last executing test programs: 44.991845214s ago: executing program 1 (id=501): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r1, 0x2f, 0x2000, 0x4}, 0x20) 44.579933715s ago: executing program 1 (id=504): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x8, 0x0, 0x9, 0xd934, 0x7, "8aeab061cdc597deff093100e0ff00"}) 44.196473351s ago: executing program 4 (id=509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) 44.177068017s ago: executing program 1 (id=510): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e) 43.840063988s ago: executing program 1 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xd, 0x2, [@TCA_HHF_QUANTUM={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x40}}, 0x0) 43.826066167s ago: executing program 4 (id=514): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0xac3, @loopback, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f00000006c0)="d0500a98ec", 0x5, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty, 0xe81}, 0x1c) 43.490721926s ago: executing program 1 (id=515): mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x9, 0x0) 42.605814796s ago: executing program 1 (id=519): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a0600090901000c001a8008000580040006"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) 42.605571771s ago: executing program 3 (id=520): unshare(0x6020480) r0 = epoll_create(0x9) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x80000002}) 42.593364088s ago: executing program 4 (id=521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x1787, &(0x7f0000000640)={0x0, 0x631d, 0x80, 0xffffffff, 0x69}) io_uring_register$IORING_REGISTER_FILES2(r1, 0xd, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f0000000100)=[{0x0}], 0x0}, 0x20) 42.116500667s ago: executing program 4 (id=522): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 40.839109826s ago: executing program 4 (id=525): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYBLOB="250e"], 0x31) 40.493131594s ago: executing program 4 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 38.031843689s ago: executing program 3 (id=528): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x4, 0x0, 0x717e387b, 0x40, "00000040794233a54f00", 0x0, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) 34.356676493s ago: executing program 3 (id=530): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010000000000ecffffff00000000", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e00"], 0x50}}, 0x0) 33.098787381s ago: executing program 0 (id=533): mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) creat(&(0x7f0000000100)='./file0\x00', 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500), 0x0, 0x100000}}, 0x40) 30.654401859s ago: executing program 0 (id=534): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000000540)="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", 0x800, 0x4}) 30.364260362s ago: executing program 0 (id=535): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 30.132092902s ago: executing program 0 (id=536): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000001c0)) 28.810499119s ago: executing program 0 (id=537): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010026bd7000fedbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000018005080050002"], 0x40}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 26.990573708s ago: executing program 32 (id=519): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a0600090901000c001a8008000580040006"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) 25.009256616s ago: executing program 33 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) 20.946622568s ago: executing program 3 (id=541): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x400, 0x0, {0x0, 0x2710}, {0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x291d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 20.89458914s ago: executing program 0 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000040"]) 19.687400254s ago: executing program 2 (id=545): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e21, @remote}], 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240)=0x4, 0x4) 19.218430612s ago: executing program 2 (id=546): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) 19.065928725s ago: executing program 3 (id=547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040), 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfffd, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x400000, @loopback, 0x47b1ffcd}, 0x1c) 18.555354027s ago: executing program 3 (id=548): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0x200, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x5, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x8, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0x1, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xfffffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x8, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0xe, 0x7, 0x6, 0x8001, 0xc9c, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1, 0x9, 0x1, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x5, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x85, 0x4b, 0x583c, 0x6, 0xb, 0x4, 0x100, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x7, 0x2f5b, 0x4, 0x401, 0xadd, 0x7f, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x40008000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x1, 0x0, 0x2, 0x2, 0xc, 0x4, 0xb0f, 0x22, 0x3, 0x800, 0x40008, 0x9, 0x3, 0x4, 0xf2, 0x4, 0xe, 0xfffffffc, 0x6, 0x2ee, 0x7bf, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0xee3e, 0xffff, 0xd5d, 0x400, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x80000001, 0x2, 0xa5e, 0xfe, 0x6, 0x3, 0x66458, 0x0, 0xe, 0x2, 0x5, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x80000, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x1, 0x3, 0x6, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) 16.378451192s ago: executing program 2 (id=549): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x6, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d7587fcb3678", 0x4, 0x200}) 16.048418523s ago: executing program 2 (id=550): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0x1, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20008000) 15.812752274s ago: executing program 2 (id=551): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) accept4(r0, 0x0, 0x0, 0x0) 15.299959232s ago: executing program 2 (id=552): r0 = socket(0x1, 0x5, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 5.556232356s ago: executing program 34 (id=542): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000040"]) 2.008374274s ago: executing program 35 (id=548): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0x200, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x5, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x8, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x3, 0x1, 0x1, 0x5, 0x9, 0x80000001, 0xb, 0x10, 0x80000000, 0x10, 0xb50, 0x0, 0x7, 0x3, 0x1, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0xfffffffd, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x6, 0x1], [0x66ac, 0xfffffff9, 0x8, 0x3, 0x6, 0x7, 0x13e, 0x9, 0x4, 0x2, 0xe, 0x7, 0x6, 0x8001, 0xc9c, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x1, 0x9, 0x1, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x5, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x8000, 0xe66, 0x8, 0x2, 0x85, 0x4b, 0x583c, 0x6, 0xb, 0x4, 0x100, 0x2, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x7, 0x2f5b, 0x4, 0x401, 0xadd, 0x7f, 0x9], [0x8396, 0x7, 0xffff6a0b, 0x9, 0x8000, 0x1, 0x3, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x40008000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x1, 0x0, 0x2, 0x2, 0xc, 0x4, 0xb0f, 0x22, 0x3, 0x800, 0x40008, 0x9, 0x3, 0x4, 0xf2, 0x4, 0xe, 0xfffffffc, 0x6, 0x2ee, 0x7bf, 0x1ff, 0x6, 0x87ff, 0x2, 0xbc0, 0xffffffff, 0xee3e, 