last executing test programs: 1m57.025176247s ago: executing program 1 (id=87): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x280, 0x258, 0x4c, 0x232, 0x258, 0x2000, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x8000000, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) 1m56.710704514s ago: executing program 1 (id=89): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m56.235196725s ago: executing program 1 (id=95): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info}) 1m55.51772244s ago: executing program 1 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001900110027bd7000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t'], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m54.226426424s ago: executing program 1 (id=103): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1m53.871064638s ago: executing program 1 (id=109): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 1m38.17644119s ago: executing program 32 (id=109): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0) 44.094543253s ago: executing program 3 (id=601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x8, 0x0, 0xfffffffe}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) 43.895066242s ago: executing program 3 (id=605): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 43.535056324s ago: executing program 5 (id=609): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/102, 0x66}], 0x1}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 43.518113768s ago: executing program 3 (id=610): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$unix(0xffffffffffffffff, 0x0, 0x0) 43.181919895s ago: executing program 5 (id=614): ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 42.856972027s ago: executing program 0 (id=617): setresgid(0xee00, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x2a8000, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) prlimit64(r0, 0x6, 0x0, 0x0) 42.021620745s ago: executing program 3 (id=620): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 41.889107804s ago: executing program 5 (id=622): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) fchdir(0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) time(0xfffffffffffffffc) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = shmget(0x1, 0x2000, 0x4, &(0x7f0000ffc000/0x2000)=nil) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r7 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x9f6f, 0x10, 0x1, 0x4e, 0x0, r5}, &(0x7f00000001c0), 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000300), 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x1) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x6000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x10, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_pressure(r0, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 40.407704903s ago: executing program 0 (id=623): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 39.262463318s ago: executing program 0 (id=625): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)}}) 36.130341083s ago: executing program 0 (id=626): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x100) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r1}, 0x18) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000100)=0x1) 34.262591466s ago: executing program 3 (id=627): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, 0x0, 0x0) 34.227497849s ago: executing program 2 (id=629): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x8, &(0x7f0000000380)=[{0x80000001, 0x1, 0xffffffffffffff7f}], 0x1, 0xbff, 0x38, 0x0, 0x0, 0xc}) 31.054511466s ago: executing program 5 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) 31.054211763s ago: executing program 2 (id=631): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_tables_targets\x00') syz_fuse_handle_req(r0, &(0x7f0000000980)="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", 0x2000, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0xffffffffffffffff, 0x1) read$FUSE(r0, &(0x7f0000004e40)={0x2020}, 0x2020) 30.646711861s ago: executing program 0 (id=633): unshare(0x8040480) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r0, 0x339, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) 30.411384783s ago: executing program 2 (id=634): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001980)={'sit0\x00', &(0x7f0000001900)={'tunl0\x00', 0x0, 0x8, 0x700, 0x5, 0x0, {{0xe, 0x4, 0x3, 0x13, 0x38, 0x67, 0x0, 0x7, 0x2f, 0x0, @remote, @rand_addr=0x9, {[@ssrr={0x89, 0x3, 0xe1}, @rr={0x7, 0x1f, 0xae, [@private=0xa010102, @multicast1, @private=0xa010101, @multicast1, @loopback, @rand_addr=0x64010100, @broadcast]}, @generic={0x83, 0x2}]}}}}}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x7, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 30.411095394s ago: executing program 5 (id=635): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) waitid(0x20, 0x0, 0x0, 0x4, 0x0) 29.835838156s ago: executing program 2 (id=637): unshare(0x22020400) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) inotify_add_watch(r1, 0x0, 0x800000d0) 29.497278209s ago: executing program 0 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 29.477919088s ago: executing program 4 (id=639): syz_io_uring_setup(0x88f, &(0x7f0000000380)={0x0, 0x9439, 0x0, 0x1, 0xbfdffff8}, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 29.431822786s ago: executing program 3 (id=640): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0x8081, 0x1, 0x20000009, 0x80000000, 0x44009]}, &(0x7f0000000400)=0x54) 26.869127888s ago: executing program 5 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x80, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4c, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ee68885bce3d1518e"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8a6a3d172e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 21.618701799s ago: executing program 4 (id=642): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000004c0)='mmap_lock_acquire_returned\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) get_mempolicy(&(0x7f00000000c0), 0x0, 0x8, &(0x7f0000002000/0x1000)=nil, 0x4) 21.424272795s ago: executing program 4 (id=643): symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}}) 21.070439347s ago: executing program 4 (id=644): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x200, 0x0, {0x81}}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 20.916522342s ago: executing program 4 (id=645): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x2000000b}) 19.326599773s ago: executing program 4 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 17.907727325s ago: executing program 2 (id=647): unshare(0x22020600) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) getsockopt$ax25_int(r0, 0x101, 0x1, 0x0, &(0x7f0000000040)) 15.489374484s ago: executing program 2 (id=648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000740)={0x2, 0x1, @status={[0x3, 0xffffffbfffffffff, 0x200, 0x80, 0xfffffffffffffffd, 0xf9dc]}, [0x100000001, 0xfffffffffffffeff, 0x8, 0x1000, 0x2, 0x3, 0x8000, 0x4, 0x4, 0xffffffffffffffff, 0x400, 0x7, 0x6, 0x9, 0x6, 0x5, 0x7, 0x3, 0x7, 0x8001, 0x1, 0x1, 0x80000000, 0x7, 0x6498, 0xff, 0x0, 0x7fff, 0x2, 0x7, 0x80, 0xe, 0x10, 0x9, 0xd193, 0x7, 0xd, 0xfffffffffffff5c1, 0x400, 0x6, 0x2, 0x7fffffff, 0x9, 0xeaa, 0x3, 0x59bc, 0xffffffffffffff9b, 0x48034e5f, 0x2118eb53, 0x3, 0x6d, 0x0, 0x1, 0x3, 0x7, 0x0, 0x1fe30000000, 0x1, 0xfffffffffffffff9, 0x851, 0x81, 0x10, 0x4, 0xd]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x61, 0x0, [{0x80000000, 0x0, 0x7, 0x5, 0x6, 0x1, 0x7fffffff}]}) 14.346056522s ago: executing program 33 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 14.034884518s ago: executing program 34 (id=640): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00', 0x0, [0x8081, 0x1, 0x20000009, 0x80000000, 0x44009]}, &(0x7f0000000400)=0x54) 11.030645583s ago: executing program 35 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)={0x80, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4c, 0x51, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "40fd2cad9ee68885bce3d1518e"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "8a6a3d172e"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 4.080049269s ago: executing program 36 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) 0s ago: executing program 37 (id=648): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000740)={0x2, 0x1, @status={[0x3, 0xffffffbfffffffff, 0x200, 0x80, 0xfffffffffffffffd, 0xf9dc]}, [0x100000001, 0xfffffffffffffeff, 0x8, 0x1000, 0x2, 0x3, 0x8000, 0x4, 0x4, 0xffffffffffffffff, 0x400, 0x7, 0x6, 0x9, 0x6, 0x5, 0x7, 0x3, 0x7, 0x8001, 0x1, 0x1, 0x80000000, 0x7, 0x6498, 0xff, 0x0, 0x7fff, 0x2, 0x7, 0x80, 0xe, 0x10, 0x9, 0xd193, 0x7, 0xd, 0xfffffffffffff5c1, 0x400, 0x6, 0x2, 0x7fffffff, 0x9, 0xeaa, 0x3, 0x59bc, 0xffffffffffffff9b, 0x48034e5f, 0x2118eb53, 0x3, 0x6d, 0x0, 0x1, 0x3, 0x7, 0x0, 0x1fe30000000, 0x1, 0xfffffffffffffff9, 0x851, 0x81, 0x10, 0x4, 0xd]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x61, 0x0, [{0x80000000, 0x0, 0x7, 0x5, 0x6, 0x1, 0x7fffffff}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.243' (ED25519) to the list of known hosts. [ 71.984078][ T5826] cgroup: Unknown subsys name 'net' [ 72.215329][ T5826] cgroup: Unknown subsys name 'cpuset' [ 72.271158][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.829382][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.481187][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.482794][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.501576][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.512410][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.521374][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.529202][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.531387][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.533481][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.534444][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.540334][ T5159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.542126][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.543689][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.549847][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.555794][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.557066][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.557755][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.558862][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.559684][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.564448][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.569291][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.701780][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.703123][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.703840][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.704958][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.705703][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.554035][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 77.573109][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 77.639778][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 77.752060][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 77.855513][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.463927][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.465024][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.465407][ T5851] bridge_slave_0: entered allmulticast mode [ 78.466976][ T5851] bridge_slave_0: entered promiscuous mode [ 78.572077][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.572218][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.572704][ T5837] bridge_slave_0: entered allmulticast mode [ 78.574351][ T5837] bridge_slave_0: entered promiscuous mode [ 78.578024][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.578121][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.578224][ T5851] bridge_slave_1: entered allmulticast mode [ 78.579721][ T5851] bridge_slave_1: entered promiscuous mode [ 78.601968][ T5159] Bluetooth: hci0: command tx timeout [ 78.690764][ T5159] Bluetooth: hci1: command tx timeout [ 78.732029][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.732173][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.732337][ T5837] bridge_slave_1: entered allmulticast mode [ 78.735106][ T5837] bridge_slave_1: entered promiscuous mode [ 78.767015][ T5159] Bluetooth: hci3: command tx timeout [ 78.767030][ T5847] Bluetooth: hci4: command tx timeout [ 78.767563][ T59] Bluetooth: hci2: command tx timeout [ 78.892173][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.892314][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.892494][ T5838] bridge_slave_0: entered allmulticast mode [ 78.895295][ T5838] bridge_slave_0: entered promiscuous mode [ 79.191657][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.191790][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.191979][ T5838] bridge_slave_1: entered allmulticast mode [ 79.193748][ T5838] bridge_slave_1: entered promiscuous mode [ 79.196023][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.196115][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.196223][ T5848] bridge_slave_0: entered allmulticast mode [ 79.197646][ T5848] bridge_slave_0: entered promiscuous mode [ 79.306299][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.306742][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.306847][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.306991][ T5845] bridge_slave_0: entered allmulticast mode [ 79.308841][ T5845] bridge_slave_0: entered promiscuous mode [ 79.392099][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.392302][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.392472][ T5848] bridge_slave_1: entered allmulticast mode [ 79.395241][ T5848] bridge_slave_1: entered promiscuous mode [ 79.405987][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.410402][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.412151][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.412280][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.412810][ T5845] bridge_slave_1: entered allmulticast mode [ 79.416401][ T5845] bridge_slave_1: entered promiscuous mode [ 79.583484][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.923934][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.253847][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.256602][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.337158][ T5851] team0: Port device team_slave_0 added [ 80.341010][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.415544][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.418448][ T5837] team0: Port device team_slave_0 added [ 80.422170][ T5851] team0: Port device team_slave_1 added [ 80.425748][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.566874][ T5837] team0: Port device team_slave_1 added [ 80.682171][ T5159] Bluetooth: hci0: command tx timeout [ 80.704555][ T5838] team0: Port device team_slave_0 added [ 80.760917][ T5159] Bluetooth: hci1: command tx timeout [ 80.841038][ T5847] Bluetooth: hci2: command tx timeout [ 80.841123][ T59] Bluetooth: hci3: command tx timeout [ 80.841192][ T5159] Bluetooth: hci4: command tx timeout [ 80.984739][ T5838] team0: Port device team_slave_1 added [ 81.154183][ T5848] team0: Port device team_slave_0 added [ 81.235806][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.235822][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.235845][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.240458][ T5845] team0: Port device team_slave_0 added [ 81.332716][ T5848] team0: Port device team_slave_1 added [ 81.333546][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.333556][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.333569][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.334623][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.334634][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.334656][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.336965][ T5845] team0: Port device team_slave_1 added [ 81.504670][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.504680][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.504693][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.620074][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.620089][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.620113][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.877568][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.877584][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.877607][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.878859][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.878871][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.878891][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.889626][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.889639][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.889661][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.926830][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.926843][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.926865][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.072715][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.072730][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.072753][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.323366][ T5851] hsr_slave_0: entered promiscuous mode [ 82.324248][ T5851] hsr_slave_1: entered promiscuous mode [ 82.590390][ T5837] hsr_slave_0: entered promiscuous mode [ 82.592010][ T5837] hsr_slave_1: entered promiscuous mode [ 82.592996][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 82.593107][ T5837] Cannot create hsr debugfs directory [ 82.603515][ T5838] hsr_slave_0: entered promiscuous mode [ 82.604694][ T5838] hsr_slave_1: entered promiscuous mode [ 82.605473][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 82.605493][ T5838] Cannot create hsr debugfs directory [ 82.760841][ T5159] Bluetooth: hci0: command tx timeout [ 82.836357][ T5848] hsr_slave_0: entered promiscuous mode [ 82.837167][ T5848] hsr_slave_1: entered promiscuous mode [ 82.837668][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 82.837688][ T5848] Cannot create hsr debugfs directory [ 82.841089][ T5159] Bluetooth: hci1: command tx timeout [ 82.857679][ T5845] hsr_slave_0: entered promiscuous mode [ 82.859036][ T5845] hsr_slave_1: entered promiscuous mode [ 82.859897][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 82.859918][ T5845] Cannot create hsr debugfs directory [ 82.930805][ T5159] Bluetooth: hci4: command tx timeout [ 82.930834][ T5159] Bluetooth: hci3: command tx timeout [ 82.930854][ T5159] Bluetooth: hci2: command tx timeout [ 84.705728][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.749900][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.787295][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.842709][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.851361][ T59] Bluetooth: hci0: command tx timeout [ 84.921498][ T59] Bluetooth: hci1: command tx timeout [ 85.001436][ T59] Bluetooth: hci4: command tx timeout [ 85.001467][ T59] Bluetooth: hci3: command tx timeout [ 85.001488][ T59] Bluetooth: hci2: command tx timeout [ 85.003702][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.065509][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.103182][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.150104][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.269163][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.308887][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.349445][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.389092][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.527916][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.570394][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.618933][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.674631][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.848833][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.903553][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.945460][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.988671][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.993587][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.128565][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.174289][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.175152][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.183208][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.250484][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.250765][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.335922][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.338956][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.385848][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.386057][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.437368][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.437487][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.478676][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.508282][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.537963][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.538095][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.594894][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.595071][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.664881][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.690347][ T9] cfg80211: failed to load regulatory.db [ 86.746138][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.746364][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.762603][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.804990][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.805132][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.955587][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.009074][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.009673][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.058060][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.058265][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.178462][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.458741][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.846618][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.847234][ T5837] veth0_vlan: entered promiscuous mode [ 87.937017][ T5837] veth1_vlan: entered promiscuous mode [ 88.013354][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.091686][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.139336][ T5851] veth0_vlan: entered promiscuous mode [ 88.140526][ T5838] veth0_vlan: entered promiscuous mode [ 88.149837][ T5837] veth0_macvtap: entered promiscuous mode [ 88.185496][ T5837] veth1_macvtap: entered promiscuous mode [ 88.205162][ T5851] veth1_vlan: entered promiscuous mode [ 88.208304][ T5838] veth1_vlan: entered promiscuous mode [ 88.292171][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.294426][ T5845] veth0_vlan: entered promiscuous mode [ 88.327493][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.364932][ T5845] veth1_vlan: entered promiscuous mode [ 88.397934][ T3551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.410193][ T5848] veth0_vlan: entered promiscuous mode [ 88.414752][ T3551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.428922][ T3551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.459057][ T3551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.479923][ T5838] veth0_macvtap: entered promiscuous mode [ 88.489483][ T5851] veth0_macvtap: entered promiscuous mode [ 88.546983][ T5848] veth1_vlan: entered promiscuous mode [ 88.551646][ T5838] veth1_macvtap: entered promiscuous mode [ 88.612507][ T5851] veth1_macvtap: entered promiscuous mode [ 88.787419][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.809102][ T5845] veth0_macvtap: entered promiscuous mode [ 88.832290][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.847251][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.847274][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.875780][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.877115][ T5845] veth1_macvtap: entered promiscuous mode [ 88.914568][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.960365][ T3600] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978964][ T3600] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.990988][ T5848] veth0_macvtap: entered promiscuous mode [ 88.993691][ T3600] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.993768][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.993781][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.024092][ T3600] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.045015][ T3600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.085442][ T3600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.086073][ T5848] veth1_macvtap: entered promiscuous mode [ 89.129737][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.130061][ T3600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.145320][ T3600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.277371][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.563277][ T3551] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.565206][ T3551] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.573742][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.574731][ T3551] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.587080][ T1439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.692603][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.748603][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.748622][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.827182][ T1452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.857196][ T1452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.874394][ T1452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.913682][ T1452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.937271][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.937288][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.880227][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.880247][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.052470][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.052484][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.076914][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.076930][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.171729][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.171747][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.335499][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.335509][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.420656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.010654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.708320][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.708340][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.555911][ T6004] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 94.608904][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.610899][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.642983][ T6004] cramfs: wrong magic [ 95.029105][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.933868][ T6051] process 'syz.4.32' launched './file1' with NULL argv: empty string added [ 96.937082][ T6051] ======================================================= [ 96.937082][ T6051] WARNING: The mand mount option has been deprecated and [ 96.937082][ T6051] and is ignored by this kernel. Remove the mand [ 96.937082][ T6051] option from the mount to silence this warning. [ 96.937082][ T6051] ======================================================= [ 98.173255][ T6046] tty tty4: ldisc open failed (-12), clearing slot 3 [ 104.820717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.850675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.910665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.940723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.045713][ T49] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 105.045740][ T49] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 105.045755][ T49] hid-generic 0000:0004:0034.0001: unknown main item tag 0x0 [ 105.371538][ T6158] syz_tun: entered allmulticast mode [ 105.380407][ T49] hid-generic 0000:0004:0034.0001: hidraw0: HID v0.0e Device [syz0] on syz1 [ 106.356210][ T6152] syz_tun: left allmulticast mode [ 106.897762][ T6179] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.965743][ T6170] fido_id[6170]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.279325][ T6189] kernel read not supported for file /z¿ (pid: 6189 comm: syz.0.92) [ 107.295997][ T37] audit: type=1800 audit(1755987867.222:2): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.92" name=7ABF17 dev="mqueue" ino=9027 res=0 errno=0 [ 107.550664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.551276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.552426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.553557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.714140][ T6246] genirq: Flags mismatch irq 1. 00202000 (dt2814) vs. 00202080 (i8042) [ 110.804898][ T6252] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.123'. [ 111.202330][ T6262] netlink: 148 bytes leftover after parsing attributes in process `syz.3.128'. [ 111.202527][ T6262] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 111.545409][ T6276] random: crng reseeded on system resumption [ 111.938463][ T6286] warning: `syz.3.139' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.706828][ T6311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.151'. [ 112.707029][ T6311] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 114.395055][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.481838][ T6365] netlink: 'syz.0.176': attribute type 12 has an invalid length. [ 114.481955][ T6365] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.176'. [ 114.583872][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.583932][ T5898] usb 4-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 114.583959][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.583992][ T5898] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 114.584013][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.669228][ T5898] usb 4-1: config 0 descriptor?? [ 114.715864][ T5898] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 114.923365][ T5898] usb 4-1: USB disconnect, device number 2 [ 116.008109][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.190104][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.214898][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.340663][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.736244][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.957652][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.424950][ T6416] can: request_module (can-proto-0) failed. [ 119.890976][ T6488] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.373805][ T6519] vxfs: WRONG superblock magic 00000000 at 1 [ 121.383528][ T6519] vxfs: WRONG superblock magic 00000000 at 8 [ 121.383571][ T6519] vxfs: can't find superblock. [ 121.471095][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.604729][ C1] vkms_vblank_simulate: vblank timer overrun [ 121.642898][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 121.643476][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 121.908005][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 121.908206][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 121.910773][ T5898] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.075272][ T5898] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 122.075297][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.075314][ T5898] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 122.078018][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.078043][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.078062][ T5898] usb 3-1: Product: syz [ 122.078076][ T5898] usb 3-1: Manufacturer: syz [ 122.078089][ T5898] usb 3-1: SerialNumber: syz [ 122.411514][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 122.411730][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 123.514705][ T6517] ceph: No mds server is up or the cluster is laggy [ 123.618297][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.671154][ C1] vkms_vblank_simulate: vblank timer overrun [ 123.758321][ T5898] usb 3-1: USB disconnect, device number 2 [ 124.012861][ T6560] pimreg: entered allmulticast mode [ 124.244396][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.417595][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.466763][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.533469][ T5159] Bluetooth: hci3: command tx timeout [ 124.779325][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.004097][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.188454][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.318928][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.361262][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.506926][ T6589] vxfs: WRONG superblock magic 00000000 at 1 [ 126.511511][ T6589] vxfs: WRONG superblock magic 00000000 at 8 [ 126.511552][ T6589] vxfs: can't find superblock. [ 126.862350][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 126.862563][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 127.090822][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.121201][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 127.121413][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 127.243404][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 127.243429][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.243447][ T31] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 127.246582][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.246610][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.246629][ T31] usb 1-1: Product: syz [ 127.246643][ T31] usb 1-1: Manufacturer: syz [ 127.246656][ T31] usb 1-1: SerialNumber: syz [ 