last executing test programs: 2m42.146391122s ago: executing program 0 (id=278): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) 2m41.799796624s ago: executing program 0 (id=282): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 2m41.392305229s ago: executing program 0 (id=284): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f00000018c0)=""/4154, 0x103a}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000580)=""/121, 0x7c}], 0x6}, 0x40000000) 2m40.333742216s ago: executing program 0 (id=288): ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 2m39.811872979s ago: executing program 0 (id=291): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRES16=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 2m38.724177477s ago: executing program 0 (id=295): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000040)={0x0, 0x40, 0xfffffd3e, 0x3d50, 0x2, 0x400008, 0x1, 0x9f, 0xffffffff, 0xe, 0xffffffff, 0x1, 0x0, 0x0, 0x0}) 2m38.158731542s ago: executing program 32 (id=295): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000040)={0x0, 0x40, 0xfffffd3e, 0x3d50, 0x2, 0x400008, 0x1, 0x9f, 0xffffffff, 0xe, 0xffffffff, 0x1, 0x0, 0x0, 0x0}) 2m35.566410761s ago: executing program 2 (id=312): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f00000018c0)=""/4154, 0x103a}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000580)=""/121, 0x7c}], 0x6}, 0x40000000) 2m34.450286301s ago: executing program 2 (id=321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) sched_setaffinity(0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2m33.378106015s ago: executing program 2 (id=326): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m32.168161061s ago: executing program 2 (id=332): syz_emit_vhci(0x0, 0x7) 2m32.065626202s ago: executing program 2 (id=333): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m30.094390233s ago: executing program 2 (id=337): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x384903, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2m14.975759476s ago: executing program 33 (id=337): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842c"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x384903, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1m54.918031483s ago: executing program 3 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc800, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0xb9, 0x1, 0xe, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x18, 0x5, 0x84, 0xfc, 0x3, 0x2, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5fffffffffe, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68fc, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe], 0x100000, 0x202}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.622241106s ago: executing program 4 (id=429): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 1m54.606880708s ago: executing program 1 (id=430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) 1m54.055367575s ago: executing program 3 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x50) write$P9_RLINK(r2, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x25, 0x2, @void}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r9, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m50.802874431s ago: executing program 1 (id=432): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0x2d, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x80000204}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 1m50.801878315s ago: executing program 4 (id=433): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m50.772822843s ago: executing program 3 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x88, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x88}}, 0x20000014) 1m50.25035913s ago: executing program 4 (id=435): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, 0x0) 1m50.17536673s ago: executing program 1 (id=436): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x44014) 1m49.978472262s ago: executing program 3 (id=437): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) 1m49.398169584s ago: executing program 3 (id=438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m49.175027036s ago: executing program 1 (id=439): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff3}, {}, {0xffe0, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) 1m48.432957878s ago: executing program 1 (id=440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) 1m47.351629328s ago: executing program 4 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m47.24211201s ago: executing program 3 (id=442): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 1m47.057829706s ago: executing program 4 (id=443): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m46.70198304s ago: executing program 4 (id=444): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0x2d, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x80000204}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 1m16.208210513s ago: executing program 1 (id=445): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[], "235d6c8f833b40b4"}}}}}, 0x0) 1m0.348733652s ago: executing program 34 (id=442): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) 31.056733467s ago: executing program 35 (id=444): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) socket$inet6(0x2d, 0x2, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x80000204}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x15, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0x10}) io_uring_enter(r1, 0x47bc, 0x20, 0x0, 0x0, 0x0) 0s ago: executing program 36 (id=445): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[], "235d6c8f833b40b4"}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. [ 97.375512][ T5825] cgroup: Unknown subsys name 'net' [ 97.670942][ T5825] cgroup: Unknown subsys name 'cpuset' [ 97.734453][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.884498][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.442713][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.460381][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.461427][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.462957][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.487775][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.499355][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.510405][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.526360][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.534773][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.546598][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.547479][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.549112][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.550166][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.552032][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.560211][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.561621][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.577856][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.578673][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.580747][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.581755][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.613160][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.617559][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.618388][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.619538][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.621229][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.719997][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 105.797716][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 105.963303][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 105.972315][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 106.055485][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 106.525808][ T59] Bluetooth: hci2: command tx timeout [ 106.565950][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.567306][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.567950][ T5854] bridge_slave_0: entered allmulticast mode [ 106.570620][ T5854] bridge_slave_0: entered promiscuous mode [ 106.605232][ T59] Bluetooth: hci3: command tx timeout [ 106.605352][ T59] Bluetooth: hci1: command tx timeout [ 106.684046][ T5855] Bluetooth: hci0: command tx timeout [ 106.684242][ T5855] Bluetooth: hci4: command tx timeout [ 106.732028][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.732193][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.732425][ T5854] bridge_slave_1: entered allmulticast mode [ 106.751150][ T5854] bridge_slave_1: entered promiscuous mode [ 106.973449][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.979235][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.979799][ T5850] bridge_slave_0: entered allmulticast mode [ 106.982817][ T5850] bridge_slave_0: entered promiscuous mode [ 107.245406][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.245511][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.245652][ T5850] bridge_slave_1: entered allmulticast mode [ 107.248147][ T5850] bridge_slave_1: entered promiscuous mode [ 107.348928][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.691875][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.692175][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.692337][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.692962][ T5842] bridge_slave_0: entered allmulticast mode [ 107.698117][ T5842] bridge_slave_0: entered promiscuous mode [ 107.711319][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.712067][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.712388][ T5843] bridge_slave_0: entered allmulticast mode [ 107.723523][ T5843] bridge_slave_0: entered promiscuous mode [ 107.836775][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.836937][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.837162][ T5844] bridge_slave_0: entered allmulticast mode [ 107.840208][ T5844] bridge_slave_0: entered promiscuous mode [ 107.936236][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.936404][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.936622][ T5842] bridge_slave_1: entered allmulticast mode [ 107.939950][ T5842] bridge_slave_1: entered promiscuous mode [ 108.016775][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.016983][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.017269][ T5843] bridge_slave_1: entered allmulticast mode [ 108.020205][ T5843] bridge_slave_1: entered promiscuous mode [ 108.026043][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.026266][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.026401][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.026572][ T5844] bridge_slave_1: entered allmulticast mode [ 108.030684][ T5844] bridge_slave_1: entered promiscuous mode [ 108.287418][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.377893][ T5854] team0: Port device team_slave_0 added [ 108.605446][ T59] Bluetooth: hci2: command tx timeout [ 108.684098][ T59] Bluetooth: hci1: command tx timeout [ 108.684147][ T59] Bluetooth: hci3: command tx timeout [ 108.697295][ T5854] team0: Port device team_slave_1 added [ 108.703548][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.719213][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.763967][ T5855] Bluetooth: hci4: command tx timeout [ 108.764009][ T5855] Bluetooth: hci0: command tx timeout [ 