluetooth: hci8: command 0x0406 tx timeout [ 314.511680][ T5850] Bluetooth: hci2: command tx timeout [ 314.671399][ T5850] Bluetooth: hci3: command tx timeout [ 314.831308][ T5850] Bluetooth: hci5: command tx timeout [ 315.311388][ T5850] Bluetooth: hci12: command tx timeout [ 316.591726][ T5850] Bluetooth: hci2: command tx timeout [ 316.751562][ T5850] Bluetooth: hci3: command tx timeout [ 316.911601][ T5850] Bluetooth: hci5: command tx timeout [ 317.391418][ T5850] Bluetooth: hci12: command tx timeout [ 322.292240][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.292319][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.014814][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 327.032838][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 327.034265][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 327.035564][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 327.036427][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.431578][ T7572] Bluetooth: hci6: command tx timeout [ 354.511384][ T7572] Bluetooth: hci6: command tx timeout [ 355.080511][ T7572] Bluetooth: hci9: command 0x0406 tx timeout [ 356.591467][ T7572] Bluetooth: hci6: command tx timeout [ 358.671670][ T7572] Bluetooth: hci6: command tx timeout [ 367.785020][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.788268][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.789360][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.790617][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.825312][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.707938][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 368.724029][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 368.726951][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 368.728293][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 368.729194][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 369.260115][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 369.285028][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 369.286296][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 369.306224][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 369.307143][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 369.853160][ T7571] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 369.868790][ T7571] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 369.870419][ T7571] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 369.894731][ T7571] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 369.895575][ T7571] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.609242][ T59] Bluetooth: hci1: command tx timeout [ 378.609427][ T59] Bluetooth: hci14: command tx timeout [ 378.609590][ T59] Bluetooth: hci13: command tx timeout [ 378.609750][ T59] Bluetooth: hci10: command tx timeout [ 380.671441][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 380.671759][ T5846] Bluetooth: hci13: command tx timeout [ 380.671786][ T5846] Bluetooth: hci10: command tx timeout [ 380.671807][ T5846] Bluetooth: hci14: command tx timeout [ 380.671835][ T5846] Bluetooth: hci1: command tx timeout [ 382.751351][ T7572] Bluetooth: hci14: command tx timeout [ 382.751386][ T7572] Bluetooth: hci10: command tx timeout [ 382.751409][ T7572] Bluetooth: hci13: command tx timeout [ 382.754815][ T5846] Bluetooth: hci1: command tx timeout [ 383.742100][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.742183][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.831987][ T5837] Bluetooth: hci13: command tx timeout [ 384.832022][ T5837] Bluetooth: hci10: command tx timeout [ 384.832044][ T5837] Bluetooth: hci14: command tx timeout [ 384.832106][ T5846] Bluetooth: hci1: command tx timeout [ 388.479968][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 388.512053][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 388.513627][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 388.516120][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 388.517296][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 390.591312][ T5846] Bluetooth: hci11: command tx timeout [ 390.911575][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 392.681322][ T7572] Bluetooth: hci11: command tx timeout [ 394.751338][ T5846] Bluetooth: hci11: command tx timeout [ 396.831210][ T5846] Bluetooth: hci11: command tx timeout [ 414.436389][ T39] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 414.436432][ T39] Not tainted syzkaller #0 [ 414.436445][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.436460][ T39] task:kworker/0:0 state:D stack:20680 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 414.436528][ T39] Workqueue: events switchdev_deferred_process_work [ 414.436583][ T39] Call Trace: [ 414.436591][ T39] [ 414.436606][ T39] __schedule+0x16f3/0x4c20 [ 414.436664][ T39] ? __pfx___schedule+0x10/0x10 [ 414.436711][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.436743][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.436766][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.436795][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 414.436850][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.436876][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.436900][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.436935][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 