127.493263][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.502358][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.503700][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.505721][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.506635][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.558540][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.633956][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 127.634401][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 128.238589][ T37] audit: type=1400 audit(1755987888.182:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6617 comm="syz.3.281" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 128.685047][ T6587] ceph: No mds server is up or the cluster is laggy [ 128.834239][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.935124][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.949833][ T31] usb 1-1: USB disconnect, device number 2 [ 129.640721][ T5159] Bluetooth: hci5: command tx timeout [ 129.792838][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.827186][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 130.152772][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.434831][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.762421][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.925674][ T6668] capability: warning: `syz.2.297' uses deprecated v2 capabilities in a way that may be insecure [ 131.163245][ T6672] IPVS: Error connecting to the multicast addr [ 131.170798][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.341165][ T5913] usb 1-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 131.341192][ T5913] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 131.341244][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.341269][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.341289][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.341329][ T5913] usb 1-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 131.341352][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.357486][ T5913] usb 1-1: config 0 descriptor?? [ 131.720829][ T5159] Bluetooth: hci5: command tx timeout [ 131.968191][ T5913] input: HID 28bd:0909 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0909.0002/input/input5 [ 132.229242][ T5913] uclogic 0003:28BD:0909.0002: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.0-1/input0 [ 132.365661][ T5913] usb 1-1: USB disconnect, device number 3 [ 132.452390][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.452538][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.452767][ T6602] bridge_slave_0: entered allmulticast mode [ 132.469304][ T6602] bridge_slave_0: entered promiscuous mode [ 132.520829][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.520972][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.521198][ T6602] bridge_slave_1: entered allmulticast mode [ 132.530181][ T6602] bridge_slave_1: entered promiscuous mode [ 132.589103][ T6692] fido_id[6692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 132.770343][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770421][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.894123][ T6703] netlink: 60 bytes leftover after parsing attributes in process `syz.0.309'. [ 133.131221][ T6698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.309'. [ 133.163815][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.218258][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.534897][ T6715] dummy0: entered promiscuous mode [ 133.539494][ T6715] dummy0: left promiscuous mode [ 133.807155][ T5159] Bluetooth: hci5: command tx timeout [ 134.110348][ T6602] team0: Port device team_slave_0 added [ 134.193647][ T6602] team0: Port device team_slave_1 added [ 134.731794][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.731810][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.731833][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.734218][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.734230][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.734253][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.524986][ T6602] hsr_slave_0: entered promiscuous mode [ 135.539362][ T6602] hsr_slave_1: entered promiscuous mode [ 135.540386][ T6602] debugfs: 'hsr0' already exists in 'hsr' [ 135.540408][ T6602] Cannot create hsr debugfs directory [ 135.881034][ T5159] Bluetooth: hci5: command tx timeout [ 136.065549][ T6782] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 137.644520][ T6820] Can't find a SQUASHFS superblock on nullb0 [ 137.964492][ T6818] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 137.964514][ T6818] netlink: 'syz.4.359': attribute type 2 has an invalid length. [ 138.188322][ T37] audit: type=1400 audit(1755987898.132:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6834 comm="syz.3.368" src=1 dest=20000 netif=wpan0 [ 138.384161][ T1403] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.454855][ T6844] Zero length message leads to an empty skb [ 138.946461][ T1403] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.657345][ T1403] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.921656][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 140.004552][ T1403] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.090693][ T5898] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.112997][ T6602] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.203570][ T6602] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.240738][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 140.246460][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 140.246488][ T5898] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 140.246508][ T5898] usb 5-1: Product: syz [ 140.246521][ T5898] usb 5-1: Manufacturer: syz [ 140.246535][ T5898] usb 5-1: SerialNumber: syz [ 140.278421][ T6602] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.297035][ T5898] usb 5-1: config 0 descriptor?? [ 140.309927][ T5898] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 140.390026][ T6602] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.927762][ T5898] gspca_zc3xx: reg_w_i err -71 [ 140.927919][ T5898] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 140.970214][ T5898] usb 5-1: USB disconnect, device number 2 [ 141.008125][ T1403] bridge_slave_1: left allmulticast mode [ 141.009633][ T1403] bridge_slave_1: left promiscuous mode [ 141.027663][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.116616][ T1403] bridge_slave_0: left allmulticast mode [ 141.116648][ T1403] bridge_slave_0: left promiscuous mode [ 141.116924][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.128969][ T6897] nvme_fabrics: missing parameter 'transport=%s' [ 141.128983][ T6897] nvme_fabrics: missing parameter 'nqn=%s' [ 141.520836][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.681443][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 141.713401][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 141.725461][ T5906] usb 4-1: config 4 interface 0 has no altsetting 0 [ 141.729741][ T5906] usb 4-1: string descriptor 0 read error: -22 [ 141.729885][ T5906] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 141.729907][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.802423][ T5906] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 141.859729][ T5906] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 141.863846][ T5906] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 141.863922][ T5906] usb 4-1: media controller created [ 142.037549][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.290945][ T5853] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.460816][ T5853] usb 1-1: Using ep0 maxpacket: 32 [ 142.466615][ T5853] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 142.466657][ T5853] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.466696][ T5853] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 142.466713][ T5853] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.466735][ T5853] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.533609][ T5853] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.533637][ T5853] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.533656][ T5853] usb 1-1: Product: syz [ 142.533670][ T5853] usb 1-1: Manufacturer: syz [ 142.533682][ T5853] usb 1-1: SerialNumber: syz [ 142.575470][ T5853] usb 1-1: config 0 descriptor?? [ 142.617586][ T5853] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.654536][ T5853] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.834998][ T49] usb 1-1: USB disconnect, device number 4 [ 142.869318][ T49] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 143.097006][ T5906] zl10353_read_register: readreg error (reg=127, ret==0) [ 143.218612][ T5906] usb 4-1: USB disconnect, device number 3 [ 143.893334][ T1403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.996161][ T1403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.049700][ T1403] bond0 (unregistering): Released all slaves [ 144.325455][ T5906] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.480849][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 144.486534][ T5906] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 144.486557][ T5906] usb 4-1: config 0 has no interface number 0 [ 144.489657][ T5906] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 144.489681][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.489700][ T5906] usb 4-1: Product: syz [ 144.489713][ T5906] usb 4-1: Manufacturer: syz [ 144.489726][ T5906] usb 4-1: SerialNumber: syz [ 144.502913][ T5906] usb 4-1: config 0 descriptor?? [ 144.975438][ T5906] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 144.975466][ T5906] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 145.190706][ T5906] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 145.190730][ T5906] radio-si470x 4-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 145.191073][ T5906] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 145.231306][ T5906] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 145.259098][ T5906] usb 4-1: USB disconnect, device number 4 [ 145.286025][ T6950] sctp: [Deprecated]: syz.2.412 (pid 6950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.286025][ T6950] Use struct sctp_sack_info instead [ 145.557190][ T6953] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 145.557224][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 145.789966][ T6961] netlink: del zone limit has 4 unknown bytes [ 146.123913][ T6973] netlink: 440 bytes leftover after parsing attributes in process `syz.2.419'. [ 146.123935][ T6973] netlink: 52 bytes leftover after parsing attributes in process `syz.2.419'. [ 146.123986][ T6973] netlink: 48 bytes leftover after parsing attributes in process `syz.2.419'. [ 146.366531][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.456429][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.536468][ T6988] 9pnet_fd: Insufficient options for proto=fd [ 146.612892][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.613044][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.023699][ T1403] hsr_slave_0: left promiscuous mode [ 147.074288][ T1403] hsr_slave_1: left promiscuous mode [ 147.079563][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.079657][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.154776][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.154809][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.500222][ T1403] veth1_macvtap: left promiscuous mode [ 147.500459][ T1403] veth0_macvtap: left promiscuous mode [ 147.505018][ T1403] veth1_vlan: left promiscuous mode [ 147.505392][ T1403] veth0_vlan: left promiscuous mode [ 148.333462][ T7026] futex_wake_op: syz.2.437 tries to shift op by -1; fix this program [ 148.785504][ T5928] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 148.944328][ T5928] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.944355][ T5928] usb 5-1: config 0 has no interface number 0 [ 148.944401][ T5928] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.944427][ T5928] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.944468][ T5928] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.944490][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.957994][ T5928] usb 5-1: config 0 descriptor?? [ 148.959040][ T7030] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.049945][ T5928] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 149.201492][ T5898] usb 5-1: USB disconnect, device number 3 [ 149.201525][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 149.320802][ T5928] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.487953][ T5928] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 149.487982][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.488001][ T5928] usb 3-1: Product: syz [ 149.488025][ T5928] usb 3-1: Manufacturer: syz [ 149.488039][ T5928] usb 3-1: SerialNumber: syz [ 149.513449][ T5928] usb 3-1: config 0 descriptor?? [ 149.755721][ T5928] usb 3-1: USB disconnect, device number 3 [ 150.031906][ T7039] CIFS: VFS: Malformed UNC in devname [ 150.232155][ T7041] IPv6: Can't replace route, no match found [ 150.863009][ T1403] team0 (unregistering): Port device team_slave_1 removed [ 151.038468][ T1403] team0 (unregistering): Port device team_slave_0 removed [ 153.113613][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.113772][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.199307][ T7045] netlink: 'syz.4.446': attribute type 1 has an invalid length. [ 153.199327][ T7045] netlink: 'syz.4.446': attribute type 2 has an invalid length. [ 153.828430][ T7058] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.450'. [ 154.041120][ T7062] fuseblk: Bad value for 'fd' [ 159.197564][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.560750][ T49] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.731189][ T49] usb 1-1: Using ep0 maxpacket: 8 [ 159.733613][ T49] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 159.733637][ T49] usb 1-1: config 0 has no interface number 0 [ 159.733690][ T49] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.733713][ T49] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 159.733737][ T49] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 159.733762][ T49] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.738025][ T49] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 159.738049][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.738068][ T49] usb 1-1: Product: syz [ 159.738082][ T49] usb 1-1: Manufacturer: syz [ 159.738095][ T49] usb 1-1: SerialNumber: syz [ 159.773883][ T49] usb 1-1: config 0 descriptor?? [ 160.007730][ T49] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 160.130514][ T7059] syz.3.449 (7059): drop_caches: 2 [ 160.260918][ T5853] usb 1-1: USB disconnect, device number 5 [ 160.565171][ T7104] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 160.910151][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910185][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910211][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910235][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910259][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910283][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910307][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910331][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910356][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 160.910387][ T5906] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0 [ 161.016936][ T5906] hid-generic 0002:0004:0009.0003: hidraw0: HID v0.04 Device [syz0] on syz0 [ 161.188126][ T6602] veth0_vlan: entered promiscuous mode [ 161.222017][ T7117] fido_id[7117]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 161.282364][ T6602] veth1_vlan: entered promiscuous mode [ 161.520924][ T6602] veth0_macvtap: entered promiscuous mode [ 161.548172][ T6602] veth1_macvtap: entered promiscuous mode [ 161.562322][ T5913] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.636497][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.674225][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.702234][ T3551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.715141][ T3551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.715413][ T3551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.715631][ T3551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.791510][ T5913] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 161.791540][ T5913] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 161.791564][ T5913] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 161.791604][ T5913] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 161.791625][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.815832][ T7119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 162.378513][ T7142] batadv_slave_1: entered promiscuous mode [ 162.405176][ T7139] batadv_slave_1: left promiscuous mode [ 162.418752][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.418770][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.639107][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.639126][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.657134][ T5913] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 162.690968][ T5913] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input6 [ 162.871125][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 162.956685][ T5913] usb 5-1: USB disconnect, device number 4 [ 162.956779][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 163.020717][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 163.023180][ T5898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 163.023232][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.023259][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.023283][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.023307][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.024762][ T5898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 163.024812][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.024838][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.024861][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.024886][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.026299][ T5898] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 163.026345][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 163.026370][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.026394][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.026417][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 163.030419][ T5898] usb 4-1: string descriptor 0 read error: -22 [ 163.203896][ T5898] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 163.203923][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.270922][ T5898] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 163.543431][ T5841] usb 4-1: USB disconnect, device number 5 [ 164.342479][ T7166] syz_tun: entered allmulticast mode [ 164.481387][ T31] hid-generic 0000:0004:0034.0004: hidraw0: HID v0.0e Device [syz0] on syz1 [ 164.912584][ T7155] syz_tun: left allmulticast mode [ 165.175133][ T7175] fido_id[7175]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 165.790712][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.941268][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 165.943977][ T5913] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 165.944007][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 165.944032][ T5913] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.944054][ T5913] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.944094][ T5913] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 165.944116][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.265322][ T5913] usb 3-1: GET_CAPABILITIES returned 0 [ 166.265372][ T5913] usbtmc 3-1:16.0: can't read capabilities [ 166.465787][ T31] usb 3-1: USB disconnect, device number 4 [ 166.950810][ T7196] syz.3.484 (7196) used greatest stack depth: 18968 bytes left [ 167.100705][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 167.252171][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 167.254677][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.254708][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.254733][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.254755][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.254796][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.254817][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.370855][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 167.519995][ T31] usb 1-1: GET_CAPABILITIES returned 0 [ 167.520044][ T31] usbtmc 1-1:16.0: can't read capabilities [ 167.545404][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 167.547868][ T5906] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 167.547897][ T5906] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 167.547923][ T5906] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.547946][ T5906] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.547987][ T5906] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.548007][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.765249][ T5898] usb 1-1: USB disconnect, device number 6 [ 167.891231][ T5906] usb 4-1: GET_CAPABILITIES returned 0 [ 167.891276][ T5906] usbtmc 4-1:16.0: can't read capabilities [ 168.117964][ T5906] usb 4-1: USB disconnect, device number 6 [ 168.788747][ T5841] hid_parser_main: 10 callbacks suppressed [ 168.788768][ T5841] hid-generic 0000:0004:0034.0005: unknown main item tag 0x0 [ 168.788803][ T5841] hid-generic 0000:0004:0034.0005: unknown main item tag 0x0 [ 168.789468][ T5841] hid-generic 0000:0004:0034.0005: unknown main item tag 0x0 [ 169.068628][ T5841] hid-generic 0000:0004:0034.0005: hidraw0: HID v0.0e Device [syz0] on syz1 [ 170.048253][ T7230] syz_tun: entered allmulticast mode [ 170.049549][ T7230] syz_tun: left allmulticast mode [ 170.221608][ T7245] fido_id[7245]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.730849][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 170.820498][ T7265] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 170.832674][ T7265] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.834484][ T7265] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.894072][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.894102][ T5906] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.894125][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.902270][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 170.902297][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 170.902315][ T5906] usb 5-1: Product: syz [ 170.902328][ T5906] usb 5-1: Manufacturer: syz [ 170.902342][ T5906] usb 5-1: SerialNumber: syz [ 170.921067][ T7267] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.508'. [ 171.226816][ T5906] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.430128][ T5841] usb 5-1: USB