last executing test programs: 15.375385426s ago: executing program 4 (id=688): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b5010203010902240001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 14.77373998s ago: executing program 0 (id=697): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 14.679715732s ago: executing program 0 (id=699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x5, {0x5, 0xa, "eb6c5f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 14.262567028s ago: executing program 1 (id=707): unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000900)={0x18, 0x2, {0x3, @private}}, 0x1e) 13.611495354s ago: executing program 1 (id=715): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x88}}, 0x0) 13.40092536s ago: executing program 4 (id=718): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x4}) 13.355757298s ago: executing program 2 (id=719): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000038c0), 0x8) 13.181797981s ago: executing program 3 (id=720): r0 = socket(0x15, 0x5, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 13.150643789s ago: executing program 4 (id=721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000007c0)="d4006ba0799d8391b5454134b494163a963a47", 0x13}, {&(0x7f0000002980)="f555c15b70", 0x5}], 0x2}}], 0x1, 0x0) 13.145545232s ago: executing program 1 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}]}}}}}}}, 0x0) 12.978241181s ago: executing program 1 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 12.977946033s ago: executing program 4 (id=724): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0xf20, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) 12.504113031s ago: executing program 3 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x3c}}, 0x0) 12.414021758s ago: executing program 2 (id=726): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20, 0x0, 0x0, 0xffffffff, 0x2}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404809, 0x0) 12.388972321s ago: executing program 3 (id=727): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000080000075010001c0"]) 11.488468347s ago: executing program 0 (id=728): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) getsockname$packet(r0, 0x0, 0x0) 11.469664871s ago: executing program 1 (id=729): clock_gettime(0x1, &(0x7f0000000c40)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)={r0, r1+60000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffeef, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f00000020c0), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='uid_map\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000040)=""/28, 0x1c, 0x0) read$FUSE(r3, &(0x7f0000005280)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000000020104000000000000000002000000300002802c000180140003000000"], 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000021c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24000005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x154) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) io_submit(0x0, 0x1, &(0x7f0000002240)=[&(0x7f0000002200)={0x0, 0x0, 0x0, 0xfab9b75a1beb2beb, 0x9, r5, &(0x7f0000002140)="bd1620b73c7c73179ba06a4cc25e10f50e55574312ecd577368d1df377509ef0c7c94ab71582d94394dbf72dcaaae24c41be942d655288c1851beedf0adca4a1e1c02bfc429899cfb152c93326092c3af6ce9a772acaecadfe5ce0a5049c8eb9", 0x60, 0x81, 0x0, 0x1}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, 0x0, 0x0) 11.347915927s ago: executing program 0 (id=730): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x9}) 5.24467783s ago: executing program 1 (id=731): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc) 5.244037877s ago: executing program 2 (id=732): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x2}, [], {0x14, 0x10}}, 0x28}}, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 5.243640445s ago: executing program 3 (id=733): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000300), 0x19ffe) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) 5.23847177s ago: executing program 4 (id=734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x2a8, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x268, 0x2, [@TCA_CGROUP_EMATCHES={0x264, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x74, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69, 0x1}, {0x9, 0x9}}}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="166dd093aa", @TCF_META_TYPE_VAR="8da2b1ea"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="03fec46370fa", @TCF_META_TYPE_VAR="bd2b85", @TCF_META_TYPE_VAR='O', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="f3ba6f", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="2210c2244f264701", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="43fefa1ddadc69f433", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0x58, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_META={0xb0, 0x2, 0x0, 0x0, {{0x2, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1}, {0xe597, 0x6, 0x1}}}, @TCA_EM_META_LVALUE={0x2d, 0x2, [@TCF_META_TYPE_VAR="4d81eae8e9", @TCF_META_TYPE_VAR="902307e190de436032ef", @TCF_META_TYPE_VAR="a433a0dbfb6b8ad56e", @TCF_META_TYPE_VAR="7f83b4e05907d673ac", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="54936f18d4", @TCF_META_TYPE_VAR="91b3f4151dded3d2"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="8e90fa0429b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9df72972fcb5"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x7, 0x1}, {0xc, 0xa3, 0x1}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}]}}]}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x22, 0x3, 0x1}, {0x0, 0x8, 0x9, 0x1000}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x3}, {{0x2, 0x1, 0x0, 0x1}, {0x4}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x401}, {0x4, 0x581, 0xa, 0x1, 0x5, 0x0, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x101, 0x8, 0x9}, {0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x393}, {0xf5f, 0xc, 0xdfbf, 0x7, 0x7, 0x0, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x9}, {0x2, 0x5, 0x2, "c22cf9b8b2"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5}, {0x3, 0x2, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0xb1b9}, {0x0, 0x3, 0xf, 0x6, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}]}, 0x2a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.804687197s ago: executing program 2 (id=735): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280), 0x8) 4.714071022s ago: executing program 0 (id=736): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0xef, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x43, 0x0, 0xfe, 0x0, 0x4, 0x8}, 0xe) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x2, 0x0, @loopback}, 0x1c) 4.713577054s ago: executing program 4 (id=737): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x1d3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) 4.132072428s ago: executing program 3 (id=738): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) read(r0, &(0x7f0000001e80)=""/96, 0x60) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000c3e80)={0x8, [], 0xb9, "ca867bfe720c47"}) 3.79831139s ago: executing program 2 (id=739): r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3.377073394s ago: executing program 2 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="6bd36bf753e9"}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="080081000700000000002000"], 0x1011) 3.376605668s ago: executing program 0 (id=741): clock_gettime(0x1, &(0x7f0000000c40)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000840)=""/44, 0x2c, 0x9, &(0x7f0000001980)={r0, r1+60000000}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffeef, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$eventfd(r2, &(0x7f00000020c0), 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000002700)='uid_map\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) pread64(r3, &(0x7f0000000040)=""/28, 0x1c, 0x0) read$FUSE(r3, &(0x7f0000005280)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000000020104000000000000000002000000300002802c000180140003000000"], 0x4c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000021c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT, @ANYRESDEC=r2], 0x44}, 0x1, 0x0, 0x0, 0x40000d0}, 0x24000005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x154) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) io_submit(0x0, 0x1, &(0x7f0000002240)=[&(0x7f0000002200)={0x0, 0x0, 0x0, 0xfab9b75a1beb2beb, 0x9, r5, &(0x7f0000002140)="bd1620b73c7c73179ba06a4cc25e10f50e55574312ecd577368d1df377509ef0c7c94ab71582d94394dbf72dcaaae24c41be942d655288c1851beedf0adca4a1e1c02bfc429899cfb152c93326092c3af6ce9a772acaecadfe5ce0a5049c8eb9", 0x60, 0x81, 0x0, 0x1}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r6, 0x0, 0x0) 0s ago: executing program 3 (id=742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x3c, r1, 0x1, 0xfffffffd, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): -1:0.0: probe with driver snd-usb-audio failed with error -22 [ 208.335237][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.347451][ T7760] openvswitch: netlink: Flow key attribute not present in set flow. [ 208.375304][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 208.611279][ T5285] usb 1-1: USB disconnect, device number 13 [ 208.655356][ T7768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.711647][ T4623] Bluetooth: hci1: command 0x0405 tx timeout [ 208.749027][ T7768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.079847][ T5285] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 209.239730][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 209.265706][ T5285] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 209.415254][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.543881][ T5285] usb 2-1: Product: syz [ 209.548179][ T5285] usb 2-1: Manufacturer: syz [ 209.616721][ T5285] usb 2-1: SerialNumber: syz [ 209.633811][ T5285] usb 2-1: config 0 descriptor?? [ 210.088120][ T5236] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 210.214727][ T9] usb 5-1: USB disconnect, device number 11 [ 210.243313][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 210.578137][ T7795] Cannot find set identified by id 0 to match [ 210.783442][ T7808] Cannot find add_set index 0 as target [ 210.978239][ T7801] ebtables: ebtables: counters copy to user failed while replacing table [ 211.206518][ T7821] hub 9-0:1.0: USB hub found [ 211.233270][ T7821] hub 9-0:1.0: 8 ports detected [ 211.283443][ T7822] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 211.334688][ T47] usb 2-1: USB disconnect, device number 20 [ 211.349378][ T7826] vlan1: entered promiscuous mode [ 211.370868][ T7821] program syz.0.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.449063][ T7826] vlan1 (unregistering): left promiscuous mode [ 211.482548][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.0.408'. [ 211.542457][ T7821] vlan2: entered promiscuous mode [ 211.547541][ T7821] bond0: entered promiscuous mode [ 211.553051][ T7821] bond_slave_0: entered promiscuous mode [ 211.558879][ T7821] bond_slave_1: entered promiscuous mode [ 211.564792][ T7821] batadv0: entered promiscuous mode [ 212.116087][ T7842] block device autoloading is deprecated and will be removed. [ 212.317543][ T7847] bond1: entered promiscuous mode [ 212.323954][ T7847] bond1: entered allmulticast mode [ 212.351266][ T7847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.448991][ T7857] binder: 7855:7857 ioctl 4018620d 0 returned -22 [ 212.530752][ T7850] netlink: 'syz.3.414': attribute type 10 has an invalid length. [ 212.536180][ T29] audit: type=1326 audit(1728358747.611:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 212.602646][ T7850] team0: Port device netdevsim0 added [ 212.696220][ T29] audit: type=1326 audit(1728358747.611:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 212.830559][ T29] audit: type=1326 audit(1728358747.611:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 212.960952][ T29] audit: type=1326 audit(1728358747.621:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.068583][ T7854] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 213.109845][ T5236] Bluetooth: hci3: command tx timeout [ 213.117439][ T29] audit: type=1326 audit(1728358747.631:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.141501][ T29] audit: type=1326 audit(1728358747.631:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.310648][ T29] audit: type=1326 audit(1728358747.631:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.495303][ T29] audit: type=1326 audit(1728358747.661:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.632135][ T7879] netlink: 'syz.1.421': attribute type 4 has an invalid length. [ 213.635853][ T29] audit: type=1326 audit(1728358747.661:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.676850][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 213.723362][ T29] audit: type=1326 audit(1728358747.661:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7855 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f870e77dff9 code=0x7ffc0000 [ 213.894349][ T7879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.159588][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 214.168080][ T5236] Bluetooth: hci2: Injecting HCI hardware error event [ 214.176093][ T5236] Bluetooth: hci2: hardware error 0x00 [ 214.313633][ T1055] tipc: Subscription rejected, illegal request [ 214.589771][ T47] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.711910][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.731893][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.749731][ T47] usb 3-1: Using ep0 maxpacket: 8 [ 214.765759][ T7893] fuse: Bad value for 'user_id' [ 214.777006][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.792497][ T7893] fuse: Bad value for 'user_id' [ 214.805052][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.826919][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.837756][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.848634][ T47] usb 3-1: config 0 has no interfaces? [ 214.858202][ T47] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 214.889544][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.942174][ T47] usb 3-1: config 0 descriptor?? [ 215.057689][ T7905] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 215.496219][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.626079][ T7903] chnl_net:caif_netlink_parms(): no params data found [ 215.788682][ T7914] xt_ecn: cannot match TCP bits for non-tcp packets [ 215.843620][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.031925][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.079204][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.092065][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.101730][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.116985][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.134726][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.144021][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.197959][ T7903] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.236440][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 216.259650][ T7903] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.266878][ T7903] bridge_slave_0: entered allmulticast mode [ 216.274079][ T7903] bridge_slave_0: entered promiscuous mode [ 216.300923][ T7922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.433'. [ 216.381744][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.397763][ T7903] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.405008][ T7903] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.413573][ T7903] bridge_slave_1: entered allmulticast mode [ 216.422583][ T7903] bridge_slave_1: entered promiscuous mode [ 216.449592][ T9] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 216.554527][ T5284] usb 3-1: USB disconnect, device number 24 [ 216.604067][ T7903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.670277][ T7903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.700164][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 216.707591][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 216.810164][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.829554][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 216.849571][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.881342][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 216.914238][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 216.929504][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 216.939335][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 216.950635][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.954478][ T5236] Bluetooth: hci0: command tx timeout [ 216.970027][ T7903] team0: Port device team_slave_0 added [ 216.997879][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 217.008011][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 217.041529][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.062700][ T7903] team0: Port device team_slave_1 added [ 217.110671][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 217.142232][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 217.196927][ T9] usb 4-1: string descriptor 0 read error: -22 [ 217.210761][ T35] bridge_slave_1: left allmulticast mode [ 217.217640][ T35] bridge_slave_1: left promiscuous mode [ 217.230600][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 217.244761][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.259667][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.308107][ T35] bridge_slave_0: left allmulticast mode [ 217.317166][ T35] bridge_slave_0: left promiscuous mode [ 217.336805][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 217.337348][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.440780][ T5285] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 217.622200][ T7922] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 217.639560][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 217.662526][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 217.686963][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 217.700940][ T5285] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1c.48 [ 217.733194][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.746951][ T5285] usb 3-1: Product: syz [ 217.757646][ T5285] usb 3-1: Manufacturer: syz [ 217.762529][ T5285] usb 3-1: SerialNumber: syz [ 217.770342][ T5285] usb 3-1: config 0 descriptor?? [ 218.179568][ T5691] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 218.194476][ T7949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.233065][ T7949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.240980][ T5236] Bluetooth: hci4: command tx timeout [ 218.284463][ T35] bond0 (unregistering): left promiscuous mode [ 218.292121][ T35] bond_slave_0: left promiscuous mode [ 218.297855][ T35] bond_slave_1: left promiscuous mode [ 218.326609][ T35] batadv0: left promiscuous mode [ 218.349713][ T5691] usb 2-1: Using ep0 maxpacket: 32 [ 218.360514][ T5691] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 218.387536][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.398939][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.422107][ T5691] usb 2-1: config 0 descriptor?? [ 218.431012][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.456311][ T5691] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 218.475947][ T35] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 218.516006][ T35] bond0 (unregistering): Released all slaves [ 218.680931][ T5285] ath6kl: Failed to submit usb control message: -71 [ 218.713060][ T5285] ath6kl: unable to send the bmi data to the device: -71 [ 218.720424][ T5285] ath6kl: Unable to send get target info: -71 [ 218.737565][ T5285] ath6kl: Failed to init ath6kl core: -71 [ 218.745720][ T5285] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 218.767933][ T5285] usb 3-1: USB