414.436971][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 414.437005][ T39] ? switchdev_deferred_process_work+0xe/0x20 [ 414.437035][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.437055][ T39] ? switchdev_deferred_process_work+0xe/0x20 [ 414.437085][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 414.437116][ T39] switchdev_deferred_process_work+0xe/0x20 [ 414.437146][ T39] process_scheduled_works+0xade/0x17b0 [ 414.437208][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.437256][ T39] worker_thread+0x8a0/0xda0 [ 414.437315][ T39] kthread+0x711/0x8a0 [ 414.437353][ T39] ? __pfx_worker_thread+0x10/0x10 [ 414.437381][ T39] ? __pfx_kthread+0x10/0x10 [ 414.437420][ T39] ? __pfx_kthread+0x10/0x10 [ 414.437454][ T39] ret_from_fork+0x3fc/0x770 [ 414.437488][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 414.437524][ T39] ? __switch_to_asm+0x39/0x70 [ 414.437544][ T39] ? __switch_to_asm+0x33/0x70 [ 414.437563][ T39] ? __pfx_kthread+0x10/0x10 [ 414.437599][ T39] ret_from_fork_asm+0x1a/0x30 [ 414.437638][ T39] [ 414.437649][ T39] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 414.437663][ T39] Not tainted syzkaller #0 [ 414.437674][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.437684][ T39] task:kworker/u8:1 state:D stack:21176 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 414.437742][ T39] Workqueue: ipv6_addrconf addrconf_verify_work [ 414.437765][ T39] Call Trace: [ 414.437771][ T39] [ 414.437791][ T39] __schedule+0x16f3/0x4c20 [ 414.437848][ T39] ? __pfx___schedule+0x10/0x10 [ 414.437895][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.437926][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.437947][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.437970][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 414.438025][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.438050][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.438074][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.438108][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 414.438152][ T39] ? addrconf_verify_work+0x19/0x30 [ 414.438172][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.438193][ T39] ? addrconf_verify_work+0x19/0x30 [ 414.438220][ T39] addrconf_verify_work+0x19/0x30 [ 414.438241][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 414.438267][ T39] process_scheduled_works+0xade/0x17b0 [ 414.438328][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.438376][ T39] worker_thread+0x8a0/0xda0 [ 414.438435][ T39] kthread+0x711/0x8a0 [ 414.438472][ T39] ? __pfx_worker_thread+0x10/0x10 [ 414.438500][ T39] ? __pfx_kthread+0x10/0x10 [ 414.438539][ T39] ? __pfx_kthread+0x10/0x10 [ 414.438574][ T39] ret_from[ 414.438574][ T39] ret_from_fork+0x3fc/0x770 [ 414.438633][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 414.438671][ T39] ? __switch_to_asm+0x39/0x70 [ 414.438691][ T39] ? __switch_to_asm+0x33/0x70 [ 414.438710][ T39] ? __pfx_kthread+0x10/0x10 [ 414.438745][ T39] ret_from_fork_asm+0x1a/0x30 [ 414.438791][ T39] [ 414.438839][ T39] INFO: task kworker/u8:6:995 blocked for more than 143 seconds. [ 414.438854][ T39] Not tainted syzkaller #0 [ 414.438865][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.438875][ T39] task:kworker/u8:6 state:D stack:20408 pid:995 tgid:995 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 414.438931][ T39] Workqueue: events_unbound linkwatch_event [ 414.438964][ T39] Call Trace: [ 414.438971][ T39] [ 414.438984][ T39] __schedule+0x16f3/0x4c20 [ 414.439040][ T39] ? __pfx___schedule+0x10/0x10 [ 414.439087][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.439119][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.439140][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.439161][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 414.439216][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.439241][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.439265][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.439299][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 414.439335][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 414.439369][ T39] ? linkwatch_event+0xe/0x60 [ 414.439397][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.439417][ T39] ? linkwatch_event+0xe/0x60 [ 414.439443][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 414.439471][ T39] linkwatch_event+0xe/0x60 [ 414.439500][ T39] process_scheduled_works+0xade/0x17b0 [ 414.439557][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 414.439605][ T39] worker_thread+0x8a0/0xda0 [ 414.439659][ T39] kthread+0x711/0x8a0 [ 414.439696][ T39] ? __pfx_worker_thread+0x10/0x10 [ 414.439722][ T39] ? __pfx_kthread+0x10/0x10 [ 414.439760][ T39] ? __pfx_kthread+0x10/0x10 [ 414.439802][ T39] ret_from_fork+0x3fc/0x770 [ 414.439833][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 414.439869][ T39] ? __switch_to_asm+0x39/0x70 [ 414.439889][ T39] ? __switch_to_asm+0x33/0x70 [ 414.439908][ T39] ? __pfx_kthread+0x10/0x10 [ 414.439942][ T39] ret_from_fork_asm+0x1a/0x30 [ 414.439982][ T39] [ 414.440082][ T39] INFO: task syz.4.230:6462 blocked for more than 143 seconds. [ 414.440096][ T39] Not tainted syzkaller #0 [ 414.440107][ T39] Blocked by coredump. [ 414.440113][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.440122][ T39] task:syz.4.230 state:D stack:21192 pid:6462 tgid:6462 