108.798852][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.869686][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.878908][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.881763][ T5850] team0: Port device team_slave_0 added [ 108.887341][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.101323][ T5850] team0: Port device team_slave_1 added [ 109.186827][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.186841][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.186858][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.775096][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.775116][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.775144][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.787428][ T5842] team0: Port device team_slave_0 added [ 109.797513][ T5843] team0: Port device team_slave_0 added [ 109.910098][ T5844] team0: Port device team_slave_0 added [ 109.919977][ T5842] team0: Port device team_slave_1 added [ 109.930329][ T5843] team0: Port device team_slave_1 added [ 109.959046][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.959065][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.959085][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.962044][ T5844] team0: Port device team_slave_1 added [ 110.157514][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.157533][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.157560][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.587359][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.587378][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.587406][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.589084][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.589098][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.589125][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.683815][ T59] Bluetooth: hci2: command tx timeout [ 110.707137][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.707149][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.707165][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.708449][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.708464][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.708492][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.709578][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.709590][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.709617][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.763800][ T59] Bluetooth: hci3: command tx timeout [ 110.763846][ T59] Bluetooth: hci1: command tx timeout [ 110.812324][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.812345][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.812371][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.843978][ T5855] Bluetooth: hci0: command tx timeout [ 110.844017][ T5855] Bluetooth: hci4: command tx timeout [ 110.899312][ T5854] hsr_slave_0: entered promiscuous mode [ 110.901904][ T5854] hsr_slave_1: entered promiscuous mode [ 111.132528][ T5850] hsr_slave_0: entered promiscuous mode [ 111.133462][ T5850] hsr_slave_1: entered promiscuous mode [ 111.136420][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 111.136528][ T5850] Cannot create hsr debugfs directory [ 111.846628][ T5843] hsr_slave_0: entered promiscuous mode [ 111.848146][ T5843] hsr_slave_1: entered promiscuous mode [ 111.849228][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 111.849255][ T5843] Cannot create hsr debugfs directory [ 112.041594][ T5842] hsr_slave_0: entered promiscuous mode [ 112.042738][ T5842] hsr_slave_1: entered promiscuous mode [ 112.043482][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 112.043566][ T5842] Cannot create hsr debugfs directory [ 112.076487][ T5844] hsr_slave_0: entered promiscuous mode [ 112.078521][ T5844] hsr_slave_1: entered promiscuous mode [ 112.079613][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 112.079640][ T5844] Cannot create hsr debugfs directory [ 112.763992][ T59] Bluetooth: hci2: command tx timeout [ 112.845026][ T59] Bluetooth: hci1: command tx timeout [ 112.845069][ T59] Bluetooth: hci3: command tx timeout [ 112.924449][ T5855] Bluetooth: hci4: command tx timeout [ 112.924492][ T5855] Bluetooth: hci0: command tx timeout [ 113.909265][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.960109][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.003315][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.061183][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.232060][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.272194][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.319631][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.388847][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.620654][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.664880][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.710517][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.774996][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.978287][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.022403][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.069718][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.152808][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.361762][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.419298][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.423085][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.492552][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.535579][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.673088][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.742233][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.765423][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.766047][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.836315][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.836609][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.913368][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.980932][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.986317][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.987523][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.058072][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.058382][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.167525][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.209219][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.251470][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.251796][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.318896][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.319161][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.444895][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.537644][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.552241][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.552629][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.677764][ T4505] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.678023][ T4505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.766292][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.856955][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.857216][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.908238][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.908413][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.970352][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.361129][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.436698][ T5854] veth0_vlan: entered promiscuous mode [ 117.570834][ T5854] veth1_vlan: entered promiscuous mode [ 117.687119][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.828390][ T5850] veth0_vlan: entered promiscuous mode [ 117.940174][ T5850] veth1_vlan: entered promiscuous mode [ 117.959117][ T5854] veth0_macvtap: entered promiscuous mode [ 118.026162][ T5854] veth1_macvtap: entered promiscuous mode [ 118.066186][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.136432][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.180184][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.232747][ T5850] veth0_macvtap: entered promiscuous mode [ 118.250813][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.324533][ T5850] veth1_macvtap: entered promiscuous mode [ 118.360560][ T3549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.377333][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.393393][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.412335][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.533610][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.591768][ T5842] veth0_vlan: entered promiscuous mode [ 118.659253][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.756047][ T5844] veth0_vlan: entered promiscuous mode [ 118.796261][ T5842] veth1_vlan: entered promiscuous mode [ 118.802193][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.846180][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.895869][ T3549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.907843][ T3549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.930824][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.930848][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.969941][ T5844] veth1_vlan: entered promiscuous mode [ 119.053191][ T5843] veth0_vlan: entered promiscuous mode [ 119.152564][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.152587][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.234588][ T5843] veth1_vlan: entered promiscuous mode [ 119.369724][ T5842] veth0_macvtap: entered promiscuous mode [ 119.426867][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.426890][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.480630][ T5842] veth1_macvtap: entered promiscuous mode [ 119.511059][ T5844] veth0_macvtap: entered promiscuous mode [ 119.610353][ T5844] veth1_macvtap: entered promiscuous mode [ 119.640115][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.640139][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.734603][ T5843] veth0_macvtap: entered promiscuous mode [ 119.746863][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.846705][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.848528][ T5843] veth1_macvtap: entered promiscuous mode [ 119.907914][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.938449][ T1341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.952637][ T1341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.973218][ T1341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.982573][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.044994][ T1341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.129371][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.420147][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.479935][ T1105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.496740][ T1105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.500806][ T1105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.070451][ T5900] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 121.070487][ T5900] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.074853][ T5900] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 121.074885][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.074907][ T5900] usb 2-1: Product: syz [ 121.074922][ T5900] usb 2-1: Manufacturer: syz [ 121.074937][ T5900] usb 2-1: SerialNumber: syz [ 121.107606][ T5900] usb 2-1: config 0 descriptor?? [ 121.214211][ T5900] usb 2-1: selecting invalid altsetting 0 [ 121.455869][ T1105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.506893][ T5900] usb 2-1: USB disconnect, device number 2 [ 121.522999][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.785223][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.179767][ T5969] block nbd0: Attempted send on invalid socket [ 122.179904][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 122.184052][ T5969] EXT4-fs (nbd0): unable to read superblock [ 122.721334][ T1120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.767668][ T1120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.146698][ T1120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.287643][ T1120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.369828][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.657164][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.657192][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.063807][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.063828][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.113701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.349017][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.349043][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.493832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.495645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.495973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.496113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.517276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.517531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.517585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.517697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.517747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 124.862701][ T3549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.862717][ T3549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.172495][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.172518][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.256982][ T5985] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 126.480913][ T4505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.480939][ T4505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.386978][ T6002] block nbd2: Attempted send on invalid socket [ 128.387006][ T6002] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 128.387126][ T6002] EXT4-fs (nbd2): unable to read superblock [ 130.508964][ T5927] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.811237][ T5927] usb 5-1: config 4 has an invalid descriptor of length 77, skipping remainder of the config [ 130.811270][ T5927] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 130.811307][ T5927] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 130.811334][ T5927] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 130.811349][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.250114][ T5927] usb 5-1: string descriptor 0 read error: -71 [ 131.373578][ T5927] ath6kl: Failed to submit usb control message: -71 [ 131.373854][ T5927] ath6kl: unable to send the bmi data to the device: -71 [ 131.373874][ T5927] ath6kl: Unable to send get target info: -71 [ 131.382184][ T5927] ath6kl: Failed to init ath6kl core: -71 [ 131.382863][ T5927] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 131.692390][ T5927] usb 5-1: USB disconnect, device number 2 [ 132.065058][ T5914] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.226933][ T5914] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 132.226968][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.232453][ T5914] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 132.232485][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.232506][ T5914] usb 1-1: Product: syz [ 132.232520][ T5914] usb 1-1: Manufacturer: syz [ 132.232534][ T5914] usb 1-1: SerialNumber: syz [ 132.613163][ T5914] usb 1-1: config 0 descriptor?? [ 133.412827][ T5914] usb 1-1: selecting invalid altsetting 0 [ 133.787680][ T5914] usb 1-1: USB disconnect, device number 2 [ 134.923037][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.653976][ T5927] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.814548][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 135.901632][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 135.901702][ T5927] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 135.901725][ T5927] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 135.901750][ T5927] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 135.901771][ T5927] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 135.901795][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 135.901899][ T5927] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 135.901924][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.063745][ T5927] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 136.263817][ T5927] scsi host1: usb-storage 5-1:1.0 [ 136.548735][ T5927] usb 5-1: USB disconnect, device number 3 [ 138.375778][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.375891][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.405951][ T6104] capability: warning: `syz.0.31' uses deprecated v2 capabilities in a way that may be insecure [ 200.618340][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.618422][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.409356][ T6100] kernel profiling enabled (shift: 7) [ 203.012794][ T6122] Bluetooth: MGMT ver 1.23 [ 204.575484][ T6126] syz.0.35 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 207.024124][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.198627][ T10] usb 5-1: config 4 has an invalid descriptor of length 164, skipping remainder of the config [ 207.198676][ T10] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 207.198721][ T10] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 207.198770][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 207.198795][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.465801][ T10] ath6kl: Failed to submit usb control message: -71 [ 207.465839][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 207.465848][ T10] ath6kl: Unable to send get target info: -71 [ 207.467241][ T10] ath6kl: Failed to init ath6kl core: -71 [ 207.467613][ T10] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 207.526738][ T10] usb 5-1: USB disconnect, device number 4 [ 208.828504][ T45] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 208.922674][ T6152] netlink: 256 bytes leftover after parsing attributes in process `syz.2.43'. [ 208.963791][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 209.117013][ T10] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 209.117066][ T10] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 209.117094][ T10] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77 [ 209.117119][ T10] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 209.117164][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 209.117188][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.198283][ T6148] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 209.473195][ T10] ath6kl: Failed to submit usb control message: -71 [ 209.473268][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 209.473285][ T10] ath6kl: Unable to send get target info: -71 [ 209.501857][ T10] ath6kl: Failed to init ath6kl core: -71 [ 209.514471][ T10] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 209.555956][ T10] usb 5-1: USB disconnect, device number 5 [ 209.812660][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x41, changing to 0x1 [ 209.812697][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 209.822435][ T45] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 209.822466][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.822484][ T45] usb 2-1: Product: syz [ 209.822498][ T45] usb 2-1: Manufacturer: syz [ 209.822511][ T45] usb 2-1: SerialNumber: syz [ 210.751870][ T45] usb 2-1: config 0 descriptor?? [ 210.768508][ T45] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 211.303658][ T6165] netlink: 256 bytes leftover after parsing attributes in process `syz.4.46'. [ 212.856360][ T5900] usb 2-1: USB disconnect, device number 3 [ 216.143865][ T5847] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 216.247292][ T3116] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 216.298120][ T5847] usb 1-1: Using ep0 maxpacket: 16 [ 216.302644][ T5847] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 216.302711][ T5847] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 216.302743][ T5847] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 216.302768][ T5847] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.302791][ T5847] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 216.302815][ T5847] usb 1-1: config 1 interface 0 has no altsetting 0 [ 216.302853][ T5847] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 216.302878][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.427344][ T5847] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 216.493853][ T3116] usb 4-1: Using ep0 maxpacket: 16 [ 216.496936][ T3116] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 216.497004][ T3116] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 216.497027][ T3116] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 216.497054][ T3116] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 216.497077][ T3116] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 216.497102][ T3116] usb 4-1: config 1 interface 0 has no altsetting 0 [ 216.497140][ T3116] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 216.497165][ T3116] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.546876][ T5928] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 216.834154][ T5928] usb 3-1: Using ep0 maxpacket: 16 [ 217.528185][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 217.528254][ T5928] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 217.528275][ T5928] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 217.528299][ T5928] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 217.528320][ T5928] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 217.528344][ T5928] usb 3-1: config 1 interface 0 has no altsetting 0 [ 217.528382][ T5928] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 217.528406][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.681270][ T3116] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 217.683141][ T5928] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 217.689069][ T5847] scsi host1: usb-storage 1-1:1.0 [ 217.906737][ T3116] scsi host2: usb-storage 4-1:1.0 [ 217.992128][ T5847] usb 1-1: USB disconnect, device number 3 [ 218.018759][ T5928] scsi host3: usb-storage 3-1:1.0 [ 218.138707][ T5900] usb 4-1: USB disconnect, device number 2 [ 218.189282][ T10] usb 3-1: USB disconnect, device number 2 [ 218.606253][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.797608][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 218.807866][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 218.807950][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 218.807972][ T9] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 218.807994][ T9] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 218.808014][ T9] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 218.808035][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 218.808068][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 218.808090][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.302312][ T6224] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 219.302361][ T6224] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 219.420782][ T9] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 219.714530][ T9] scsi host1: usb-storage 5-1:1.0 [ 220.732873][ T5900] usb 5-1: USB disconnect, device number 6 [ 223.368154][ T37] audit: type=1326 audit(1757373385.845:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6242 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434384ebe9 code=0x7ffc0000 [ 223.369728][ T37] audit: type=1326 audit(1757373385.865:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6242 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434384ebe9 code=0x7ffc0000 [ 223.741303][ T6247] Illegal XDP return value 4294967262 on prog (id 22) dev N/A, expect packet loss! [ 223.757078][ T3116] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 223.920177][ T3116] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.947040][ T3116] usb 3-1: config 3 has an invalid interface number: 8 but max is 3 [ 223.947075][ T3116] usb 3-1: config 3 has an invalid descriptor of length 70, skipping remainder of the config [ 223.947095][ T3116] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 223.947117][ T3116] usb 3-1: config 3 has no interface number 0 [ 223.947172][ T3116] usb 3-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 223.947201][ T3116] usb 3-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.947228][ T3116] usb 3-1: config 3 interface 8 has no altsetting 0 [ 224.368566][ T3116] usb 3-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be [ 224.368601][ T3116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.368622][ T3116] usb 3-1: Product: syz [ 224.368637][ T3116] usb 3-1: Manufacturer: syz [ 224.368652][ T3116] usb 3-1: SerialNumber: syz [ 224.716001][ T3116] appledisplay 3-1:3.8: Error while getting initial brightness: -71 [ 224.719970][ T3116] appledisplay 3-1:3.8: probe with driver appledisplay failed with error -71 [ 224.724864][ T3116] usbhid 3-1:3.8: can't add hid device: -22 [ 224.725011][ T3116] usbhid 3-1:3.8: probe with driver usbhid failed with error -22 [ 224.752750][ T3116] usb 3-1: USB disconnect, device number 3 [ 226.427571][ T6267] warning: `syz.2.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.483798][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 227.484008][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 227.484140][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 227.484228][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 227.579852][ T6300] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 227.582402][ T6300] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 227.583024][ T6300] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 227.583552][ T6300] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 228.074597][ T6315] netlink: 'syz.1.96': attribute type 21 has an invalid length. [ 228.074718][ T6315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'. [ 228.394050][ T6319] netlink: 'syz.4.98': attribute type 20 has an invalid length. [ 229.208991][ T6333] netlink: 'syz.1.107': attribute type 11 has an invalid length. [ 229.209018][ T6333] netlink: 176 bytes leftover after parsing attributes in process `syz.1.107'. [ 229.280644][ T6336] netlink: 112 bytes leftover after parsing attributes in process `syz.4.108'. [ 229.867970][ T6349] syz.3.113 (6349) used greatest stack depth: 18664 bytes left [ 230.457397][ T6357] netlink: 822 bytes leftover after parsing attributes in process `syz.4.117'. [ 230.457427][ T6357] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 230.652142][ T6361] @ÿ: renamed from veth0_macvtap (while UP) [ 230.868299][ T6368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.885534][ T6370] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 230.886823][ T6370] syzkaller1: entered promiscuous mode [ 230.886853][ T6370] syzkaller1: entered allmulticast mode [ 232.453791][ T6385] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.363437][ T6401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.734811][ T6411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.729856][ T6424] ======================================================= [ 236.729856][ T6424] WARNING: The mand mount option has been deprecated and [ 236.729856][ T6424] and is ignored by this kernel. Remove the mand [ 236.729856][ T6424] option from the mount to silence this warning. [ 236.729856][ T6424] ======================================================= [ 238.679716][ T6448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.378633][ T5928] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 240.698140][ T6461] veth0_vlan: entered allmulticast mode [ 240.993733][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 240.996436][ T5928] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 240.996465][ T5928] usb 1-1: config 0 has no interface number 0 [ 240.999003][ T5928] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 240.999030][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 240.999050][ T5928] usb 1-1: Product: syz [ 240.999065][ T5928] usb 1-1: Manufacturer: syz [ 241.006047][ T5928] usb 1-1: config 0 descriptor?? [ 241.273799][ T9] usb 1-1: USB disconnect, device number 4 [ 241.346329][ T6469] netlink: 180 bytes leftover after parsing attributes in process `syz.1.162'. [ 241.900569][ T6485] pim6reg1: entered promiscuous mode [ 241.900610][ T6485] pim6reg1: entered allmulticast mode [ 241.993308][ T6489] netlink: 'syz.4.169': attribute type 3 has an invalid length. [ 244.085723][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.576109][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.811720][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.134266][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.723819][ T6509] binder: BINDER_SET_CONTEXT_MGR already set [ 245.723836][ T6509] binder: 6508:6509 ioctl 4018620d 200000004a80 returned -16 [ 245.771180][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.910218][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 245.983112][ T6512] binder: 6508:6512 ioctl c0306201 200000000180 returned -14 [ 246.074745][ T6511] veth0_vlan: entered allmulticast mode [ 246.736578][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 246.885271][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 246.891945][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 246.891993][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 246.892018][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.996591][ T10] usb 4-1: config 0 descriptor?? [ 248.343626][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.361481][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 248.361635][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.388821][ T10] usb 4-1: USB disconnect, device number 3 [ 249.255437][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 249.255465][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 249.420016][ T6560] Zero length message leads to an empty skb [ 251.238241][ T6581] syz.3.205 (6581) used greatest stack depth: 16760 bytes left [ 251.477771][ T6585] syz.3.205 (6585) used greatest stack depth: 16072 bytes left [ 252.157957][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.259993][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.273913][ T5900] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 252.474531][ T6614] Bluetooth: MGMT ver 1.23 [ 252.479677][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 252.578123][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.582727][ T5900] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 252.582762][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.582785][ T5900] usb 4-1: Product: syz [ 252.582801][ T5900] usb 4-1: Manufacturer: syz [ 252.582815][ T5900] usb 4-1: SerialNumber: syz [ 252.662315][ T5900] usb 4-1: config 0 descriptor?? [ 252.675610][ T5900] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 252.954166][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.958468][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.725259][ T43] Bluetooth: hci5: Frame reassembly failed (-84) [ 253.734785][ T163] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.723734][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 256.435812][ T6657] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.233'. [ 256.748640][ T5847] usb 4-1: USB disconnect, device number 4 [ 256.995699][ T6667] only policy match revision 0 supported [ 256.995713][ T6667] unable to load match [ 257.458505][ T6680] tipc: Started in network mode [ 257.458540][ T6680] tipc: Node identity d67acdf36475, cluster identity 4711 [ 257.526318][ T6680] tipc: Enabled bearer , priority 0 [ 257.559780][ T6673] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 257.633979][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.654326][ T6678] syzkaller0: entered promiscuous mode [ 257.654361][ T6678] syzkaller0: entered allmulticast mode [ 257.721779][ T6677] tipc: Resetting bearer [ 257.818220][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.818253][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.818274][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.818338][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 257.818366][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 257.865338][ T6672] tipc: Resetting bearer [ 257.885922][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.885955][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.885988][ T10] usb 5-1: Product: syz [ 257.886003][ T10] usb 5-1: Manufacturer: syz [ 257.958678][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 257.958707][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 257.984045][ T6689] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 258.010949][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 258.010973][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 258.107135][ T6672] tipc: Disabling bearer [ 258.732874][ T6682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.770482][ T6682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.002845][ T6688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.049996][ T6689] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 259.328352][ T3116] usb 5-1: USB disconnect, device number 7 [ 259.928399][ T6712] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 260.031666][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.104876][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.274655][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.274745][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.957596][ T6750] 9pnet_virtio: no channels available for device syz [ 262.416412][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.114641][ T6756] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.114691][ T6756] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 263.118830][ T6756] overlayfs: overlapping lowerdir path [ 265.154551][ T5846] Bluetooth: hci3: unexpected event for opcode 0x204e [ 265.928817][ T5847] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 266.083703][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 266.087922][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.087958][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.087981][ T5847] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 266.088025][ T5847] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 266.088049][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.112487][ T5847] usb 4-1: config 0 descriptor?? [ 266.382570][ T6800] overlayfs: failed to resolve './file1/file0': -2 [ 266.724625][ T5847] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 266.724674][ T5847] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 266.724701][ T5847] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 266.724724][ T5847] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 266.724749][ T5847] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 266.861353][ T5847] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 266.886454][ T6795] random: crng reseeded on system resumption [ 267.266481][ T5847] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 267.267450][ T5847] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 267.333494][ T31] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 267.334823][ T31] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 267.335188][ T31] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 267.335961][ T31] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 267.479456][ T5847] usb 4-1: USB disconnect, device number 5 [ 269.105073][ T6834] 9pnet_virtio: no channels available for device syz [ 269.446518][ T1105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.633045][ T6843] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 270.049623][ T1105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.212304][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 270.241468][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 270.244980][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 270.256759][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 270.257845][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 270.413874][ T6846] team0: No ports can be present during mode change [ 270.493399][ T6854] binder: 6852:6854 ioctl c0306201 200000000180 returned -14 [ 270.815145][ T1105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.455006][ T1105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.363780][ T5846] Bluetooth: hci3: command tx timeout [ 272.941395][ T6900] binder: 6894:6900 ioctl c0306201 200000000180 returned -14 [ 273.614625][ T1105] bridge_slave_1: left allmulticast mode [ 273.614797][ T1105] bridge_slave_1: left promiscuous mode [ 273.619659][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.875795][ T1105] bridge_slave_0: left allmulticast mode [ 273.875833][ T1105] bridge_slave_0: left promiscuous mode [ 273.879626][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.453715][ T5846] Bluetooth: hci3: command tx timeout [ 274.556278][ T6918] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 274.607275][ T1120] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.524685][ T5855] Bluetooth: hci3: command tx timeout [ 276.606135][ T5846] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.751219][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.828249][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.876443][ T1105] bond0 (unregistering): Released all slaves [ 277.252753][ T6848] chnl_net:caif_netlink_parms(): no params data found [ 277.265871][ T1105] tipc: Left network mode [ 277.484043][ T6943] tipc: Started in network mode [ 277.484077][ T6943] tipc: Node identity 9a230c866c5a, cluster identity 4711 [ 277.493438][ T6943] tipc: Enabled bearer , priority 0 [ 278.478104][ T6945] tipc: Resetting bearer [ 278.603859][ T5846] Bluetooth: hci3: command tx timeout [ 278.625399][ T9] tipc: Node number set to 4135128198 [ 278.734848][ T6019] tipc: Resetting bearer [ 279.577031][ T6940] tipc: Resetting bearer [ 292.418216][ T6940] tipc: Disabling bearer [ 292.711208][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.734616][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.736810][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.738314][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.740642][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.843984][ T5846] Bluetooth: hci5: command tx timeout [ 295.135813][ T1105] hsr_slave_0: left promiscuous mode [ 295.176335][ T1105] hsr_slave_1: left promiscuous mode [ 295.178993][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.179074][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.243322][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.243359][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.373830][ T1105] veth1_macvtap: left promiscuous mode [ 295.374219][ T1105] veth0_macvtap: left promiscuous mode [ 295.374616][ T1105] veth1_vlan: left promiscuous mode [ 295.379713][ T1105] veth0_vlan: left promiscuous mode [ 296.231628][ T7026] syz.1.363: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 296.231970][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: syz.1.363 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 296.231995][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.232008][ T7026] Call Trace: [ 296.232017][ T7026] [ 296.232026][ T7026] dump_stack_lvl+0x189/0x250 [ 296.232068][ T7026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.232101][ T7026] ? __pfx__printk+0x10/0x10 [ 296.232126][ T7026] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 296.232151][ T7026] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 296.232178][ T7026] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 296.232206][ T7026] warn_alloc+0x22e/0x3b0 [ 296.232253][ T7026] ? __pfx_warn_alloc+0x10/0x10 [ 296.232300][ T7026] ? __get_vm_area_node+0x2bc/0x350 [ 296.232333][ T7026] ? hash_netport4_resize+0x235/0x1b70 [ 296.232374][ T7026] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 296.232406][ T7026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.232464][ T7026] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 296.232503][ T7026] ? rcu_is_watching+0x15/0xb0 [ 296.232542][ T7026] __kvmalloc_node_noprof+0x330/0x550 [ 296.232576][ T7026] ? hash_netport4_resize+0x235/0x1b70 [ 296.232609][ T7026] ? hash_netport4_resize+0x235/0x1b70 [ 296.232651][ T7026] hash_netport4_resize+0x235/0x1b70 [ 296.232685][ T7026] ? hash_netport4_uadt+0xc9a/0xf30 [ 296.232727][ T7026] ? __pfx_hash_netport4_add+0x10/0x10 [ 296.232770][ T7026] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 296.232823][ T7026] ? call_ad+0x102/0x9c0 [ 296.232854][ T7026] call_ad+0x3c5/0x9c0 [ 296.232892][ T7026] ? __pfx_call_ad+0x10/0x10 [ 296.232938][ T7026] ? __nla_parse+0x40/0x60 [ 296.232967][ T7026] ip_set_ad+0x797/0x940 [ 296.233005][ T7026] ? __pfx_ip_set_ad+0x10/0x10 [ 296.233029][ T7026] ? do_raw_spin_lock+0x121/0x290 [ 296.233102][ T7026] nfnetlink_rcv_msg+0xb66/0x1150 [ 296.233129][ T7026] ? __lock_acquire+0xab9/0xd20 [ 296.233157][ T7026] ? nfnetlink_rcv_msg+0x212/0x1150 [ 296.233208][ T7026] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 296.233268][ T7026] ? __pfx_migrate_enable+0x10/0x10 [ 296.233297][ T7026] ? __pfx_migrate_enable+0x10/0x10 [ 296.233346][ T7026] netlink_rcv_skb+0x205/0x470 [ 296.233379][ T7026] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 296.233408][ T7026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.233454][ T7026] ? bpf_lsm_capable+0x9/0x20 [ 296.233482][ T7026] ? security_capable+0x7e/0x2e0 [ 296.233523][ T7026] nfnetlink_rcv+0x26a/0x2530 [ 296.233558][ T7026] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 296.233591][ T7026] ? __dev_queue_xmit+0x26f/0x3b70 [ 296.233628][ T7026] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 296.233652][ T7026] ? __pfx___dev_queue_xmit+0x10/0x10 [ 296.233692][ T7026] ? ref_tracker_free+0x61e/0x7c0 [ 296.233721][ T7026] ? __asan_memcpy+0x40/0x70 [ 296.233743][ T7026] ? __pfx_ref_tracker_free+0x10/0x10 [ 296.233771][ T7026] ? __skb_clone+0x63/0x7a0 [ 296.233808][ T7026] ? __skb_clone+0x483/0x7a0 [ 296.233838][ T7026] ? skb_clone+0x246/0x3a0 [ 296.233866][ T7026] ? __netlink_deliver_tap+0x807/0x850 [ 296.233897][ T7026] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.233937][ T7026] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.233978][ T7026] netlink_unicast+0x843/0xa10 [ 296.234017][ T7026] ? __pfx_netlink_unicast+0x10/0x10 [ 296.234047][ T7026] ? netlink_sendmsg+0x642/0xb30 [ 296.234074][ T7026] ? skb_put+0x11b/0x210 [ 296.234112][ T7026] netlink_sendmsg+0x805/0xb30 [ 296.234156][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.234198][ T7026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.234221][ T7026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.234254][ T7026] __sock_sendmsg+0x219/0x270 [ 296.234287][ T7026] ____sys_sendmsg+0x508/0x820 [ 296.234317][ T7026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.234351][ T7026] ? import_iovec+0x74/0xa0 [ 296.234385][ T7026] ___sys_sendmsg+0x21f/0x2a0 [ 296.234409][ T7026] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.234477][ T7026] ? __fget_files+0x2a/0x420 [ 296.234508][ T7026] ? __fget_files+0x3a6/0x420 [ 296.234553][ T7026] __x64_sys_sendmsg+0x1a1/0x260 [ 296.234579][ T7026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.234615][ T7026] ? rcu_is_watching+0x15/0xb0 [ 296.234657][ T7026] ? do_syscall_64+0xbe/0x3b0 [ 296.234683][ T7026] do_syscall_64+0xfa/0x3b0 [ 296.234700][ T7026] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.234730][ T7026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.234752][ T7026] ? clear_bhb_loop+0x60/0xb0 [ 296.234780][ T7026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.234811][ T7026] RIP: 0033:0x7ff6f64debe9 [ 296.234832][ T7026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.234851][ T7026] RSP: 002b:00007ff6f473e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.234873][ T7026] RAX: ffffffffffffffda RBX: 00007ff6f6715fa0 RCX: 00007ff6f64debe9 [ 296.234889][ T7026] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 296.234903][ T7026] RBP: 00007ff6f6561e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.234917][ T7026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.234929][ T7026] R13: 00007ff6f6716038 R14: 00007ff6f6715fa0 R15: 00007fffd1441708 [ 296.234966][ T7026] [ 296.245222][ T7026] Mem-Info: [ 296.245240][ T7026] active_anon:253 inactive_anon:5462 isolated_anon:0 [ 296.245240][ T7026] active_file:5727 inactive_file:37577 isolated_file:0 [ 296.245240][ T7026] unevictable:768 dirty:70 writeback:0 [ 296.245240][ T7026] slab_reclaimable:11504 slab_unreclaimable:102643 [ 296.245240][ T7026] mapped:29537 shmem:1360 pagetables:1133 [ 296.245240][ T7026] sec_pagetables:0 bounce:0 [ 296.245240][ T7026] kernel_misc_reclaimable:0 [ 296.245240][ T7026] free:1331412 free_pcp:4849 free_cma:0 [ 296.245294][ T7026] Node 0 active_anon:1012kB inactive_anon:21848kB active_file:22704kB inactive_file:150308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118148kB dirty:280kB writeback:0kB shmem:3904kB kernel_stack:12700kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.245345][ T7026] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.245389][ T7026] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.245448][ T7026] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 296.245485][ T7026] Node 0 DMA32 free:1411212kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1008kB inactive_anon:21796kB active_file:21696kB inactive_file:150240kB unevictable:1536kB writepending:280kB present:3129332kB managed:2572304kB mlocked:0kB bounce:0kB free_pcp:18480kB local_pcp:11856kB free_cma:0kB [ 296.245544][ T7026] lowmem_reserve[]: 0 0 1 1 1 [ 296.245576][ T7026] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:52kB active_file:1008kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.245630][ T7026] lowmem_reserve[]: 0 0 0 0 0 [ 296.245662][ T7026] Node 1 Normal free:3899076kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:916kB local_pcp:836kB free_cma:0kB [ 296.245718][ T7026] lowmem_reserve[]: 0 0 0 0 0 [ 296.245750][ T7026] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.245864][ T7026] Node 0 DMA32: 173*4kB (U) 214*8kB (UM) 226*16kB (UME) 204*32kB (UME) 634*64kB (UME) 430*128kB (UME) 180*256kB (UME) 83*512kB (UME) 46*1024kB (UM) 10*2048kB (UM) 280*4096kB (UM) = 1411204kB [ 296.246019][ T7026] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.246124][ T7026] Node 1 Normal: 187*4kB (U) 43*8kB (UME) 36*16kB (UME) 206*32kB (UME) 86*64kB (UME) 28*128kB (UME) 7*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3899076kB [ 296.246280][ T7026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.246297][ T7026] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.246312][ T7026] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.246327][ T7026] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.246342][ T7026] 44660 total pagecache pages [ 296.246350][ T7026] 0 pages in swap cache [ 296.246356][ T7026] Free swap = 124996kB [ 296.246363][ T7026] Total swap = 124996kB [ 296.246371][ T7026] 2097051 pages RAM [ 296.246378][ T7026] 0 pages HighMem/MovableOnly [ 296.246385][ T7026] 422077 pages reserved [ 296.246391][ T7026] 0 pages cma reserved [ 296.933777][ T5846] Bluetooth: hci5: command tx timeout [ 298.664737][ T1105] team0 (unregistering): Port device team_slave_1 removed [ 298.915148][ T1105] team0 (unregistering): Port device team_slave_0 removed [ 299.006544][ T5846] Bluetooth: hci5: command tx timeout [ 301.023777][ T3116] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 301.083911][ T5846] Bluetooth: hci5: command tx timeout [ 301.177113][ T3116] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.177145][ T3116] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.177166][ T3116] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.177228][ T3116] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 301.177256][ T3116] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 301.180313][ T3116] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.180345][ T3116] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.180364][ T3116] usb 2-1: Product: syz [ 301.180373][ T3116] usb 2-1: Manufacturer: syz [ 301.208881][ T3116] cdc_wdm 2-1:1.0: skipping garbage [ 301.208901][ T3116] cdc_wdm 2-1:1.0: skipping garbage [ 301.214695][ T3116] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 301.214715][ T3116] cdc_wdm 2-1:1.0: Unknown control protocol [ 301.519952][ T3116] usb 2-1: USB disconnect, device number 4 [ 301.835077][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.835250][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.835503][ T6848] bridge_slave_0: entered allmulticast mode [ 301.870296][ T6848] bridge_slave_0: entered promiscuous mode [ 302.165554][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.165799][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.166076][ T6848] bridge_slave_1: entered allmulticast mode [ 302.188311][ T6848] bridge_slave_1: entered promiscuous mode [ 302.512259][ T7083] syz.1.383 (7083) used obsolete PPPIOCDETACH ioctl [ 302.893736][ T3116] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 302.990374][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.043402][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.050711][ T3116] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.050741][ T3116] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.050769][ T3116] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.050824][ T3116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 303.050850][ T3116] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 303.054944][ T3116] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.054974][ T3116] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.054993][ T3116] usb 5-1: Product: syz [ 303.055006][ T3116] usb 5-1: Manufacturer: syz [ 303.177503][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 303.182778][ T3116] cdc_wdm 5-1:1.0: skipping garbage [ 303.182800][ T3116] cdc_wdm 5-1:1.0: skipping garbage [ 303.214396][ T3116] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 303.214421][ T3116] cdc_wdm 5-1:1.0: Unknown control protocol [ 303.307002][ T7097] overlayfs: failed to resolve './file1': -2 [ 303.361074][ T7097] overlayfs: failed to resolve './file1/file0': -2 [ 303.412748][ T45] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.412787][ T45] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.412879][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.412938][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 303.412966][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 303.465383][ T45] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.465481][ T45] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.465503][ T45] usb 2-1: Product: syz [ 303.465519][ T45] usb 2-1: Manufacturer: syz [ 303.544528][ T5928] usb 5-1: USB disconnect, device number 8 [ 303.562133][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 303.562155][ T45] cdc_wdm 2-1:1.0: skipping garbage [ 303.636506][ T45] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 303.636532][ T45] cdc_wdm 2-1:1.0: Unknown control protocol [ 303.905269][ T45] usb 2-1: USB disconnect, device number 5 [ 304.001202][ T7105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.390'. [ 304.265059][ T7111] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 304.340832][ T6848] team0: Port device team_slave_0 added [ 304.485711][ T6848] team0: Port device team_slave_1 added [ 305.295385][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.295405][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.295445][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.385441][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.385463][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.385492][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.342168][ T7145] binder: 7143:7145 ioctl c0306201 200000000180 returned -14 [ 306.607202][ T6848] hsr_slave_0: entered promiscuous mode [ 306.608270][ T6848] hsr_slave_1: entered promiscuous mode [ 306.608981][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 306.608999][ T6848] Cannot create hsr debugfs directory [ 306.870539][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.400'. [ 306.904366][ T1105] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.491796][ T1105] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.084506][ T1105] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.141253][ T7011] chnl_net:caif_netlink_parms(): no params data found [ 308.602730][ T1105] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.694794][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 310.102621][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.102965][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.103236][ T7011] bridge_slave_0: entered allmulticast mode [ 310.111181][ T7011] bridge_slave_0: entered promiscuous mode [ 310.197936][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.198127][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.198393][ T7011] bridge_slave_1: entered allmulticast mode [ 310.208996][ T7011] bridge_slave_1: entered promiscuous mode [ 311.514205][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.735769][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.217573][ T1105] bridge_slave_1: left allmulticast mode [ 312.217610][ T1105] bridge_slave_1: left promiscuous mode [ 312.217918][ T1105] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.379769][ T1105] bridge_slave_0: left allmulticast mode [ 312.379807][ T1105] bridge_slave_0: left promiscuous mode [ 312.380136][ T1105] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.684459][ T1105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.744937][ T1105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.789725][ T1105] bond0 (unregistering): Released all slaves [ 314.855381][ T7011] team0: Port device team_slave_0 added [ 316.546417][ T7011] team0: Port device team_slave_1 added [ 316.552015][ T1105] tipc: Left network mode [ 316.971854][ T6848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.402621][ T7286] overlayfs: failed to resolve './file1/file0': -2 [ 318.353874][ T6848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.511682][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.511702][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.513115][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.624683][ T6848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.251821][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.251840][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.251876][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.324630][ T5846] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 319.717665][ T6848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.733069][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.773182][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.147742][ T6848] kthread_run failed with err -4 [ 384.142850][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.168462][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.454734][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 404.274885][ T1105] hsr_slave_0: left promiscuous mode [ 405.580162][ T1105] hsr_slave_1: left promiscuous mode [ 406.410434][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.417146][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.581775][ T1105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.585668][ T1105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.942600][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 420.585625][ T1105] veth1_macvtap: left promiscuous mode [ 420.601483][ T1105] @ÿ: left promiscuous mode [ 420.751780][ T1105] veth1_vlan: left promiscuous mode [ 445.588178][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.589677][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.027371][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.028803][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.609276][ T38] INFO: task kworker/0:1:10 blocked for more than 143 seconds. [ 548.613070][ T38] Not tainted syzkaller #0 [ 548.623296][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.636341][ T38] task:kworker/0:1 state:D stack:20232 pid:10 tgid:10 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 548.668586][ T38] Workqueue: events switchdev_deferred_process_work [ 548.696434][ T38] Call Trace: [ 548.701941][ T38] [ 548.709148][ T38] __schedule+0x16f3/0x4c20 [ 548.761713][ T38] ? __pfx___schedule+0x10/0x10 [ 548.782023][ T38] ? preempt_schedule+0xae/0xc0 [ 548.835699][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 548.849132][ T38] rt_mutex_schedule+0x77/0xf0 [ 548.875280][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 548.884206][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 548.938462][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 548.950000][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 548.983620][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 