last executing test programs: 52.930150577s ago: executing program 3 (id=130): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00090000000000000000001c"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 52.781992091s ago: executing program 3 (id=133): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x3a, 0x1) 52.596987586s ago: executing program 3 (id=139): unshare(0x24060400) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) connect$ax25(r0, 0x0, 0x0) 52.364765251s ago: executing program 3 (id=144): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 51.988560577s ago: executing program 3 (id=148): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 51.816124732s ago: executing program 3 (id=151): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 36.73346723s ago: executing program 32 (id=151): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 26.692966129s ago: executing program 1 (id=438): mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid']) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='iso9660\x00', 0x0, &(0x7f0000000340)) 26.576913784s ago: executing program 4 (id=441): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0x0, 0xee00, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) 26.492523572s ago: executing program 1 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x421, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0xfffffffd}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x140008c1}, 0x40008d2) 26.393170505s ago: executing program 4 (id=445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) geteuid() 26.244562081s ago: executing program 4 (id=447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, 0x0, 0x0) 26.236995734s ago: executing program 1 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 25.854483507s ago: executing program 1 (id=449): unshare(0x20000400) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 25.6143684s ago: executing program 1 (id=450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x25) 25.379562593s ago: executing program 1 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 25.102488006s ago: executing program 0 (id=452): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sendfile(r0, r0, 0x0, 0x10000000009) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0x4000a00}) 24.76838101s ago: executing program 2 (id=455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x0) 24.578259111s ago: executing program 2 (id=456): r0 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4b3141085d274847}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 24.464776193s ago: executing program 2 (id=457): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000140), 0x1) 24.31745098s ago: executing program 2 (id=458): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf0bd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x14, &(0x7f0000000040)={0x40, 0x21, 0x4, {0x4, 0x1, "5cc0"}}, 0x0, 0x0, 0x0}, 0x0) 24.074726083s ago: executing program 0 (id=459): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) 24.056447327s ago: executing program 4 (id=460): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 23.084543364s ago: executing program 4 (id=461): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000100)=[{0x2, 0xd5db}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) 22.347742252s ago: executing program 2 (id=462): unshare(0x2c020400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 22.00608586s ago: executing program 0 (id=463): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x408, &(0x7f0000000c80)={[{0xd1, 0x4e00, "201d2b139f0f50174f3555d1cd7ee6a06f8517a9e808e62ef0d4fa27ae61f476d4966234dd5c7a9782dd483e04d36edc8d04195dbc8c8e073be39d5207f5f0dd93f49462443f6bbffe7610db706b75d8a3fd7c61b6a26649c62ea56e4e5b00990328008ba2d37c0a79eba6f7690630a5ced6c29b050d78638c5dfc6ab9e779a31f0fd6890609eb3a75e8f8948e77d6bcd587b38e5d52205bc847a221e133b11f7ad5cb601d28158944607b193b6c9cdab260f7ae46deaf03a3f759e4e5f5a3d5c54107048aa373b87b1dc63478c39aac96"}, {0x39, 0x4e00, "5a0dfc24523445467498353ccd44c1bfb90c460f3a5e92f770cec446cb5e61c19c44145a287b3c403bc252a3a0f5a64e1a49f6b6d29a5507ca"}, {0x79, 0x4e00, "a45310d8b7b83767fe1548f2e143896df124dfbbad9218793442e53740761fa492c404f60ad724ae78b51f27b68bb32615c3d06d4b2e52cc452d0b84a19a41354a23d77a59c091b4a7ac8540bcea2c0471a0b126bf9ab07577a8926ed21ab67350bfa6370e427d8216176b617c945a09dadf93ca9523ff5cca"}, {0xf1, 0x4e00, "2af5c15ff6e1a32e5eb9bc8782a47ea9e719d6d91a24e2c7ffd8d066cbb1f92335b4e23203f084cb646bf7c261c8fd1d1f677d79aa7e78b1b2dfb2aa06f0879006eab2e9d5a491fd1a859e575a8e76cdbda772a23a78317fcca86097f7e458bb63c8b0dd512e0855dab78630ab086e4f7832b1e929722f6a288edddb3e5e912bf0137c595f9221a482546ab030c69346f480b93d8b961d9f1b6cd39e3142493f81c5d006f02709a6c8dc62fbefa7bc23efbace475fefdfe47e4dc12226802fb4bc5fd269728fcbd1d3e4013c0d6457c1b86c48ea332892a8f6e786742a6ce02b6f44ad5aa89854af6fab9d250986e4a6b1"}, {0x1d, 0x4e00, "ce911fc6c01bebd93d0a997466976c21d1d1079cafd13fb51f84e8be58"}, {0xa1, 0x4e00, "a56e942df2f77c22a6647a8d7c806da8f6a5461fc1cc4bfd4c364085057ffbfdb70a6361c8916eccf3e103828722e1050eae496b918093a79fdc73b9f2c1df07e512192dce314b4c547136cff55bd3f9c76fca41caa904d3912f29ce0566b84db656d0c29d47e221af6fe0f8c7d875d3618273c3d0e233576df71806fdd24a9cc24989e274cb732a406abc134a87ba6fd461b34736667e17834384891236364405"}, {0xa7, 0x4e00, "cab4ee8882517c6a8c73490860ba8dfce47824d0aa62adecb268459d6c28ebcc6346b95d3e5dbf59c2eae0ca10f4fcce660bb0699860698c15562a6d29a4ed825d4afd044a43ddad2426f8f23f987ce043a165f130ae373705b850249d4ccabb56e15060b933e23080f82232574c1a1a6dafe2a92718042cb43b1b1e1d6d4dd98e94e602719cf5e6bc14c1797fce22cec24526c9d5cec1964c1c46e162d8f90dad8375be9c613c"}]}) 21.866933308s ago: executing program 4 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 20.087110947s ago: executing program 0 (id=465): r0 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) 15.802883891s ago: executing program 2 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 15.66609532s ago: executing program 0 (id=467): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xffffffffffffffff, 0x6, 0x10, @buffer={0x20, 0x0, 0x0}, &(0x7f0000000040)="ae04dd735fc9", 0x0, 0x100004, 0x0, 0x3, 0x0}) 15.526476694s ago: executing program 0 (id=468): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) 10.084714534s ago: executing program 33 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001a00020000000800170003000000080013000000000008000300000000000800070000000200080002"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) 5.701905195s ago: executing program 34 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 548.231852ms ago: executing program 35 (id=466): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03210000000000002c0012800c0001006d6163766c616e001c000280080001000800000006000200010000001ffe02000000000008000500", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 0s ago: executing program 36 (id=468): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 82.771814][ T5826] cgroup: Unknown subsys name 'net' [ 83.003286][ T5826] cgroup: Unknown subsys name 'cpuset' [ 83.039120][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.809030][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.853917][ T982] cfg80211: failed to load regulatory.db [ 88.959267][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.978173][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.988683][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.990924][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.997837][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.018688][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.038703][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.048069][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.060168][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.069080][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.080965][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.081715][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.083903][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.088222][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.090539][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.149427][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.151484][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.155316][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.158150][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.190777][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.192912][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.194492][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.199199][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.216437][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.217369][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.225210][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.350110][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.489565][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 90.632618][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 90.639962][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 91.090475][ T5851] Bluetooth: hci2: command tx timeout [ 91.120920][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.121097][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.121704][ T5838] bridge_slave_0: entered allmulticast mode [ 91.124587][ T5838] bridge_slave_0: entered promiscuous mode [ 91.169216][ T5156] Bluetooth: hci1: command tx timeout [ 91.169388][ T5851] Bluetooth: hci0: command tx timeout [ 91.284529][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.284625][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.285035][ T5838] bridge_slave_1: entered allmulticast mode [ 91.286889][ T5838] bridge_slave_1: entered promiscuous mode [ 91.338703][ T5156] Bluetooth: hci4: command tx timeout [ 91.339006][ T5851] Bluetooth: hci3: command tx timeout [ 91.584349][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.584523][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.584742][ T5839] bridge_slave_0: entered allmulticast mode [ 91.587755][ T5839] bridge_slave_0: entered promiscuous mode [ 91.802299][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.802841][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.803078][ T5839] bridge_slave_1: entered allmulticast mode [ 91.805983][ T5839] bridge_slave_1: entered promiscuous mode [ 91.808395][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.809563][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.809793][ T5845] bridge_slave_0: entered allmulticast mode [ 91.812966][ T5845] bridge_slave_0: entered promiscuous mode [ 91.995590][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.060285][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.060442][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.060644][ T5845] bridge_slave_1: entered allmulticast mode [ 92.063498][ T5845] bridge_slave_1: entered promiscuous mode [ 92.218082][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.435018][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.435135][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.435281][ T5848] bridge_slave_0: entered allmulticast mode [ 92.437243][ T5848] bridge_slave_0: entered promiscuous mode [ 92.442085][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.442240][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.442442][ T5847] bridge_slave_0: entered allmulticast mode [ 92.446976][ T5847] bridge_slave_0: entered promiscuous mode [ 92.574224][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.658299][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.660179][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.660441][ T5848] bridge_slave_1: entered allmulticast mode [ 92.663845][ T5848] bridge_slave_1: entered promiscuous mode [ 92.666610][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.666763][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.666948][ T5847] bridge_slave_1: entered allmulticast mode [ 92.681677][ T5847] bridge_slave_1: entered promiscuous mode [ 92.794011][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.805733][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.952723][ T5838] team0: Port device team_slave_0 added [ 93.032074][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.168759][ T5851] Bluetooth: hci2: command tx timeout [ 93.209357][ T5838] team0: Port device team_slave_1 added [ 93.256182][ T5851] Bluetooth: hci0: command tx timeout [ 93.256192][ T5156] Bluetooth: hci1: command tx timeout [ 93.390598][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.394310][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.408646][ T5156] Bluetooth: hci3: command tx timeout [ 93.408654][ T5851] Bluetooth: hci4: command tx timeout [ 93.492109][ T5839] team0: Port device team_slave_0 added [ 93.573864][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.577401][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.881042][ T5839] team0: Port device team_slave_1 added [ 93.883483][ T5845] team0: Port device team_slave_0 added [ 94.049283][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.049299][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.049324][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.131542][ T5845] team0: Port device team_slave_1 added [ 94.271873][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.271889][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.271913][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.422005][ T5848] team0: Port device team_slave_0 added [ 94.426039][ T5847] team0: Port device team_slave_0 added [ 94.443230][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.443245][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.443263][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.542896][ T5848] team0: Port device team_slave_1 added [ 94.544914][ T5847] team0: Port device team_slave_1 added [ 94.547278][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.547288][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.547305][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.548239][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.548247][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.548263][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.797302][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.797317][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.797340][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.119368][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.119383][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.119407][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.121568][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.121580][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.121604][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.220429][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.220442][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.220466][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.226030][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.226039][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.226057][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.248537][ T5851] Bluetooth: hci2: command tx timeout [ 95.255192][ T5838] hsr_slave_0: entered promiscuous mode [ 95.256770][ T5838] hsr_slave_1: entered promiscuous mode [ 95.328793][ T5851] Bluetooth: hci0: command tx timeout [ 95.328820][ T5851] Bluetooth: hci1: command tx timeout [ 95.489837][ T5156] Bluetooth: hci4: command tx timeout [ 95.489844][ T5851] Bluetooth: hci3: command tx timeout [ 95.547053][ T5839] hsr_slave_0: entered promiscuous mode [ 95.547935][ T5839] hsr_slave_1: entered promiscuous mode [ 95.559982][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 95.560062][ T5839] Cannot create hsr debugfs directory [ 95.841783][ T5845] hsr_slave_0: entered promiscuous mode [ 95.843034][ T5845] hsr_slave_1: entered promiscuous mode [ 95.844503][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 95.844529][ T5845] Cannot create hsr debugfs directory [ 96.268779][ T5848] hsr_slave_0: entered promiscuous mode [ 96.269938][ T5848] hsr_slave_1: entered promiscuous mode [ 96.270564][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 96.270585][ T5848] Cannot create hsr debugfs directory [ 96.276313][ T5847] hsr_slave_0: entered promiscuous mode [ 96.277235][ T5847] hsr_slave_1: entered promiscuous mode [ 96.277860][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 96.277884][ T5847] Cannot create hsr debugfs directory [ 97.329487][ T5156] Bluetooth: hci2: command tx timeout [ 97.408904][ T5851] Bluetooth: hci1: command tx timeout [ 97.408944][ T5156] Bluetooth: hci0: command tx timeout [ 97.568606][ T5851] Bluetooth: hci3: command tx timeout [ 97.568648][ T5156] Bluetooth: hci4: command tx timeout [ 97.788378][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.834339][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.868259][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.926713][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.081445][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.121718][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.157483][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.230800][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.366564][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.413465][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.454941][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.513339][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.675439][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.734087][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.783548][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.836102][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.008323][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.045703][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.046876][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.079612][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.134425][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.220549][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.251605][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.283867][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.284333][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.326894][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.327029][ T983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.376987][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.397481][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.434481][ T983] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.435075][ T983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.486729][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.486815][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.531362][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.573603][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.591962][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.592156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.634597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.634714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.737421][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.808290][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.819851][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.820162][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.882668][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.882802][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.983272][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.028364][ T3761] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.028657][ T3761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.081300][ T3761] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.081484][ T3761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.182798][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.464752][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.553611][ T5838] veth0_vlan: entered promiscuous mode [ 100.582726][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.612030][ T5838] veth1_vlan: entered promiscuous mode [ 100.833031][ T5839] veth0_vlan: entered promiscuous mode [ 100.906051][ T5838] veth0_macvtap: entered promiscuous mode [ 100.947130][ T5839] veth1_vlan: entered promiscuous mode [ 100.950320][ T5845] veth0_vlan: entered promiscuous mode [ 100.967928][ T5838] veth1_macvtap: entered promiscuous mode [ 101.005877][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.025568][ T5845] veth1_vlan: entered promiscuous mode [ 101.081056][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.083853][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.122704][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.162165][ T5839] veth0_macvtap: entered promiscuous mode [ 101.179700][ T3761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.199729][ T5839] veth1_macvtap: entered promiscuous mode [ 101.201179][ T3761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.214930][ T3761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.237728][ T3761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.275476][ T5845] veth0_macvtap: entered promiscuous mode [ 101.368256][ T5845] veth1_macvtap: entered promiscuous mode [ 101.459188][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.574697][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.609834][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.612488][ T5847] veth0_vlan: entered promiscuous mode [ 101.644284][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.660260][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.663691][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.678207][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.716745][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.753491][ T5847] veth1_vlan: entered promiscuous mode [ 101.755172][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.765263][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.770800][ T3482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.770820][ T3482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.825814][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.847100][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.075386][ T3482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.075405][ T3482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.141496][ T5848] veth0_vlan: entered promiscuous mode [ 102.285285][ T5848] veth1_vlan: entered promiscuous mode [ 102.311863][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.311880][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.316536][ T5847] veth0_macvtap: entered promiscuous mode [ 102.430009][ T5847] veth1_macvtap: entered promiscuous mode [ 102.444550][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.444568][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.506628][ T5958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.506736][ T5958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.507331][ T5958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.507545][ T5958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.507808][ T5958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.507876][ T5958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.508137][ T5958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.508204][ T5958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.509915][ T5958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.509993][ T5958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.633573][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.739774][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.739793][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.744216][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.796902][ T5848] veth0_macvtap: entered promiscuous mode [ 102.816433][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.816454][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.875230][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.884316][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.889737][ T5848] veth1_macvtap: entered promiscuous mode [ 102.903736][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.930927][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.211561][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.351121][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.471622][ T3482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.472489][ T3482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.472537][ T3482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.472576][ T3482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.802737][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.802761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.332604][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.332622][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.594121][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.594144][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.756867][ T5986] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 104.798843][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.798864][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.475028][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 105.558350][ T5997] erspan0: entered promiscuous mode [ 105.600101][ T5997] erspan0: left promiscuous mode [ 106.378805][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.558858][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 106.563082][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 106.601945][ T44] usb 2-1: config 4 interface 0 has no altsetting 0 [ 106.625816][ T44] usb 2-1: string descriptor 0 read error: -22 [ 106.625900][ T44] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 106.625922][ T44] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 106.754244][ T44] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 106.791873][ T44] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 106.792983][ T44] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 106.793056][ T44] usb 2-1: media controller created [ 106.880442][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.516699][ T6031] process 'syz.3.31' launched '/dev/fd/3' with NULL argv: empty string added [ 107.534805][ T6030] netlink: 'syz.4.30': attribute type 6 has an invalid length. [ 107.807131][ T6036] ALSA: seq fatal error: cannot create timer (-22) [ 108.121837][ T44] zl10353_read_register: readreg error (reg=127, ret==0) [ 108.817174][ T44] usb 2-1: USB disconnect, device number 2 [ 108.850175][ T5853] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.009084][ T5853] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 109.009112][ T5853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.009131][ T5853] usb 3-1: config 0 has no interface number 0 [ 109.009195][ T5853] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 109.009216][ T5853] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.089147][ T5853] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 109.089178][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.089198][ T5853] usb 3-1: Product: syz [ 109.089213][ T5853] usb 3-1: Manufacturer: syz [ 109.089228][ T5853] usb 3-1: SerialNumber: syz [ 109.131419][ T5853] usb 3-1: config 0 descriptor?? [ 109.400276][ T5853] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 109.448964][ T5853] usb 3-1: USB disconnect, device number 2 [ 109.528678][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.687340][ T44] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 