0xffff, 0xd5d, 0x400, 0xffffff4e, 0x9, 0x4, 0x7, 0x3, 0x0, 0x6, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x80000001, 0x2, 0xa5e, 0xfe, 0x6, 0x3, 0x66458, 0x0, 0xe, 0x2, 0x5, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x2004, 0x7, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x1fffe0, 0xfffffffb, 0x40, 0x80000002, 0x4, 0xb, 0xfff, 0x40, 0x9, 0x80000, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x5, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x7, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x1, 0x3, 0x6, 0x400]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 36 (id=552): r0 = socket(0x1, 0x5, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) kernel console output (not intermixed with test programs): [ 86.987244][ T979] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. [ 90.784604][ T5822] cgroup: Unknown subsys name 'net' [ 91.038993][ T5822] cgroup: Unknown subsys name 'cpuset' [ 91.094184][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.135100][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.190225][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.234520][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.258498][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.261034][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.265190][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.268568][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.271752][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.272743][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.273520][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.276333][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.287485][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.291239][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.292887][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.293180][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.295457][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.299882][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.333379][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.334958][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.342861][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.345893][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.379243][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.392716][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.394446][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.395743][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.397145][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.487571][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 97.518820][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 97.551708][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 97.695265][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.830833][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 98.344895][ T5848] Bluetooth: hci0: command tx timeout [ 98.344902][ T5152] Bluetooth: hci1: command tx timeout [ 98.345068][ T5848] Bluetooth: hci2: command tx timeout [ 98.423825][ T5835] Bluetooth: hci4: command tx timeout [ 98.503553][ T5835] Bluetooth: hci3: command tx timeout [ 98.675101][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.676225][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.676566][ T5834] bridge_slave_0: entered allmulticast mode [ 98.678403][ T5834] bridge_slave_0: entered promiscuous mode [ 98.815546][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.815713][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.815915][ T5845] bridge_slave_0: entered allmulticast mode [ 98.817982][ T5845] bridge_slave_0: entered promiscuous mode [ 98.820644][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.820795][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.820991][ T5834] bridge_slave_1: entered allmulticast mode [ 98.822974][ T5834] bridge_slave_1: entered promiscuous mode [ 98.958884][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.958990][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.959105][ T5832] bridge_slave_0: entered allmulticast mode [ 98.960987][ T5832] bridge_slave_0: entered promiscuous mode [ 98.962851][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.963004][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.965248][ T5845] bridge_slave_1: entered allmulticast mode [ 98.968406][ T5845] bridge_slave_1: entered promiscuous mode [ 99.215616][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.215815][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.216031][ T5832] bridge_slave_1: entered allmulticast mode [ 99.219256][ T5832] bridge_slave_1: entered promiscuous mode [ 99.396425][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.396587][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.396796][ T5836] bridge_slave_0: entered allmulticast mode [ 99.400162][ T5836] bridge_slave_0: entered promiscuous mode [ 99.602838][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.603142][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.603758][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.603955][ T5836] bridge_slave_1: entered allmulticast mode [ 99.606692][ T5836] bridge_slave_1: entered promiscuous mode [ 99.663799][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.663988][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.664660][ T5833] bridge_slave_0: entered allmulticast mode [ 99.675823][ T5833] bridge_slave_0: entered promiscuous mode [ 99.827545][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.831284][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.915176][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.915365][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.915570][ T5833] bridge_slave_1: entered allmulticast mode [ 99.919132][ T5833] bridge_slave_1: entered promiscuous mode [ 99.938961][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.959756][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.197317][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.357838][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.423762][ T5835] Bluetooth: hci1: command tx timeout [ 100.423802][ T5835] Bluetooth: hci2: command tx timeout [ 100.423846][ T5835] Bluetooth: hci0: command tx timeout [ 100.503596][ T5848] Bluetooth: hci4: command tx timeout [ 100.583910][ T5848] Bluetooth: hci3: command tx timeout [ 100.602105][ T5834] team0: Port device team_slave_0 added [ 100.606857][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.611103][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.699135][ T5845] team0: Port device team_slave_0 added [ 100.703034][ T5834] team0: Port device team_slave_1 added [ 100.784668][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.786781][ T5832] team0: Port device team_slave_0 added [ 100.789251][ T5845] team0: Port device team_slave_1 added [ 100.983914][ T5832] team0: Port device team_slave_1 added [ 101.370856][ T5836] team0: Port device team_slave_0 added [ 101.609152][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.609170][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.609198][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.615515][ T5836] team0: Port device team_slave_1 added [ 101.619037][ T5833] team0: Port device team_slave_0 added [ 101.720144][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.720162][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.720189][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.722311][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.722325][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.722351][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.847536][ T5833] team0: Port device team_slave_1 added [ 