disconnect, device number 25 [ 218.817673][ T35] bond1 (unregistering): Released all slaves [ 218.887631][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.914757][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.989584][ T7903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.027633][ T940] usb 4-1: USB disconnect, device number 24 [ 219.029650][ T5236] Bluetooth: hci0: command tx timeout [ 219.135981][ T7903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.150739][ T7903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.195872][ T7903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.378336][ T7903] hsr_slave_0: entered promiscuous mode [ 219.397501][ T7903] hsr_slave_1: entered promiscuous mode [ 219.411026][ T7903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.432638][ T7903] Cannot create hsr debugfs directory [ 219.475942][ T7953] : entered promiscuous mode [ 219.697805][ T35] hsr_slave_0: left promiscuous mode [ 219.727537][ T35] hsr_slave_1: left promiscuous mode [ 219.770339][ T5691] gspca_nw80x: reg_w err -110 [ 219.775090][ T5691] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 219.801972][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.908432][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.015917][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.059334][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.079193][ T5285] usb 2-1: USB disconnect, device number 21 [ 220.169379][ T35] veth1_macvtap: left promiscuous mode [ 220.177173][ T35] veth0_macvtap: left promiscuous mode [ 220.185170][ T35] veth1_vlan: left promiscuous mode [ 220.194914][ T35] veth0_vlan: left promiscuous mode [ 220.309687][ T5236] Bluetooth: hci4: command tx timeout [ 220.831692][ T5285] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 220.996768][ T35] team0 (unregistering): Port device team_slave_1 removed [ 221.004314][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 221.027771][ T5285] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 221.061434][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 221.105266][ T5285] usb 4-1: Product: syz [ 221.114863][ T5236] Bluetooth: hci0: command tx timeout [ 221.127168][ T5285] usb 4-1: Manufacturer: syz [ 221.146863][ T5285] usb 4-1: SerialNumber: syz [ 221.154261][ T35] team0 (unregistering): Port device team_slave_0 removed [ 221.168448][ T5285] usb 4-1: config 0 descriptor?? [ 221.831658][ T7989] xt_SECMARK: invalid mode: 0 [ 222.183804][ T7926] chnl_net:caif_netlink_parms(): no params data found [ 222.390050][ T5236] Bluetooth: hci4: command tx timeout [ 222.555027][ T5305] usb 4-1: USB disconnect, device number 25 [ 222.706442][ T7903] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.765049][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.792471][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.860307][ T7926] bridge_slave_0: entered allmulticast mode [ 222.885392][ T7926] bridge_slave_0: entered promiscuous mode [ 222.920002][ T5285] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 222.992415][ T7903] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.054096][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.083878][ T5285] usb 2-1: Using ep0 maxpacket: 8 [ 223.096880][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.112164][ T5285] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.122258][ T7926] bridge_slave_1: entered allmulticast mode [ 223.145641][ T5285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.149138][ T7926] bridge_slave_1: entered promiscuous mode [ 223.171697][ T5285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.186190][ T5285] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.200518][ T5236] Bluetooth: hci0: command tx timeout [ 223.215823][ T5285] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.234700][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.354636][ T7903] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.421950][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.464075][ T5285] usb 2-1: GET_CAPABILITIES returned 0 [ 223.479665][ T5285] usbtmc 2-1:16.0: can't read capabilities [ 223.482925][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.658561][ T7903] team0: Port device netdevsim0 removed [ 223.677464][ T7903] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.817918][ T8028] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 223.866285][ T8028] xt_NFQUEUE: number of total queues is 0 [ 223.906361][ T8005] @ÿ: renamed from vlan0 (while UP) [ 223.943373][ T8023] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.952554][ T8023] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.961384][ T8023] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.970132][ T8023] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.980163][ T5305] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 224.019755][ T7926] team0: Port device team_slave_0 added [ 224.039327][ T7926] team0: Port device team_slave_1 added [ 224.099425][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.128674][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.179646][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.200086][ T5305] usb 4-1: string descriptor 0 read error: -22 [ 224.206547][ T5305] usb 4-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 224.220050][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.243964][ T5305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.258191][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.284122][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.299091][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.311809][ T5305] usb 4-1: config 0 descriptor?? [ 224.334885][ T5305] usb 4-1: Found UVC 0.00 device (30c9:0093) [ 224.382794][ T5305] usb 4-1: No valid video chain found. [ 224.469691][ T5236] Bluetooth: hci4: command tx timeout [ 224.527224][ T7926] hsr_slave_0: entered promiscuous mode [ 224.540040][ T7926] hsr_slave_1: entered promiscuous mode [ 224.785797][ T7903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.844812][ T7903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.918724][ T7903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.968213][ T7903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.073599][ T5691] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 225.294431][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.344093][ T5691] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.386248][ T5691] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 225.425019][ T5691] usb 3-1: New USB device strings: Mfr=0, Product=184, SerialNumber=130 [ 225.460371][ T5691] usb 3-1: Product: syz [ 225.477247][ T5691] usb 3-1: SerialNumber: syz [ 225.494826][ T5691] usb 3-1: config 0 descriptor?? [ 225.613871][ T940] usb 2-1: USB disconnect, device number 22 [ 225.854480][ T7903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.942148][ T7903] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.989887][ T8041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.048994][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.056318][ T6968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.202756][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.209908][ T6968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.398199][ T7926] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.490512][ T7926] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.518950][ T7926] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.536076][ T5691] usbhid 3-1:0.0: can't add hid device: -71 [ 226.556826][ T7926] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.571889][ T5691] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 226.641720][ T5691] usb 3-1: USB disconnect, device number 26 [ 226.708304][ T940] usb 4-1: USB disconnect, device number 26 [ 226.737358][ T7903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.841337][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.858582][ T7926] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.873061][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.880174][ T7598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.902457][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.909598][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.937117][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 226.937132][ T29] audit: type=1326 audit(1728358762.011:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41337dff9 code=0x7ffc0000 [ 226.960439][ T7903] veth0_vlan: entered promiscuous mode [ 226.981221][ T29] audit: type=1326 audit(1728358762.011:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41337dff9 code=0x7ffc0000 [ 227.004366][ T29] audit: type=1326 audit(1728358762.011:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe41337dff9 code=0x7ffc0000 [ 227.017422][ T7926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.027006][ T29] audit: type=1326 audit(1728358762.011:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41337dff9 code=0x7ffc0000 [ 227.059412][ T29] audit: type=1326 audit(1728358762.011:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe41337dff9 code=0x7ffc0000 [ 227.081518][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.087873][ T29] audit: type=1326 audit(1728358762.011:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe41337dff9 code=0x7ffc0000 [ 227.109516][ T7926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.111978][ T29] audit: type=1326 audit(1728358762.061:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe413374fa7 code=0x7ffc0000 [ 227.142727][ T29] audit: type=1326 audit(1728358762.061:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe413319959 code=0x7ffc0000 [ 227.164728][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.170986][ T29] audit: type=1326 audit(1728358762.061:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe413374fa7 code=0x7ffc0000 [ 227.193380][ T29] audit: type=1326 audit(1728358762.061:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8069 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe413319959 code=0x7ffc0000 [ 227.262165][ T8073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.448'. [ 227.347118][ T7903] veth1_vlan: entered promiscuous mode [ 227.383586][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.400058][ T8080] IPv6: NLM_F_REPLACE set, but no existing node found! [ 227.530920][ T7903] veth0_macvtap: entered promiscuous mode [ 227.543380][ T7903] veth1_macvtap: entered promiscuous mode [ 227.693944][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.705021][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.715114][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.725898][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.735777][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.746506][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.756509][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.767006][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.778123][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.787287][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.797802][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.809554][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.820343][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.830642][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.841222][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.859562][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.870148][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.892228][ T7903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.957183][ T5236] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 227.962454][ T7903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.989921][ T7903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.998649][ T7903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.007434][ T7903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.108747][ T7926] veth0_vlan: entered promiscuous mode [ 228.118340][ T7926] veth1_vlan: entered promiscuous mode [ 228.178266][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.436117][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.498172][ T7926] veth0_macvtap: entered promiscuous mode [ 228.579042][ T7598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.618392][ T7926] veth1_macvtap: entered promiscuous mode [ 228.630591][ T7598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.709001][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.770584][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.789887][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.806083][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.816092][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.835967][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.856354][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.898934][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.898957][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.898975][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.900459][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.055105][ T5236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 229.055170][ T5236] CPU: 1 UID: 0 PID: 5236 Comm: kworker/u9:5 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 229.055201][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.055216][ T5236] Workqueue: hci1 hci_rx_work [ 229.055260][ T5236] Call Trace: [ 229.055269][ T5236] [ 229.055279][ T5236] dump_stack_lvl+0x241/0x360 [ 229.055307][ T5236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.055330][ T5236] ? __pfx__printk+0x10/0x10 [ 229.055364][ T5236] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 229.055394][ T5236] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 229.055430][ T5236] sysfs_create_dir_ns+0x2ce/0x3a0 [ 229.055462][ T5236] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 229.055499][ T5236] kobject_add_internal+0x435/0x8d0 [ 229.055530][ T5236] kobject_add+0x152/0x220 [ 229.055550][ T5236] ? do_raw_spin_unlock+0x13c/0x8b0 [ 229.055579][ T5236] ? device_add+0x3e7/0xbf0 [ 229.055620][ T5236] ? __pfx_kobject_add+0x10/0x10 [ 229.055641][ T5236] ? _raw_spin_unlock+0x28/0x50 [ 229.055674][ T5236] ? get_device_parent+0x165/0x410 [ 229.055708][ T5236] device_add+0x4e5/0xbf0 [ 229.055744][ T5236] hci_conn_add_sysfs+0xe8/0x200 [ 229.055769][ T5236] le_conn_complete_evt+0xc9f/0x12e0 [ 229.055805][ T5236] ? trace_contention_end+0x3c/0x120 [ 229.055833][ T5236] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 229.055865][ T5236] ? __mutex_unlock_slowpath+0x21d/0x750 [ 229.055889][ T5236] ? __copy_skb_header+0x437/0x5b0 [ 229.055915][ T5236] ? skb_pull_data+0x112/0x230 [ 229.055947][ T5236] hci_le_enh_conn_complete_evt+0x185/0x420 [ 229.055983][ T5236] hci_event_packet+0xa55/0x1540 [ 229.056012][ T5236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 229.056045][ T5236] ? __pfx_hci_event_packet+0x10/0x10 [ 229.056076][ T5236] ? unpair_device_complete+0xe0/0x230 [ 229.056100][ T5236] ? kcov_remote_start+0x97/0x7d0 [ 229.056131][ T5236] hci_rx_work+0x3fe/0xd80 [ 229.056163][ T5236] ? process_scheduled_works+0x976/0x1850 [ 229.056194][ T5236] process_scheduled_works+0xa63/0x1850 [ 229.056249][ T5236] ? __pfx_process_scheduled_works+0x10/0x10 [ 229.056288][ T5236] ? assign_work+0x364/0x3d0 [ 229.056321][ T5236] worker_thread+0x870/0xd30 [ 229.056365][ T5236] ? __kthread_parkme+0x169/0x1d0 [ 229.056399][ T5236] ? __pfx_worker_thread+0x10/0x10 [ 229.056429][ T5236] kthread+0x2f0/0x390 [ 229.056450][ T5236] ? __pfx_worker_thread+0x10/0x10 [ 229.056479][ T5236] ? __pfx_kthread+0x10/0x10 [ 229.056501][ T5236] ret_from_fork+0x4b/0x80 [ 229.056530][ T5236] ? __pfx_kthread+0x10/0x10 [ 229.056550][ T5236] ret_from_fork_asm+0x1a/0x30 [ 229.056602][ T5236] [ 229.056625][ T5236] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 229.056658][ T5236] Bluetooth: hci1: failed to register connection device [ 229.073035][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.453'. [ 229.076896][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.076918][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.076932][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.076947][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.076960][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.076975][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.076988][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.077003][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.077016][ T7926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.077031][ T7926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.078174][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.216528][ T7926] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.216566][ T7926] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.216608][ T7926] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.216637][ T7926] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.278621][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.278713][ T8097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.394976][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.621673][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.853340][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.982309][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.006021][ T6968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.006043][ T6968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.150908][ T6968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.150928][ T6968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.294510][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.296662][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.297464][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.298321][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.299300][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.300348][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.396625][ T53] bridge_slave_1: left allmulticast mode [ 230.732786][ T8133] loop7: detected capacity change from 0 to 16384 [ 230.803102][ T53] bridge_slave_1: left promiscuous mode [ 230.808832][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.816886][ T8136] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.881099][ T53] bridge_slave_0: left allmulticast mode [ 230.881155][ T8133] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.898051][ T53] bridge_slave_0: left promiscuous mode [ 230.904788][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.915417][ T8133] Buffer I/O error on dev loop7, logical block 0, async page read [ 230.925972][ T4623] Bluetooth: hci1: unexpected event for opcode 0x2043 [ 230.945103][ T8138] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 230.975071][ T8138] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 231.003631][ T8138] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 231.014231][ T8138] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 231.023081][ T8138] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 231.033437][ T8138] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 231.042209][ T8138] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 231.051494][ T8138] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 231.060278][ T8138] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 231.068852][ T8138] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 231.565398][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.613129][ T8173] netlink: 32 bytes leftover after parsing attributes in process `syz.3.461'. [ 231.746075][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 231.772175][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.789562][ T9] usb 5-1: Product: syz [ 231.844536][ T9] usb 5-1: Manufacturer: syz [ 231.860587][ T9] usb 5-1: SerialNumber: syz [ 