109.687375][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.736113][ T44] usb 1-1: config 0 descriptor?? [ 109.768600][ T5923] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.932219][ T5923] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.932248][ T5923] usb 4-1: config 0 has no interface number 0 [ 109.960237][ T5923] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 109.960552][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.960575][ T5923] usb 4-1: Product: syz [ 109.960826][ T5923] usb 4-1: Manufacturer: syz [ 109.960844][ T5923] usb 4-1: SerialNumber: syz [ 110.119124][ T5923] usb 4-1: config 0 descriptor?? [ 110.385310][ T44] pantherlord 0003:0F30:0111.0001: item fetching failed at offset 0/4 [ 110.388018][ T44] pantherlord 0003:0F30:0111.0001: parse failed [ 110.388099][ T44] pantherlord 0003:0F30:0111.0001: probe with driver pantherlord failed with error -22 [ 110.410321][ T5923] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 110.437487][ T5923] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.448692][ T5853] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 110.468622][ T5923] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 110.468673][ T5923] usb 4-1: media controller created [ 110.514750][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.561588][ T5908] usb 1-1: USB disconnect, device number 2 [ 110.626348][ T5853] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.626378][ T5853] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.661574][ T5853] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.661606][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.661628][ T5853] usb 5-1: Product: syz [ 110.661643][ T5853] usb 5-1: Manufacturer: syz [ 110.661658][ T5853] usb 5-1: SerialNumber: syz [ 110.938359][ T44] usb 4-1: USB disconnect, device number 2 [ 111.180910][ T5853] usb 5-1: cannot find UAC_HEADER [ 111.313717][ T5853] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 111.352973][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 111.420492][ T5923] usb 5-1: USB disconnect, device number 2 [ 111.424695][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.428664][ T44] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 111.582074][ T6088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 111.583719][ T44] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 111.583745][ T44] usb 3-1: config 0 has no interface number 0 [ 111.583795][ T44] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 111.583819][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.635454][ T44] usb 3-1: config 0 descriptor?? [ 111.637606][ T6088] vlan2: entered promiscuous mode [ 111.637625][ T6088] gretap0: entered promiscuous mode [ 111.720112][ T44] usb 3-1: selecting invalid altsetting 1 [ 111.720828][ T44] dvb_ttusb_budget: ttusb_init_controller: error [ 111.720843][ T44] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 111.873660][ T44] DVB: Unable to find symbol cx22700_attach() [ 111.978677][ T44] DVB: Unable to find symbol tda10046_attach() [ 111.978691][ T44] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 111.986016][ T44] usb 3-1: USB disconnect, device number 3 [ 112.197177][ T6100] netlink: 32 bytes leftover after parsing attributes in process `syz.4.62'. [ 113.108923][ T6130] net_ratelimit: 1052 callbacks suppressed [ 113.108942][ T6130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.109045][ T6130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.109382][ T6130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.109451][ T6130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.109707][ T6130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.109776][ T6130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.110028][ T6130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.110095][ T6130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 113.110348][ T6130] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 113.110414][ T6130] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 114.248658][ T5853] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.384034][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 114.384058][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.86'. [ 114.416326][ T5853] usb 5-1: Using ep0 maxpacket: 16 [ 114.423879][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.423912][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.423935][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.423980][ T5853] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.424005][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.482678][ T6166] bridge1: entered promiscuous mode [ 114.482710][ T6166] bridge1: entered allmulticast mode [ 114.526759][ T5853] usb 5-1: config 0 descriptor?? [ 114.549783][ T6166] team0: Port device bridge1 added [ 114.837774][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 114.984892][ T5853] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 115.060622][ T5853] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 115.060658][ T5853] microsoft 0003:045E:07DA.0002: no inputs found [ 115.060672][ T5853] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 115.078613][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.152848][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 115.221538][ T5853] usb 5-1: USB disconnect, device number 3 [ 115.262227][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 115.278588][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 115.301904][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.301940][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 115.301965][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 115.301992][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.357610][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 115.357643][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.357663][ T10] usb 2-1: Product: syz [ 115.357679][ T10] usb 2-1: Manufacturer: syz [ 115.357693][ T10] usb 2-1: SerialNumber: syz [ 115.505206][ T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 115.528424][ T10] usbtest 2-1:1.0: Linux user mode ISO test driver [ 115.532442][ T10] usbtest 2-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 115.533213][ T6185] erspan0: entered promiscuous mode [ 115.559084][ T6185] erspan0: left promiscuous mode [ 115.625905][ T6184] fido_id[6184]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.712486][ T5853] usb 2-1: USB disconnect, device number 3 [ 116.067015][ T6197] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 116.519706][ T6208] warning: `syz.0.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.738877][ T6216] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 117.138921][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.288546][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 117.294168][ T5897] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 117.294221][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.294242][ T5897] usb 1-1: Product: syz [ 117.294256][ T5897] usb 1-1: Manufacturer: syz [ 117.294270][ T5897] usb 1-1: SerialNumber: syz [ 117.381963][ T5897] r8152-cfgselector 1-1: Unknown version 0x0000 [ 117.381985][ T5897] r8152-cfgselector 1-1: config 0 descriptor?? [ 117.645771][ T5897] r8152-cfgselector 1-1: Needed 1 retries to read version [ 117.645819][ T5897] r8152-cfgselector 1-1: Unknown version 0x0000 [ 117.646495][ T5897] r8152-cfgselector 1-1: bad CDC descriptors [ 117.861160][ T9] r8152-cfgselector 1-1: USB disconnect, device number 3 [ 118.098909][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.132137][ T6258] net_ratelimit: 2229 callbacks suppressed [ 118.132156][ T6258] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.132239][ T6258] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.132518][ T6258] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.132594][ T6258] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.132861][ T6258] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.132932][ T6258] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.133202][ T6258] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.133274][ T6258] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.133584][ T6258] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 118.133668][ T6258] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.250797][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.250820][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.253000][ T5923] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.253024][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 118.253043][ T5923] usb 2-1: SerialNumber: syz [ 118.509247][ T5923] usb 2-1: 0:2 : does not exist [ 118.567878][ T5923] usb 2-1: USB disconnect, device number 4 [ 118.876048][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 118.897525][ T6281] capability: warning: `syz.0.131' uses 32-bit capabilities (legacy support in use) [ 120.278929][ T6328] tipc: Started in network mode [ 120.278972][ T6328] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 120.280037][ T6328] tipc: Enabled bearer , priority 0 [ 120.307637][ T6331] mmap: syz.1.157 (6331) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.478596][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.628993][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 120.631787][ T5853] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 120.636509][ T5853] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 120.636540][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.636561][ T5853] usb 5-1: Product: syz [ 120.636577][ T5853] usb 5-1: Manufacturer: syz [ 120.636592][ T5853] usb 5-1: SerialNumber: syz [ 120.674968][ T5853] usb 5-1: config 0 descriptor?? [ 120.703099][ T5853] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 120.703175][ T5853] usb 5-1: setting power ON [ 120.703726][ T5853] dvb-usb: bulk message failed: -22 (2/0) [ 120.749726][ T5853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.761825][ T5853] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 120.761897][ T5853] usb 5-1: media controller created [ 120.886969][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.166'. [ 120.899343][ T6327] dvb-usb: bulk message failed: -22 (3/0) [ 120.899366][ T6327] cxusb: i2c wr: len=8192 is too big! [ 120.899366][ T6327] [ 120.956281][ T5853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.082532][ T5853] usb 5-1: selecting invalid altsetting 6 [ 121.082557][ T5853] usb 5-1: digital interface selection failed (-22) [ 121.082584][ T5853] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 121.087078][ T5853] usb 5-1: setting power OFF [ 121.087195][ T5853] dvb-usb: bulk message failed: -22 (2/0) [ 121.087215][ T5853] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 121.087229][ T5853] (NULL device *): no alternate interface [ 121.121900][ T6352] netlink: 'syz.2.167': attribute type 5 has an invalid length. [ 121.322699][ T5853] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 121.342041][ T5853] usb 5-1: USB disconnect, device number 4 [ 121.400528][ T5897] tipc: Node number set to 11578026 [ 122.148642][ T5897] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 122.305385][ T5897] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.305417][ T5897] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.305437][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.305468][ T5897] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 122.305489][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.363287][ T5897] usb 3-1: config 0 descriptor?? [ 122.810156][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810199][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810227][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810254][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810281][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810307][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810334][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.810360][ T5897] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0 [ 122.902241][ T5897] holtek_mouse 0003:04D9:A067.0003: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 122.998606][ T5853] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.018289][ T10] usb 3-1: USB disconnect, device number 4 [ 123.150993][ T5853] usb 2-1: Using ep0 maxpacket: 32 [ 123.166346][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.166391][ T5853] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 123.166413][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.202672][ T5853] usb 2-1: config 0 descriptor?? [ 123.608930][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.654927][ T5853] kye 0003:0458:5013.0004: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 123.656354][ T5853] kye 0003:0458:5013.0004: unbalanced collection at end of report description [ 123.657229][ T5853] kye 0003:0458:5013.0004: parse failed [ 123.657304][ T5853] kye 0003:0458:5013.0004: probe with driver kye failed with error -22 [ 123.778642][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 123.785475][ T10] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.785504][ T10] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.785530][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.785563][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 123.785585][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.815031][ T10] usb 1-1: config 0 descriptor?? [ 123.855575][ T5923] usb 2-1: USB disconnect, device number 5 [ 124.236563][ T10] magicmouse 0003:05AC:0324.0005: unknown main item tag 0x0 [ 124.236602][ T10] magicmouse 0003:05AC:0324.0005: unknown main item tag 0x0 [ 124.254361][ T10] magicmouse 0003:05AC:0324.0005: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.0-1/input0 [ 124.255172][ T10] magicmouse 0003:05AC:0324.0005: magicmouse input not