disconnect, device number 5 [ 171.458023][ T5841] usblp0: removed [ 172.598517][ T5898] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.740700][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 172.743205][ T5898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 172.743248][ T5898] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.743287][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.743313][ T5898] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.743337][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.743362][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.743388][ T5898] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.743413][ T5898] usb 1-1: config 168 interface 0 has no altsetting 0 [ 172.744828][ T5898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 172.744864][ T5898] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.744912][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.744937][ T5898] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.744960][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.744985][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.745010][ T5898] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.745035][ T5898] usb 1-1: config 168 interface 0 has no altsetting 0 [ 172.746437][ T5898] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 172.746473][ T5898] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 172.746573][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 172.746599][ T5898] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 172.746622][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 172.746645][ T5898] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 172.746670][ T5898] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 172.746694][ T5898] usb 1-1: config 168 interface 0 has no altsetting 0 [ 172.830706][ T5898] usb 1-1: string descriptor 0 read error: -22 [ 172.830853][ T5898] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.830885][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.935563][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 173.071277][ T5898] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 173.276191][ T31] usb 1-1: USB disconnect, device number 7 [ 173.529262][ T7342] sp0: Synchronizing with TNC [ 174.757803][ T7383] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 174.867341][ T7388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 174.920607][ T7387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.551'. [ 175.210849][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.381407][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 175.387572][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.387618][ T31] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.387640][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.402824][ T31] usb 4-1: config 0 descriptor?? [ 175.653869][ T31] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.893560][ T31] usb 4-1: USB disconnect, device number 7 [ 176.770909][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'. [ 177.250637][ T37] audit: type=1326 audit(1755987937.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.254736][ T37] audit: type=1326 audit(1755987937.202:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.296851][ T37] audit: type=1326 audit(1755987937.232:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.296897][ T37] audit: type=1326 audit(1755987937.232:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.296934][ T37] audit: type=1326 audit(1755987937.232:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.296972][ T37] audit: type=1326 audit(1755987937.242:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.297009][ T37] audit: type=1326 audit(1755987937.242:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.297045][ T37] audit: type=1326 audit(1755987937.242:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.302656][ T37] audit: type=1326 audit(1755987937.252:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.302700][ T37] audit: type=1326 audit(1755987937.252:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7465 comm="syz.0.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919f7eebe9 code=0x7ffc0000 [ 177.708054][ T7468] (syz.2.578,7468,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 177.708084][ T7468] (syz.2.578,7468,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 177.973228][ T7472] mkiss: ax0: crc mode is auto. [ 181.801277][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.960711][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 181.964887][ T31] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 181.964912][ T31] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 181.964931][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 181.964958][ T31] usb 4-1: config 1 has no interface number 0 [ 181.965009][ T31] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.965034][ T31] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 181.965076][ T31] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 181.965096][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.207869][ T31] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 182.393038][ T31] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 182.586603][ T31] usb 4-1: USB disconnect, device number 8 [ 182.630951][ T31] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 183.578220][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 185.209933][ T7580] syz.5.622 (7580): drop_caches: 2 [ 189.710835][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.490466][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 192.569334][ T31] usb 5-1: device descriptor read/all, error -71 [ 194.224813][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.224889][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.502783][ T7645] syz.0.638 uses obsolete (PF_INET,SOCK_PACKET) [ 201.418235][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 201.418359][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 201.418386][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 202.332604][ T7667] could not allocate digest TFM handle sha1-generic [ 210.314476][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.318000][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.319519][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.356215][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.371382][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.680287][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.699574][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.712360][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.714667][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.739587][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 213.322730][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.332977][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.343486][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.345052][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.345883][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.080850][ T5159] Bluetooth: hci1: command tx timeout [ 217.081296][ T5159] Bluetooth: hci6: command tx timeout [ 217.086997][ T5842] Bluetooth: hci7: command tx timeout [ 219.160932][ T59] Bluetooth: hci7: command tx timeout [ 219.160963][ T59] Bluetooth: hci6: command tx timeout [ 219.160983][ T59] Bluetooth: hci1: command tx timeout [ 220.432000][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 220.472992][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 220.474431][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 220.476050][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 220.476844][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 221.243065][ T5842] Bluetooth: hci1: command tx timeout [ 221.243098][ T5842] Bluetooth: hci6: command tx timeout [ 221.243118][ T5842] Bluetooth: hci7: command tx timeout [ 222.601028][ T59] Bluetooth: hci8: command tx timeout [ 223.081263][ T7687] chnl_net:caif_netlink_parms(): no params data found [ 223.206296][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 223.320737][ T59] Bluetooth: hci7: command tx timeout [ 223.320768][ T59] Bluetooth: hci6: command tx timeout [ 223.320796][ T59] Bluetooth: hci1: command tx timeout [ 224.399529][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 224.417601][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 224.418774][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 224.420024][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 224.444352][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 224.680672][ T59] Bluetooth: hci8: command tx timeout [ 226.522401][ T59] Bluetooth: hci9: command tx timeout [ 226.764491][ T59] Bluetooth: hci8: command tx timeout [ 227.340563][ C0] sched: DL replenish lagged too much [ 228.600794][ T59] Bluetooth: hci9: command tx timeout [ 228.840736][ T59] Bluetooth: hci8: command tx timeout [ 230.680777][ T5842] Bluetooth: hci9: command tx timeout [ 232.760880][ T59] Bluetooth: hci9: command tx timeout [ 242.360722][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 244.967395][ T7690] chnl_net:caif_netlink_parms(): no params data found [ 255.671564][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.671642][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.911519][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.931498][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.932671][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.934615][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.935771][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.101475][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.110014][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.127016][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.128367][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.145347][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.083559][ T5842] Bluetooth: hci4: command tx timeout [ 273.160914][ T5842] Bluetooth: hci5: command tx timeout [ 273.998299][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 274.019959][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 274.039178][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 274.040382][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 274.051349][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 275.160979][ T5842] Bluetooth: hci4: command tx timeout [ 275.240825][ T5842] Bluetooth: hci5: command tx timeout [ 276.135471][ T5842] Bluetooth: hci10: command tx timeout [ 277.240827][ T5842] Bluetooth: hci4: command tx timeout [ 277.320824][ T5842] Bluetooth: hci5: command tx timeout [ 278.200915][ T5842] Bluetooth: hci10: command tx timeout [ 279.321036][ T5842] Bluetooth: hci4: command tx timeout [ 279.400730][ T59] Bluetooth: hci5: command tx timeout [ 280.281333][ T59] Bluetooth: hci10: command tx timeout [ 280.806982][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 280.824000][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 280.825180][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 280.826894][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 280.827795][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 282.360907][ T59] Bluetooth: hci10: command tx timeout [ 284.930322][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 