ppid:5842 task_flags:0x40044c flags:0x00004006 [ 414.440179][ T39] Call Trace: [ 414.440186][ T39] [ 414.440199][ T39] __schedule+0x16f3/0x4c20 [ 414.440251][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.440281][ T39] ? __pfx___schedule+0x10/0x10 [ 414.440326][ T39] ? schedule+0x91/0x360 [ 414.440355][ T39] schedule+0x165/0x360 [ 414.440383][ T39] schedule_timeout+0x9a/0x270 [ 414.440407][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 414.440444][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.440472][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.440498][ T39] ? wait_for_completion+0x267/0x5d0 [ 414.440527][ T39] wait_for_completion+0x2bf/0x5d0 [ 414.440570][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 414.440606][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 414.440637][ T39] rcu_barrier+0x463/0x570 [ 414.440670][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 414.440700][ T39] netdev_run_todo+0x327/0xea0 [ 414.440738][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 414.440764][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 414.440802][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 414.440827][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.440864][ T39] ? netdev_state_change+0x1ca/0x220 [ 414.440894][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 414.440924][ T39] tun_chr_close+0x13f/0x1c0 [ 414.440953][ T39] __fput+0x45b/0xa80 [ 414.521210][ T39] task_work_run+0x1d4/0x260 [ 414.521250][ T39] ? __pfx_task_work_run+0x10/0x10 [ 414.521275][ T39] ? do_exit+0x6b0/0x2300 [ 414.521294][ T39] ? kmem_cache_free+0x195/0x510 [ 414.521332][ T39] do_exit+0x6b5/0x2300 [ 414.521352][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 414.521389][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.521421][ T39] ? __pfx_do_exit+0x10/0x10 [ 414.521439][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 414.521465][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 414.521499][ T39] do_group_exit+0x21c/0x2d0 [ 414.521527][ T39] get_signal+0x125e/0x1310 [ 414.521570][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 414.521597][ T39] ? __pfx_get_timespec64+0x10/0x10 [ 414.521631][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 414.521677][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 414.521711][ T39] exit_to_user_mode_loop+0x75/0x110 [ 414.521741][ T39] do_syscall_64+0x2bd/0x3b0 [ 414.521770][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.521808][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.521830][ T39] ? clear_bhb_loop+0x60/0xb0 [ 414.521857][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.521880][ T39] RIP: 0033:0x7f47be9414a5 [ 414.521912][ T39] RSP: 002b:00007f47bcb6df80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 414.521936][ T39] RAX: fffffffffffffdfc RBX: 00007f47beb35fa0 RCX: 00007f47be9414a5 [ 414.521952][ T39] RDX: 00007f47bcb6dfc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.521966][ T39] RBP: 00007f47be991e19 R08: 0000000000000000 R09: 0000000000000000 [ 414.521980][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 414.521993][ T39] R13: 00007f47beb36038 R14: 00007f47beb35fa0 R15: 00007ffd534ae7a8 [ 414.522030][ T39] [ 414.522048][ T39] INFO: task syz-executor:7535 blocked for more than 143 seconds. [ 414.522064][ T39] Not tainted syzkaller #0 [ 414.522075][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.522085][ T39] task:syz-executor state:D stack:23912 pid:7535 tgid:7535 ppid:1 task_flags:0x400140 flags:0x00004006 [ 414.522145][ T39] Call Trace: [ 414.522153][ T39] [ 414.522166][ T39] __schedule+0x16f3/0x4c20 [ 414.522222][ T39] ? __pfx___schedule+0x10/0x10 [ 414.522270][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.522302][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.522323][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.522346][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 414.522401][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.522427][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.522450][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.522470][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.522512][ T39] ? ip_tunnel_init_net+0x2ab/0x800 [ 414.522551][ T39] ? ip_tunnel_init_net+0x2ab/0x800 [ 414.522572][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.522600][ T39] ip_tunnel_init_net+0x2ab/0x800 [ 414.522631][ T39] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 414.522674][ T39] ops_init+0x35c/0x5c0 [ 414.522714][ T39] setup_net+0x10c/0x320 [ 414.522739][ T39] ? copy_net_ns+0x304/0x4d0 [ 414.522764][ T39] ? __pfx_setup_net+0x10/0x10 [ 414.522800][ T39] ? __mutex_rt_init+0x3b/0x50 [ 414.522830][ T39] copy_net_ns+0x31b/0x4d0 [ 414.522860][ T39] create_new_namespaces+0x3f3/0x720 [ 414.522894][ T39] ? security_capable+0x7e/0x2e0 [ 414.522933][ T39] unshare_nsproxy_namespaces+0x11c/0x170 [ 414.522966][ T39] ksys_unshare+0x4c8/0x8c0 [ 414.523007][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 414.523040][ T39] ? rt_spin_unlock+0x65/0x80 [ 414.523076][ T39] __x64_sys_unshare+0x38/0x50 [ 414.523108][ T39] do_syscall_64+0xfa/0x3b0 [ 414.523135][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.523162][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.523185][ T39] ? clear_bhb_loop+0x60/0xb0 [ 