231.874271][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 231.895312][ T5282] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 232.021321][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.049182][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.080708][ T53] bond0 (unregistering): Released all slaves [ 232.220388][ T8149] hsr_slave_0: left promiscuous mode [ 232.249178][ T8149] hsr_slave_1: left promiscuous mode [ 232.480212][ T4623] Bluetooth: hci3: command tx timeout [ 232.779889][ T940] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 232.966811][ T940] usb 2-1: Using ep0 maxpacket: 8 [ 232.975314][ T5282] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 232.988730][ T5282] ath9k_htc: Failed to initialize the device [ 232.995471][ T940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 233.010052][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 233.031127][ T940] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.065335][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.078992][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.103663][ T940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 233.146407][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 233.176120][ T5282] usb 5-1: ath9k_htc: USB layer deinitialized [ 233.200980][ T940] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.223333][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.240045][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.257970][ T940] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 233.275421][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 233.287939][ T940] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.309676][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.326704][ T940] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.345619][ T940] usb 2-1: string descriptor 0 read error: -22 [ 233.353444][ T940] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 233.377478][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.432178][ T940] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 233.817608][ T940] usb 2-1: USB disconnect, device number 23 [ 233.825294][ T8219] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 234.554240][ T4623] Bluetooth: hci3: command tx timeout [ 236.363589][ T5691] usb 5-1: USB disconnect, device number 12 [ 236.630913][ T4623] Bluetooth: hci3: command tx timeout [ 236.636459][ T53] hsr_slave_0: left promiscuous mode [ 236.741714][ T53] hsr_slave_1: left promiscuous mode [ 236.796483][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.804051][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.852766][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.870807][ T5305] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 236.889854][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.937272][ T53] veth1_macvtap: left promiscuous mode [ 236.960135][ T53] veth0_macvtap: left promiscuous mode [ 236.965813][ T53] veth1_vlan: left promiscuous mode [ 236.971254][ T53] veth0_vlan: left promiscuous mode [ 237.041242][ T5305] usb 4-1: Using ep0 maxpacket: 16 [ 237.048102][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 237.070932][ T5305] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 237.089509][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.120509][ T5305] usb 4-1: config 0 descriptor?? [ 237.129063][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.147594][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.157280][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.174600][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.184917][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.194668][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.249729][ T5284] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.399993][ T5284] usb 5-1: Using ep0 maxpacket: 8 [ 237.417326][ T5284] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.427792][ T5284] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 237.439245][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.454375][ T5284] usb 5-1: config 0 descriptor?? [ 237.464320][ T5284] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 237.471347][ T5284] usb 5-1: No valid video chain found. [ 237.609261][ T53] team0 (unregistering): Port device team_slave_1 removed [ 237.669440][ T53] team0 (unregistering): Port device team_slave_0 removed [ 237.795413][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.811166][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.145260][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.470'. [ 238.363729][ T8292] team0 (unregistering): Port device team_slave_0 removed [ 238.382884][ T8292] team0 (unregistering): Failed to send options change via netlink (err -105) [ 238.399287][ T8292] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 238.421276][ T8292] team0 (unregistering): Port device team_slave_1 removed [ 238.474739][ T8285] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 238.489648][ T8285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.467'. [ 238.510158][ T8285] bridge0: port 3(hsr_slave_1) entered blocking state [ 238.525174][ T8285] bridge0: port 3(hsr_slave_1) entered disabled state [ 238.529013][ T5691] usb 5-1: USB disconnect, device number 13 [ 238.552066][ T8285] hsr_slave_1: entered allmulticast mode [ 238.570164][ T8285] hsr_slave_1: left allmulticast mode [ 238.586370][ T8285] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 238.721839][ T5236] Bluetooth: hci3: command tx timeout [ 238.781848][ T5305] usbhid 4-1:0.0: can't add hid device: -71 [ 238.787848][ T5305] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 238.939344][ T5305] usb 4-1: USB disconnect, device number 27 [ 239.209591][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 239.218809][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 239.238011][ T8135] chnl_net:caif_netlink_parms(): no params data found [ 239.270404][ T5236] Bluetooth: hci1: command tx timeout [ 239.461814][ T8295] chnl_net:caif_netlink_parms(): no params data found [ 239.713600][ T8135] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.720904][ T8135] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.766763][ T8135] bridge_slave_0: entered allmulticast mode [ 239.800508][ T8135] bridge_slave_0: entered promiscuous mode [ 239.873323][ T8135] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.920924][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.928086][ T8135] bridge_slave_1: entered allmulticast mode [ 239.942499][ T8135] bridge_slave_1: entered promiscuous mode [ 240.166604][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.211754][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.290428][ T8349] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 240.314993][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.327522][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.338773][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.340925][ T8349] team0: Port device netdevsim0 added [ 240.360146][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.368335][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 240.376588][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.549085][ T8135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.625600][ T8295] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.641897][ T8295] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.654410][ T8295] bridge_slave_0: entered allmulticast mode [ 240.681477][ T8295] bridge_slave_0: entered promiscuous mode [ 240.762078][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.814608][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.855403][ T8135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.932209][ T8295] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.960776][ T8295] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.969067][ T8295] bridge_slave_1: entered allmulticast mode [ 240.981666][ T8295] bridge_slave_1: entered promiscuous mode [ 240.998075][ T8359] netlink: 96 bytes leftover after parsing attributes in process `syz.0.477'. [ 241.067187][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.090813][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.112199][ T8135] team0: Port device team_slave_0 added [ 241.135422][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 241.135437][ T29] audit: type=1326 audit(1728358776.221:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.169041][ T29] audit: type=1326 audit(1728358776.251:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.187648][ T8135] team0: Port device team_slave_1 added [ 241.199191][ T29] audit: type=1326 audit(1728358776.251:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.232648][ T29] audit: type=1326 audit(1728358776.251:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.268455][ T29] audit: type=1326 audit(1728358776.251:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.297704][ T29] audit: type=1326 audit(1728358776.251:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.354601][ T29] audit: type=1326 audit(1728358776.261:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.387564][ T4623] Bluetooth: hci1: command tx timeout [ 241.460520][ T8371] xt_hashlimit: overflow, try lower: 3/0 [ 241.568619][ T29] audit: type=1326 audit(1728358776.261:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.648885][ T29] audit: type=1326 audit(1728358776.281:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.769090][ T29] audit: type=1326 audit(1728358776.281:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8362 comm="syz.4.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6470f7dff9 code=0x7ffc0000 [ 241.861909][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.879497][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.895591][ T5284] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 241.966173][ T8295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.050857][ T5284] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 242.058256][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 242.121418][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.128368][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.169748][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.213853][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 242.250224][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.278449][ T5284] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 242.286862][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 242.309890][ T8135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.327478][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.359542][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 242.434966][ T8295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.458669][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.470176][ T4623] Bluetooth: hci2: command tx timeout [ 242.516658][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 242.587163][ T8135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.596918][ T5284] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 242.607006][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 242.626908][ T8135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.654531][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.686319][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 242.707553][ T8135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.745726][ T5284] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.801271][ T5284] usb 1-1: string descriptor 0 read error: -22 [ 242.807531][ T5284] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 242.827241][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.862303][ T5284] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 242.947819][ T8295] team0: Port device team_slave_0 added [ 242.981239][ T8295] team0: Port device team_slave_1 added [ 243.130823][ T5284] usb 1-1: USB disconnect, device number 14 [ 243.241741][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.263016][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.322260][ T8295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.391376][ T8135] hsr_slave_0: entered promiscuous mode [ 243.399979][ T8135] hsr_slave_1: entered promiscuous mode [ 243.407815][ T8135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.415700][ T8135] Cannot create hsr debugfs directory [ 243.429933][ T4623] Bluetooth: hci1: command tx timeout [ 243.497820][ T8295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.522117][ T8295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.551101][ T8295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.576353][ T8357] chnl_net:caif_netlink_parms(): no params data found [ 243.619159][ T53] bridge_slave_1: left allmulticast mode [ 243.625117][ T53] bridge_slave_1: left promiscuous mode [ 243.631240][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.641982][ T53] bridge_slave_0: left allmulticast mode [ 243.647806][ T53] bridge_slave_0: left promiscuous mode [ 243.654033][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.044057][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.056566][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.078041][ T53] bond0 (unregistering): Released all slaves [ 244.447858][ T8295] hsr_slave_0: entered promiscuous mode [ 244.461489][ T8295] hsr_slave_1: entered promiscuous mode [ 244.468890][ T8295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.486308][ T8295] Cannot create hsr debugfs directory [ 244.550239][ T4623] Bluetooth: hci2: command tx timeout [ 244.909073][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.919710][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.927302][ T8357] bridge_slave_0: entered allmulticast mode [ 244.934480][ T8357] bridge_slave_0: entered promiscuous mode [ 244.957821][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.967519][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.975568][ T8357] bridge_slave_1: entered allmulticast mode [ 244.985050][ T8357] bridge_slave_1: entered promiscuous mode [ 245.042249][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.070645][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.099741][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.121575][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.142981][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.205904][ T53] veth1_macvtap: left promiscuous mode [ 245.236631][ T53] veth0_macvtap: left promiscuous mode [ 245.245559][ T53] veth1_vlan: left promiscuous mode [ 245.264432][ T53] veth0_vlan: left promiscuous mode [ 245.496471][ T5305] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 245.509767][ T4623] Bluetooth: hci1: command tx timeout [ 245.653134][ T5305] usb 5-1: Using ep0 maxpacket: 32 [ 245.661630][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.673708][ T5305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.684771][ T5305] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.694394][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.704797][ T5305] usb 5-1: config 0 descriptor?? [ 245.711960][ T5305] hub 5-1:0.0: USB hub found [ 245.827585][ T53] team0 (unregistering): Port device team_slave_1 removed [ 245.867218][ T53] team0 (unregistering): Port device team_slave_0 removed [ 245.918190][ T5305] hub 5-1:0.0: 1 port detected [ 246.123404][ T5305] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 246.143182][ T5305] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 246.322342][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.348609][ T8421] netlink: 'syz.0.485': attribute type 10 has an invalid length. [ 246.630277][ T4623] Bluetooth: hci2: command tx timeout [ 246.743557][ T8357] team0: Port device team_slave_0 added [ 246.933134][ T8357] team0: Port device team_slave_1 added [ 247.073979][ T5305] usbhid 5-1:0.0: can't add hid device: -71 [ 247.096853][ T5305] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 247.137169][ T5305] usb 5-1: USB disconnect, device number 14 [ 247.158440][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.194221][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.232619][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.252696][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.302382][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.373608][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.541315][ T8357] hsr_slave_0: entered promiscuous mode [ 247.547656][ T8357] hsr_slave_1: entered promiscuous mode [ 247.555071][ T8357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.562749][ T8357] Cannot create hsr debugfs directory [ 247.819255][ T8446] bond1: entered promiscuous mode [ 247.835331][ T8446] bond1: entered allmulticast mode [ 247.845468][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.863985][ T8135] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.980412][ T8135] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.989961][ T5691] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 248.077103][ T8135] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.097527][ T8135] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.154801][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 248.172565][ T5691] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 248.189629][ T5691] usb 1-1: config 0 has no interface number 0 [ 248.222259][ T5691] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 248.255508][ T5691] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 248.300134][ T5691] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 108, changing to 10 [ 248.328025][ T5691] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 8949, setting to 1024 [ 248.346729][ T8135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.355247][ T5691] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.391050][ T5691] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 248.401590][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.409713][ T5691] usb 1-1: Product: syz [ 248.413998][ T5691] usb 1-1: Manufacturer: syz [ 248.418589][ T5691] usb 1-1: SerialNumber: syz [ 248.435573][ T5691] usb 1-1: config 0 descriptor?? [ 248.439835][ T8451] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 248.491254][ T8135] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.550876][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.557992][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.572224][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.579361][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.666682][ T5691] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 248.700712][ T5691] usb 1-1: USB disconnect, device number 15 [ 248.709694][ T4623] Bluetooth: hci2: command tx timeout [ 248.722954][ T5691] iowarrior 1-1:0.186: I/O-Warror #0 now disconnected [ 248.783793][ T8357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.836965][ T8295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.896548][ T8357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.940346][ T8295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.961828][ T8135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.974100][ T8295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.985194][ T8295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.020842][ T8357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.085150][ T8357] team0: Port device netdevsim0 removed [ 249.095290][ T8357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.115717][ T8135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.186150][ T8295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.200455][ T5282] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 249.241916][ T8295] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.303906][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.311070][ T8265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.325455][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.332593][ T8265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.342835][ T8135] veth0_vlan: entered promiscuous mode [ 249.369719][ T5282] usb 5-1: Using ep0 maxpacket: 32 [ 249.377670][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.398257][ T8135] veth1_vlan: entered promiscuous mode [ 249.408639][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.411067][ T8357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.427381][ T5282] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 249.432445][ T8357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.444670][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.463504][ T5282] usb 5-1: config 0 descriptor?? [ 249.480715][ T5282] hub 5-1:0.0: USB hub found [ 249.489622][ T8357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.522282][ T8357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.585127][ T8295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.599639][ T5284] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.692778][ T5282] hub 5-1:0.0: 1 port detected [ 249.699510][ T8135] veth0_macvtap: entered promiscuous mode [ 249.755674][ T8135] veth1_macvtap: entered promiscuous mode [ 249.762865][ T5284] usb 1-1: Using ep0 maxpacket: 32 [ 249.783180][ T5284] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 249.794353][ T8295] veth0_vlan: entered promiscuous mode [ 249.805907][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.818954][ T8295] veth1_vlan: entered promiscuous mode [ 249.833548][ T5284] usb 1-1: Product: syz [ 249.837784][ T5284] usb 1-1: Manufacturer: syz [ 249.855154][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.868976][ T5284] usb 1-1: SerialNumber: syz [ 249.875953][ T5284] usb 1-1: config 0 descriptor?? [ 249.884928][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.893665][ T5282] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 249.898996][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.912750][ T5282] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 249.921803][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.933221][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.944952][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.955161][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.965986][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.977815][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.989297][ T8357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.011295][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.023271][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.036388][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.047262][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.057423][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.068188][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.078759][ T8135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.097131][ T8135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.109060][ T8135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.172617][ T8135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.195908][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.205006][ T8135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.230015][ T8135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.239420][ T8135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.261068][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.276978][ T8357] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.317492][ T5284] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 250.349598][ T5284] airspy 1-1:0.0: Could not detect board [ 250.356508][ T8295] veth0_macvtap: entered promiscuous mode [ 250.369584][ T5284] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 250.416786][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.423969][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.425549][ T5284] usb 1-1: USB disconnect, device number 16 [ 250.456536][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.463715][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.533246][ T8295] veth1_macvtap: entered promiscuous mode [ 250.586063][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.606385][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.619946][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.693001][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.739616][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.775609][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.794202][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.816097][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.838185][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.879217][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.915975][ T8295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.987293][ T8357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.031783][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.062999][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.078662][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.097172][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.134255][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.145012][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.160578][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.171132][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.184598][ T8295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.199370][ T8295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.215212][ T8295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.252448][ T8295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.266966][ T8295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.276812][ T8295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.286090][ T8295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.299275][ T8503] netlink: 'syz.0.490': attribute type 4 has an invalid length. [ 251.323943][ T5282] usbhid 5-1:0.0: can't add hid device: -71 [ 251.345946][ T5282] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 251.346381][ T7598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.397176][ T7598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.410394][ T5282] usb 5-1: USB disconnect, device number 15 [ 251.478953][ T7598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.497035][ T8357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.517096][ T7598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.626000][ T8265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.656057][ T8265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.746893][ T8357] veth0_vlan: entered promiscuous mode [ 251.788621][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.804145][ T8357] veth1_vlan: entered promiscuous mode [ 251.807411][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.951107][ T8521] netlink: 'syz.0.491': attribute type 4 has an invalid length. [ 252.089933][ T8357] veth0_macvtap: entered promiscuous mode [ 252.135080][ T8357] veth1_macvtap: entered promiscuous mode [ 252.215027][ T8531] xt_ecn: cannot match TCP bits for non-tcp packets [ 252.238785][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.262488][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.280517][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.326038][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.356403][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.391004][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.405214][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.433420][ T8543] netlink: 60 bytes leftover after parsing attributes in process `syz.4.492'. [ 252.446779][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.459797][ T940] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 252.463932][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.489417][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.518617][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.529901][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.553238][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.568085][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 252.643807][ T940] usb 1-1: Using ep0 maxpacket: 32 [ 252.670199][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.701912][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.728012][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.759785][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.799198][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.815010][ T940] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.825391][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.838018][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.846381][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.867966][ T940] usb 1-1: config 0 descriptor?? [ 252.933699][ T940] hub 1-1:0.0: USB hub found [ 252.944336][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.944357][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.944377][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.944396][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.944413][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.944428][ T8357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.944445][ T8357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.945958][ T8357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.957315][ T8555] usb usb7: usbfs: process 8555 (syz.2.497) did not claim interface 0 before use [ 252.970250][ T8357] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.125658][ T8357] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.149636][ T8357] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.168699][ T940] hub 1-1:0.0: 1 port detected [ 253.208788][ T8357] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.311664][ T47] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 253.457240][ T940] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 253.463813][ T940] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 253.499652][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.524931][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.593142][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.600905][ T47] usb 2-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 253.635538][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.636882][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.659064][ T47] usb 2-1: config 0 descriptor?? [ 253.881102][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.891351][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.989641][ T5283] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 254.146350][ T47] stadia 0003:18D1:9400.0003: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.1-1/input0 [ 254.161267][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 254.214731][ T47] stadia 0003:18D1:9400.0003: no inputs found [ 254.263536][ T47] stadia 0003:18D1:9400.0003: force feedback init failed [ 254.292308][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.331071][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.360352][ T5283] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.374137][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.407148][ T5283] usb 3-1: config 0 descriptor?? [ 254.472941][ T5283] hub 3-1:0.0: USB hub found [ 254.680787][ T5283] hub 3-1:0.0: 1 port detected [ 254.759584][ T5280] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 254.922254][ T5283] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 254.928621][ T5283] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 255.019818][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 255.027087][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.041223][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.054831][ T5280] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 255.072592][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.107544][ T5280] usb 4-1: config 0 descriptor?? [ 255.155799][ T5280] hub 4-1:0.0: USB hub found [ 255.302094][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.318723][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.418495][ T5280] hub 4-1:0.0: 1 port detected [ 255.508143][ T5282] usb 2-1: USB disconnect, device number 24 [ 255.569369][ T5280] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 255.577917][ T5280] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 255.686102][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.692950][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.909168][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.963704][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.714699][ T940] usbhid 1-1:0.0: can't add hid device: -71 [ 257.721084][ T940] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 257.810646][ T940] usb 1-1: USB disconnect, device number 17 [ 258.155692][ T5280] usbhid 4-1:0.0: can't add hid device: -71 [ 258.172039][ T5280] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 258.244089][ T5280] usb 4-1: USB disconnect, device number 28 [ 258.255908][ T8665] fuse: Bad value for 'fd' [ 258.318780][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 258.318795][ T29] audit: type=1326 audit(1728358793.361:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.348464][ T29] audit: type=1326 audit(1728358793.361:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.371653][ T29] audit: type=1326 audit(1728358793.361:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.394443][ T29] audit: type=1326 audit(1728358793.361:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.417569][ T29] audit: type=1326 audit(1728358793.361:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.440354][ T29] audit: type=1326 audit(1728358793.361:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.463012][ T29] audit: type=1326 audit(1728358793.361:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.485492][ T29] audit: type=1326 audit(1728358793.361:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.507962][ T29] audit: type=1326 audit(1728358793.361:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.530808][ T29] audit: type=1326 audit(1728358793.361:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8660 comm="syz.0.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7ffc0000 [ 258.555391][ T5283] usbhid 3-1:0.0: can't add hid device: -71 [ 258.561504][ T5283] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.591516][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 258.601325][ T5283] usb 3-1: USB disconnect, device number 27 [ 258.854079][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 258.943510][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.132141][ T9] usb 1-1: config 0 descriptor?? [ 259.161907][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 259.359784][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.509'. [ 259.792036][ T9] gspca_stv06xx: vv6410 sensor detected [ 259.910190][ T5305] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 259.981777][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.000918][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.021505][ T8665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.512'. [ 260.079590][ T5305] usb 3-1: Using ep0 maxpacket: 8 [ 260.137015][ T9] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 260.147012][ T9] usb 1-1: USB disconnect, device number 18 [ 260.167476][ T5305] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 260.179690][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 260.199840][ T5305] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.211699][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.223290][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.369253][ T5305] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 260.377532][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 260.389396][ T5305] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.401446][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.412729][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.460474][ T5305] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 260.467890][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 260.479848][ T5305] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.492172][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 260.503340][ T5305] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.565595][ T5305] usb 3-1: string descriptor 0 read error: -22 [ 260.573342][ T5305] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 260.587033][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.665073][ T5305] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 260.954747][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.969742][ T940] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 261.003562][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.160151][ T940] usb 5-1: Using ep0 maxpacket: 32 [ 261.182191][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.216739][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.261173][ T940] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 261.289617][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.329854][ T940] usb 5-1: config 0 descriptor?? [ 261.341263][ T940] hub 5-1:0.0: USB hub found [ 261.561321][ T940] hub 5-1:0.0: 1 port detected [ 261.781384][ T940] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 261.818284][ T940] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 262.145342][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.173413][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.663311][ T5305] usb 3-1: USB disconnect, device number 28 [ 262.736903][ T8751] netlink: 'syz.0.534': attribute type 11 has an invalid length. [ 262.949698][ T5280] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 263.046756][ T8759] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709507506) [ 263.078265][ T8759] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 263.213636][ T5280] usb 2-1: Using ep0 maxpacket: 32 [ 263.219194][ T940] usbhid 5-1:0.0: can't add hid device: -71 [ 263.233604][ T940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 263.242082][ T5280] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.278786][ T5280] usb 2-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 263.304560][ T940] usb 5-1: USB disconnect, device number 16 [ 263.326492][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.367027][ T5280] usb 2-1: config 0 descriptor?? [ 263.590180][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 264.600637][ T8782] : entered promiscuous mode [ 266.028779][ T8816] batman_adv: batadv0: Adding interface: dummy0 [ 266.035430][ T8816] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.066498][ T8816] batman_adv: batadv0: Interface activated: dummy0 [ 266.088207][ T8816] batadv0: mtu less than device minimum [ 266.106203][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.118541][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.131156][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.143756][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.156221][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.168723][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.181318][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.193795][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.206377][ T8816] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 266.300720][ T47] usb 2-1: USB disconnect, device number 25 [ 266.356575][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 266.759603][ T940] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 266.774086][ T8839] usb usb1: usbfs: process 8839 (syz.0.565) did not claim interface 0 before use [ 266.872426][ T5280] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 