549.038275][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 549.084476][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 549.104068][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 549.120254][ T38] mutex_lock_nested+0x16a/0x1d0 [ 549.131008][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 549.151781][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 549.168225][ T38] switchdev_deferred_process_work+0xe/0x20 [ 549.182057][ T38] process_scheduled_works+0xade/0x17b0 [ 549.262537][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 549.274660][ T38] worker_thread+0x8a0/0xda0 [ 549.311561][ T38] kthread+0x70e/0x8a0 [ 549.333185][ T38] ? __pfx_worker_thread+0x10/0x10 [ 549.357174][ T38] ? __pfx_kthread+0x10/0x10 [ 549.370081][ T38] ? __pfx_kthread+0x10/0x10 [ 549.398327][ T38] ret_from_fork+0x3f9/0x770 [ 549.422772][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 549.465171][ T38] ? __switch_to_asm+0x39/0x70 [ 549.485620][ T38] ? __switch_to_asm+0x33/0x70 [ 549.491060][ T38] ? __pfx_kthread+0x10/0x10 [ 549.498213][ T38] ret_from_fork_asm+0x1a/0x30 [ 549.516688][ T38] [ 549.598409][ T38] INFO: task kworker/u8:9:1341 blocked for more than 144 seconds. [ 549.602996][ T38] Not tainted syzkaller #0 [ 549.607384][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 549.617151][ T38] task:kworker/u8:9 state:D stack:23192 pid:1341 tgid:1341 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 549.652610][ T38] Workqueue: ipv6_addrconf addrconf_dad_work [ 549.671936][ T38] Call Trace: [ 549.677580][ T38] [ 549.702022][ T38] __schedule+0x16f3/0x4c20 [ 549.740289][ T38] ? __pfx___schedule+0x10/0x10 [ 549.748290][ T38] ? preempt_schedule+0xae/0xc0 [ 549.790229][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 549.814149][ T38] rt_mutex_schedule+0x77/0xf0 [ 549.839974][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 549.868479][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 549.911018][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 549.937488][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 549.954212][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 549.961415][ T38] ? __lock_acquire+0xab9/0xd20 [ 549.982446][ T38] ? addrconf_dad_work+0x119/0x15a0 [ 550.019608][ T38] ? __pfx___schedule+0x10/0x10 [ 550.038027][ T38] ? addrconf_dad_work+0x119/0x15a0 [ 550.045496][ T38] mutex_lock_nested+0x16a/0x1d0 [ 550.066591][ T38] addrconf_dad_work+0x119/0x15a0 [ 550.078588][ T38] ? __lock_acquire+0xab9/0xd20 [ 550.102115][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 550.122168][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 550.133052][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 550.141964][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 550.187573][ T38] process_scheduled_works+0xade/0x17b0 [ 550.216285][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.255017][ T38] worker_thread+0x8a0/0xda0 [ 550.311182][ T38] kthread+0x70e/0x8a0 [ 550.320678][ T38] ? __pfx_worker_thread+0x10/0x10 [ 550.338776][ T38] ? __pfx_kthread+0x10/0x10 [ 550.388052][ T38] ? __pfx_kthread+0x10/0x10 [ 550.396767][ T38] ret_from_fork+0x3f9/0x770 [ 550.421209][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 550.435893][ T38] ? __switch_to_asm+0x39/0x70 [ 550.442051][ T38] ? __switch_to_asm+0x33/0x70 [ 550.449193][ T38] ? __pfx_kthread+0x10/0x10 [ 550.478820][ T38] ret_from_fork_asm+0x1a/0x30 [ 550.501432][ T38] [ 550.535373][ T38] INFO: task dhcpcd:5500 blocked for more than 145 seconds. [ 550.544816][ T38] Not tainted syzkaller #0 [ 550.544947][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.545861][ T38] task:dhcpcd state:D stack:21320 pid:5500 tgid:5500 ppid:5499 task_flags:0x400140 flags:0x00004002 [ 550.566562][ T38] Call Trace: [ 550.566576][ T38] [ 550.578442][ T38] __schedule+0x16f3/0x4c20 [ 550.607199][ T38] ? __pfx___schedule+0x10/0x10 [ 550.631977][ T38] ? preempt_schedule+0xae/0xc0 [ 550.646591][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 550.662321][ T38] rt_mutex_schedule+0x77/0xf0 [ 550.670254][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 550.682962][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 550.724377][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 550.744498][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 550.762389][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 550.785593][ T38] ? rtnl_dumpit+0x92/0x200 [ 550.800276][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 550.817707][ T38] ? rtnl_dumpit+0x92/0x200 [ 550.835596][ T38] mutex_lock_nested+0x16a/0x1d0 [ 550.862991][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 550.868760][ T38] rtnl_dumpit+0x92/0x200 [ 550.895565][ T38] netlink_dump+0x6e4/0xe90 [ 550.931017][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 550.949367][ T38] ? netlink_recvmsg+0x5b2/0xa30 [ 550.959665][ T38] ? kmem_cache_free+0x195/0x510 [ 550.978401][ T38] netlink_recvmsg+0x676/0xa30 [ 551.012414][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 551.030960][ T38] ? rcu_read_lock_sched_held+0x89/0x100 [ 551.042693][ T38] ? __switch_to+0xdae/0x1670 [ 551.049248][ T38] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 551.062284][ T38] ? security_socket_recvmsg+0x7e/0x2e0 [ 551.075789][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 551.097219][ T38] sock_recvmsg+0x229/0x270 [ 551.106580][ T38] ____sys_recvmsg+0x1ce/0x470 [ 551.125598][ T38] ? __pfx_____sys_recvmsg+0x10/0x10 [ 551.152596][ T38] ? import_iovec+0x74/0xa0 [ 551.167277][ T38] ___sys_recvmsg+0x1b5/0x510 [ 551.199718][ T38] ? __pfx____sys_recvmsg+0x10/0x10 [ 551.229601][ T38] __x64_sys_recvmsg+0x19e/0x260 [ 551.242180][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 551.278682][ T38] do_syscall_64+0xfa/0x3b0 [ 551.295784][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.300968][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 551.315715][ T38] ? clear_bhb_loop+0x60/0xb0 [ 551.332553][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.340158][ T38] RIP: 0033:0x7f005870c407 [ 551.377383][ T38] RSP: 002b:00007ffd3d36e6f0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 551.391668][ T38] RAX: ffffffffffffffda RBX: 00007f0058682740 RCX: 00007f005870c407 [ 551.401040][ T38] RDX: 0000000000000000 RSI: 00007ffd3d36e780 RDI: 0000000000000011 [ 551.406877][ T38] RBP: 00007ffd3d36e764 R08: 0000000000000000 R09: 0000000000000000 [ 551.411853][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001ea0 [ 551.429361][ T38] R13: 00007ffd3d36e770 R14: 00007ffd3d36e860 R15: 0000000000000000 [ 551.445400][ T38] [ 551.482370][ T38] INFO: task syz-executor:7011 blocked for more than 146 seconds. [ 551.501770][ T38] Not tainted syzkaller #0 [ 551.520711][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.529558][ T38] task:syz-executor state:D stack:21688 pid:7011 tgid:7011 ppid:1 task_flags:0x400140 flags:0x00004006 [ 551.586117][ T38] Call Trace: [ 551.595359][ T38] [ 551.613050][ T38] __schedule+0x16f3/0x4c20 [ 551.660824][ T38] ? __pfx___schedule+0x10/0x10 [ 551.685466][ T38] ? preempt_schedule+0xae/0xc0 [ 551.706178][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 551.716660][ T38] rt_mutex_schedule+0x77/0xf0 [ 551.730165][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 551.756314][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 551.770406][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 551.789803][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 551.818176][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 551.833383][ T38] ? __lock_acquire+0xab9/0xd20 [ 551.850488][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 551.857835][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 551.868190][ T38] ? bpf_lsm_capable+0x9/0x20 [ 551.884365][ T38] ? security_capable+0x7e/0x2e0 [ 551.900958][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 551.911761][ T38] mutex_lock_nested+0x16a/0x1d0 [ 551.951941][ T38] rtnl_newlink+0x8db/0x1c70 [ 551.968194][ T38] ? finish_task_switch+0x18b/0x950 [ 551.993353][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 552.010399][ T38] ? finish_task_switch+0x32f/0x950 [ 552.026709][ T38] ? rcu_is_watching+0x15/0xb0 [ 552.076192][ T38] ? trace_sched_exit_tp+0x36/0x110 [ 552.085501][ T38] ? __schedule+0x1709/0x4c20 [ 552.138382][ T38] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 552.151956][ T38] ? irqentry_exit+0x74/0x90 [ 552.174563][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 552.191662][ T38] ? rtnetlink_rcv_msg+0x7b9/0xb70 [ 552.201435][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 552.207660][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 552.231909][ T38] ? __lock_acquire+0xab9/0xd20 [ 552.259038][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 552.268414][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 552.306357][ T38] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 552.337025][ T38] netlink_rcv_skb+0x205/0x470 [ 552.348299][ T38] ? rcu_is_watching+0x15/0xb0 [ 552.371434][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 552.386442][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 552.408265][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 552.408397][ T38] netlink_unicast+0x843/0xa10 [ 552.486381][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 552.486843][ T38] ? netlink_sendmsg+0x642/0xb30 [ 552.487826][ T38] ? skb_put+0x11b/0x210 [ 552.493854][ T38] netlink_sendmsg+0x805/0xb30 [ 552.506438][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.539869][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.546422][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.574790][ T38] __sock_sendmsg+0x219/0x270 [ 552.625192][ T38] __sys_sendto+0x3c7/0x520 [ 552.633053][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 552.666079][ T38] __x64_sys_sendto+0xde/0x100 [ 552.688432][ T38] do_syscall_64+0xfa/0x3b0 [ 552.709661][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.719165][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 552.729063][ T38] ? clear_bhb_loop+0x60/0xb0 [ 552.736404][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.741843][ T38] RIP: 0033:0x7f4c506d0a7c [ 552.746426][ T38] RSP: 002b:00007fff418391c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 552.762813][ T38] RAX: ffffffffffffffda RBX: 00007f4c51434620 RCX: 00007f4c506d0a7c [ 552.781947][ T38] RDX: 0000000000000064 RSI: 00007f4c51434670 RDI: 0000000000000003 [ 552.782930][ T38] RBP: 0000000000000000 R08: 00007fff41839214 R09: 000000000000000c [ 552.785558][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 552.791909][ T38] R13: 0000000000000000 R14: 00007f4c51434670 R15: 0000000000000000 [ 552.814263][ T38] [ 552.835953][ T38] INFO: task kworker/u8:15:7309 blocked for more than 147 seconds. [ 552.840801][ T38] Not tainted syzkaller #0 [ 552.851678][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 552.855940][ T38] task:kworker/u8:15 state:D stack:24312 pid:7309 tgid:7309 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 552.908305][ T38] Workqueue: events_unbound linkwatch_event [ 552.939234][ T38] Call Trace: [ 552.948674][ T38] [ 552.959291][ T38] __schedule+0x16f3/0x4c20 [ 552.991924][ T38] ? finish_task_switch+0x266/0x950 [ 553.004053][ T38] ? rcu_is_watching+0x15/0xb0 [ 553.022405][ T38] ? __pfx___schedule+0x10/0x10 [ 553.071488][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.111987][ T38] rt_mutex_schedule+0x77/0xf0 [ 553.130923][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 