414.523212][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.523233][ T39] RIP: 0033:0x7f64ea7f03e7 [ 414.523251][ T39] RSP: 002b:00007ffeed445558 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 414.523272][ T39] RAX: ffffffffffffffda RBX: 00007f64eaa15f40 RCX: 00007f64ea7f03e7 [ 414.523288][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 414.523302][ T39] RBP: 00007f64eaa167b8 R08: 0000000000000000 R09: 0000000000000000 [ 414.523315][ T39] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 414.523327][ T39] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.523359][ T39] [ 414.523371][ T39] INFO: task syz-executor:7554 blocked for more than 143 seconds. [ 414.523386][ T39] Not tainted syzkaller #0 [ 414.523396][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.523405][ T39] task:syz-executor state:D stack:23912 pid:7554 tgid:7554 ppid:1 task_flags:0x400140 flags:0x00004006 [ 414.523463][ T39] Call Trace: [ 414.523470][ T39] [ 414.523482][ T39] __schedule+0x16f3/0x4c20 [ 414.523520][ T39] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 414.523558][ T39] ? __pfx___schedule+0x10/0x10 [ 414.523605][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.523636][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.523657][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.523679][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 414.523735][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.523759][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.523789][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.523810][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.523851][ T39] ? ops_undo_list+0x2a4/0x990 [ 414.523882][ T39] ? synchronize_rcu+0x11a/0x310 [ 414.523902][ T39] ? __pfx_synchronize_rcu+0x10/0x10 [ 414.523930][ T39] ? ops_undo_list+0x2a4/0x990 [ 414.523954][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.523982][ T39] ops_undo_list+0x2a4/0x990 [ 414.524018][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 414.524043][ T39] ? ops_init+0x469/0x5c0 [ 414.524081][ T39] setup_net+0x2d3/0x320 [ 414.524110][ T39] ? __pfx_setup_net+0x10/0x10 [ 414.524138][ T39] ? __mutex_rt_init+0x3b/0x50 [ 414.524168][ T39] copy_net_ns+0x31b/0x4d0 [ 414.524199][ T39] create_new_namespaces+0x3f3/0x720 [ 414.524231][ T39] ? security_capable+0x7e/0x2e0 [ 414.524275][ T39] unshare_nsproxy_namespaces+0x11c/0x170 [ 414.524313][ T39] ksys_unshare+0x4c8/0x8c0 [ 414.524353][ T39] ? __pfx_ksys_unshare+0x10/0x10 [ 414.524386][ T39] ? rt_spin_unlock+0x65/0x80 [ 414.524420][ T39] __x64_sys_unshare+0x38/0x50 [ 414.524452][ T39] do_syscall_64+0xfa/0x3b0 [ 414.524479][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.524506][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.524527][ T39] ? clear_bhb_loop+0x60/0xb0 [ 414.524554][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.524576][ T39] RIP: 0033:0x7f8a8f6503e7 [ 414.524593][ T39] RSP: 002b:00007ffe06dfa488 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 414.524615][ T39] RAX: ffffffffffffffda RBX: 00007f8a8f875f40 RCX: 00007f8a8f6503e7 [ 414.524631][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 414.524644][ T39] RBP: 00007f8a8f8767b8 R08: 0000000000000000 R09: 0000000000000000 [ 414.524658][ T39] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 414.524671][ T39] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 414.524704][ T39] [ 414.524713][ T39] INFO: task syz-executor:7560 blocked for more than 143 seconds. [ 414.524727][ T39] Not tainted syzkaller #0 [ 414.524738][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.524747][ T39] task:syz-executor state:D stack:26920 pid:7560 tgid:7560 ppid:1 task_flags:0x400140 flags:0x00004004 [ 414.524824][ T39] Call Trace: [ 414.524831][ T39] [ 414.524845][ T39] __schedule+0x16f3/0x4c20 [ 414.524893][ T39] ? __kernel_text_address+0xd/0x40 [ 414.524921][ T39] ? __pfx___schedule+0x10/0x10 [ 414.524969][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.525000][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.525021][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.525042][ T39] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 414.525098][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.525123][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.525146][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.525180][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.525212][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 414.525241][ T39] ? bpf_lsm_capable+0x9/0x20 [ 414.525268][ T39] ? security_capable+0x7e/0x2e0 [ 414.525303][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 414.525327][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.525348][ T39] ? rtnl_newlink+0x8db/0x1c70 [ 414.525378][ T39] rtnl_newlink+0x8db/0x1c70 [ 414.525419][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 414.525452][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.525491][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.525533][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.525586][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 414.525621][ T39] ? is_bpf_text_address+0x292/0x2b0 [ 414.525650][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 414.525690][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.525748][ T39] ? __pfx_rtnl_newlink+0x10/0x10 [ 414.525780][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 