266.931377][ T940] usb 2-1: Using ep0 maxpacket: 32 [ 266.939278][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.972651][ T940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.999968][ T940] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 267.018626][ T940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.029724][ T5280] usb 4-1: Using ep0 maxpacket: 16 [ 267.052085][ T940] usb 2-1: config 0 descriptor?? [ 267.072274][ T940] hub 2-1:0.0: USB hub found [ 267.077472][ T5280] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 267.086784][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 267.119847][ T5280] usb 4-1: Product: syz [ 267.124166][ T5280] usb 4-1: Manufacturer: syz [ 267.137291][ T5280] usb 4-1: SerialNumber: syz [ 267.155221][ T5280] usb 4-1: config 0 descriptor?? [ 267.275363][ T940] hub 2-1:0.0: 1 port detected [ 267.331301][ T8853] netlink: 'syz.2.571': attribute type 29 has an invalid length. [ 267.355508][ T8853] netlink: 'syz.2.571': attribute type 29 has an invalid length. [ 267.494043][ T47] usb 4-1: USB disconnect, device number 29 [ 267.528229][ T940] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 267.536743][ T940] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 267.766170][ T8870] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.806189][ T8871] netlink: 'syz.2.580': attribute type 11 has an invalid length. [ 267.847679][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.878365][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.631632][ T5283] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 268.787359][ T940] usbhid 2-1:0.0: can't add hid device: -71 [ 268.793447][ T940] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 268.824848][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.840187][ T940] usb 2-1: USB disconnect, device number 26 [ 268.851973][ T5283] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 268.865351][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.876590][ T8900] netlink: 'syz.3.592': attribute type 10 has an invalid length. [ 268.902887][ T5283] usb 5-1: config 0 descriptor?? [ 268.906055][ T8900] team0: Port device netdevsim0 added [ 269.056486][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 269.135165][ T5283] ath6kl: Failed to submit usb control message: -71 [ 269.153592][ T5283] ath6kl: unable to send the bmi data to the device: -71 [ 269.161060][ T5283] ath6kl: Unable to send get target info: -71 [ 269.168086][ T5283] ath6kl: Failed to init ath6kl core: -71 [ 269.181308][ T5283] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 269.206713][ T5283] usb 5-1: USB disconnect, device number 17 [ 269.608563][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 269.693585][ T5283] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 269.879749][ T5283] usb 2-1: Using ep0 maxpacket: 16 [ 269.886491][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.919625][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58880, setting to 1024 [ 269.934374][ T5283] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.947303][ T5283] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 269.956608][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.968081][ T5283] usb 2-1: config 0 descriptor?? [ 269.982666][ T8908] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.993410][ T5283] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 270.234338][ T940] usb 2-1: USB disconnect, device number 27 [ 270.509552][ T5283] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 270.659667][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 270.659739][ T940] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 270.666668][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.688027][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.698205][ T5283] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 270.707397][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.717259][ T5283] usb 3-1: config 0 descriptor?? [ 270.830218][ T940] usb 5-1: no configurations [ 270.834850][ T940] usb 5-1: can't read configurations, error -22 [ 270.980168][ T940] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 271.004792][ T8955] netlink: 'syz.3.616': attribute type 3 has an invalid length. [ 271.040539][ T5305] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 271.078346][ T8957] sg_write: data in/out 588840944/11 bytes for SCSI command 0x94-- guessing data in; [ 271.078346][ T8957] program syz.3.617 not setting count and/or reply_len properly [ 271.096991][ T8957] program syz.3.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.147450][ T940] usb 5-1: no configurations [ 271.161171][ T940] usb 5-1: can't read configurations, error -22 [ 271.177276][ T940] usb usb5-port1: attempt power cycle [ 271.188387][ T5283] savu 0003:1E7D:2D5A.0004: hidraw0: USB HID v0.1c Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 271.203723][ T8959] batman_adv: batadv0: Adding interface: dummy0 [ 271.222071][ T8959] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.258448][ T5305] usb 2-1: Using ep0 maxpacket: 32 [ 271.264133][ T8959] batman_adv: batadv0: Interface activated: dummy0 [ 271.282293][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.299482][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.310823][ T5305] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 271.313330][ T8964] net_ratelimit: 11 callbacks suppressed [ 271.313346][ T8964] batadv0: mtu less than device minimum [ 271.327151][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.352615][ T5305] usb 2-1: config 0 descriptor?? [ 271.360135][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.372441][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.384974][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.397333][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.404534][ T8967] vivid-000: disconnect [ 271.409752][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.413846][ T8966] vivid-000: reconnect [ 271.424569][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.439315][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.451707][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.464056][ T8964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.512396][ T8971] workqueue: name exceeds WQ_NAME_LEN. Truncating to: †< )Ù2¼”›U7‘Åä‹¡ô¾ÐËÝ;&!éi‡¼ [ 271.549712][ T940] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 271.681136][ T940] usb 5-1: no configurations [ 271.688033][ T940] usb 5-1: can't read configurations, error -22 [ 271.839548][ T940] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.861136][ T940] usb 5-1: no configurations [ 271.865909][ T940] usb 5-1: can't read configurations, error -22 [ 271.872999][ T940] usb usb5-port1: unable to enumerate USB device [ 271.905875][ T5305] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 272.128680][ T5305] ft260 0003:0403:6030.0005: failed to retrieve chip version [ 272.183435][ T5305] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -71 [ 272.201707][ T5305] usb 2-1: USB disconnect, device number 28 [ 273.353283][ T940] usb 3-1: USB disconnect, device number 29 [ 273.630602][ T9036] netlink: 'syz.0.647': attribute type 12 has an invalid length. [ 273.630652][ T9036] netlink: 'syz.0.647': attribute type 11 has an invalid length. [ 273.630667][ T9036] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.647'. [ 273.690124][ T5691] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 273.842207][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.875352][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.896464][ T5691] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 273.918540][ T5691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.943322][ T5691] usb 4-1: config 0 descriptor?? [ 274.077350][ T5305] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 274.296380][ T5305] usb 5-1: Using ep0 maxpacket: 32 [ 274.307864][ T5305] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.323318][ T5305] usb 5-1: config 0 has no interfaces? [ 274.338336][ T5305] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.346309][ T9061] syzkaller0: entered promiscuous mode [ 274.357252][ T9061] syzkaller0: entered allmulticast mode [ 274.369629][ T5305] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.386872][ T5691] hid-led 0003:0FC5:B080.0006: item fetching failed at offset 0/3 [ 274.391790][ T5305] usb 5-1: config 0 descriptor?? [ 274.412222][ T5691] hid-led 0003:0FC5:B080.0006: probe with driver hid-led failed with error -22 [ 274.587231][ T5305] usb 4-1: USB disconnect, device number 30 [ 274.611520][ T5283] usb 5-1: USB disconnect, device number 22 [ 275.705167][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 275.790821][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 275.790834][ T29] audit: type=1326 audit(1728358810.881:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 275.838809][ T29] audit: type=1326 audit(1728358810.891:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 275.870292][ T29] audit: type=1326 audit(1728358810.891:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 275.913423][ T29] audit: type=1326 audit(1728358810.891:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 275.984828][ T29] audit: type=1326 audit(1728358810.891:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 276.016921][ T29] audit: type=1326 audit(1728358810.891:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 276.056609][ T29] audit: type=1326 audit(1728358810.891:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 276.088655][ T29] audit: type=1326 audit(1728358810.891:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 276.133814][ T29] audit: type=1326 audit(1728358810.891:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 276.186734][ T29] audit: type=1326 audit(1728358810.891:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9078 comm="syz.0.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda0f7dff9 code=0x7fc00000 [ 278.249869][ T5691] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 278.479582][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 278.488954][ T5691] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.512426][ T5691] usb 2-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 278.528218][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.547399][ T5691] usb 2-1: config 0 descriptor?? [ 278.679770][ T940] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 278.889537][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 278.906944][ T940] usb 4-1: config 0 interface 0 altsetting 146 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.962965][ T940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 278.994162][ T940] usb 4-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 279.020859][ T5691] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 279.028034][ T5691] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 279.050213][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.097366][ T940] usb 4-1: config 0 descriptor?? [ 279.103590][ T5691] logitech 0003:046D:C295.0007: unknown main item tag 0x0 [ 279.136629][ T5691] logitech 0003:046D:C295.0007: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.1-1/input0 [ 279.177401][ T5691] logitech 0003:046D:C295.0007: no inputs found [ 279.225864][ T5691] usb 2-1: USB disconnect, device number 29 [ 279.580076][ T940] wacom 0003:056A:005B.0008: hidraw0: USB HID v0.00 Device [HID 056a:005b] on usb-dummy_hcd.3-1/input0 [ 279.748032][ T940] usb 4-1: USB disconnect, device number 31 [ 280.219820][ T940] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 280.309649][ T5691] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 280.354230][ T9179] No such timeout policy "syz0" [ 280.370885][ T940] usb 5-1: Using ep0 maxpacket: 16 [ 280.381363][ T940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.401986][ T940] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 280.425805][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.454372][ T940] usb 5-1: Product: syz [ 280.461930][ T940] usb 5-1: Manufacturer: syz [ 280.471659][ T5691] usb 3-1: Using ep0 maxpacket: 16 [ 280.482578][ T940] usb 5-1: SerialNumber: syz [ 280.489370][ T5691] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 280.510449][ T940] usb 5-1: config 0 descriptor?? [ 280.528545][ T5691] usb 3-1: config 0 has no interface number 0 [ 280.536873][ T940] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 280.546521][ T5691] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 280.566463][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.579090][ T5691] usb 3-1: Product: syz [ 280.595467][ T5691] usb 3-1: Manufacturer: syz [ 280.614964][ T5691] usb 3-1: SerialNumber: syz [ 280.627401][ T5691] usb 3-1: config 0 descriptor?? [ 280.872267][ T5691] usb 3-1: USB disconnect, device number 30 [ 281.326220][ T940] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 281.341978][ T940] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 281.359775][ T940] usb 5-1: USB disconnect, device number 23 [ 283.017441][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.058819][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.094749][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.123239][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.145281][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.156621][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.171392][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.186583][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.207066][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.218866][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.234880][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.246975][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.259600][ T5285] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 283.272394][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.286471][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.297436][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.318080][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.326389][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.342837][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.360344][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.387079][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.396467][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.412444][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.427776][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.443014][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.458303][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.466969][ T5285] usb 3-1: config 0 has no interfaces? [ 283.472883][ T5285] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 283.485295][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.499706][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.508031][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.530404][ T5285] usb 3-1: config 0 descriptor?? [ 283.545223][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.571832][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.588021][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.598927][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.615511][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: unknown main item tag 0x0 [ 283.645781][ T5305] hid-generic 0000:0000:FFFFFFFF.0009: hidraw0: HID v0.02 Device [syz0] on syz0 [ 283.780317][ T5305] usb 3-1: USB disconnect, device number 31 [ 286.237814][ T8295] sched: DL replenish lagged too much [ 291.326406][ T9292] vivid-002: ================= START STATUS ================= [ 291.360262][ T9292] vivid-002: Radio HW Seek Mode: Bounded [ 291.401239][ T9292] vivid-002: Radio Programmable HW Seek: false [ 291.507381][ T9292] vivid-002: RDS Rx I/O Mode: Block I/O [ 291.577069][ T9292] vivid-002: Generate RBDS Instead of RDS: false [ 291.622351][ T9292] vivid-002: RDS Reception: true [ 291.652150][ T9292] vivid-002: RDS Program Type: 0 inactive [ 291.695077][ T9292] vivid-002: RDS PS Name: inactive [ 291.748203][ T9292] vivid-002: RDS Radio Text: inactive [ 291.778558][ T9292] vivid-002: RDS Traffic Announcement: false inactive [ 291.828333][ T9292] vivid-002: RDS Traffic Program: false inactive [ 291.898928][ T9292] vivid-002: RDS Music: false inactive [ 291.928663][ T9292] vivid-002: ================== END STATUS ================== [ 312.411149][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.424329][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.432268][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.450522][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.458366][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 312.465830][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.660052][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.686602][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.716234][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.725861][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.733967][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 312.743942][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 312.865673][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 312.880184][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 312.892681][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 312.904231][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 312.932357][ T4623] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 312.940909][ T4623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 312.959530][ T4623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 312.971123][ T4623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 312.979029][ T4623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 312.987595][ T4623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.007218][ T4623] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 313.016789][ T4623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 313.212002][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.231348][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.240426][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.249366][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.257049][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.264528][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.949676][ T5236] Bluetooth: hci4: command tx timeout [ 314.958644][ T5240] Bluetooth: hci5: command tx timeout [ 315.030284][ T5240] Bluetooth: hci6: command tx timeout [ 315.109613][ T5240] Bluetooth: hci3: command tx timeout [ 315.349697][ T5240] Bluetooth: hci0: command tx timeout [ 317.032586][ T5236] Bluetooth: hci4: command tx timeout [ 317.039305][ T5240] Bluetooth: hci5: command tx timeout [ 317.115875][ T5240] Bluetooth: hci6: command tx timeout [ 317.125397][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.133838][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.189610][ T5240] Bluetooth: hci3: command tx timeout [ 317.439765][ T5240] Bluetooth: hci0: command tx timeout [ 319.112997][ T5240] Bluetooth: hci5: command tx timeout [ 319.118471][ T5240] Bluetooth: hci4: command tx timeout [ 319.189640][ T5240] Bluetooth: hci6: command tx timeout [ 319.269652][ T5240] Bluetooth: hci3: command tx timeout [ 319.509635][ T5240] Bluetooth: hci0: command tx timeout [ 321.196814][ T5240] Bluetooth: hci4: command tx timeout [ 321.203567][ T5236] Bluetooth: hci5: command tx timeout [ 321.269725][ T5240] Bluetooth: hci6: command tx timeout [ 321.367572][ T5240] Bluetooth: hci3: command tx timeout [ 321.590750][ T5240] Bluetooth: hci0: command tx timeout [ 365.276497][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 372.394547][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 372.422607][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.432361][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 