284.951320][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 284.952728][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 285.010255][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 285.052319][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 287.080882][ T5842] Bluetooth: hci11: command tx timeout [ 287.160846][ T5842] Bluetooth: hci12: command tx timeout [ 289.160740][ T5842] Bluetooth: hci11: command tx timeout [ 289.244427][ T5842] Bluetooth: hci12: command tx timeout [ 291.240813][ T5842] Bluetooth: hci11: command tx timeout [ 291.320786][ T5842] Bluetooth: hci12: command tx timeout [ 293.324316][ T5842] Bluetooth: hci11: command tx timeout [ 293.400898][ T5842] Bluetooth: hci12: command tx timeout [ 317.094378][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094471][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.665190][ T7687] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 325.684378][ T7699] chnl_net:caif_netlink_parms(): no params data found [ 332.744580][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 332.761613][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.762736][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.764287][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.765083][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.929984][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 332.946256][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 332.947408][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 332.948570][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 332.980382][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 334.386305][ T5842] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 334.400851][ T5842] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 334.401985][ T5842] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 334.403138][ T5842] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 334.404142][ T5842] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 334.840873][ T59] Bluetooth: hci1: command tx timeout [ 335.080815][ T59] Bluetooth: hci13: command tx timeout [ 336.520771][ T59] Bluetooth: hci14: command tx timeout [ 336.920950][ T59] Bluetooth: hci1: command tx timeout [ 337.161352][ T5842] Bluetooth: hci13: command tx timeout [ 338.600787][ T59] Bluetooth: hci14: command tx timeout [ 339.000852][ T59] Bluetooth: hci1: command tx timeout [ 339.240980][ T59] Bluetooth: hci13: command tx timeout [ 339.646371][ T59] Bluetooth: hci7: command 0x0406 tx timeout [ 340.682217][ T59] Bluetooth: hci14: command tx timeout [ 340.861748][ T5159] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 340.886319][ T5159] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 340.887461][ T5159] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 340.889012][ T5159] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 340.889839][ T5159] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 341.081061][ T5159] Bluetooth: hci1: command tx timeout [ 341.321294][ T5159] Bluetooth: hci13: command tx timeout [ 342.760753][ T5159] Bluetooth: hci14: command tx timeout [ 345.431558][ T5847] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 345.440004][ T5847] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 345.455647][ T5847] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 345.456825][ T5847] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 345.457640][ T5847] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 357.000854][ T5842] Bluetooth: hci15: command tx timeout [ 358.681158][ T38] INFO: task kworker/u8:9:1403 blocked for more than 143 seconds. [ 358.681190][ T38] Not tainted syzkaller #0 [ 358.681200][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.681213][ T38] task:kworker/u8:9 state:D stack:22056 pid:1403 tgid:1403 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 358.681267][ T38] Workqueue: events_unbound bpf_map_free_deferred [ 358.681306][ T38] Call Trace: [ 358.681313][ T38] [ 358.681326][ T38] __schedule+0x16f3/0x4c20 [ 358.681373][ T38] ? __lock_acquire+0xab9/0xd20 [ 358.681395][ T38] ? __pfx___schedule+0x10/0x10 [ 358.681433][ T38] ? schedule+0x91/0x360 [ 358.681456][ T38] schedule+0x165/0x360 [ 358.681479][ T38] schedule_timeout+0x9a/0x270 [ 358.681499][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 358.681532][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.681552][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.681571][ T38] ? wait_for_completion+0x267/0x5d0 [ 358.681594][ T38] wait_for_completion+0x2bf/0x5d0 [ 358.681628][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 358.681657][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 358.681682][ T38] rcu_barrier+0x463/0x570 [ 358.681711][ T38] dev_map_free+0x11f/0x6a0 [ 358.681744][ T38] bpf_map_free_deferred+0x113/0x140 [ 358.681762][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 358.681785][ T38] process_scheduled_works+0xade/0x17b0 [ 358.681836][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.681875][ T38] worker_thread+0x8a0/0xda0 [ 358.681932][ T38] kthread+0x70e/0x8a0 [ 358.681960][ T38] ? __pfx_worker_thread+0x10/0x10 [ 358.681980][ T38] ? __pfx_kthread+0x10/0x10 [ 358.682008][ T38] ? __pfx_kthread+0x10/0x10 [ 358.682032][ T38] ret_from_fork+0x3fc/0x770 [ 358.682057][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 358.682085][ T38] ? __switch_to_asm+0x39/0x70 [ 358.682101][ T38] ? __switch_to_asm+0x33/0x70 [ 358.682116][ T38] ? __pfx_kthread+0x10/0x10 [ 358.682140][ T38] ret_from_fork_asm+0x1a/0x30 [ 358.682174][ T38] [ 358.682261][ T38] INFO: task syz.2.648:7681 blocked for more than 143 seconds. [ 358.682274][ T38] Not tainted syzkaller #0 [ 358.682283][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.682291][ T38] task:syz.2.648 state:D stack:25128 pid:7681 tgid:7681 ppid:5848 task_flags:0x400040 flags:0x00004004 [ 358.682339][ T38] Call Trace: [ 358.682343][ T38] [ 358.682354][ T38] __schedule+0x16f3/0x4c20 [ 358.682383][ T38] ? sched_clock+0x3f/0x60 [ 358.682403][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 358.682435][ T38] ? __pfx___schedule+0x10/0x10 [ 358.682480][ T38] rt_mutex_schedule+0x77/0xf0 [ 358.682498][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 358.682530][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 358.682552][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 358.682572][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 358.682591][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 358.682621][ T38] ? rcu_barrier+0x4c/0x570 [ 358.682646][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 358.682668][ T38] ? rcu_barrier+0x4c/0x570 [ 358.682683][ T38] mutex_lock_nested+0x16a/0x1d0 [ 358.682700][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 358.682722][ T38] rcu_barrier+0x4c/0x570 [ 358.682751][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 358.682771][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 358.682795][ T38] kvm_put_kvm+0xf8e/0x1670 [ 358.682824][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 358.682846][ T38] kvm_vm_release+0x46/0x50 [ 358.682866][ T38] __fput+0x45b/0xa80 [ 358.682897][ T38] task_work_run+0x1d4/0x260 [ 358.682924][ T38] ? __pfx_task_work_run+0x10/0x10 [ 358.682948][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 358.682974][ T38] exit_to_user_mode_loop+0xec/0x110 [ 358.682996][ T38] do_syscall_64+0x2bd/0x3b0 [ 358.683019][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.683037][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 358.683054][ T38] ? clear_bhb_loop+0x60/0xb0 [ 358.683076][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.683093][ T38] RIP: 0033:0x7f0ba0d7ebe9 [ 358.683114][ T38] RSP: 002b:00007fff8ed99bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 358.683132][ T38] RAX: 0000000000000000 RBX: 0000000000032c16 RCX: 00007f0ba0d7ebe9 [ 358.683144][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 358.683155][ T38] RBP: 00007f0ba0fa7da0 R08: 0000000000000001 R09: 000000058ed99eaf [ 358.683167][ T38] R10: 0000001b30a20000 R11: 0000000000000246 R12: 00007f0ba0fa5fac [ 358.683179][ T38] R13: 00007f0ba0fa5fa0 R14: ffffffffffffffff R15: 00007fff8ed99cd0 [ 358.683210][ T38] [ 358.683239][ T38] [ 358.683239][ T38] Showing all locks held in the system: [ 358.683247][ T38] 2 locks held by ksoftirqd/0/15: [ 358.683257][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 358.683303][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 358.683346][ T38] 6 locks held by ktimers/0/16: [ 358.683357][ T38] 2 locks held by rcuc/0/20: [ 358.683366][ T38] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 358.683409][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 358.683453][ T38] 3 locks held by kworker/1:0/31: [ 358.683463][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.683506][ T38] #1: ffffc90000a5fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.683548][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 358.683596][ T38] 1 lock held by khungtaskd/38: [ 358.683605][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.683654][ T38] 2 locks held by kworker/0:2/1232: [ 358.683665][ T38] 3 locks held by kworker/u8:9/1403: [ 358.683675][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.683718][ T38] #1: ffffc9000552fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.683761][ T38] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.683813][ T38] 3 locks held by kworker/u8:14/3551: [ 358.683823][ T38] #0: ffff88814cdae938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.683866][ T38] #1: ffffc9000db27bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.683919][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 358.683960][ T38] 2 locks held by kworker/u8:16/3600: [ 358.683971][ T38] 4 locks held by kworker/u9:1/5159: [ 358.683981][ T38] #0: ffff888032460938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.684028][ T38] #1: ffffc9001069fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.684071][ T38] #2: ffff8880612980a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 358.684115][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 358.684158][ T38] 2 locks held by getty/5596: [ 358.684167][ T38] #0: ffff88823bf300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.684213][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 358.684260][ T38] 3 locks held by kworker/u8:18/6052: [ 358.684270][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.684314][ T38] #1: ffffc900053ffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.684356][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 358.684404][ T38] 1 lock held by syz.0.638/7638: [ 358.684414][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.684455][ T38] 2 locks held by syz.3.640/7641: [ 358.684464][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 358.684506][ T38] #1: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.684546][ T38] 1 lock held by syz.5.641/7661: [ 358.684556][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 358.684600][ T38] 2 locks held by kworker/0:13/7663: [ 358.684610][ T38] 1 lock held by syz.4.646/7678: [ 358.684620][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.684660][ T38] 1 lock held by syz.2.648/7681: [ 358.684670][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.684710][ T38] 1 lock held by syz-executor/7685: [ 358.684719][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 358.684763][ T38] 4 locks