414.525806][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.525837][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 414.525863][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.525909][ T39] netlink_rcv_skb+0x205/0x470 [ 414.525934][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.525963][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.525991][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.526031][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.526067][ T39] netlink_unicast+0x843/0xa10 [ 414.526101][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 414.526128][ T39] ? netlink_sendmsg+0x642/0xb30 [ 414.526152][ T39] ? skb_put+0x11b/0x210 [ 414.526186][ T39] netlink_sendmsg+0x805/0xb30 [ 414.526224][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.526262][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.526283][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.526311][ T39] __sock_sendmsg+0x219/0x270 [ 414.526340][ T39] __sys_sendto+0x3c7/0x520 [ 414.526372][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 414.526415][ T39] ? fput_close_sync+0x119/0x200 [ 414.526454][ T39] ? __pfx_fput_close_sync+0x10/0x10 [ 414.526478][ T39] ? rt_spin_unlock+0x65/0x80 [ 414.526506][ T39] __x64_sys_sendto+0xde/0x100 [ 414.526540][ T39] do_syscall_64+0xfa/0x3b0 [ 414.526569][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.526595][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.526617][ T39] ? clear_bhb_loop+0x60/0xb0 [ 414.526644][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.526665][ T39] RIP: 0033:0x7fd694c10a7c [ 414.526682][ T39] RSP: 002b:00007ffc10e26870 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 414.526703][ T39] RAX: ffffffffffffffda RBX: 00007fd695964620 RCX: 00007fd694c10a7c [ 414.526720][ T39] RDX: 000000000000002c RSI: 00007fd695964670 RDI: 0000000000000003 [ 414.526735][ T39] RBP: 0000000000000000 R08: 00007ffc10e268c4 R09: 000000000000000c [ 414.526748][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 414.526761][ T39] R13: 0000000000000000 R14: 00007fd695964670 R15: 0000000000000000 [ 414.526800][ T39] [ 414.526810][ T39] INFO: task syz-executor:7579 blocked for more than 143 seconds. [ 414.526825][ T39] Not tainted syzkaller #0 [ 414.526835][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.526845][ T39] task:syz-executor state:D stack:26952 pid:7579 tgid:7579 ppid:1 task_flags:0x400140 flags:0x00004004 [ 414.526908][ T39] Call Trace: [ 414.526914][ T39] [ 414.526927][ T39] __schedule+0x16f3/0x4c20 [ 414.526984][ T39] ? __pfx___schedule+0x10/0x10 [ 414.527031][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.527063][ T39] rt_mutex_schedule+0x77/0xf0 [ 414.527084][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 414.527106][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 414.527161][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 414.527186][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 414.527210][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 414.527229][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.527276][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 414.527322][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 414.527357][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 414.527386][ T39] mutex_lock_nested+0x16a/0x1d0 [ 414.527419][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 414.527464][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 414.527533][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 414.527566][ T39] rtnetlink_rcv_msg+0x7cc/0xb70 [ 414.527590][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.527621][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 414.527656][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.527702][ T39] netlink_rcv_skb+0x205/0x470 [ 414.527726][ T39] ? __lock_acquire+0xab9/0xd20 [ 414.527754][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.527788][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 414.527828][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.527864][ T39] netlink_unicast+0x843/0xa10 [ 414.527897][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 414.527923][ T39] ? netlink_sendmsg+0x642/0xb30 [ 414.527952][ T39] ? skb_put+0x11b/0x210 [ 414.527985][ T39] netlink_sendmsg+0x805/0xb30 [ 414.528024][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.528061][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.528082][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.528112][ T39] __sock_sendmsg+0x219/0x270 [ 414.528139][ T39] __sys_sendto+0x3c7/0x520 [ 414.528175][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 414.528234][ T39] ? exc_page_fault+0x76/0xf0 [ 414.528266][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 414.528298][ T39] __x64_sys_sendto+0xde/0x100 [ 414.528330][ T39] do_syscall_64+0xfa/0x3b0 [ 414.528358][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.528384][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.528405][ T39] ? clear_bhb_loop+0x60/0xb0 [ 414.528433][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.528454][ T39] RIP: 0033:0x7f315d330a7c [ 414.528471][ T39] RSP: 002b:00007ffedd167cf0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 414.528493][ T39] RAX: ffffffffffffffda RBX: 00007f315e084620 RCX: 00007f315d330a7c [ 