registered [ 124.267133][ T10] magicmouse 0003:05AC:0324.0005: probe with driver magicmouse failed with error -12 [ 124.435042][ T10] usb 1-1: USB disconnect, device number 4 [ 124.571141][ T6424] netlink: 5636 bytes leftover after parsing attributes in process `syz.1.199'. [ 125.326355][ T5923] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 125.481719][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.481752][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.481774][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 125.481815][ T5923] usb 1-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00 [ 125.481837][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.525511][ T5923] usb 1-1: config 0 descriptor?? [ 125.584865][ T6435] net_ratelimit: 941 callbacks suppressed [ 125.584888][ T6435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.844143][ T6433] syz.1.203 (6433) used greatest stack depth: 15976 bytes left [ 125.960674][ T6437] tmpfs: Bad value for 'mpol' [ 126.002722][ T5923] hid-generic 0003:045E:008E.0006: unbalanced collection at end of report description [ 126.022661][ T5923] hid-generic 0003:045E:008E.0006: probe with driver hid-generic failed with error -22 [ 126.049256][ T6439] netlink: 60 bytes leftover after parsing attributes in process `syz.1.206'. [ 126.049279][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'. [ 126.049292][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.206'. [ 126.168327][ T6442] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 126.196957][ T10] usb 1-1: USB disconnect, device number 5 [ 126.908989][ T6464] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 126.909015][ T6464] CIFS mount error: No usable UNC path provided in device string! [ 126.909015][ T6464] [ 126.909303][ T6464] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.918571][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 127.084489][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 127.084542][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.084567][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 127.084625][ T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 127.084648][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.146106][ T10] usb 2-1: config 0 descriptor?? [ 127.206290][ T6473] netlink: 'syz.4.223': attribute type 12 has an invalid length. [ 127.206309][ T6473] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.223'. [ 127.471840][ T6478] ======================================================= [ 127.471840][ T6478] WARNING: The mand mount option has been deprecated and [ 127.471840][ T6478] and is ignored by this kernel. Remove the mand [ 127.471840][ T6478] option from the mount to silence this warning. [ 127.471840][ T6478] ======================================================= [ 127.559452][ T10] holtek_kbd 0003:04D9:A055.0007: item fetching failed at offset 5/7 [ 127.561346][ T10] holtek_kbd 0003:04D9:A055.0007: probe with driver holtek_kbd failed with error -22 [ 127.777438][ T5923] usb 2-1: USB disconnect, device number 6 [ 127.843215][ T6484] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 127.876694][ T6486] tipc: Enabling not permitted [ 127.876723][ T6486] tipc: Enabling of bearer rejected, failed to enable media [ 128.758552][ T5923] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.808603][ T5897] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 128.819118][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 128.908584][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 128.911124][ T5923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.911147][ T5923] usb 1-1: config 0 has no interface number 0 [ 128.911219][ T5923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.911245][ T5923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.911283][ T5923] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 128.911304][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.927298][ T5923] usb 1-1: config 0 descriptor?? [ 128.965554][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.965589][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 128.965636][ T5897] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 128.965722][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.003771][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.003797][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.005061][ T5897] usb 2-1: config 0 descriptor?? [ 129.035420][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 129.035444][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 129.035463][ T10] usb 5-1: SerialNumber: syz [ 129.305759][ T10] usb 5-1: 0:2 : does not exist [ 129.349911][ T10] usb 5-1: USB disconnect, device number 5 [ 129.408529][ T5156] Bluetooth: hci4: command tx timeout [ 129.504459][ T5897] mcp2200 0003:04D8:00DF.0009: item fetching failed at offset 5/7 [ 129.510311][ T5897] mcp2200 0003:04D8:00DF.0009: can't parse reports [ 129.510656][ T5897] mcp2200 0003:04D8:00DF.0009: probe with driver mcp2200 failed with error -22 [ 129.553545][ T5923] uclogic 0003:28BD:0071.0008: failed retrieving string descriptor #100: -71 [ 129.553607][ T5923] uclogic 0003:28BD:0071.0008: failed retrieving pen parameters: -71 [ 129.553625][ T5923] uclogic 0003:28BD:0071.0008: pen probing failed: -71 [ 129.553651][ T5923] uclogic 0003:28BD:0071.0008: failed probing parameters: -71 [ 129.553763][ T5923] uclogic 0003:28BD:0071.0008: probe with driver uclogic failed with error -71 [ 129.579030][ T5923] usb 1-1: USB disconnect, device number 6 [ 129.658956][ T5897] usb 2-1: USB disconnect, device number 7 [ 129.716862][ T6515] vlan2: entered promiscuous mode [ 129.716882][ T6515] macvtap0: entered promiscuous mode [ 130.294950][ T37] audit: type=1800 audit(1758337892.684:2): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.249" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 130.357232][ T6531] netlink: 56 bytes leftover after parsing attributes in process `syz.1.250'. [ 130.583115][ T9] IPVS: starting estimator thread 0... [ 130.669108][ T6541] IPVS: using max 10 ests per chain, 24000 per kthread [ 131.420443][ T6573] netlink: 'syz.2.270': attribute type 9 has an invalid length. [ 131.420462][ T6573] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.270'. [ 131.420566][ T6573] openvswitch: netlink: Message has 5 unknown bytes. [ 131.463956][ T6575] nbd: socks must be embedded in a SOCK_ITEM attr [ 131.578877][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.633136][ T37] audit: type=1326 audit(1758337894.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.633185][ T37] audit: type=1326 audit(1758337894.034:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6579 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb40c06ec29 code=0x7ffc0000 [ 131.633225][ T37] audit: type=1326 audit(1758337894.034:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.640642][ T37] audit: type=1326 audit(1758337894.044:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.640690][ T37] audit: type=1326 audit(1758337894.044:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.640731][ T37] audit: type=1326 audit(1758337894.044:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.640773][ T37] audit: type=1326 audit(1758337894.044:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.640816][ T37] audit: type=1326 audit(1758337894.044:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.640857][ T37] audit: type=1326 audit(1758337894.044:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.2.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da8bdec29 code=0x7ffc0000 [ 131.839032][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 131.839058][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.839075][ T9] usb 1-1: Product: syz [ 131.839087][ T9] usb 1-1: Manufacturer: syz [ 131.839099][ T9] usb 1-1: SerialNumber: syz [ 131.881206][ T9] usb 1-1: config 0 descriptor?? [ 131.899863][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 132.140463][ T6589] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 132.519018][ T9] gspca_sunplus: reg_r err -71 [ 132.519117][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 132.576519][ T9] usb 1-1: USB disconnect, device number 7 [ 133.369497][ T6625] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 133.827767][ T6645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 133.908634][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.060875][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.060904][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.060938][ T9] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 134.060959][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.099193][ T9] usb 1-1: config 0 descriptor?? [ 134.526032][ T9] aquacomputer_d5next 0003:0C70:F00D.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.0-1/input0 [ 134.721681][ T10] usb 1-1: USB disconnect, device number 8 [ 135.338623][ T5897] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.498301][ T5897] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.498348][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.498382][ T5897] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 135.498404][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.509706][ T5897] usb 5-1: config 0 descriptor?? [ 135.602328][ T6684] tipc: Started in network mode [ 135.603335][ T6684] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 135.630887][ T6684] tipc: Enabled bearer , priority 2 [ 135.743317][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.745678][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.746583][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.747598][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.748337][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.026361][ T5897] apple 0003:05AC:027A.000B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 136.177494][ T10] usb 5-1: USB disconnect, device number 6 [ 136.498720][ T6025] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 136.672031][ T6025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.672062][ T6025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.672096][ T6025] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 136.672117][ T6025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.684446][ T6025] usb 1-1: config 0 descriptor?? [ 136.728590][ T5897] tipc: Node number set to 10070698 [ 137.139602][ T6025] hid_mf 0003:0079:1846.000C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 137.139640][ T6025] hid_mf 0003:0079:1846.000C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 137.345736][ T3734] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.357220][ T6025] usb 1-1: USB disconnect, device number 9 [ 137.754710][ T3734] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.864415][ T6729] loop6: detected capacity change from 0 to 7 [ 137.889381][ T5851] Bluetooth: hci5: command tx timeout [ 137.905111][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.905196][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.915252][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.915285][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.917810][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.917840][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.918151][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.918177][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.918538][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.918575][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.930915][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.930949][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.931235][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.931264][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.931366][ T6729] ldm_validate_partition_table(): Disk read failed. [ 137.931547][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.931576][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.932063][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.932094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.951277][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 137.951309][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 137.952779][ T6729] Dev loop6: unable to read RDB block 0 [ 137.955404][ T6729] loop6: unable to read partition table [ 137.955637][ T6729] loop6: partition table beyond EOD, truncated [ 137.955668][ T6729] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 138.076277][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.076356][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.363237][ T3734] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.382737][ T6738] netlink: 79 bytes leftover after parsing attributes in process `syz.4.348'. [ 138.382847][ T6738] netlink: 79 bytes leftover after parsing attributes in process `syz.4.348'. [ 138.420574][ T6734] sit0: entered promiscuous mode [ 138.426545][ T6734] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 138.426559][ T6734] netlink: 1 bytes leftover after parsing attributes in process `syz.1.345'. [ 138.475785][ T6685] chnl_net:caif_netlink_parms(): no params data found [ 139.350478][ T3734] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.483790][ T6769] netlink: 104 bytes leftover after parsing attributes in process `syz.2.363'. [ 139.968864][ T5851] Bluetooth: hci5: command tx timeout [ 140.009092][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.009218][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.009996][ T6685] bridge_slave_0: entered allmulticast mode [ 140.017025][ T6685] bridge_slave_0: entered promiscuous mode [ 140.067216][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.067643][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.067885][ T6685] bridge_slave_1: entered allmulticast mode [ 140.083984][ T6685] bridge_slave_1: entered promiscuous