held by syz-executor/7687: [ 358.684787][ T38] #0: ffff8880335bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 358.684828][ T38] #1: ffff8880335bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 358.684870][ T38] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 358.684920][ T38] #3: ffff88801dada358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 358.684971][ T38] 2 locks held by syz-executor/7690: [ 358.684980][ T38] #0: ffffffff8e447b40 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 358.685026][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 358.685069][ T38] 3 locks held by syz-executor/7699: [ 358.685078][ T38] #0: ffff888036318e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 358.685118][ T38] #1: ffff8880363180a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 358.685160][ T38] #2: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 358.685203][ T38] 2 locks held by syz-executor/7741: [ 358.685213][ T38] #0: ffff88806ae74e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 358.685253][ T38] #1: ffff88806ae740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 358.685295][ T38] 4 locks held by kworker/0:18/7751: [ 358.685305][ T38] 1 lock held by syz-executor/7762: [ 358.685315][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685361][ T38] 1 lock held by syz-executor/7766: [ 358.685371][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685416][ T38] 1 lock held by syz-executor/7770: [ 358.685426][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685471][ T38] 1 lock held by syz-executor/7773: [ 358.685480][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685525][ T38] 1 lock held by syz-executor/7778: [ 358.685535][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685580][ T38] 1 lock held by syz-executor/7793: [ 358.685590][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685636][ T38] 1 lock held by syz-executor/7796: [ 358.685646][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685691][ T38] 1 lock held by syz-executor/7800: [ 358.685701][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685745][ T38] 1 lock held by syz-executor/7803: [ 358.685755][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685800][ T38] 1 lock held by syz-executor/7809: [ 358.685810][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.685855][ T38] 1 lock held by dhcpcd/7811: [ 358.685864][ T38] #0: ffff88806b1d0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 358.685912][ T38] 1 lock held by dhcpcd/7812: [ 358.685921][ T38] #0: ffff88802880a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 358.685962][ T38] [ 358.685967][ T38] ============================================= [ 358.685967][ T38] [ 358.685983][ T38] NMI backtrace for cpu 1 [ 358.686004][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.686024][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.686033][ T38] Call Trace: [ 358.686040][ T38] [ 358.686047][ T38] dump_stack_lvl+0x189/0x250 [ 358.686074][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.686096][ T38] ? __pfx__printk+0x10/0x10 [ 358.686127][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 358.686148][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 358.686168][ T38] ? __pfx__printk+0x10/0x10 [ 358.686190][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.686213][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 358.686234][ T38] watchdog+0xf93/0xfe0 [ 358.686260][ T38] ? watchdog+0x1de/0xfe0 [ 358.686285][ T38] kthread+0x70e/0x8a0 [ 358.686312][ T38] ? __pfx_watchdog+0x10/0x10 [ 358.686331][ T38] ? __pfx_kthread+0x10/0x10 [ 358.686358][ T38] ? __pfx_kthread+0x10/0x10 [ 358.686381][ T38] ret_from_fork+0x3fc/0x770 [ 358.686405][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 358.686431][ T38] ? __switch_to_asm+0x39/0x70 [ 358.686446][ T38] ? __switch_to_asm+0x33/0x70 [ 358.686460][ T38] ? __pfx_kthread+0x10/0x10 [ 358.686484][ T38] ret_from_fork_asm+0x1a/0x30 [ 358.686516][ T38] [ 358.686522][ T38] Sending NMI from CPU 1 to CPUs 0: [ 358.686547][ C0] NMI backtrace for cpu 0 [ 358.686559][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.686576][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.686585][ C0] RIP: 0010:kasan_check_range+0x57/0x2c0 [ 358.686605][ C0] Code: 80 ff ff eb 11 cc cc cc f3 0f 1e fa 49 b9 00 00 00 00 00 00 00 ff f3 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 <49> ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 [ 358.686617][ C0] RSP: 0018:ffffc900001566e0 EFLAGS: 00000a02 [ 358.686630][ C0] RAX: 1ffff9200002ad01 RBX: 0000000000000010 RCX: ffffffff8172bd58 [ 358.686641][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000156858 [ 358.686651][ C0] RBP: 0000000000000000 R08: ffffc90000156868 R09: ffff800000000000 [ 358.686661][ C0] R10: ffffc90000156858 R11: ffffffff81aae020 R12: ffffc90000156ce0 [ 358.686672][ C0] R13: ffffc90000156858 R14: ffffc90000156858 R15: 1ffff9200002ad0b [ 358.686684][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 358.686696][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.686707][ C0] CR2: 00007fdb69d0cf98 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 358.686720][ C0] Call Trace: [ 358.686726][ C0] [ 358.686734][ C0] __asan_memset+0x22/0x50 [ 358.686749][ C0] unwind_next_frame+0xc98/0x2390 [ 358.686771][ C0] ? unwind_next_frame+0xa5/0x2390 [ 358.686789][ C0] ? fill_pool+0x100/0x570 [ 358.686807][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 358.686823][ C0] arch_stack_walk+0x11c/0x150 [ 358.686844][ C0] ? debug_objects_fill_pool+0x107/0x120 [ 358.686863][ C0] stack_trace_save+0x9c/0xe0 [ 358.686877][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 358.686890][ C0] ? do_raw_spin_lock+0x121/0x290 [ 358.686911][ C0] kasan_save_track+0x3e/0x80 [ 358.686926][ C0] ? kasan_save_track+0x3e/0x80 [ 358.686939][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 358.686954][ C0] ? kmem_cache_alloc_noprof+0x143/0x310 [ 358.686972][ C0] ? fill_pool+0x100/0x570 [ 358.687009][ C0] ? fill_pool+0x100/0x570 [ 358.687025][ C0] __kasan_slab_alloc+0x6c/0x80 [ 358.687041][ C0] ? fill_pool+0x100/0x570 [ 358.687063][ C0] kmem_cache_alloc_noprof+0x143/0x310 [ 358.687082][ C0] fill_pool+0x100/0x570 [ 358.687099][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 358.687115][ C0] ? __pfx_fill_pool+0x10/0x10 [ 358.687133][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 358.687148][ C0] ? debug_objects_fill_pool+0xdf/0x120 [ 358.687169][ C0] debug_objects_fill_pool+0x107/0x120 [ 358.687185][ C0] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 358.687207][ C0] debug_object_activate+0x6c/0x3a0 [ 358.687226][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 358.687245][ C0] call_rcu+0xaa/0x9c0 [ 358.687263][ C0] ? rcuref_put+0x1b7/0x210 [ 358.687280][ C0] ? __pfx_call_rcu+0x10/0x10 [ 358.687294][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 358.687313][ C0] ? dst_release+0x126/0x1b0 [ 358.687332][ C0] skb_release_head_state+0x71/0x250 [ 358.687351][ C0] consume_skb+0x60/0xf0 [ 358.687368][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 358.687390][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 358.687410][ C0] ? nf_ip_checksum+0x13c/0x510 [ 358.687431][ C0] nft_synproxy_do_eval+0x345/0x570 [ 358.687452][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 358.687479][ C0] nft_do_chain+0x40c/0x1920 [ 358.687505][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 358.687537][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 358.687556][ C0] nft_do_chain_inet+0x25d/0x340 [ 358.687574][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 358.687591][ C0] ? __lock_acquire+0xab9/0xd20 [ 358.687613][ C0] ? NF_HOOK+0x9a/0x3a0 [ 358.687629][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 358.687648][ C0] nf_hook_slow+0xc5/0x220 [ 358.687666][ C0] NF_HOOK+0x206/0x3a0 [ 358.687683][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 358.687698][ C0] ? NF_HOOK+0x9a/0x3a0 [ 358.687713][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 358.687726][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 358.687744][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 358.687760][ C0] ? skb_dst+0x4f/0xd0 [ 358.687775][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 358.687792][ C0] NF_HOOK+0x309/0x3a0 [ 358.687809][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 358.687824][ C0] ? NF_HOOK+0x9a/0x3a0 [ 358.687838][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 358.687854][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 358.687875][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 358.687889][ C0] __netif_receive_skb+0x143/0x380 [ 358.687904][ C0] ? rt_spin_unlock+0x65/0x80 [ 358.687920][ C0] ? process_backlog+0x27b/0x900 [ 358.687934][ C0] process_backlog+0x31e/0x900 [ 358.687955][ C0] __napi_poll+0xb6/0x540 [ 358.687972][ C0] net_rx_action+0x707/0xe00 [ 358.687987][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.688012][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 358.688044][ C0] handle_softirqs+0x22c/0x710 [ 358.688065][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 358.688086][ C0] run_ktimerd+0xcf/0x190 [ 358.688103][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 358.688119][ C0] ? schedule+0x91/0x360 [ 358.688138][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 358.688153][ C0] smpboot_thread_fn+0x53f/0xa60 [ 358.688175][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 358.688195][ C0] kthread+0x70e/0x8a0 [ 358.688214][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 358.688230][ C0] ? __pfx_kthread+0x10/0x10 [ 358.688251][ C0] ? __pfx_kthread+0x10/0x10 [ 358.688269][ C0] ret_from_fork+0x3fc/0x770 [ 358.688287][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 358.688306][ C0] ? __switch_to_asm+0x39/0x70 [ 358.688319][ C0] ? __switch_to_asm+0x33/0x70 [ 358.688331][ C0] ? __pfx_kthread+0x10/0x10 [ 358.688350][ C0] ret_from_fork_asm+0x1a/0x30 [ 358.688371][ C0] [ 358.688548][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 358.688560][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.688580][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.688589][ T38] Call Trace: [ 358.688596][ T38] [ 358.688603][ T38] dump_stack_lvl+0x99/0x250 [ 358.688626][ T38] ? __asan_memcpy+0x40/0x70 [ 358.688644][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.688666][ T38] ? __pfx__printk+0x10/0x10 [ 358.688698][ T38] vpanic+0x281/0x750 [ 358.688723][ T38] ? __pfx_vpanic+0x10/0x10 [ 358.688743][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 358.688761][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.688791][ T38] panic+0xb9/0xc0 [ 358.688813][ T38] ? __pfx_panic+0x10/0x10 [ 358.688838][ T38] ? irq_work_queue+0xc3/0x140 [ 358.688862][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 358.688883][ T38] watchdog+0xfd2/0xfe0 [ 358.688915][ T38] ? watchdog+0x1de/0xfe0 [ 358.688940][ T38] kthread+0x70e/0x8a0 [ 358.688966][ T38] ? __pfx_watchdog+0x10/0x10 [ 358.688985][ T38] ? __pfx_kthread+0x10/0x10 [ 358.689013][ T38] ? __pfx_kthread+0x10/0x10 [ 358.689036][ T38] ret_from_fork+0x3fc/0x770 [ 358.689060][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 358.689086][ T38] ? __switch_to_asm+0x39/0x70 [ 358.689101][ T38] ? __switch_to_asm+0x33/0x70 [ 358.689116][ T38] ? __pfx_kthread+0x10/0x10 [ 358.689140][ T38] ret_from_fork_asm+0x1a/0x30 [ 358.689171][ T38] [ 358.689430][ T38] Kernel Offset: disabled