372.440592][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 372.448474][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 372.458266][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 372.466633][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 372.474422][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.483604][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.517024][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.526965][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 372.534582][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.723571][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 372.735404][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 372.749706][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 372.757631][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 372.768979][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 372.776601][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.040054][ T5240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 373.048896][ T5240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 373.057540][ T5240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 373.066369][ T5240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 373.075229][ T5240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 373.082897][ T5240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 373.141514][ T5240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 373.151183][ T5240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 373.159248][ T5240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 373.170993][ T5240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 373.181935][ T5240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 373.189336][ T5240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 374.549626][ T5238] Bluetooth: hci1: command tx timeout [ 374.629831][ T5238] Bluetooth: hci7: command tx timeout [ 374.877401][ T5238] Bluetooth: hci8: command tx timeout [ 375.109628][ T5238] Bluetooth: hci9: command tx timeout [ 375.279708][ T5238] Bluetooth: hci10: command tx timeout [ 376.629751][ T5238] Bluetooth: hci1: command tx timeout [ 376.709717][ T5238] Bluetooth: hci7: command tx timeout [ 376.949692][ T5238] Bluetooth: hci8: command tx timeout [ 377.189570][ T5238] Bluetooth: hci9: command tx timeout [ 377.349695][ T5238] Bluetooth: hci10: command tx timeout [ 378.566211][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.572694][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.727201][ T5238] Bluetooth: hci1: command tx timeout [ 378.789938][ T5238] Bluetooth: hci7: command tx timeout [ 379.029671][ T5238] Bluetooth: hci8: command tx timeout [ 379.277163][ T5238] Bluetooth: hci9: command tx timeout [ 379.429641][ T5238] Bluetooth: hci10: command tx timeout [ 380.789864][ T5238] Bluetooth: hci1: command tx timeout [ 380.869744][ T5238] Bluetooth: hci7: command tx timeout [ 381.109619][ T5238] Bluetooth: hci8: command tx timeout [ 381.349572][ T5238] Bluetooth: hci9: command tx timeout [ 381.509583][ T5238] Bluetooth: hci10: command tx timeout [ 435.548124][ T9357] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 435.557486][ T9357] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 435.566254][ T9357] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 435.575064][ T9357] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 435.584982][ T9357] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 435.593135][ T9357] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 435.603195][ T9357] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 435.610590][ T9357] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 435.620086][ T9357] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 435.647004][ T9357] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 435.654957][ T9361] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 435.662404][ T9361] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 435.791377][ T9354] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 435.809646][ T9354] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 435.819592][ T9354] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 435.828187][ T9354] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 435.840259][ T9354] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 435.849774][ T9354] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 435.950049][ T9361] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 435.979518][ T9361] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 435.987386][ T9361] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 436.004239][ T9361] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 436.012934][ T9361] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 436.020710][ T9361] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 436.268500][ T9354] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 436.285550][ T9354] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 436.293640][ T9354] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 436.303007][ T9354] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 436.318543][ T9354] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 436.326209][ T9354] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 436.979468][ T9354] Bluetooth: hci4: command 0x0406 tx timeout [ 436.985616][ T9354] Bluetooth: hci5: command 0x0406 tx timeout [ 436.992314][ T9361] Bluetooth: hci6: command 0x0406 tx timeout [ 437.003067][ T9361] Bluetooth: hci3: command 0x0406 tx timeout [ 437.009099][ T9361] Bluetooth: hci0: command 0x0406 tx timeout [ 437.679825][ T5238] Bluetooth: hci11: command tx timeout [ 437.749694][ T5238] Bluetooth: hci12: command tx timeout [ 437.909666][ T5238] Bluetooth: hci13: command tx timeout [ 438.069854][ T5238] Bluetooth: hci14: command tx timeout [ 438.397751][ T5238] Bluetooth: hci15: command tx timeout [ 439.766751][ T5238] Bluetooth: hci11: command tx timeout [ 439.829737][ T5238] Bluetooth: hci12: command tx timeout [ 439.991060][ T5238] Bluetooth: hci13: command tx timeout [ 439.998355][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.009459][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.159734][ T5238] Bluetooth: hci14: command tx timeout [ 440.477083][ T5238] Bluetooth: hci15: command tx timeout [ 441.829729][ T5238] Bluetooth: hci11: command tx timeout [ 441.909712][ T5238] Bluetooth: hci12: command tx timeout [ 442.069515][ T5238] Bluetooth: hci13: command tx timeout [ 442.229570][ T5238] Bluetooth: hci14: command tx timeout [ 442.557151][ T5238] Bluetooth: hci15: command tx timeout [ 443.909558][ T5238] Bluetooth: hci11: command tx timeout [ 443.989590][ T5238] Bluetooth: hci12: command tx timeout [ 444.149603][ T5238] Bluetooth: hci13: command tx timeout [ 444.309621][ T5238] Bluetooth: hci14: command tx timeout [ 444.639450][ T5238] Bluetooth: hci15: command tx timeout [ 464.949652][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 464.957438][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 465.007022][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.046513][ T30] task:kworker/u8:0 state:D stack:20440 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 465.122681][ T30] Workqueue: netns cleanup_net [ 465.127528][ T30] Call Trace: [ 465.207018][ T30] [ 465.214571][ T30] __schedule+0x1895/0x4b30 [ 465.219247][ T30] ? __pfx___schedule+0x10/0x10 [ 465.266483][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.303737][ T30] ? kthread_data+0x52/0xd0 [ 465.308307][ T30] ? wq_worker_sleeping+0x66/0x240 [ 465.363306][ T30] ? schedule+0x90/0x320 [ 465.367597][ T30] schedule+0x14b/0x320 [ 465.409447][ T30] schedule_timeout+0xb0/0x310 [ 465.414271][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 465.469595][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.476096][ T30] ? wait_for_completion+0x2fe/0x620 [ 465.558589][ T30] ? wait_for_completion+0x2fe/0x620 [ 465.569512][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.574784][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 465.619449][ T30] ? wait_for_completion+0x2fe/0x620 [ 465.624829][ T30] wait_for_completion+0x355/0x620 [ 465.657031][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 465.678394][ T30] ? __flush_work+0xe7/0xc50 [ 465.703432][ T30] __flush_work+0xa37/0xc50 [ 465.708005][ T30] ? __flush_work+0xe7/0xc50 [ 465.736413][ T30] ? __pfx___flush_work+0x10/0x10 [ 465.762410][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 465.767760][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.822118][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 465.827291][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.869644][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 465.876039][ T30] ? net_generic+0x1f/0x240 [ 465.920156][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 465.926963][ T30] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 465.993161][ T30] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 466.020069][ T30] cleanup_net+0x75d/0xcc0 [ 466.024557][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 466.049455][ T30] ? process_scheduled_works+0x976/0x1850 [ 466.055226][ T30] process_scheduled_works+0xa63/0x1850 [ 466.089486][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.095523][ T30] ? assign_work+0x364/0x3d0 [ 466.147023][ T30] worker_thread+0x870/0xd30 [ 466.163719][ T30] ? __kthread_parkme+0x169/0x1d0 [ 466.168813][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.191761][ T30] kthread+0x2f0/0x390 [ 466.195868][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.219497][ T30] ? __pfx_kthread+0x10/0x10 [ 466.224138][ T30] ret_from_fork+0x4b/0x80 [ 466.228599][ T30] ? __pfx_kthread+0x10/0x10 [ 466.269462][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.274298][ T30] [ 466.295244][ T30] INFO: task kworker/u8:8:2575 blocked for more than 144 seconds. [ 466.313832][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 466.349459][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.358162][ T30] task:kworker/u8:8 state:D stack:21504 pid:2575 tgid:2575 ppid:2 flags:0x00004000 [ 466.398009][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 466.417598][ T30] Call Trace: [ 466.442782][ T30] [ 466.445927][ T30] __schedule+0x1895/0x4b30 [ 466.459417][ T30] ? __pfx___schedule+0x10/0x10 [ 466.464326][ T30] ? __pfx_lock_release+0x10/0x10 [ 466.496607][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 466.515685][ T30] ? kthread_data+0x52/0xd0 [ 466.526344][ T30] ? schedule+0x90/0x320 [ 466.542670][ T30] ? wq_worker_sleeping+0x66/0x240 [ 466.547829][ T30] ? schedule+0x90/0x320 [ 466.578974][ T30] schedule+0x14b/0x320 [ 466.590688][ T30] schedule_preempt_disabled+0x13/0x30 [ 466.596280][ T30] __mutex_lock+0x6a7/0xd70 [ 466.616831][ T30] ? __mutex_lock+0x52a/0xd70 [ 466.633389][ T30] ? addrconf_verify_work+0x19/0x30 [ 466.638640][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 466.653268][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 466.659322][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 466.699567][ T30] ? process_scheduled_works+0x976/0x1850 [ 466.705355][ T30] addrconf_verify_work+0x19/0x30 [ 466.737466][ T30] process_scheduled_works+0xa63/0x1850 [ 466.747151][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 466.770233][ T30] ? assign_work+0x364/0x3d0 [ 466.774897][ T30] worker_thread+0x870/0xd30 [ 466.807818][ T30] ? __kthread_parkme+0x169/0x1d0 [ 466.819400][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.824567][ T30] kthread+0x2f0/0x390 [ 466.828669][ T30] ? __pfx_worker_thread+0x10/0x10 [ 466.857853][ T30] ? __pfx_kthread+0x10/0x10 [ 466.886507][ T30] ret_from_fork+0x4b/0x80 [ 466.891057][ T30] ? __pfx_kthread+0x10/0x10 [ 466.895679][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.929494][ T30] [ 466.945844][ T30] INFO: task syz-executor:7926 blocked for more than 145 seconds. [ 466.964502][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 466.986045][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.016917][ T30] task:syz-executor state:D stack:21664 pid:7926 tgid:7926 ppid:1 flags:0x00004006 [ 467.047224][ T30] Call Trace: [ 467.050586][ T30] [ 467.053544][ T30] __schedule+0x1895/0x4b30 [ 467.058144][ T30] ? __pfx___schedule+0x10/0x10 [ 467.086063][ T30] ? __pfx_lock_release+0x10/0x10 [ 467.101551][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 467.107061][ T30] ? schedule+0x90/0x320 [ 467.130559][ T30] schedule+0x14b/0x320 [ 467.147816][ T30] schedule_preempt_disabled+0x13/0x30 [ 467.166679][ T30] __mutex_lock+0x6a7/0xd70 [ 467.173035][ T30] ? __mutex_lock+0x52a/0xd70 [ 467.177767][ T30] ? tun_chr_close+0x3b/0x1b0 [ 467.190984][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.196056][ T30] ? __pfx_call_rcu+0x10/0x10 [ 467.210005][ T30] tun_chr_close+0x3b/0x1b0 [ 467.214554][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 467.229226][ T30] __fput+0x23f/0x880 [ 467.236321][ T30] task_work_run+0x24f/0x310 [ 467.248954][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 467.255350][ T30] ? __pfx_task_work_run+0x10/0x10 [ 467.267785][ T30] ? do_exit+0xa2a/0x28e0 [ 467.272741][ T30] ? kmem_cache_free+0x1a2/0x420 [ 467.277747][ T30] ? do_exit+0xa2a/0x28e0 [ 467.294475][ T30] do_exit+0xa2f/0x28e0 [ 467.298689][ T30] ? __pfx_do_exit+0x10/0x10 [ 467.307995][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.316949][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.327417][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.339111][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 467.348048][ T30] do_group_exit+0x207/0x2c0 [ 467.355976][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.369094][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 467.375142][ T30] get_signal+0x16a3/0x1740 [ 467.387568][ T30] ? __pfx_get_signal+0x10/0x10 [ 467.392785][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 467.397695][ T30] arch_do_signal_or_restart+0x96/0x860 [ 467.409412][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.415609][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.435662][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 467.448261][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 467.457589][ T30] do_syscall_64+0x100/0x230 [ 467.468936][ T30] ? clear_bhb_loop+0x35/0x90 [ 467.475984][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.489072][ T30] RIP: 0033:0x7fcda0f7d8f1 [ 467.495084][ T30] RSP: 002b:00007fcda125ec60 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 467.517189][ T30] RAX: 0000000000000003 RBX: 00007fcda0ff0134 RCX: 00007fcda0f7d8f1 [ 467.536615][ T30] RDX: 0000000000090800 RSI: 00007fcda125fe00 RDI: 00000000ffffff9c [ 467.547927][ T30] RBP: 00007fcda125fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 467.565501][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fcda125fe00 [ 467.576012][ T30] R13: 00007fcda0ff0134 R14: 000000000004748d R15: 00007fcda125fe40 [ 467.589665][ T30] [ 467.600824][ T30] INFO: task syz-executor:8135 blocked for more than 146 seconds. [ 467.608666][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 467.625356][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.639243][ T30] task:syz-executor state:D stack:20992 pid:8135 tgid:8135 ppid:1 flags:0x00004006 [ 467.657158][ T30] Call Trace: [ 467.661189][ T30] [ 467.664160][ T30] __schedule+0x1895/0x4b30 [ 467.668733][ T30] ? __pfx___schedule+0x10/0x10 [ 467.681151][ T30] ? __pfx_lock_release+0x10/0x10 [ 467.686224][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 467.700179][ T30] ? schedule+0x90/0x320 [ 467.704486][ T30] schedule+0x14b/0x320 [ 467.708700][ T30] schedule_preempt_disabled+0x13/0x30 [ 467.719390][ T30] __mutex_lock+0x6a7/0xd70 [ 467.724038][ T30] ? __mutex_lock+0x52a/0xd70 [ 467.728760][ T30] ? tun_chr_close+0x3b/0x1b0 [ 467.743816][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 467.748903][ T30] ? __pfx_call_rcu+0x10/0x10 [ 467.761714][ T30] tun_chr_close+0x3b/0x1b0 [ 467.766639][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 467.778322][ T30] __fput+0x23f/0x880 [ 467.785455][ T30] task_work_run+0x24f/0x310 [ 467.797609][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 467.805845][ T30] ? __pfx_task_work_run+0x10/0x10 [ 467.818598][ T30] ? do_exit+0xa2a/0x28e0 [ 467.823143][ T30] ? kmem_cache_free+0x1a2/0x420 [ 467.828136][ T30] ? do_exit+0xa2a/0x28e0 [ 467.843294][ T30] do_exit+0xa2f/0x28e0 [ 467.847516][ T30] ? __pfx_do_exit+0x10/0x10 [ 467.858339][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.867699][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.878145][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.887862][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 467.897652][ T30] do_group_exit+0x207/0x2c0 [ 467.908445][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.923161][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 467.928414][ T30] get_signal+0x16a3/0x1740 [ 467.937500][ T30] ? __pfx_get_signal+0x10/0x10 [ 467.947642][ T30] arch_do_signal_or_restart+0x96/0x860 [ 467.958449][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 467.968562][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 467.979101][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 467.988111][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 467.998141][ T30] do_syscall_64+0x100/0x230 [ 468.007463][ T30] ? clear_bhb_loop+0x35/0x90 [ 468.017222][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.027381][ T30] RIP: 0033:0x7ff080174257 [ 468.036513][ T30] RSP: 002b:00007ff08045fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 468.049511][ T30] RAX: fffffffffffffe00 RBX: 000000000000007f RCX: 00007ff080174257 [ 468.057522][ T30] RDX: 0000000040000000 RSI: 00007ff08045fdec RDI: 00000000ffffffff [ 468.076441][ T30] RBP: 00007ff08045fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 468.087804][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555921e75eb [ 468.102929][ T30] R13: 00005555921e7590 R14: 00000000000474b9 R15: 00007ff08045fe40 [ 468.115956][ T30] [ 468.119082][ T30] INFO: task syz.4.645:9037 blocked for more than 146 seconds. [ 468.135598][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 468.146558][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.164433][ T30] task:syz.4.645 state:D stack:26320 pid:9037 tgid:9037 ppid:7903 flags:0x00004006 [ 468.178951][ T30] Call Trace: [ 468.187767][ T30] [ 468.194595][ T30] __schedule+0x1895/0x4b30 [ 468.199177][ T30] ? __pfx___schedule+0x10/0x10 [ 468.209149][ T30] ? __pfx_lock_release+0x10/0x10 [ 468.217823][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 468.230212][ T30] ? schedule+0x90/0x320 [ 468.234516][ T30] schedule+0x14b/0x320 [ 468.242723][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.255569][ T30] __mutex_lock+0x6a7/0xd70 [ 468.263902][ T30] ? __mutex_lock+0x52a/0xd70 [ 468.268639][ T30] ? tun_chr_close+0x3b/0x1b0 [ 468.283920][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.289002][ T30] ? __pfx_call_rcu+0x10/0x10 [ 468.297781][ T30] tun_chr_close+0x3b/0x1b0 [ 468.306816][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 468.319266][ T30] __fput+0x23f/0x880 [ 468.329235][ T30] task_work_run+0x24f/0x310 [ 468.337661][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 468.346986][ T30] ? __pfx_task_work_run+0x10/0x10 [ 468.363187][ T30] ? do_exit+0xa2a/0x28e0 [ 468.367568][ T30] ? kmem_cache_free+0x1a2/0x420 [ 468.377302][ T30] ? do_exit+0xa2a/0x28e0 [ 468.387633][ T30] do_exit+0xa2f/0x28e0 [ 468.398462][ T30] ? __pfx_do_exit+0x10/0x10 [ 468.406586][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.417293][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.427018][ T30] do_group_exit+0x207/0x2c0 [ 468.436496][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.446334][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 468.458568][ T30] get_signal+0x16a3/0x1740 [ 468.466735][ T30] ? __pfx_get_signal+0x10/0x10 [ 468.479682][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 468.485188][ T30] arch_do_signal_or_restart+0x96/0x860 [ 468.499818][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.506022][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.519398][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 468.525203][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 468.538908][ T30] do_syscall_64+0x100/0x230 [ 468.543862][ T30] ? clear_bhb_loop+0x35/0x90 [ 468.548589][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.569840][ T30] RIP: 0033:0x7f6470fb00e5 [ 468.574323][ T30] RSP: 002b:00007f6471cf2f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 468.590887][ T30] RAX: fffffffffffffdfc RBX: 00007f6471135f80 RCX: 00007f6470fb00e5 [ 468.598901][ T30] RDX: 00007f6471cf2fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.615224][ T30] RBP: 00007f6470ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 468.626849][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 468.647917][ T30] R13: 0000000000000001 R14: 00007f6471135f80 R15: 00007f647125fa28 [ 468.656180][ T30] [ 468.668381][ T30] INFO: task syz.1.691:9172 blocked for more than 147 seconds. [ 468.676436][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 468.693779][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.708836][ T30] task:syz.1.691 state:D stack:25824 pid:9172 tgid:9172 ppid:8295 flags:0x00004006 [ 468.726787][ T30] Call Trace: [ 468.730180][ T30] [ 468.733148][ T30] __schedule+0x1895/0x4b30 [ 468.737711][ T30] ? __pfx___schedule+0x10/0x10 [ 468.752280][ T30] ? __pfx_lock_release+0x10/0x10 [ 468.757355][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 468.769226][ T30] ? schedule+0x90/0x320 [ 468.777079][ T30] schedule+0x14b/0x320 [ 468.785865][ T30] schedule_preempt_disabled+0x13/0x30 [ 468.799326][ T30] __mutex_lock+0x6a7/0xd70 [ 468.808113][ T30] ? __mutex_lock+0x52a/0xd70 [ 468.816952][ T30] ? tun_chr_close+0x3b/0x1b0 [ 468.826676][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 468.835484][ T30] ? __pfx_call_rcu+0x10/0x10 [ 468.846173][ T30] tun_chr_close+0x3b/0x1b0 [ 468.854318][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 468.865814][ T30] __fput+0x23f/0x880 [ 468.873515][ T30] task_work_run+0x24f/0x310 [ 468.878674][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 468.888587][ T30] ? __pfx_task_work_run+0x10/0x10 [ 468.898933][ T30] ? do_exit+0xa2a/0x28e0 [ 468.908200][ T30] ? kmem_cache_free+0x1a2/0x420 [ 468.916936][ T30] ? do_exit+0xa2a/0x28e0 [ 468.926447][ T30] do_exit+0xa2f/0x28e0 [ 468.934324][ T30] ? __pfx_do_exit+0x10/0x10 [ 468.938965][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.954170][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.962798][ T30] do_group_exit+0x207/0x2c0 [ 468.969227][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.979716][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 468.984966][ T30] get_signal+0x16a3/0x1740 [ 468.998549][ T30] ? __pfx_get_signal+0x10/0x10 [ 469.003883][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 469.017312][ T30] arch_do_signal_or_restart+0x96/0x860 [ 469.023167][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 469.038956][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.045239][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 469.058701][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 469.064626][ T30] do_syscall_64+0x100/0x230 [ 469.071279][ T30] ? clear_bhb_loop+0x35/0x90 [ 469.075992][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.091298][ T30] RIP: 0033:0x7f38cf5b00e5 [ 469.095746][ T30] RSP: 002b:00007f38d0317f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 469.112274][ T30] RAX: fffffffffffffdfc RBX: 00007f38cf735f80 RCX: 00007f38cf5b00e5 [ 469.126072][ T30] RDX: 00007f38d0317fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.137375][ T30] RBP: 00007f38cf5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 469.153623][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 469.165372][ T30] R13: 0000000000000000 R14: 00007f38cf735f80 R15: 00007f38cf85fa28 [ 469.179506][ T30] [ 469.184721][ T30] INFO: task syz.2.740:9301 blocked for more than 147 seconds. [ 469.198570][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 469.208457][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.219592][ T30] task:syz.2.740 state:D stack:26288 pid:9301 tgid:9299 ppid:8135 flags:0x00004006 [ 469.238019][ T30] Call Trace: [ 469.241607][ T30] [ 469.244574][ T30] __schedule+0x1895/0x4b30 [ 469.249146][ T30] ? __pfx___schedule+0x10/0x10 [ 469.262295][ T30] ? __pfx_lock_release+0x10/0x10 [ 469.267371][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 469.279221][ T30] ? schedule+0x90/0x320 [ 469.288686][ T30] schedule+0x14b/0x320 [ 469.297727][ T30] schedule_preempt_disabled+0x13/0x30 [ 469.306730][ T30] __mutex_lock+0x6a7/0xd70 [ 469.315755][ T30] ? __mutex_lock+0x52a/0xd70 [ 469.323707][ T30] ? tun_chr_close+0x3b/0x1b0 [ 469.328431][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 469.337339][ T30] ? __pfx_call_rcu+0x10/0x10 [ 469.351956][ T30] tun_chr_close+0x3b/0x1b0 [ 469.356505][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 469.372396][ T30] __fput+0x23f/0x880 [ 469.378236][ T30] task_work_run+0x24f/0x310 [ 469.387516][ T30] ? __pfx_task_work_run+0x10/0x10 [ 469.397755][ T30] ? switch_task_namespaces+0xe4/0x110 [ 469.408348][ T30] do_exit+0xa2f/0x28e0 [ 469.416112][ T30] ? __pfx_do_exit+0x10/0x10 [ 469.425074][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 469.436770][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.448482][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.458492][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 469.468044][ T30] do_group_exit+0x207/0x2c0 [ 469.477019][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 469.490193][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 469.496051][ T30] get_signal+0x16a3/0x1740 [ 469.508588][ T30] ? __pfx_lock_release+0x10/0x10 [ 469.514153][ T30] ? __pfx_get_signal+0x10/0x10 [ 469.519062][ T30] ? rcu_read_lock_sched_held+0x8d/0x130 [ 469.536918][ T30] arch_do_signal_or_restart+0x96/0x860 [ 469.544025][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 469.558057][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.564914][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 469.581597][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 469.587200][ T30] do_syscall_64+0x100/0x230 [ 469.608053][ T30] ? clear_bhb_loop+0x35/0x90 [ 469.615135][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.627799][ T30] RIP: 0033:0x7ff08017dff9 [ 469.633859][ T30] RSP: 002b:00007ff080f47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 469.649172][ T30] RAX: 0000000000000004 RBX: 00007ff080335f80 RCX: 00007ff08017dff9 [ 469.665857][ T30] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 469.678918][ T30] RBP: 00007ff0801f0296 R08: 0000000000000000 R09: 0000000000000000 [ 469.698419][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.708428][ T30] R13: 0000000000000000 R14: 00007ff080335f80 R15: 00007ff08045fa28 [ 469.722574][ T30] [ 469.725683][ T30] INFO: task syz.3.742:9306 blocked for more than 148 seconds. [ 469.736824][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 469.750035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 469.758733][ T30] task:syz.3.742 state:D stack:25984 pid:9306 tgid:9304 ppid:8357 flags:0x00000004 [ 469.775832][ T30] Call Trace: [ 469.779140][ T30] [ 469.786007][ T30] __schedule+0x1895/0x4b30 [ 469.797440][ T30] ? __pfx___schedule+0x10/0x10 [ 469.805500][ T30] ? __pfx_lock_release+0x10/0x10 [ 469.817709][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 469.824863][ T30] ? schedule+0x90/0x320 [ 469.829150][ T30] schedule+0x14b/0x320 [ 469.839088][ T30] schedule_preempt_disabled+0x13/0x30 [ 469.855437][ T30] __mutex_lock+0x6a7/0xd70 [ 469.861249][ T30] ? __mutex_lock+0x52a/0xd70 [ 469.865963][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 469.877483][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 469.883953][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 469.899501][ T30] ? __nla_parse+0x40/0x60 [ 469.903983][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 469.908791][ T30] genl_rcv_msg+0xaaa/0xec0 [ 469.922517][ T30] ? mark_lock+0x9a/0x360 [ 469.926984][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.938362][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 469.945858][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 469.956918][ T30] ? __pfx_nl80211_new_interface+0x10/0x10 [ 469.967058][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 469.978129][ T30] ? __pfx___might_resched+0x10/0x10 [ 469.985966][ T30] netlink_rcv_skb+0x1e3/0x430 [ 469.998362][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.007952][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.017247][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 470.027295][ T30] genl_rcv+0x28/0x40 [ 470.033826][ T30] netlink_unicast+0x7f6/0x990 [ 470.038653][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 470.049518][ T30] ? __virt_addr_valid+0x183/0x530 [ 470.054796][ T30] ? __check_object_size+0x48e/0x900 [ 470.068484][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 470.074046][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.086656][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 470.093911][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.099240][ T30] __sock_sendmsg+0x221/0x270 [ 470.110015][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 470.115411][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.128639][ T30] __sys_sendmsg+0x292/0x380 [ 470.133613][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.138811][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.150114][ T30] ? do_syscall_64+0x100/0x230 [ 470.154921][ T30] ? do_syscall_64+0xb6/0x230 [ 470.167790][ T30] do_syscall_64+0xf3/0x230 [ 470.172686][ T30] ? clear_bhb_loop+0x35/0x90 [ 470.177407][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.189478][ T30] RIP: 0033:0x7fb473f7dff9 [ 470.197737][ T30] RSP: 002b:00007fb474cbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.214093][ T30] RAX: ffffffffffffffda RBX: 00007fb474135f80 RCX: 00007fb473f7dff9 [ 470.226897][ T30] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000004 [ 470.242830][ T30] RBP: 00007fb473ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 470.255509][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.269519][ T30] R13: 0000000000000000 R14: 00007fb474135f80 R15: 00007fb47425fa28 [ 470.277561][ T30] [ 470.288274][ T30] INFO: task syz-executor:9313 blocked for more than 148 seconds. [ 470.298139][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 470.313283][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.326774][ T30] task:syz-executor state:D stack:26736 pid:9313 tgid:9313 ppid:1 flags:0x00004004 [ 470.345033][ T30] Call Trace: [ 470.348349][ T30] [ 470.352948][ T30] __schedule+0x1895/0x4b30 [ 470.357518][ T30] ? __pfx___schedule+0x10/0x10 [ 470.373609][ T30] ? __pfx_lock_release+0x10/0x10 [ 470.378711][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 470.390002][ T30] ? schedule+0x90/0x320 [ 470.394316][ T30] schedule+0x14b/0x320 [ 470.409705][ T30] schedule_preempt_disabled+0x13/0x30 [ 470.415233][ T30] __mutex_lock+0x6a7/0xd70 [ 470.429493][ T30] ? __mutex_lock+0x52a/0xd70 [ 470.434221][ T30] ? register_nexthop_notifier+0x84/0x290 [ 470.446887][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 470.453336][ T30] ? __asan_memset+0x23/0x50 [ 470.457972][ T30] register_nexthop_notifier+0x84/0x290 [ 470.469900][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 470.475753][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 470.492478][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 470.498688][ T30] ? __asan_memset+0x23/0x50 [ 470.509808][ T30] ops_init+0x31e/0x590 [ 470.514128][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 470.528881][ T30] setup_net+0x287/0x9e0 [ 470.533490][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 470.539082][ T30] ? __pfx_setup_net+0x10/0x10 [ 470.550191][ T30] copy_net_ns+0x33f/0x570 [ 470.554668][ T30] create_new_namespaces+0x425/0x7b0 [ 470.569665][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 470.575437][ T30] ksys_unshare+0x57d/0xa70 [ 470.589194][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 470.595326][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.604344][ T30] ? do_syscall_64+0x100/0x230 [ 470.609161][ T30] __x64_sys_unshare+0x38/0x40 [ 470.621712][ T30] do_syscall_64+0xf3/0x230 [ 470.626276][ T30] ? clear_bhb_loop+0x35/0x90 [ 470.649490][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.655444][ T30] RIP: 0033:0x7f7c0c57f7f7 [ 470.668175][ T30] RSP: 002b:00007f7c0c85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 470.678561][ T30] RAX: ffffffffffffffda RBX: 00007f7c0c5f1a85 RCX: 00007f7c0c57f7f7 [ 470.694409][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 470.705876][ T30] RBP: 0000000000000000 R08: 00007f7c0d267d60 R09: 0000000000000000 [ 470.732499][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 470.744887][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 470.756370][ T30] [ 470.763744][ T30] INFO: task syz-executor:9316 blocked for more than 149 seconds. [ 470.776680][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 470.788693][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.800889][ T30] task:syz-executor state:D stack:26736 pid:9316 tgid:9316 ppid:1 flags:0x00004006 [ 470.819171][ T30] Call Trace: [ 470.826024][ T30] [ 470.828991][ T30] __schedule+0x1895/0x4b30 [ 470.839492][ T30] ? __pfx___schedule+0x10/0x10 [ 470.844405][ T30] ? __pfx_lock_release+0x10/0x10 [ 470.856563][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 470.862372][ T30] ? schedule+0x90/0x320 [ 470.866671][ T30] schedule+0x14b/0x320 [ 470.879482][ T30] schedule_preempt_disabled+0x13/0x30 [ 470.884988][ T30] __mutex_lock+0x6a7/0xd70 [ 470.898107][ T30] ? __mutex_lock+0x52a/0xd70 [ 470.903135][ T30] ? register_nexthop_notifier+0x84/0x290 [ 470.908898][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 470.920130][ T30] ? __asan_memset+0x23/0x50 [ 470.924797][ T30] register_nexthop_notifier+0x84/0x290 [ 470.939558][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 470.945418][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 470.959560][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 470.965764][ T30] ? __asan_memset+0x23/0x50 [ 470.977992][ T30] ops_init+0x31e/0x590 [ 470.984549][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 470.997801][ T30] setup_net+0x287/0x9e0 [ 471.002444][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 471.008030][ T30] ? __pfx_setup_net+0x10/0x10 [ 471.022394][ T30] copy_net_ns+0x33f/0x570 [ 471.026862][ T30] create_new_namespaces+0x425/0x7b0 [ 471.042324][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 471.048105][ T30] ksys_unshare+0x57d/0xa70 [ 471.059329][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 471.064640][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.078634][ T30] ? do_syscall_64+0x100/0x230 [ 471.083635][ T30] __x64_sys_unshare+0x38/0x40 [ 471.088436][ T30] do_syscall_64+0xf3/0x230 [ 471.102276][ T30] ? clear_bhb_loop+0x35/0x90 [ 471.106996][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.119215][ T30] RIP: 0033:0x7fb80817f7f7 [ 471.127633][ T30] RSP: 002b:00007fb80845ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 471.146332][ T30] RAX: ffffffffffffffda RBX: 00007fb8081f1a85 RCX: 00007fb80817f7f7 [ 471.156716][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 471.169390][ T30] RBP: 0000000000000000 R08: 00007fb808e67d60 R09: 0000000000000000 [ 471.177398][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 471.193897][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 471.209661][ T30] [ 471.212797][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 471.233394][ T30] INFO: task syz-executor:9319 blocked for more than 149 seconds. [ 471.246649][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 471.257344][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.273493][ T30] task:syz-executor state:D stack:26512 pid:9319 tgid:9319 ppid:1 flags:0x00004006 [ 471.289174][ T30] Call Trace: [ 471.297002][ T30] [ 471.303193][ T30] __schedule+0x1895/0x4b30 [ 471.307764][ T30] ? __pfx___schedule+0x10/0x10 [ 471.317361][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.327621][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 471.338665][ T30] ? schedule+0x90/0x320 [ 471.347462][ T30] schedule+0x14b/0x320 [ 471.360446][ T30] schedule_preempt_disabled+0x13/0x30 [ 471.365957][ T30] __mutex_lock+0x6a7/0xd70 [ 471.378222][ T30] ? __mutex_lock+0x52a/0xd70 [ 471.384451][ T30] ? register_nexthop_notifier+0x84/0x290 [ 471.397730][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.403694][ T30] ? __asan_memset+0x23/0x50 [ 471.408344][ T30] register_nexthop_notifier+0x84/0x290 [ 471.419454][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 471.429145][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 471.447416][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 471.454027][ T30] ? __asan_memset+0x23/0x50 [ 471.458679][ T30] ops_init+0x31e/0x590 [ 471.473120][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 471.478542][ T30] setup_net+0x287/0x9e0 [ 471.488341][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 471.498119][ T30] ? __pfx_setup_net+0x10/0x10 [ 471.508524][ T30] copy_net_ns+0x33f/0x570 [ 471.517706][ T30] create_new_namespaces+0x425/0x7b0 [ 471.529510][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 471.535290][ T30] ksys_unshare+0x57d/0xa70 [ 471.547730][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 471.553634][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.567487][ T30] ? do_syscall_64+0x100/0x230 [ 471.572753][ T30] __x64_sys_unshare+0x38/0x40 [ 471.577560][ T30] do_syscall_64+0xf3/0x230 [ 471.589600][ T30] ? clear_bhb_loop+0x35/0x90 [ 471.594331][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.610896][ T30] RIP: 0033:0x7fa579b7f7f7 [ 471.615366][ T30] RSP: 002b:00007fa579e5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 471.632954][ T30] RAX: ffffffffffffffda RBX: 00007fa579bf1a85 RCX: 00007fa579b7f7f7 [ 471.644315][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 471.659291][ T30] RBP: 0000000000000000 R08: 00007fa57a867d60 R09: 0000000000000000 [ 471.670823][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 471.678834][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 471.699419][ T30] [ 471.702489][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 471.720680][ T30] INFO: task syz-executor:9320 blocked for more than 150 seconds. [ 471.728513][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 471.745603][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.767563][ T30] task:syz-executor state:D stack:26720 pid:9320 tgid:9320 ppid:1 flags:0x00004004 [ 471.778069][ T30] Call Trace: [ 471.788647][ T30] [ 471.791951][ T30] __schedule+0x1895/0x4b30 [ 471.796518][ T30] ? __pfx___schedule+0x10/0x10 [ 471.813467][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.818544][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 471.827865][ T30] ? schedule+0x90/0x320 [ 471.838777][ T30] schedule+0x14b/0x320 [ 471.846406][ T30] schedule_preempt_disabled+0x13/0x30 [ 471.856922][ T30] __mutex_lock+0x6a7/0xd70 [ 471.865969][ T30] ? __mutex_lock+0x52a/0xd70 [ 471.875267][ T30] ? register_nexthop_notifier+0x84/0x290 [ 471.884481][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.893959][ T30] ? __asan_memset+0x23/0x50 [ 471.898611][ T30] register_nexthop_notifier+0x84/0x290 [ 471.908643][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 471.925572][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 