mode [ 140.411546][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.484846][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.658646][ T6025] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 140.810230][ T6025] usb 5-1: Using ep0 maxpacket: 16 [ 140.813267][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.813294][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.813329][ T6025] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 140.813349][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.829823][ T6685] team0: Port device team_slave_0 added [ 140.833102][ T6025] usb 5-1: config 0 descriptor?? [ 140.885997][ T3734] bridge_slave_1: left allmulticast mode [ 140.886298][ T3734] bridge_slave_1: left promiscuous mode [ 140.888013][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.982726][ T3734] bridge_slave_0: left allmulticast mode [ 140.982763][ T3734] bridge_slave_0: left promiscuous mode [ 140.982977][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.305661][ T6025] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 141.490864][ T6025] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). [ 141.502314][ T6025] usb 5-1: USB disconnect, device number 7 [ 142.048653][ T5156] Bluetooth: hci5: command tx timeout [ 143.161071][ T3734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.219243][ T3734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.244730][ T3734] bond0 (unregistering): Released all slaves [ 143.301823][ T6685] team0: Port device team_slave_1 added [ 143.891834][ T5897] hid-generic 0001:0009:0001.000E: item fetching failed at offset 0/4 [ 143.893259][ T5897] hid-generic 0001:0009:0001.000E: probe with driver hid-generic failed with error -22 [ 144.128656][ T5156] Bluetooth: hci5: command tx timeout [ 144.315039][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.315069][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.315091][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.323600][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.323618][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.323651][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.143066][ T6932] iso9660: Bad value for 'gid' [ 145.143084][ T6932] iso9660: Bad value for 'gid' [ 145.165390][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 145.194077][ T6934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.223300][ T6685] hsr_slave_0: entered promiscuous mode [ 145.228278][ T6685] hsr_slave_1: entered promiscuous mode [ 145.247463][ T6685] debugfs: 'hsr0' already exists in 'hsr' [ 145.247485][ T6685] Cannot create hsr debugfs directory [ 145.521343][ T3734] hsr_slave_0: left promiscuous mode [ 145.554872][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 145.554887][ T37] audit: type=1326 audit(1758337907.954:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6947 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c514ec29 code=0x7ffc0000 [ 145.555000][ T37] audit: type=1326 audit(1758337907.954:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6947 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c514ec29 code=0x7ffc0000 [ 145.564166][ T3734] hsr_slave_1: left promiscuous mode [ 145.565212][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.565285][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.979902][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.979931][ T3734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.573112][ T37] audit: type=1326 audit(1758337908.014:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6947 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22c514ec29 code=0x7ffc0000 [ 147.758673][ T5853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.914241][ T5853] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 147.914303][ T5853] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 147.914327][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.955347][ T5853] usb 3-1: config 0 descriptor?? [ 147.995022][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.196550][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 148.196629][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.271740][ T10] usb 1-1: config 0 descriptor?? [ 148.645186][ T5853] hid_parser_main: 3 callbacks suppressed [ 148.645213][ T5853] aquacomputer_d5next 0003:0C70:F0BD.000F: unknown main item tag 0x0 [ 148.715931][ T5853] aquacomputer_d5next 0003:0C70:F0BD.000F: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.2-1/input0 [ 148.846759][ T10] elecom 0003:056E:00E6.0010: unknown main item tag 0x0 [ 148.846791][ T10] elecom 0003:056E:00E6.0010: unknown main item tag 0x0 [ 148.846815][ T10] elecom 0003:056E:00E6.0010: unknown main item tag 0x0 [ 148.846839][ T10] elecom 0003:056E:00E6.0010: unknown main item tag 0x0 [ 148.846861][ T10] elecom 0003:056E:00E6.0010: unknown main item tag 0x0 [ 148.903708][ T10] elecom 0003:056E:00E6.0010: hidraw1: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 148.935185][ T5853] usb 3-1: USB disconnect, device number 5 [ 149.062118][ T9] usb 1-1: USB disconnect, device number 10 [ 149.436269][ T3734] veth1_macvtap: left promiscuous mode [ 149.437251][ T3734] veth0_macvtap: left promiscuous mode [ 149.437554][ T3734] veth1_vlan: left promiscuous mode [ 149.437844][ T3734] veth0_vlan: left promiscuous mode [ 150.088577][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 150.239069][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 150.242134][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 150.242157][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 150.242175][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 150.242194][ T9] usb 1-1: config 1 has no interface number 0 [ 150.242239][ T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.242262][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.242300][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 150.242320][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.365394][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 150.630936][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 151.065946][ T9] usb 1-1: USB disconnect, device number 11 [ 151.071754][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 151.165303][ C1] sched: DL replenish lagged too much [ 151.711589][ T37] audit: type=1800 audit(1758337914.104:23): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.465" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 156.046425][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 156.046458][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 162.496147][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.517380][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.526040][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.527714][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.545139][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.608634][ T5851] Bluetooth: hci0: command tx timeout [ 166.698637][ T5851] Bluetooth: hci0: command tx timeout [ 166.857044][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.878701][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.880830][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.882357][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.883120][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.770425][ T5841] Bluetooth: hci0: command tx timeout [ 168.928592][ T5841] Bluetooth: hci6: command tx timeout [ 170.858861][ T5841] Bluetooth: hci0: command tx timeout [ 171.008823][ T5841] Bluetooth: hci6: command tx timeout [ 172.110125][ T5851] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 172.112323][ T5851] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.113290][ T5851] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.114559][ T5851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.115276][ T5851] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.636268][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 172.653957][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 172.655084][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 172.656224][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 172.657029][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 173.088757][ T5841] Bluetooth: hci6: command tx timeout [ 174.208592][ T5841] Bluetooth: hci7: command tx timeout [ 174.768576][ T5841] Bluetooth: hci8: command tx timeout [ 175.170169][ T5851] Bluetooth: hci6: command tx timeout [ 176.288580][ T5841] Bluetooth: hci7: command tx timeout [ 176.848607][ T5841] Bluetooth: hci8: command tx timeout [ 178.375314][ T5851] Bluetooth: hci7: command tx timeout [ 178.928561][ T5841] Bluetooth: hci8: command tx timeout [ 180.448774][ T5841] Bluetooth: hci7: command tx timeout [ 181.008661][ T5841] Bluetooth: hci8: command tx timeout [ 195.823703][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.840145][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.841183][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.842323][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.843412][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 197.898803][ T5841] Bluetooth: hci2: command tx timeout [ 199.968637][ T5841] Bluetooth: hci2: command tx timeout [ 200.857503][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.857574][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.055425][ T5841] Bluetooth: hci2: command tx timeout [ 204.138825][ T5841] Bluetooth: hci2: command tx timeout [ 212.144038][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 212.144097][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 223.697479][ T5156] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 223.715023][ T5156] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 223.716208][ T5156] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 223.717921][ T5156] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 223.745485][ T5156] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 225.808612][ T5156] Bluetooth: hci9: command tx timeout [ 227.038354][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 227.054607][ T5841] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 227.055681][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 227.074955][ T5841] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 227.075858][ T5841] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 227.888697][ T5156] Bluetooth: hci9: command tx timeout [ 229.168938][ T5156] Bluetooth: hci10: command tx timeout [ 229.978777][ T5156] Bluetooth: hci9: command tx timeout [ 231.258653][ T5156] Bluetooth: hci10: command tx timeout [ 232.063813][ T5156] Bluetooth: hci9: command tx timeout [ 232.793566][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 232.810277][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 232.811340][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 232.812594][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 232.813408][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 233.327480][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 233.336601][ T59] Bluetooth: hci10: command tx timeout [ 233.348658][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 233.350619][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 233.351906][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 233.352893][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 234.848613][ T5851] Bluetooth: hci11: command tx timeout [ 235.408558][ T5851] Bluetooth: hci12: command tx timeout [ 235.408818][ T5851] Bluetooth: hci10: command tx timeout [ 236.938607][ T5851] Bluetooth: hci11: command tx timeout [ 237.488550][ T5851] Bluetooth: hci12: command tx timeout [ 239.009118][ T5851] Bluetooth: hci11: command tx timeout [ 239.568639][ T5851] Bluetooth: hci12: command tx timeout [ 241.088754][ T5851] Bluetooth: hci11: command tx timeout [ 241.648613][ T5851] Bluetooth: hci12: command tx timeout [ 252.778607][ T5851] Bluetooth: hci4: command 0x0406 tx timeout [ 256.751092][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 256.768994][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 256.770108][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 256.771256][ T5841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 256.772010][ T5841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 258.848685][ T5156] Bluetooth: hci13: command tx timeout [ 260.928682][ T5156] Bluetooth: hci13: command tx timeout [ 260.945985][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.946073][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.018434][ T5156] Bluetooth: hci5: command 0x0406 tx timeout [ 263.018473][ T5156] Bluetooth: hci13: command tx timeout [ 265.088686][ T5851] Bluetooth: hci13: command tx timeout [ 284.851115][ T5851] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 284.866026][ T5851] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 284.867378][ T5851] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 284.885912][ T5851] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 284.887559][ T5851] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 286.928722][ T5851] Bluetooth: hci14: command tx timeout [ 287.556573][ T5156] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 287.570457][ T5156] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 287.571457][ T5156] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 287.572666][ T5156] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 287.575280][ T5156] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 288.617684][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 289.017837][ T5156] Bluetooth: hci14: command tx timeout [ 289.648687][ T5156] Bluetooth: hci15: command tx timeout [ 291.088540][ T5156] Bluetooth: hci14: command tx timeout [ 291.728498][ T5851] Bluetooth: hci15: command tx timeout [ 293.168621][ T5851] Bluetooth: hci14: command tx timeout [ 293.733305][ T5851] Bluetooth: hci6: command 0x0406 tx timeout [ 293.808516][ T5851] Bluetooth: hci15: command tx timeout [ 294.139872][ T59] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 294.148146][ T59] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 294.164476][ T59] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 294.165885][ T59] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 294.185143][ T59] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 294.309895][ T5844] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 294.325814][ T5844] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 294.339856][ T5844] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 294.341205][ T5844] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 294.342295][ T5844] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 295.888643][ T5844] Bluetooth: hci15: command tx timeout [ 298.848646][ T7062] Bluetooth: hci7: command 0x0406 tx timeout [ 299.008744][ T7062] Bluetooth: hci8: command 0x0406 tx timeout [ 307.658797][ T38] INFO: task kworker/u8:6:175 blocked for more than 143 seconds. [ 307.658825][ T38] Not tainted syzkaller #0 [ 307.658836][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.658848][ T38] task:kworker/u8:6 state:D stack:23752 pid:175 tgid:175 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 307.658912][ T38] Workqueue: events_unbound linkwatch_event [ 307.658952][ T38] Call Trace: [ 307.658959][ T38] [ 307.658972][ T38] __schedule+0x16f3/0x4c20 [ 307.659016][ T38] ? unwind_next_frame+0xa5/0x2390 [ 307.659047][ T38] ? ret_from_fork_asm+0x1a/0x30 [ 307.659077][ T38] ? __pfx___schedule+0x10/0x10 [ 307.659125][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.659159][ T38] rt_mutex_schedule+0x77/0xf0 [ 307.659179][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 307.659204][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 307.659246][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 307.659274][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 307.659300][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 307.659337][ T38] ? linkwatch_event+0xe/0x60 [ 307.659364][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 307.659394][ T38] ? linkwatch_event+0xe/0x60 [ 307.659413][ T38] mutex_lock_nested+0x16a/0x1d0 [ 307.659436][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.659466][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 307.659494][ T38] linkwatch_event+0xe/0x60 [ 307.659514][ T38] process_scheduled_works+0xade/0x17b0 [ 307.659569][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.659613][ T38] worker_thread+0x8a0/0xda0 [ 307.659643][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.659683][ T38] ? __kthread_parkme+0x7b/0x200 [ 307.659721][ T38] kthread+0x70e/0x8a0 [ 307.659760][ T38] ? __pfx_worker_thread+0x10/0x10 [ 307.659785][ T38] ? __pfx_kthread+0x10/0x10 [ 307.659840][ T38] ? __pfx_kthread+0x10/0x10 [ 307.659873][ T38] ret_from_fork+0x436/0x7d0 [ 307.659905][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 307.659940][ T38] ? __switch_to_asm+0x39/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 307.659959][ T38] ? __switch_to_asm+0x33/0x70 [ 307.659978][ T38] ? __pfx_kthread+0x10/0x10 [ 307.660012][ T38] ret_from_fork_asm+0x1a/0x30 [ 307.660051][ T38] [ 307.660160][ T38] INFO: task syz-executor:6685 blocked for more than 143 seconds. [ 307.660175][ T38] Not tainted syzkaller #0 [ 307.660185][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.660195][ T38] task:syz-executor state:D stack:22360 pid:6685 tgid:6685 ppid:1 task_flags:0x400140 flags:0x00004004 [ 307.660250][ T38] Call Trace: [ 307.660257][ T38] [ 307.660270][ T38] __schedule+0x16f3/0x4c20 [ 307.660309][ T38] ? sched_clock+0x3f/0x60 [ 307.660335][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 307.660372][ T38] ? __pfx___schedule+0x10/0x10 [ 307.660429][ T38] rt_mutex_schedule+0x77/0xf0 [ 307.660450][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 307.660491][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 307.660523][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 307.660553][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 307.660581][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 307.660606][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.660646][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 307.660677][ T38] ? safese[ 307.660677][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 307.660707][ T38] ? bpf_lsm_capable+0x9/0x20 [ 307.660734][ T38] ? security_capable+0x7e/0x2e0 [ 307.660776][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 307.660804][ T38] mutex_lock_nested+0x16a/0x1d0 [ 307.660836][ T38] rtnl_newlink+0x8db/0x1c70 [ 307.660864][ T38] ? __update_load_avg_cfs_rq+0x6f6/0xbd0 [ 307.660906][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.660941][ T38] ? __switch_to+0xdae/0x1670 [ 307.660977][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.661034][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.661082][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 307.661115][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 307.661142][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 307.661198][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.661254][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.661284][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 307.661313][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.661343][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 307.661372][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.661421][ T38] netlink_rcv_skb+0x205/0x470 [ 307.661449][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.661478][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.661510][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.661553][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.661593][ T38] netlink_unicast+0x843/0xa10 [ 307.661630][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 307.661660][ T38] ? netlink_sendmsg+0x642/0xb30 [ 307.661688][ T38] ? skb_put+0x11b/0x210 [ 307.661725][ T38] netlink_sendmsg+0x805/0xb30 [ 307.661773][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.661813][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.661835][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.661867][ T38] __sock_sendmsg+0x219/0x270 [ 307.661899][ T38] __sys_sendto+0x3c7/0x520 [ 307.661934][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 307.661981][ T38] ? fput_close_sync+0x119/0x200 [ 307.662017][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 307.662040][ T38] ? rt_spin_unlock+0x65/0x80 [ 307.662073][ T38] __x64_sys_sendto+0xde/0x100 [ 307.662110][ T38] do_syscall_64+0xfa/0x3b0 [ 307.662130][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.662162][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.662184][ T38] ? clear_bhb_loop+0x60/0xb0 [ 307.662210][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.662232][ T38] RIP: 0033:0x7f8e4bf90abc [ 307.662256][ T38] RSP: 002b:00007ffec1f11f70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 307.662278][ T38] RAX: ffffffffffffffda RBX: 00007f8e4cd04620 RCX: 00007f8e4bf90abc [ 307.662294][ T38] RDX: 0000000000000020 RSI: 00007f8e4cd04670 RDI: 0000000000000003 [ 307.662308][ T38] RBP: 0000000000000000 R08: 00007ffec1f11fc4 R09: 000000000000000c [ 307.662321][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 307.662334][ T38] R13: 0000000000000000 R14: 00007f8e4cd04670 R15: 0000000000000000 [ 307.662366][ T38] [ 307.662378][ T38] INFO: task syz.1.451:6957 blocked for more than 143 seconds. [ 307.662393][ T38] Not tainted syzkaller #0 [ 307.662403][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.662412][ T38] task:syz.1.451 state:D stack:26824 pid:6957 tgid:6956 ppid:5847 task_flags:0x400140 flags:0x00004004 [ 307.662473][ T38] Call Trace: [ 307.662480][ T38] [ 307.662493][ T38] __schedule+0x16f3/0x4c20 [ 307.662535][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.662584][ T38] ? __pfx___schedule+0x10/0x10 [ 307.662635][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.662671][ T38] rt_mutex_schedule+0x77/0xf0 [ 307.662691][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 307.662718][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 307.662770][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 307.662800][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 307.662828][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 307.662875][ T38] ? ethnl_default_set_doit+0x168/0x890 [ 307.662915][ T38] ? ethnl_default_set_doit+0x2b3/0x890 [ 307.662946][ T38] mutex_lock_nested+0x16a/0x1d0 [ 307.662979][ T38] ethnl_default_set_doit+0x2b3/0x890 [ 307.663012][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 307.663036][ T38] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 307.663069][ T38] genl_family_rcv_msg_doit+0x212/0x300 [ 307.663101][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 307.663139][ T38] ? bpf_lsm_capable+0x9/0x20 [ 307.663166][ T38] ? security_capable+0x7e/0x2e0 [ 307.663204][ T38] genl_rcv_msg+0x60e/0x790 [ 307.663235][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.663257][ T38] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 307.663295][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.663333][ T38] netlink_rcv_skb+0x205/0x470 [ 307.663364][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.663389][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.663436][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.663484][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.663520][ T38] genl_rcv+0x28/0x40 [ 307.663541][ T38] netlink_unicast+0x843/0xa10 [ 307.663579][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 307.663610][ T38] ? netlink_sendmsg+0x642/0xb30 [ 307.663639][ T38] ? skb_put+0x11b/0x210 [ 307.663677][ T38] netlink_sendmsg+0x805/0xb30 [ 307.663720][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.663768][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.663790][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.663823][ T38] __sock_sendmsg+0x219/0x270 [ 307.663855][ T38] ____sys_sendmsg+0x508/0x820 [ 307.663884][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.663918][ T38] ? import_iovec+0x74/0xa0 [ 307.663951][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 307.663977][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.664042][ T38] ? __fget_files+0x2a/0x420 [ 307.664073][ T38] ? __fget_files+0x3a6/0x420 [ 307.664117][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 307.664144][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.664179][ T38] ? rcu_is_watching+0x15/0xb0 [ 307.664220][ T38] ? do_syscall_64+0xbe/0x3b0 [ 307.664246][ T38] do_syscall_64+0xfa/0x3b0 [ 307.664266][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.664299][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.664321][ T38] ? clear_bhb_loop+0x60/0xb0 [ 307.664347][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.664368][ T38] RIP: 0033:0x7fb40c06ec29 [ 307.664386][ T38] RSP: 002b:00007fb40a2d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.664408][ T38] RAX: ffffffffffffffda RBX: 00007fb40c2b5fa0 RCX: 00007fb40c06ec29 [ 307.664424][ T38] RDX: 0000000000000000 RSI: 0000200000003b80 RDI: 0000000000000003 [ 307.664438][ T38] RBP: 00007fb40c0f1e41 R08: 0000000000000000 R09: 0000000000000000 [ 307.664452][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.664466][ T38] R13: 00007fb40c2b6038 R14: 00007fb40c2b5fa0 R15: 00007fff3c8f7c18 [ 307.664502][ T38] [ 307.664513][ T38] INFO: task syz.2.466:6994 blocked for more than 143 seconds. [ 307.664528][ T38] Not tainted syzkaller #0 [ 307.664538][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.664548][ T38] task:syz.2.466 state:D stack:25864 pid:6994 tgid:6993 ppid:5839 task_flags:0x400140 flags:0x00004004 [ 307.664621][ T38] Call Trace: [ 307.664627][ T38] [ 307.664640][ T38] __schedule+0x16f3/0x4c20 [ 307.664685][ T38] ? __pfx_vprintk_emit+0x10/0x10 [ 307.664704][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 307.664753][ T38] ? __pfx___schedule+0x10/0x10 [ 307.664805][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.664840][ T38] rt_mutex_schedule+0x77/0xf0 [ 307.664861][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 307.664889][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 307.664943][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 307.664971][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 307.664997][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 307.665020][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.665058][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 307.665086][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 307.665133][ T38] ? bpf_lsm_capable+0x9/0x20 [ 307.665160][ T38] ? security_capable+0x7e/0x2e0 [ 307.665195][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 307.665221][ T38] mutex_lock_nested+0x16a/0x1d0 [ 307.665253][ T38] rtnl_newlink+0x8db/0x1c70 [ 307.665295][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.665321][ T38] ? migrate_enable+0x29c/0x3c0 [ 307.665347][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 307.665380][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 307.665407][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 307.665449][ T38] ? __local_bh_enable+0x23f/0x3d0 [ 307.665475][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 307.665510][ T38] ? __pfx___local_bh_enable+0x10/0x10 [ 307.665546][ T38] ? __local_bh_enable_ip+0x1b2/0x270 [ 307.665573][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.665609][ T38] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.665635][ T38] ? dev_hard_start_xmit+0x7f5/0x870 [ 307.665658][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 307.665689][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 307.665713][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 