414.528509][ T39] RDX: 0000000000000028 RSI: 00007f315e084670 RDI: 0000000000000003 [ 414.528523][ T39] RBP: 0000000000000000 R08: 00007ffedd167d44 R09: 000000000000000c [ 414.528537][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 414.528550][ T39] R13: 0000000000000000 R14: 00007f315e084670 R15: 0000000000000000 [ 414.528584][ T39] [ 414.528616][ T39] [ 414.528616][ T39] Showing all locks held in the system: [ 414.528627][ T39] 3 locks held by kworker/0:0/9: [ 414.528639][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.528698][ T39] #1: ffffc900000e7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.528754][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 414.528823][ T39] 3 locks held by kworker/u8:1/13: [ 414.528835][ T39] #0: ffff888030152138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.528891][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.528948][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 414.529000][ T39] 4 locks held by pr/legacy/17: [ 414.529013][ T39] 8 locks held by ktimers/1/29: [ 414.529025][ T39] 4 locks held by kworker/1:0/31: [ 414.529037][ T39] #0: ffff8880348d0538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.529099][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.529175][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 414.529231][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 414.529288][ T39] 1 lock held by khungtaskd/39: [ 414.529300][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 414.529361][ T39] 3 locks held by kworker/u8:6/995: [ 414.529373][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.529429][ T39] #1: ffffc900048afbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.529484][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 414.529564][ T39] 1 lock held by syslogd/5189: [ 414.529576][ T39] #0: ffff8880321bafd8 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 414.529631][ T39] 3 locks held by klogd/5196: [ 414.529644][ T39] 2 locks held by getty/5596: [ 414.529655][ T39] #0: ffff88823bf688a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 414.529715][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 414.529782][ T39] 4 locks held by kworker/0:4/5923: [ 414.529795][ T39] 1 lock held by syz.4.230/6462: [ 414.529807][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 414.529859][ T39] 1 lock held by syz.2.660/7462: [ 414.529871][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 414.529922][ T39] 1 lock held by syz.1.669/7485: [ 414.529933][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 414.529984][ T39] 1 lock held by syz.0.672/7493: [ 414.529996][ T39] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 414.530046][ T39] 4 locks held by kworker/1:7/7507: [ 414.530058][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.530115][ T39] #1: ffffc900046c7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.530172][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 414.530227][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 414.530283][ T39] 4 locks held by kworker/1:9/7515: [ 414.530296][ T39] 1 lock held by syz-executor/7518: [ 414.530308][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 414.530366][ T39] 4 locks held by kworker/1:11/7528: [ 414.530378][ T39] #0: ffff88805ac20938 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.530439][ T39] #1: ffffc90003a97bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.530497][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 414.530552][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 414.530609][ T39] 1 lock held by syz-executor/7532: [ 414.530621][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 414.530677][ T39] 2 locks held by syz-executor/7535: [ 414.530689][ T39] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 414.530741][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 414.530799][ T39] 2 locks held by syz-executor/7537: [ 414.530811][ T39] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 414.530863][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 414.530923][ T39] 1 lock held by syz.3.690/7543: [ 414.530935][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 414.921534][ T39] 4 locks held by kworker/1:12/7547: [ 414.921557][ T39] #0: ffff88805ad52d38 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 414.921630][ T39] #1: ffffc90006657bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 414.921688][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 414.921744][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 414.921803][ T39] 2 locks held by syz-executor/7554: [ 414.921815][ T39] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 414.921870][ T39] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 414.921928][ T39] 1 lock held by syz-executor/7560: [ 414.921940][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 414.921995][ T39] 1 lock held by syz-executor/7579: [ 414.922008][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922071][ T39] 1 lock held by syz-executor/7585: [ 414.922082][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922143][ T39] 1 lock held by syz-executor/7586: [ 414.922155][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922216][ T39] 1 lock held by syz-executor/7589: [ 414.922228][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922288][ T39] 1 lock held