471.937681][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 471.948215][ T30] ? __asan_memset+0x23/0x50 [ 471.956908][ T30] ops_init+0x31e/0x590 [ 471.967321][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 471.976268][ T30] setup_net+0x287/0x9e0 [ 471.985064][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 471.996134][ T30] ? __pfx_setup_net+0x10/0x10 [ 472.005950][ T30] copy_net_ns+0x33f/0x570 [ 472.014083][ T30] create_new_namespaces+0x425/0x7b0 [ 472.024750][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 472.034308][ T30] ksys_unshare+0x57d/0xa70 [ 472.040889][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 472.045950][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.060796][ T30] ? do_syscall_64+0x100/0x230 [ 472.065605][ T30] __x64_sys_unshare+0x38/0x40 [ 472.077413][ T30] do_syscall_64+0xf3/0x230 [ 472.082225][ T30] ? clear_bhb_loop+0x35/0x90 [ 472.086936][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.099397][ T30] RIP: 0033:0x7f3c9057f7f7 [ 472.103851][ T30] RSP: 002b:00007f3c9085ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 472.120961][ T30] RAX: ffffffffffffffda RBX: 00007f3c905f1a85 RCX: 00007f3c9057f7f7 [ 472.128998][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 472.147186][ T30] RBP: 0000000000000000 R08: 00007f3c91267d60 R09: 0000000000000000 [ 472.156972][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 472.175138][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 472.186606][ T30] [ 472.194432][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 472.208024][ T30] INFO: task syz-executor:9322 blocked for more than 150 seconds. [ 472.219397][ T30] Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 472.227053][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.244813][ T30] task:syz-executor state:D stack:26400 pid:9322 tgid:9322 ppid:1 flags:0x00004004 [ 472.265036][ T30] Call Trace: [ 472.268346][ T30] [ 472.275502][ T30] __schedule+0x1895/0x4b30 [ 472.284563][ T30] ? __pfx___schedule+0x10/0x10 [ 472.293114][ T30] ? __pfx_lock_release+0x10/0x10 [ 472.298184][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 472.313492][ T30] ? schedule+0x90/0x320 [ 472.317775][ T30] schedule+0x14b/0x320 [ 472.325510][ T30] schedule_preempt_disabled+0x13/0x30 [ 472.335655][ T30] __mutex_lock+0x6a7/0xd70 [ 472.344387][ T30] ? __mutex_lock+0x52a/0xd70 [ 472.349113][ T30] ? register_nexthop_notifier+0x84/0x290 [ 472.365686][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 472.375874][ T30] ? __asan_memset+0x23/0x50 [ 472.384614][ T30] register_nexthop_notifier+0x84/0x290 [ 472.395090][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 472.404427][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 472.415768][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 472.427351][ T30] ? __asan_memset+0x23/0x50 [ 472.437160][ T30] ops_init+0x31e/0x590 [ 472.444824][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 472.456616][ T30] setup_net+0x287/0x9e0 [ 472.464372][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 472.479439][ T30] ? __pfx_setup_net+0x10/0x10 [ 472.484356][ T30] copy_net_ns+0x33f/0x570 [ 472.488823][ T30] create_new_namespaces+0x425/0x7b0 [ 472.501094][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 472.506859][ T30] ksys_unshare+0x57d/0xa70 [ 472.518148][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 472.525817][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 472.537658][ T30] ? do_syscall_64+0x100/0x230 [ 472.544916][ T30] __x64_sys_unshare+0x38/0x40 [ 472.558924][ T30] do_syscall_64+0xf3/0x230 [ 472.567700][ T30] ? clear_bhb_loop+0x35/0x90 [ 472.578146][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.588166][ T30] RIP: 0033:0x7f47e697f7f7 [ 472.598328][ T30] RSP: 002b:00007f47e6c5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 472.609522][ T30] RAX: ffffffffffffffda RBX: 00007f47e69f1a85 RCX: 00007f47e697f7f7 [ 472.617539][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 472.639297][ T30] RBP: 0000000000000000 R08: 00007f47e7667d60 R09: 0000000000000000 [ 472.649410][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 472.666453][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 472.676586][ T30] [ 472.687424][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 472.697713][ T30] [ 472.697713][ T30] Showing all locks held in the system: [ 472.709415][ T30] 5 locks held by kworker/u8:0/11: [ 472.714563][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.742234][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.762094][ T30] #2: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 472.777693][ T30] #3: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 472.789799][ T30] #4: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 472.817570][ T30] 1 lock held by khungtaskd/30: [ 472.827861][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 472.842201][ T30] 3 locks held by kworker/u8:8/2575: [ 472.847513][ T30] #0: ffff88802e0db148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.866266][ T30] #1: ffffc900092c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.889284][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 472.898903][ T30] 2 locks held by getty/4986: [ 472.913029][ T30] #0: ffff88802e6570a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 472.933610][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 472.949526][ T30] 3 locks held by kworker/1:5/5285: [ 472.954789][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 472.977708][ T30] #1: ffffc90004017d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 472.999284][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 473.009216][ T30] 3 locks held by kworker/1:6/5305: [ 473.022598][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 473.039243][ T30] #1: ffffc900040c7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 473.057761][ T30] #2: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 473.077613][ T30] 6 locks held by kworker/0:7/5691: [ 473.084133][ T30] 1 lock held by syz-executor/7926: [ 473.098032][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 473.107323][ T30] 1 lock held by syz-executor/8135: [ 473.119433][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 473.128495][ T30] 1 lock held by syz.4.645/9037: [ 473.143850][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 473.157397][ T30] 1 lock held by syz.1.691/9172: [ 473.167504][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 473.181114][ T30] 1 lock held by syz.2.740/9301: [ 473.186083][ T30] #0: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 473.203212][ T30] 2 locks held by syz.3.742/9306: [ 473.208265][ T30] #0: ffffffff8fd37a30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 473.220843][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 473.237332][ T30] 2 locks held by syz-executor/9313: [ 473.245978][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.259422][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.281990][ T30] 2 locks held by syz-executor/9316: [ 473.287871][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.306614][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.317047][ T30] 2 locks held by syz-executor/9319: [ 473.329488][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.338971][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.357421][ T30] 2 locks held by syz-executor/9320: [ 473.365970][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.386816][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.404742][ T30] 2 locks held by syz-executor/9322: [ 473.411763][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.427642][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.447210][ T30] 2 locks held by syz-executor/9336: [ 473.453837][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.471539][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.491254][ T30] 2 locks held by syz-executor/9338: [ 473.496566][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.516679][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.530742][ T30] 2 locks held by syz-executor/9341: [ 473.536062][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.549628][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.566967][ T30] 2 locks held by syz-executor/9344: [ 473.574688][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.597088][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.614917][ T30] 2 locks held by syz-executor/9345: [ 473.621599][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.639281][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.657199][ T30] 2 locks held by syz-executor/9363: [ 473.663863][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.687604][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.707785][ T30] 2 locks held by syz-executor/9366: [ 473.713389][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.731832][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.747640][ T30] 2 locks held by syz-executor/9369: [ 473.768002][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.788905][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.799805][ T30] 2 locks held by syz-executor/9371: [ 473.805115][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.822774][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.839467][ T30] 2 locks held by syz-executor/9375: [ 473.844797][ T30] #0: ffffffff8fcc51d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 473.863277][ T30] #1: ffffffff8fcd1cc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 473.878126][ T30] [ 473.887065][ T30] ============================================= [ 473.887065][ T30] [ 473.899165][ T30] NMI backtrace for cpu 1 [ 473.903524][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 473.914077][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 473.924167][ T30] Call Trace: [ 473.927478][ T30] [ 473.930426][ T30] dump_stack_lvl+0x241/0x360 [ 473.935135][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.940361][ T30] ? __pfx__printk+0x10/0x10 [ 473.944993][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 473.949963][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 473.955446][ T30] ? _printk+0xd5/0x120 [ 473.959636][ T30] ? __pfx__printk+0x10/0x10 [ 473.964263][ T30] ? __wake_up_klogd+0xcc/0x110 [ 473.969151][ T30] ? __pfx__printk+0x10/0x10 [ 473.973778][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 473.978851][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.984868][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 473.990883][ T30] watchdog+0xff4/0x1040 [ 473.995164][ T30] ? watchdog+0x1ea/0x1040 [ 473.999619][ T30] ? __pfx_watchdog+0x10/0x10 [ 474.004335][ T30] kthread+0x2f0/0x390 [ 474.008437][ T30] ? __pfx_watchdog+0x10/0x10 [ 474.013147][ T30] ? __pfx_kthread+0x10/0x10 [ 474.017757][ T30] ret_from_fork+0x4b/0x80 [ 474.022201][ T30] ? __pfx_kthread+0x10/0x10 [ 474.026813][ T30] ret_from_fork_asm+0x1a/0x30 [ 474.031629][ T30] [ 474.036222][ T30] Sending NMI from CPU 1 to CPUs 0: [ 474.042117][ C0] NMI backtrace for cpu 0 [ 474.042129][ C0] CPU: 0 UID: 0 PID: 5691 Comm: kworker/0:7 Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 474.042148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.042159][ C0] Workqueue: events nsim_dev_trap_report_work [ 474.042181][ C0] RIP: 0010:lockdep_hardirqs_off+0x29/0x110 [ 474.042208][ C0] Code: 90 f3 0f 1e fa 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 83 3d 1c a6 57 04 00 0f 84 8e 00 00 00 49 89 fe <65> 8b 05 58 5e 3e 74 a9 00 00 f0 00 74 66 83 3d c2 4f 77 0e 00 75 [ 474.042223][ C0] RSP: 0000:ffffc90000006e28 EFLAGS: 00000002 [ 474.042236][ C0] RAX: f3aff1e61c061b00 RBX: ffffffff8bcf3130 RCX: 61c8864680b583eb [ 474.042249][ C0] RDX: 0000000000000001 RSI: ffffc90000006fc0 RDI: ffffffff8bcf3130 [ 474.042260][ C0] RBP: ffffc90000006ef0 R08: ffffc90000006fc7 R09: 0000000000000000 [ 474.042272][ C0] R10: ffffc90000006fa0 R11: fffff52000000df9 R12: 0000000000000246 [ 474.042284][ C0] R13: 1ffff92000000dcc R14: ffffffff8bcf3130 R15: dffffc0000000000 [ 474.042296][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 474.042310][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.042322][ C0] CR2: 00007f38d02f6f98 CR3: 000000000e734000 CR4: 00000000003526f0 [ 474.042336][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 474.042354][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 474.042365][ C0] Call Trace: [ 474.042370][ C0] [ 474.042376][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 474.042395][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 474.042420][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 474.042438][ C0] ? nmi_handle+0x2a/0x5a0 [ 474.042481][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 474.042504][ C0] ? nmi_handle+0x14f/0x5a0 [ 474.042521][ C0] ? nmi_handle+0x2a/0x5a0 [ 474.042539][ C0] ? lockdep_hardirqs_off+0x29/0x110 [ 474.042563][ C0] ? default_do_nmi+0x63/0x160 [ 474.042594][ C0] ? exc_nmi+0x123/0x1f0 [ 474.042612][ C0] ? end_repeat_nmi+0xf/0x53 [ 474.042627][ C0] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 474.042649][ C0] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 474.042672][ C0] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 474.042693][ C0] ? lockdep_hardirqs_off+0x29/0x110 [ 474.042722][ C0] ? lockdep_hardirqs_off+0x29/0x110 [ 474.042745][ C0] ? lockdep_hardirqs_off+0x29/0x110 [ 474.042768][ C0] [ 474.042774][ C0] [ 474.042779][ C0] ? do_softirq+0x11b/0x1e0 [ 474.042799][ C0] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 474.042819][ C0] trace_hardirqs_off+0x12/0x40 [ 474.042857][ C0] _raw_spin_lock_irqsave+0xb0/0x120 [ 474.042881][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 474.042907][ C0] ? skb_release_data+0x6a0/0x8a0 [ 474.042926][ C0] debug_check_no_obj_freed+0x234/0x580 [ 474.042970][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.043000][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 474.043028][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 474.043056][ C0] ? skb_release_data+0x6a0/0x8a0 [ 474.043075][ C0] ? skb_release_data+0x6a0/0x8a0 [ 474.043094][ C0] kfree+0x11f/0x440 [ 474.043116][ C0] ? rcuref_put+0x1e3/0x240 [ 474.043136][ C0] skb_release_data+0x6a0/0x8a0 [ 474.043160][ C0] consume_skb+0x9f/0xf0 [ 474.043177][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 474.043206][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 474.043234][ C0] ? nf_ip_checksum+0x13a/0x500 [ 474.043262][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 474.043291][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 474.043320][ C0] ? __pfx_validate_chain+0x10/0x10 [ 474.043345][ C0] nft_do_chain+0x4ad/0x1da0 [ 474.043378][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 474.043404][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 474.043440][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 474.043462][ C0] nft_do_chain_inet+0x418/0x6b0 [ 474.043489][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 474.043514][ C0] ? ipt_do_table+0x312/0x1860 [ 474.043548][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 474.043573][ C0] nf_hook_slow+0xc3/0x220 [ 474.043625][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.043647][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.043668][ C0] NF_HOOK+0x29e/0x450 [ 474.043689][ C0] ? NF_HOOK+0x9a/0x450 [ 474.043714][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 474.043735][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 474.043759][ C0] ? ip_rcv_finish+0x406/0x560 [ 474.043781][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 474.043801][ C0] NF_HOOK+0x3a4/0x450 [ 474.043820][ C0] ? __lock_acquire+0x1384/0x2050 [ 474.043849][ C0] ? NF_HOOK+0x9a/0x450 [ 474.043868][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 474.043887][ C0] ? ip_rcv_core+0x801/0xd10 [ 474.043908][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 474.043933][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 474.043953][ C0] __netif_receive_skb+0x2bf/0x650 [ 474.043977][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 474.044004][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 474.044026][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.044054][ C0] ? __pfx_lock_release+0x10/0x10 [ 474.044082][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 474.044113][ C0] process_backlog+0x662/0x15b0 [ 474.044139][ C0] ? process_backlog+0x33b/0x15b0 [ 474.044167][ C0] ? __pfx_process_backlog+0x10/0x10 [ 474.044190][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.044219][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 474.044249][ C0] __napi_poll+0xcb/0x490 [ 474.044273][ C0] net_rx_action+0x89b/0x1240 [ 474.044307][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 474.044331][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 474.044374][ C0] handle_softirqs+0x2c5/0x980 [ 474.044402][ C0] ? do_softirq+0x11b/0x1e0 [ 474.044426][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 474.044456][ C0] do_softirq+0x11b/0x1e0 [ 474.044480][ C0] [ 474.044486][ C0] [ 474.044493][ C0] ? __pfx_do_softirq+0x10/0x10 [ 474.044517][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 474.044546][ C0] ? rcu_is_watching+0x15/0xb0 [ 474.044568][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 474.044593][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 474.044615][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 474.044640][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 474.044665][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 474.044689][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 474.044735][ C0] ? process_scheduled_works+0x976/0x1850 [ 474.044759][ C0] process_scheduled_works+0xa63/0x1850 [ 474.044804][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 474.044830][ C0] ? assign_work+0x364/0x3d0 [ 474.044853][ C0] worker_thread+0x870/0xd30 [ 474.044877][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 474.044902][ C0] ? __kthread_parkme+0x169/0x1d0 [ 474.044926][ C0] ? __pfx_worker_thread+0x10/0x10 [ 474.044947][ C0] kthread+0x2f0/0x390 [ 474.044962][ C0] ? __pfx_worker_thread+0x10/0x10 [ 474.044983][ C0] ? __pfx_kthread+0x10/0x10 [ 474.044999][ C0] ret_from_fork+0x4b/0x80 [ 474.045021][ C0] ? __pfx_kthread+0x10/0x10 [ 474.045037][ C0] ret_from_fork_asm+0x1a/0x30 [ 474.045065][ C0] [ 474.769557][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 474.776434][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00006-g87d6aab2389e #0 [ 474.786953][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 474.797028][ T30] Call Trace: [ 474.800330][ T30] [ 474.803278][ T30] dump_stack_lvl+0x241/0x360 [ 474.807983][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.813222][ T30] ? __pfx__printk+0x10/0x10 [ 474.817857][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 474.823891][ T30] ? vscnprintf+0x5d/0x90 [ 474.828262][ T30] panic+0x349/0x880 [ 474.832204][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 474.838398][ T30] ? __pfx_panic+0x10/0x10 [ 474.842854][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 474.848265][ T30] ? __irq_work_queue_local+0x137/0x410 [ 474.853855][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 474.859264][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 474.865452][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 474.871653][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 474.877849][ T30] watchdog+0x1033/0x1040 [ 474.882223][ T30] ? watchdog+0x1ea/0x1040 [ 474.886686][ T30] ? __pfx_watchdog+0x10/0x10 [ 474.891413][ T30] kthread+0x2f0/0x390 [ 474.895515][ T30] ? __pfx_watchdog+0x10/0x10 [ 474.900233][ T30] ? __pfx_kthread+0x10/0x10 [ 474.904861][ T30] ret_from_fork+0x4b/0x80 [ 474.909324][ T30] ? __pfx_kthread+0x10/0x10 [ 474.913952][ T30] ret_from_fork_asm+0x1a/0x30 [ 474.918773][ T30] [ 474.922210][ T30] Kernel Offset: disabled [ 474.926569][ T30] Rebooting in 86400 seconds..