307.665738][ T38] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 307.665775][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.665832][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 307.665861][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 307.665896][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 307.665924][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.665952][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 307.665985][ T38] ? __asan_memcpy+0x40/0x70 [ 307.666009][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 307.666039][ T38] ? __skb_clone+0x63/0x7a0 [ 307.666071][ T38] netlink_rcv_skb+0x205/0x470 [ 307.666103][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.666135][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.666178][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.666235][ T38] netlink_unicast+0x843/0xa10 [ 307.666273][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 307.666304][ T38] ? netlink_sendmsg+0x642/0xb30 [ 307.666333][ T38] ? skb_put+0x11b/0x210 [ 307.666382][ T38] netlink_sendmsg+0x805/0xb30 [ 307.666424][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.666464][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.666485][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.666535][ T38] __sock_sendmsg+0x219/0x270 [ 307.666566][ T38] ____sys_sendmsg+0x508/0x820 [ 307.666615][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.666648][ T38] ? import_iovec+0x74/0xa0 [ 307.666679][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 307.666722][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.666804][ T38] ? __fget_files+0x2a/0x420 [ 307.666835][ T38] ? __fget_files+0x3a6/0x420 [ 307.666880][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 307.666906][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.666942][ T38] ? rcu_is_watching+0x15/0xb0 [ 307.666982][ T38] ? do_syscall_64+0xbe/0x3b0 [ 307.667009][ T38] do_syscall_64+0xfa/0x3b0 [ 307.667028][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.667062][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.667083][ T38] ? clear_bhb_loop+0x60/0xb0 [ 307.667111][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.667132][ T38] RIP: 0033:0x7f8da8bdec29 [ 307.667150][ T38] RSP: 002b:00007f8da6e3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.667172][ T38] RAX: ffffffffffffffda RBX: 00007f8da8e25fa0 RCX: 00007f8da8bdec29 [ 307.667189][ T38] RDX: 000000000000c010 RSI: 00002000000002c0 RDI: 0000000000000003 [ 307.667203][ T38] RBP: 00007f8da8c61e41 R08: 0000000000000000 R09: 0000000000000000 [ 307.667217][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.667230][ T38] R13: 00007f8da8e26038 R14: 00007f8da8e25fa0 R15: 00007fffb57614e8 [ 307.667266][ T38] [ 307.667275][ T38] INFO: task syz.0.468:6998 blocked for more than 143 seconds. [ 307.667290][ T38] Not tainted syzkaller #0 [ 307.667301][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.667311][ T38] task:syz.0.468 state:D stack:27112 pid:6998 tgid:6997 ppid:5845 task_flags:0x400040 flags:0x00004004 [ 307.667373][ T38] Call Trace: [ 307.667380][ T38] [ 307.667393][ T38] __schedule+0x16f3/0x4c20 [ 307.667455][ T38] ? __pfx___schedule+0x10/0x10 [ 307.667505][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.667538][ T38] rt_mutex_schedule+0x77/0xf0 [ 307.667559][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 307.667587][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 307.667634][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 307.667665][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 307.667694][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 307.667752][ T38] ? rtnl_dumpit+0x92/0x200 [ 307.667784][ T38] ? rcu_is_watching+0x15/0xb0 [ 307.667817][ T38] ? trace_kmalloc+0x1f/0xd0 [ 307.667844][ T38] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 307.667881][ T38] ? rtnl_dumpit+0x92/0x200 [ 307.667908][ T38] mutex_lock_nested+0x16a/0x1d0 [ 307.667932][ T38] ? __build_skb_around+0x257/0x3e0 [ 307.667965][ T38] ? __pfx_mctp_rtm_getneigh+0x10/0x10 [ 307.667996][ T38] rtnl_dumpit+0x92/0x200 [ 307.668042][ T38] netlink_dump+0x6e4/0xe90 [ 307.668082][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 307.668107][ T38] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 307.668138][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.668194][ T38] __netlink_dump_start+0x5cb/0x7e0 [ 307.668230][ T38] rtnetlink_rcv_msg+0x9eb/0xb70 [ 307.668259][ T38] ? __pfx_mctp_rtm_getneigh+0x10/0x10 [ 307.668287][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 307.668314][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.668340][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 307.898533][ T38] ? __pfx_rtnl_dumpit+0x10/0x10 [ 307.898573][ T38] ? __pfx_mctp_rtm_getneigh+0x10/0x10 [ 307.898613][ T38] ? __skb_clone+0x63/0x7a0 [ 307.898647][ T38] netlink_rcv_skb+0x205/0x470 [ 307.898680][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.898712][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.898755][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.898795][ T38] netlink_unicast+0x843/0xa10 [ 307.898832][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 307.898862][ T38] ? netlink_sendmsg+0x642/0xb30 [ 307.898891][ T38] ? skb_put+0x11b/0x210 [ 307.898927][ T38] netlink_sendmsg+0x805/0xb30 [ 307.898969][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.899008][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.899031][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.899062][ T38] __sock_sendmsg+0x219/0x270 [ 307.899094][ T38] ____sys_sendmsg+0x508/0x820 [ 307.899122][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.899155][ T38] ? import_iovec+0x74/0xa0 [ 307.899186][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 307.899211][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.899275][ T38] ? __fget_files+0x2a/0x420 [ 307.899305][ T38] ? __fget_files+0x3a6/0x420 [ 307.899348][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 307.899373][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.899408][ T38] ? rcu_is_watching+0x15/0xb0 [ 307.899447][ T38] ? do_syscall_64+0xbe/0x3b0 [ 307.899473][ T38] do_syscall_64+0xfa/0x3b0 [ 307.899493][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.899525][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.899547][ T38] ? clear_bhb_loop+0x60/0xb0 [ 307.899573][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.899604][ T38] RIP: 0033:0x7f1d6f9eec29 [ 307.899623][ T38] RSP: 002b:00007f1d6dc56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.899645][ T38] RAX: ffffffffffffffda RBX: 00007f1d6fc35fa0 RCX: 00007f1d6f9eec29 [ 307.899661][ T38] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 307.899675][ T38] RBP: 00007f1d6fa71e41 R08: 0000000000000000 R09: 0000000000000000 [ 307.899689][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.899702][ T38] R13: 00007f1d6fc36038 R14: 00007f1d6fc35fa0 R15: 00007fff21af4088 [ 307.899736][ T38] [ 307.899751][ T38] INFO: task syz-executor:7001 blocked for more than 143 seconds. [ 307.899767][ T38] Not tainted syzkaller #0 [ 307.899778][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.899788][ T38] task:syz-executor state:D stack:26344 pid:7001 tgid:7001 ppid:1 task_flags:0x400140 flags:0x00004004 [ 307.899849][ T38] Call Trace: [ 307.899857][ T38] [ 307.899870][ T38] __schedule+0x16f3/0x4c20 [ 307.899929][ T38] ? __pfx___schedule+0x10/0x10 [ 307.899980][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 307.900016][ T38] rt_mutex_schedule+0x77/0xf0 [ 307.900038][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 307.900064][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 307.900111][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 307.900140][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 307.900168][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 307.900193][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.900236][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 307.900268][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 307.900302][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 307.900324][ T38] mutex_lock_nested+0x16a/0x1d0 [ 307.900356][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 307.900391][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 307.900435][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 307.900459][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 307.900488][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.900519][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 307.900548][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.900602][ T38] netlink_rcv_skb+0x205/0x470 [ 307.900630][ T38] ? __lock_acquire+0xab9/0xd20 [ 307.900659][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 307.900691][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.900734][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 307.900774][ T38] netlink_unicast+0x843/0xa10 [ 307.900811][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 307.900841][ T38] ? netlink_sendmsg+0x642/0xb30 [ 307.900869][ T38] ? skb_put+0x11b/0x210 [ 307.900906][ T38] netlink_sendmsg+0x805/0xb30 [ 307.900947][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.900987][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.901008][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.901040][ T38] __sock_sendmsg+0x219/0x270 [ 307.901071][ T38] __sys_sendto+0x3c7/0x520 [ 307.901106][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 307.901168][ T38] ? exc_page_fault+0x76/0xf0 [ 307.901204][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 307.901236][ T38] __x64_sys_sendto+0xde/0x100 [ 307.901273][ T38] do_syscall_64+0xfa/0x3b0 [ 307.901293][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.901325][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.901346][ T38] ? clear_bhb_loop+0x60/0xb0 [ 307.901372][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.901393][ T38] RIP: 0033:0x7f7a6f750abc [ 307.901411][ T38] RSP: 002b:00007ffea9eec750 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 307.901432][ T38] RAX: ffffffffffffffda RBX: 00007f7a704c4620 RCX: 00007f7a6f750abc [ 307.901447][ T38] RDX: 0000000000000028 RSI: 00007f7a704c4670 RDI: 0000000000000003 [ 307.901460][ T38] RBP: 0000000000000000 R08: 00007ffea9eec7a4 R09: 000000000000000c [ 307.901474][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 307.901487][ T38] R13: 0000000000000000 R14: 00007f7a704c4670 R15: 0000000000000000 [ 307.901519][ T38] [ 307.901555][ T38] [ 307.901555][ T38] Showing all locks held in the system: [ 307.901565][ T38] 2 locks held by kworker/u8:0/12: [ 307.901585][ T38] 4 locks held by pr/legacy/17: [ 307.901598][ T38] 2 locks held by rcuc/1/28: [ 307.901611][ T38] 1 lock held by khungtaskd/38: [ 307.901622][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 307.901677][ T38] 4 locks held by kworker/u9:0/59: [ 307.901689][ T38] #0: ffff88808c10d938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.901749][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.901804][ T38] #2: ffff88808ce680a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 307.901863][ T38] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 307.901926][ T38] 3 locks held by kworker/u8:6/175: [ 307.901938][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.901993][ T38] #1: ffffc90003b1fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.902047][ T38] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 307.902115][ T38] 3 locks held by kworker/u8:10/3552: [ 307.902127][ T38] #0: ffff88814d295138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.902181][ T38] #1: ffffc9000d70fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.902237][ T38] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 307.902291][ T38] 4 locks held by kworker/u8:13/3734: [ 307.902303][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.902357][ T38] #1: ffffc9000de7fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.902412][ T38] #2: ffffffff8ecc6940 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 307.902470][ T38] #3: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 307.902529][ T38] 1 lock held by syslogd/5189: [ 307.902541][ T38] #0: ffff8880253c5858 (&ei->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbf/0x1f0 [ 307.902602][ T38] 3 locks held by klogd/5196: [ 307.902615][ T38] 2 locks held by getty/5600: [ 307.902626][ T38] #0: ffff888033f760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 307.902686][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 307.902741][ T38] 1 lock held by syz-executor/5826: [ 307.902754][ T38] 6 locks held by kworker/u9:3/5844: [ 307.902766][ T38] #0: ffff8880359b5138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.902820][ T38] #1: ffffc9000490fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.902875][ T38] #2: ffff88804b224e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 307.902927][ T38] #3: ffff88804b2240a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 307.902985][ T38] #4: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 307.903043][ T38] #5: ffff888027c02b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 307.903096][ T38] 4 locks held by kworker/u9:4/5846: [ 307.903107][ T38] #0: ffff888061abf938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.903161][ T38] #1: ffffc9000491fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.903214][ T38] #2: ffff888060b0ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 307.903264][ T38] #3: ffff888060b0c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 307.903323][ T38] 4 locks held by kworker/u9:6/5851: [ 307.903334][ T38] #0: ffff88808310f938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.903393][ T38] #1: ffffc90004a37bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.903471][ T38] #2: ffff88808cf2c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 307.903530][ T38] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 307.903597][ T38] 4 locks held by kworker/1:3/5897: [ 307.903610][ T38] #0: ffff888031518138 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.903671][ T38] #1: ffffc90004d9fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.903747][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 307.903803][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 307.903863][ T38] 2 locks held by kworker/1:4/5922: [ 307.903876][ T38] 8 locks held by kworker/1:6/6025: [ 307.903889][ T38] 4 locks held by kworker/1:7/6026: [ 307.903901][ T38] #0: ffff888035effd38 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.903963][ T38] #1: ffffc900052efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.904038][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 307.904094][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 307.904147][ T38] 1 lock held by syz-executor/6685: [ 307.904159][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 307.904219][ T38] 2 locks held by syz.1.451/6957: [ 307.904231][ T38] #0: ffffffff8ed39840 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 307.904280][ T38] #1: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x2b3/0x890 [ 307.904344][ T38] 1 lock held by syz.4.464/6987: [ 307.904356][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 307.904417][ T38] 3 locks held by kworker/1:9/6991: [ 307.904429][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.904487][ T38] #1: ffffc90005ddfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.904543][ T38] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 307.904613][ T38] 4 locks held by kworker/1:10/6992: [ 307.904626][ T38] #0: ffff88805c883138 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 307.904687][ T38] #1: ffffc90005d9fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 307.904745][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 307.904810][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 307.904866][ T38] 2 locks held by syz.2.466/6994: [ 307.904877][ T38] #0: ffffffff8e415580 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 307.904941][ T38] #1: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 307.904997][ T38] 2 locks held by syz.0.468/6998: [ 307.905009][ T38] #0: ffff88805f15e910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 307.905065][ T38] #1: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 307.905121][ T38] 1 lock held by syz-executor/7001: [ 307.905132][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905183][ T38] 1 lock held by syz-executor/7004: [ 307.905195][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905246][ T38] 1 lock held by syz-executor/7009: [ 307.905258][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905309][ T38] 1 lock held by syz-executor/7011: [ 307.905320][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905370][ T38] 1 lock held by syz-executor/7020: [ 307.905382][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905433][ T38] 1 lock held by syz-executor/7024: [ 307.905445][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905495][ T38] 1 lock held by syz-executor/7027: [ 307.905507][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905557][ T38] 1 lock held by syz-executor/7031: [ 307.905569][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905626][ T38] 1 lock held by syz-executor/7033: [ 307.905637][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905689][ T38] 1 lock held by syz-executor/7047: [ 307.905701][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905751][ T38] 1 lock held by syz-executor/7050: [ 307.905763][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905833][ T38] 1 lock held by syz-executor/7054: [ 307.905845][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905898][ T38] 1 lock held by syz-executor/7058: [ 307.905910][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.905961][ T38] 1 lock held by syz-executor/7060: [ 307.905973][ T38] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 307.906026][ T38] [ 307.906031][ T38] ============================================= [ 307.906031][ T38] [ 307.906054][ T38] NMI backtrace for cpu 0 [ 307.906081][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.906105][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.906118][ T38] Call Trace: [ 307.906127][ T38] [ 307.906135][ T38] dump_stack_lvl+0x189/0x250 [ 307.906172][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.906205][ T38] ? __pfx__printk+0x10/0x10 [ 307.906243][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 307.906276][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 307.906307][ T38] ? __pfx__printk+0x10/0x10 [ 307.906336][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 307.906366][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 307.906397][ T38] watchdog+0xf93/0xfe0 [ 307.906432][ T38] ? watchdog+0x1de/0xfe0 [ 307.906466][ T38] kthread+0x70e/0x8a0 [ 307.906503][ T38] ? __pfx_watchdog+0x10/0x10 [ 307.906530][ T38] ? __pfx_kthread+0x10/0x10 [ 307.906568][ T38] ? __pfx_kthread+0x10/0x10 [ 307.906609][ T38] ret_from_fork+0x436/0x7d0 [ 307.906641][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 307.906676][ T38] ? __switch_to_asm+0x39/0x70 [ 307.906695][ T38] ? __switch_to_asm+0x33/0x70 [ 307.906715][ T38] ? __pfx_kthread+0x10/0x10 [ 307.906749][ T38] ret_from_fork_asm+0x1a/0x30 [ 307.906787][ T38] [ 307.906795][ T38] Sending NMI from CPU 0 to CPUs 1: [ 307.906839][ C1] NMI backtrace for cpu 1 [ 307.906853][ C1] CPU: 1 UID: 0 PID: 6025 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 307.906873][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.906886][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 307.906912][ C1] RIP: 0010:__rcu_read_unlock+0x33/0xe0 [ 307.906935][ C1] Code: 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3c 25 08 40 f6 91 48 8d 9f 44 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 48 04 00 00 4c 89 f0 48 c1 e8 03 [ 307.906950][ C1] RSP: 0018:ffffc900058ce1a8 EFLAGS: 00000a03 [ 307.906964][ C1] RAX: 0000000000000000 RBX: ffff88803caea204 RCX: fd5d297dc3da4e00 [ 307.906976][ C1] RDX: 0000000000000008 RSI: ffffffff8d21af44 RDI: ffff88803cae9dc0 [ 307.906988][ C1] RBP: dffffc0000000000 R08: ffffc900058ceb00 R09: 0000000000000000 [ 307.907000][ C1] R10: ffffc900058ce2f8 R11: fffff52000b19c61 R12: 1ffff1100795d440 [ 307.907013][ C1] R13: ffffc900058c8000 R14: ffffc900058ce2a8 R15: dffffc0000000000 [ 307.907027][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 307.907041][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.907053][ C1] CR2: 0000562766068168 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 307.907068][ C1] Call Trace: [ 307.907074][ C1] [ 307.907082][ C1] ? unwind_next_frame+0xa5/0x2390 [ 307.907106][ C1] unwind_next_frame+0x19ae/0x2390 [ 307.907134][ C1] ? unwind_next_frame+0xa5/0x2390 [ 307.907159][ C1] ? synproxy_send_tcp+0x359/0x6c0 [ 307.907187][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.907207][ C1] arch_stack_walk+0x11c/0x150 [ 307.907236][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 307.907265][ C1] stack_trace_save+0x9c/0xe0 [ 307.907283][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 307.907301][ C1] ? do_raw_spin_lock+0x121/0x290 [ 307.907328][ C1] kasan_save_track+0x3e/0x80 [ 307.907347][ C1] ? kasan_save_track+0x3e/0x80 [ 307.907366][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 307.907386][ C1] ? kmem_cache_alloc_noprof+0x143/0x310 [ 307.907409][ C1] ? dst_alloc+0x105/0x170 [ 307.907426][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 307.907445][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 307.907463][ C1] ? ip_route_output_flow+0x2a/0x150 [ 307.907479][ C1] ? ip_route_me_harder+0x6d2/0x1030 [ 307.907499][ C1] ? synproxy_send_tcp+0x359/0x6c0 [ 307.907548][ C1] ? dst_alloc+0x105/0x170 [ 307.907565][ C1] __kasan_slab_alloc+0x6c/0x80 [ 307.907588][ C1] ? dst_alloc+0x105/0x170 [ 307.907604][ C1] kmem_cache_alloc_noprof+0x143/0x310 [ 307.907631][ C1] dst_alloc+0x105/0x170 [ 307.907651][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 307.907676][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 307.907696][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 307.907714][ C1] ? __lock_acquire+0xab9/0xd20 [ 307.907738][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 307.907761][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 307.907786][ C1] ip_route_output_flow+0x2a/0x150 [ 307.907801][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 307.907823][ C1] ip_route_me_harder+0x6d2/0x1030 [ 307.907856][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 307.907893][ C1] synproxy_send_tcp+0x359/0x6c0 [ 307.907923][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 307.907958][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 307.907984][ C1] ? nft_synproxy_eval_v6+0x378/0x560 [ 307.908002][ C1] ? synproxy_pernet+0x45/0x270 [ 307.908024][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 307.908046][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 307.908067][ C1] ? nf_ip_checksum+0x13c/0x510 [ 307.908087][ C1] nft_synproxy_do_eval+0x345/0x570 [ 307.908110][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 307.908129][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 307.908154][ C1] nft_do_chain+0x409/0x1920 [ 307.908180][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 307.908219][ C1] nft_do_chain_inet+0x25d/0x340 [ 307.908238][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 307.908255][ C1] ? __lock_acquire+0xab9/0xd20 [ 307.908283][ C1] ? NF_HOOK+0x9a/0x3a0 [ 307.908307][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 307.908326][ C1] nf_hook_slow+0xc2/0x220 [ 307.908357][ C1] NF_HOOK+0x206/0x3a0 [ 307.908382][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 307.908407][ C1] ? NF_HOOK+0x9a/0x3a0 [ 307.908431][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 307.908453][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 307.908480][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 307.908506][ C1] ? skb_dst+0x4f/0xd0 [ 307.908530][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 307.908556][ C1] NF_HOOK+0x30c/0x3a0 [ 307.908581][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 307.908605][ C1] ? NF_HOOK+0x9a/0x3a0 [ 307.908628][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 307.908653][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 307.908683][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 307.908706][ C1] __netif_receive_skb+0x143/0x380 [ 307.908727][ C1] ? rt_spin_unlock+0x65/0x80 [ 307.908751][ C1] ? process_backlog+0x27b/0x900 [ 307.908774][ C1] process_backlog+0x31e/0x900 [ 307.908804][ C1] __napi_poll+0xb6/0x540 [ 307.908835][ C1] net_rx_action+0x707/0xe00 [ 307.908869][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 307.908894][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 307.908925][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 307.908950][ C1] handle_softirqs+0x22f/0x710 [ 307.908978][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 307.909005][ C1] __local_bh_enable_ip+0x179/0x270 [ 307.909027][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 307.909049][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 307.909070][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 307.909104][ C1] ? neigh_periodic_work+0x57/0xe90 [ 307.909129][ C1] neigh_periodic_work+0xc37/0xe90 [ 307.909154][ C1] ? neigh_periodic_work+0x57/0xe90 [ 307.909178][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 307.909201][ C1] process_scheduled_works+0xade/0x17b0 [ 307.909239][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 307.909270][ C1] worker_thread+0x8a0/0xda0 [ 307.909294][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.909328][ C1] ? __kthread_parkme+0x7b/0x200 [ 307.909357][ C1] kthread+0x70e/0x8a0 [ 307.909384][ C1] ? __pfx_worker_thread+0x10/0x10 [ 307.909406][ C1] ? __pfx_kthread+0x10/0x10 [ 307.909435][ C1] ? __pfx_kthread+0x10/0x10 [ 307.909461][ C1] ret_from_fork+0x436/0x7d0 [ 307.909485][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 307.909511][ C1] ? __switch_to_asm+0x39/0x70 [ 307.909527][ C1] ? __switch_to_asm+0x33/0x70 [ 307.909542][ C1] ? __pfx_kthread+0x10/0x10 [ 307.909568][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.909594][ C1] [ 308.088639][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 308.088658][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 308.088680][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.088691][ T38] Call Trace: [ 308.088699][ T38] [ 308.088707][ T38] dump_stack_lvl+0x99/0x250 [ 308.088740][ T38] ? __asan_memcpy+0x40/0x70 [ 308.088761][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.088789][ T38] ? __pfx__printk+0x10/0x10 [ 308.088820][ T38] vpanic+0x281/0x750 [ 308.088850][ T38] ? __pfx_vpanic+0x10/0x10 [ 308.088876][ T38] ? preempt_schedule+0xae/0xc0 [ 308.088907][ T38] ? preempt_schedule_common+0x83/0xd0 [ 308.088940][ T38] panic+0xb9/0xc0 [ 308.088966][ T38] ? __pfx_panic+0x10/0x10 [ 308.088994][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 308.089023][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 308.089050][ T38] watchdog+0xfd2/0xfe0 [ 308.089080][ T38] ? watchdog+0x1de/0xfe0 [ 308.089109][ T38] kthread+0x70e/0x8a0 [ 308.089140][ T38] ? __pfx_watchdog+0x10/0x10 [ 308.089163][ T38] ? __pfx_kthread+0x10/0x10 [ 308.089196][ T38] ? __pfx_kthread+0x10/0x10 [ 308.089226][ T38] ret_from_fork+0x436/0x7d0 [ 308.089253][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 308.089282][ T38] ? __switch_to_asm+0x39/0x70 [ 308.089299][ T38] ? __switch_to_asm+0x33/0x70 [ 308.089315][ T38] ? __pfx_kthread+0x10/0x10 [ 308.089344][ T38] ret_from_fork_asm+0x1a/0x30 [ 308.089377][ T38] [ 308.089791][ T38] Kernel Offset: disabled