by syz-executor/7591: [ 414.922301][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922363][ T39] 1 lock held by syz-executor/7599: [ 414.922375][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922438][ T39] 1 lock held by syz-executor/7605: [ 414.922457][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922519][ T39] 1 lock held by syz-executor/7608: [ 414.922531][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922592][ T39] 1 lock held by syz-executor/7610: [ 414.922603][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922664][ T39] 1 lock held by syz-executor/7612: [ 414.922676][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922738][ T39] 2 locks held by kworker/u8:5/7614: [ 414.922751][ T39] 1 lock held by syz-executor/7622: [ 414.922763][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 414.922827][ T39] [ 414.922833][ T39] ============================================= [ 414.922833][ T39] [ 414.922857][ T39] NMI backtrace for cpu 0 [ 414.922889][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.922934][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.922957][ T39] Call Trace: [ 414.922973][ T39] [ 414.922981][ T39] dump_stack_lvl+0x189/0x250 [ 414.923019][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.923051][ T39] ? __pfx__printk+0x10/0x10 [ 414.923088][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 414.923116][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 414.923142][ T39] ? __pfx__printk+0x10/0x10 [ 414.923170][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 414.923200][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 414.923227][ T39] watchdog+0xf93/0xfe0 [ 414.923262][ T39] ? watchdog+0x1de/0xfe0 [ 414.923296][ T39] kthread+0x711/0x8a0 [ 414.923332][ T39] ? __pfx_watchdog+0x10/0x10 [ 414.923359][ T39] ? __pfx_kthread+0x10/0x10 [ 414.923397][ T39] ? __pfx_kthread+0x10/0x10 [ 414.923430][ T39] ret_from_fork+0x3fc/0x770 [ 414.923468][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 414.923503][ T39] ? __switch_to_asm+0x39/0x70 [ 414.923522][ T39] ? __switch_to_asm+0x33/0x70 [ 414.923541][ T39] ? __pfx_kthread+0x10/0x10 [ 414.923575][ T39] ret_from_fork_asm+0x1a/0x30 [ 414.923613][ T39] [ 414.923621][ T39] Sending NMI from CPU 0 to CPUs 1: [ 414.923650][ C1] NMI backtrace for cpu 1 [ 414.923664][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.923684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.923701][ C1] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 414.923733][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 fc 8d 78 00 48 c7 c3 18 14 f7 91 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d d9 da 50 10 74 11 83 e0 04 c1 e8 02 5b [ 414.923748][ C1] RSP: 0018:ffffc90000a3e518 EFLAGS: 00000a02 [ 414.923764][ C1] RAX: 0000000000000000 RBX: ffff8880b8933418 RCX: 00a51d1af0a51d00 [ 414.923777][ C1] RDX: 0000000000000000 RSI: ffffffff8b620c60 RDI: ffffffff8b620c20 [ 414.923790][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172b165 [ 414.923802][ C1] R10: ffffc90000a3e658 R11: ffffffff81aae030 R12: 1ffff92000147cc1 [ 414.923816][ C1] R13: ffffc90000a3e640 R14: ffffffff8d24fd18 R15: dffffc0000000000 [ 414.923830][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 414.923845][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.923857][ C1] CR2: 00007faf3e4d2000 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 414.923874][ C1] Call Trace: [ 414.923880][ C1] [ 414.923886][ C1] ? nf_hook_slow+0xc5/0x220 [ 414.923909][ C1] ? unwind_next_frame+0xa5/0x2390 [ 414.923933][ C1] unwind_next_frame+0xd4/0x2390 [ 414.923962][ C1] ? unwind_next_frame+0xa5/0x2390 [ 414.923987][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 414.924016][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.924036][ C1] arch_stack_walk+0x11c/0x150 [ 414.924066][ C1] ? nf_hook_slow+0xc5/0x220 [ 414.924090][ C1] stack_trace_save+0x9c/0xe0 [ 414.924108][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 414.924125][ C1] ? do_raw_spin_lock+0x121/0x290 [ 414.924152][ C1] kasan_save_track+0x3e/0x80 [ 414.924172][ C1] ? kasan_save_track+0x3e/0x80 [ 414.924191][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 414.924211][ C1] ? kmem_cache_alloc_noprof+0x143/0x310 [ 414.924234][ C1] ? dst_alloc+0x105/0x170 [ 414.924260][ C1] ? ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 414.924288][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 414.924314][ C1] ? ip_route_output_flow+0x2a/0x150 [ 414.924338][ C1] ? ip_route_me_harder+0x6d2/0x1030 [ 414.924354][ C1] ? synproxy_send_tcp+0x359/0x6c0 [ 414.924376][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 414.924398][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 414.924425][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 414.924452][ C1] ? nft_do_chain+0x40c/0x1920 [ 414.924476][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 414.924501][ C1] ? nf_hook_slow+0xc5/0x220 [ 414.924542][ C1] ? dst_alloc+0x105/0x170 [ 414.924569][ C1] __kasan_slab_alloc+0x6c/0x80 [ 414.924590][ C1] ? dst_alloc+0x105/0x170 [ 414.924615][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 414.924642][ C1] dst_alloc+0x105/0x170 [ 414.924670][ C1] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 414.924709][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 414.924737][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 