553.143309][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 553.168872][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 553.188666][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 553.196009][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 553.233687][ T38] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 553.254990][ T38] ? linkwatch_event+0xe/0x60 [ 553.292476][ T38] mutex_lock_nested+0x16a/0x1d0 [ 553.293851][ T38] ? linkwatch_event+0xe/0x60 [ 553.297125][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 553.302243][ T38] linkwatch_event+0xe/0x60 [ 553.317248][ T38] process_scheduled_works+0xade/0x17b0 [ 553.360176][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 553.389139][ T38] worker_thread+0x8a0/0xda0 [ 553.411294][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 553.444122][ T38] ? __kthread_parkme+0x7b/0x200 [ 553.470011][ T38] kthread+0x70e/0x8a0 [ 553.482397][ T38] ? __pfx_worker_thread+0x10/0x10 [ 553.490717][ T38] ? __pfx_kthread+0x10/0x10 [ 553.505803][ T38] ? __pfx_kthread+0x10/0x10 [ 553.520147][ T38] ret_from_fork+0x3f9/0x770 [ 553.555269][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 553.570220][ T38] ? __switch_to_asm+0x39/0x70 [ 553.590793][ T38] ? __switch_to_asm+0x33/0x70 [ 553.596563][ T38] ? __pfx_kthread+0x10/0x10 [ 553.609018][ T38] ret_from_fork_asm+0x1a/0x30 [ 553.616092][ T38] [ 553.619897][ T38] [ 553.619897][ T38] Showing all locks held in the system: [ 553.632144][ T38] 3 locks held by kworker/0:1/10: [ 553.636542][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 553.670554][ T38] #1: ffffc900000f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 553.713736][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 553.742772][ T38] 5 locks held by kworker/u8:0/12: [ 553.760923][ T38] 6 locks held by kworker/u8:1/13: [ 553.783014][ T38] 4 locks held by pr/legacy/17: [ 553.792057][ T38] 3 locks held by kworker/1:0/31: [ 553.793823][ T38] 1 lock held by khungtaskd/38: [ 553.795001][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 553.813420][ T38] 2 locks held by kworker/u8:2/43: [ 553.844612][ T38] #0: ffff8880b883aad8 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 553.920762][ T38] #1: ffff8880b8824088 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x53/0x880 [ 554.004392][ T38] 3 locks held by kworker/1:1/45: [ 554.009112][ T38] 4 locks held by kworker/u8:4/67: [ 554.013041][ T38] 4 locks held by kworker/u8:5/83: [ 554.017170][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 554.052362][ T38] #1: ffffc900015cfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 554.159385][ T38] #2: ffff88805ea30898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 554.240187][ T38] #3: ffff8880b883aad8 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 554.331616][ T38] 5 locks held by kworker/u8:6/163: [ 554.334697][ T38] 5 locks held by kworker/u8:7/1105: [ 554.339080][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 554.396025][ T38] #1: ffffc90004d2fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 554.423824][ T38] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 554.459275][ T38] #3: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 554.503381][ T38] #4: ffffffff8dac53a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 554.534844][ T38] 3 locks held by kworker/u8:9/1341: [ 554.541067][ T38] #0: ffff88803017e138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 554.628557][ T38] #1: ffffc900053cfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 554.687078][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 554.737279][ T38] 6 locks held by kworker/u8:10/3549: [ 554.755042][ T38] 2 locks held by klogd/5194: [ 554.773400][ T38] 2 locks held by dhcpcd/5500: [ 554.781910][ T38] #0: ffff8880712f2910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 554.827591][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 554.889910][ T38] 2 locks held by getty/5597: [ 554.894436][ T38] #0: ffff88823bf788a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 554.931853][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 554.949225][ T38] 1 lock held by syz-executor/5842: [ 554.958334][ T38] #0: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 555.017252][ T38] 2 locks held by syz-executor/5843: [ 555.033894][ T38] 1 lock held by syz-executor/5854: [ 555.048444][ T38] 2 locks held by kworker/0:6/5958: [ 555.061090][ T38] 5 locks held by kworker/u8:13/6073: [ 555.070855][ T38] 1 lock held by syz-executor/6848: [ 555.077350][ T38] 2 locks held by syz-executor/7011: [ 555.084031][ T38] #0: ffffffff8e43b3c0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 555.161101][ T38] [ 555.161101][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 555.179324][ T38] 3 locks held by kworker/u8:15/7309: [ 555.187120][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 555.237121][ T38] #1: ffffc90003e97bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 555.286209][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 555.353787][ T38] 6 locks held by kworker/u8:16/7310: [ 555.393360][ T38] 3 locks held by kworker/u8:17/7311: [ 555.400441][ T38] 1 lock held by syz-executor/7315: [ 555.420952][ T38] 3 locks held by kworker/0:8/7318: [ 555.425801][ T38] 3 locks held by kworker/u8:19/7319: [ 555.435039][ T38] 4 locks held by syz-executor/7321: [ 555.451231][ T38] 1 lock held by syz-executor/7323: [ 555.457061][ T38] 6 locks held by syz-executor/7325: [ 555.461584][ T38] [ 555.465577][ T38] ============================================= [ 555.465577][ T38] [ 555.489305][ T38] NMI backtrace for cpu 0 [ 555.489334][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 555.489358][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.489370][ T38] Call Trace: [ 555.489378][ T38] [ 555.489386][ T38] dump_stack_lvl+0x189/0x250 [ 555.489426][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.489454][ T38] ? __pfx__printk+0x10/0x10 [ 555.489478][ T38] ? _printk+0x99/0x120 [ 555.489510][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 555.489540][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 555.489571][ T38] ? __pfx__printk+0x10/0x10 [ 555.489597][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.489627][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.489656][ T38] watchdog+0xf93/0xfe0 [ 555.489690][ T38] ? watchdog+0x1de/0xfe0 [ 555.489729][ T38] kthread+0x70e/0x8a0 [ 555.489766][ T38] ? __pfx_watchdog+0x10/0x10 [ 555.489790][ T38] ? __pfx_kthread+0x10/0x10 [ 555.489826][ T38] ? __pfx_kthread+0x10/0x10 [ 555.489857][ T38] ret_from_fork+0x3f9/0x770 [ 555.489888][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 555.489920][ T38] ? __switch_to_asm+0x39/0x70 [ 555.489939][ T38] ? __switch_to_asm+0x33/0x70 [ 555.489957][ T38] ? __pfx_kthread+0x10/0x10 [ 555.489988][ T38] ret_from_fork_asm+0x1a/0x30 [ 555.490024][ T38] [ 555.490046][ T38] Sending NMI from CPU 0 to CPUs 1: [ 555.490075][ C1] NMI backtrace for cpu 1 [ 555.490090][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 555.490110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.490119][ C1] RIP: 0010:rtlock_slowlock_locked+0xa9/0x4010 [ 555.490145][ C1] Code: f3 f3 f3 66 42 c7 44 3b 16 f3 f3 48 c7 c0 40 6b 1d 8f 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ee 3a 00 00 83 3d d7 36 24 04 00 <74> 17 49 8d 7c 24 18 be ff ff ff ff e8 36 90 fd ff 85 c0 0f 84 4d [ 555.490158][ C1] RSP: 0000:ffffc90000a3f840 EFLAGS: 00000002 [ 555.490175][ C1] RAX: 0000000000000000 RBX: 1ffff92000147f30 RCX: dffffc0000000000 [ 555.490187][ C1] RDX: 0000000000000001 RSI: ffffc90000a3fae0 RDI: ffff8880b8923d38 [ 555.490198][ C1] RBP: ffffc90000a3fa90 R08: 0000000000000003 R09: 0000000000000004 [ 555.490209][ C1] R10: dffffc0000000000 R11: fffff52000147f30 R12: ffff8880b8923d38 [ 555.490221][ C1] R13: ffffc90000a3fae8 R14: 1ffff92000147f5d R15: dffffc0000000000 [ 555.490233][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 555.490247][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.490260][ C1] CR2: 00007f2107c36038 CR3: 0000000033df2000 CR4: 00000000003526f0 [ 555.490276][ C1] Call Trace: [ 555.490283][ C1] [ 555.490295][ C1] ? __lock_acquire+0xab9/0xd20 [ 555.490320][ C1] ? do_raw_spin_lock+0x121/0x290 [ 555.490339][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.490358][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 555.490381][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 555.490403][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 555.490425][ C1] ? __lock_acquire+0xab9/0xd20 [ 555.490449][ C1] rt_spin_lock+0x152/0x2c0 [ 555.490476][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 555.490496][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 555.490516][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 555.490536][ C1] ? __local_bh_disable_ip+0xa1/0x400 [ 555.490555][ C1] __local_bh_disable_ip+0x264/0x400 [ 555.490574][ C1] ? smpboot_thread_fn+0x53f/0xa60 [ 555.490594][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 555.490614][ C1] ? __pfx___schedule+0x10/0x10 [ 555.490641][ C1] run_ktimerd+0x6b/0x190 [ 555.490662][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 555.490682][ C1] ? schedule+0x91/0x360 [ 555.490706][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 555.490725][ C1] smpboot_thread_fn+0x53f/0xa60 [ 555.490745][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 555.490768][ C1] kthread+0x70e/0x8a0 [ 555.490792][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 555.490811][ C1] ? __pfx_kthread+0x10/0x10 [ 555.490836][ C1] ? __pfx_kthread+0x10/0x10 [ 555.490859][ C1] ret_from_fork+0x3f9/0x770 [ 555.490880][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 555.490902][ C1] ? __switch_to_asm+0x39/0x70 [ 555.490917][ C1] ? __switch_to_asm+0x33/0x70 [ 555.490931][ C1] ? __pfx_kthread+0x10/0x10 [ 555.490954][ C1] ret_from_fork_asm+0x1a/0x30 [ 555.490977][ C1] [ 555.592470][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 555.592495][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 555.592522][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.592534][ T38] Call Trace: [ 555.592542][ T38] [ 555.592552][ T38] dump_stack_lvl+0x99/0x250 [ 555.592589][ T38] ? __asan_memcpy+0x40/0x70 [ 555.592613][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.592644][ T38] ? __pfx__printk+0x10/0x10 [ 555.592681][ T38] vpanic+0x281/0x750 [ 555.592715][ T38] ? __pfx_vpanic+0x10/0x10 [ 555.592742][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 555.592764][ T38] ? preempt_schedule+0xae/0xc0 [ 555.592795][ T38] ? preempt_schedule_common+0x83/0xd0 [ 555.592831][ T38] panic+0xb9/0xc0 [ 555.592861][ T38] ? __pfx_panic+0x10/0x10 [ 555.592890][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 555.592923][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 555.592953][ T38] watchdog+0xfd2/0xfe0 [ 555.592987][ T38] ? watchdog+0x1de/0xfe0 [ 555.593018][ T38] kthread+0x70e/0x8a0 [ 555.593054][ T38] ? __pfx_watchdog+0x10/0x10 [ 555.593080][ T38] ? __pfx_kthread+0x10/0x10 [ 555.593118][ T38] ? __pfx_kthread+0x10/0x10 [ 555.593149][ T38] ret_from_fork+0x3f9/0x770 [ 555.593181][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 555.593214][ T38] ? __switch_to_asm+0x39/0x70 [ 555.593233][ T38] ? __switch_to_asm+0x33/0x70 [ 555.593252][ T38] ? __pfx_kthread+0x10/0x10 [ 555.593284][ T38] ret_from_fork_asm+0x1a/0x30 [ 555.593321][ T38] [ 555.593775][ T38] Kernel Offset: disabled