414.924764][ C1] ? __lock_acquire+0xab9/0xd20 [ 414.924788][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 414.924820][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 414.924840][ C1] ip_route_output_flow+0x2a/0x150 [ 414.924864][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 414.924883][ C1] ip_route_me_harder+0x6d2/0x1030 [ 414.924906][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 414.924945][ C1] synproxy_send_tcp+0x359/0x6c0 [ 414.924973][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 414.925004][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 414.925027][ C1] ? nft_tproxy_eval+0x6e8/0x1c00 [ 414.925052][ C1] ? synproxy_pernet+0x45/0x270 [ 414.925082][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 414.925112][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 414.925141][ C1] ? nf_ip_checksum+0x13c/0x510 [ 414.925170][ C1] nft_synproxy_do_eval+0x345/0x570 [ 414.925201][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 414.925228][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 414.925264][ C1] nft_do_chain+0x40c/0x1920 [ 414.925298][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 414.925328][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 414.925356][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 414.925375][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 414.925397][ C1] nft_do_chain_inet+0x25d/0x340 [ 414.925423][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 414.925457][ C1] ? NF_HOOK+0x9a/0x3a0 [ 414.925477][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 414.925505][ C1] nf_hook_slow+0xc5/0x220 [ 414.925529][ C1] NF_HOOK+0x206/0x3a0 [ 414.925550][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 414.925571][ C1] ? NF_HOOK+0x9a/0x3a0 [ 414.925590][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 414.925608][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 414.925631][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 414.925653][ C1] ? skb_dst+0x4f/0xd0 [ 414.925674][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 414.925708][ C1] NF_HOOK+0x309/0x3a0 [ 414.925729][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 414.925749][ C1] ? NF_HOOK+0x9a/0x3a0 [ 414.925768][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 414.925793][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 414.925820][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 414.925839][ C1] __netif_receive_skb+0x143/0x380 [ 414.925858][ C1] ? rt_spin_unlock+0x65/0x80 [ 414.925877][ C1] ? process_backlog+0x27b/0x900 [ 414.925897][ C1] process_backlog+0x31e/0x900 [ 414.925923][ C1] __napi_poll+0xb6/0x540 [ 414.925944][ C1] net_rx_action+0x707/0xe00 [ 414.925963][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.925994][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 414.926034][ C1] handle_softirqs+0x22c/0x710 [ 414.926061][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.926089][ C1] run_ktimerd+0xcf/0x190 [ 414.926113][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 414.926139][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 414.926161][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 414.926183][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 414.926204][ C1] smpboot_thread_fn+0x542/0xa60 [ 414.926227][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 414.926253][ C1] kthread+0x711/0x8a0 [ 414.926281][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 414.926303][ C1] ? __pfx_kthread+0x10/0x10 [ 414.926332][ C1] ? __pfx_kthread+0x10/0x10 [ 414.926358][ C1] ret_from_fork+0x3fc/0x770 [ 414.926382][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 414.926408][ C1] ? __switch_to_asm+0x39/0x70 [ 414.926424][ C1] ? __switch_to_asm+0x33/0x70 [ 414.926440][ C1] ? __pfx_kthread+0x10/0x10 [ 414.926468][ C1] ret_from_fork_asm+0x1a/0x30 [ 414.926494][ C1] [ 414.926653][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 414.926670][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 414.926694][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.926706][ T39] Call Trace: [ 414.926714][ T39] [ 414.926722][ T39] dump_stack_lvl+0x99/0x250 [ 414.926755][ T39] ? __asan_memcpy+0x40/0x70 [ 414.926783][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.926815][ T39] ? __pfx__printk+0x10/0x10 [ 414.926853][ T39] vpanic+0x281/0x750 [ 414.926888][ T39] ? __pfx_vpanic+0x10/0x10 [ 414.926917][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 414.926940][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.926979][ T39] panic+0xb9/0xc0 [ 414.927009][ T39] ? __pfx_panic+0x10/0x10 [ 414.927043][ T39] ? irq_work_queue+0xc3/0x140 [ 414.927075][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 414.927101][ T39] watchdog+0xfd2/0xfe0 [ 414.927133][ T39] ? watchdog+0x1de/0xfe0 [ 414.927168][ T39] kthread+0x711/0x8a0 [ 414.927203][ T39] ? __pfx_watchdog+0x10/0x10 [ 414.927228][ T39] ? __pfx_kthread+0x10/0x10 [ 414.927264][ T39] ? __pfx_kthread+0x10/0x10 [ 414.927298][ T39] ret_from_fork+0x3fc/0x770 [ 414.927329][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 414.927365][ T39] ? __switch_to_asm+0x39/0x70 [ 414.927384][ T39] ? __switch_to_asm+0x33/0x70 [ 414.927403][ T39] ? __pfx_kthread+0x10/0x10 [ 414.927460][ T39] ret_from_fork_asm+0x1a/0x30 [ 414.927498][ T39] [ 414.927819][ T39] Kernel Offset: disabled