101.849039][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.849053][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.849080][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.864702][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.864718][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.864741][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.038036][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.038054][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.038082][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.057368][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.057386][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.057413][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.163157][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.163175][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.163203][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.216495][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.216513][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.216540][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.339686][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.339699][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.339714][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.513833][ T5835] Bluetooth: hci2: command tx timeout [ 102.513870][ T5835] Bluetooth: hci1: command tx timeout [ 102.514091][ T5848] Bluetooth: hci0: command tx timeout [ 102.584533][ T5834] hsr_slave_0: entered promiscuous mode [ 102.585134][ T5152] Bluetooth: hci4: command tx timeout [ 102.586331][ T5834] hsr_slave_1: entered promiscuous mode [ 102.663880][ T5152] Bluetooth: hci3: command tx timeout [ 102.855633][ T5845] hsr_slave_0: entered promiscuous mode [ 102.857230][ T5845] hsr_slave_1: entered promiscuous mode [ 102.858885][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 102.858993][ T5845] Cannot create hsr debugfs directory [ 102.869246][ T5832] hsr_slave_0: entered promiscuous mode [ 102.870761][ T5832] hsr_slave_1: entered promiscuous mode [ 102.884482][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 102.884517][ T5832] Cannot create hsr debugfs directory [ 103.158841][ T5836] hsr_slave_0: entered promiscuous mode [ 103.160427][ T5836] hsr_slave_1: entered promiscuous mode [ 103.161462][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 103.161486][ T5836] Cannot create hsr debugfs directory [ 103.636562][ T5833] hsr_slave_0: entered promiscuous mode [ 103.638070][ T5833] hsr_slave_1: entered promiscuous mode [ 103.638897][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 103.638919][ T5833] Cannot create hsr debugfs directory [ 104.583924][ T5152] Bluetooth: hci0: command tx timeout [ 104.583957][ T5152] Bluetooth: hci1: command tx timeout [ 104.583979][ T5152] Bluetooth: hci2: command tx timeout [ 104.663684][ T5848] Bluetooth: hci4: command tx timeout [ 104.743564][ T5848] Bluetooth: hci3: command tx timeout [ 105.250547][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.301195][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.338027][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.389877][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.544893][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.584454][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.624354][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.685273][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.848831][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.883469][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.939532][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.995697][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.200967][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.256050][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.318521][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.377614][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.560704][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.629402][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.681727][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.727660][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.782984][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.869773][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.934479][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.934751][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.982632][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.010532][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.010679][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.127898][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.172204][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.187450][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.187710][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.251029][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.251168][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.325806][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.356772][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.398184][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.399428][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.480897][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.483683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.572475][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.661851][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.662114][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.744250][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.757851][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.758001][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.966254][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.035294][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.035530][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.090730][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.093910][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.135045][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.366993][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.664056][ T5834] veth0_vlan: entered promiscuous mode [ 108.735281][ T5834] veth1_vlan: entered promiscuous mode [ 108.779291][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.872569][ T5832] veth0_vlan: entered promiscuous mode [ 108.943234][ T5832] veth1_vlan: entered promiscuous mode [ 109.036859][ T5834] veth0_macvtap: entered promiscuous mode [ 109.042300][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.100658][ T5834] veth1_macvtap: entered promiscuous mode [ 109.197313][ T5836] veth0_vlan: entered promiscuous mode [ 109.204575][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.258451][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.276504][ T5832] veth0_macvtap: entered promiscuous mode [ 109.294346][ T5836] veth1_vlan: entered promiscuous mode [ 109.336199][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.355613][ T5832] veth1_macvtap: entered promiscuous mode [ 109.438878][ T1182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.467920][ T1182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.488748][ T1182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.519577][ T1182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.581752][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.656016][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.780310][ T3541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.786384][ T5836] veth0_macvtap: entered promiscuous mode [ 109.793236][ T3541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.854972][ T5833] veth0_vlan: entered promiscuous mode [ 109.869247][ T3541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.890769][ T3541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.918395][ T5836] veth1_macvtap: entered promiscuous mode [ 110.034460][ T5833] veth1_vlan: entered promiscuous mode [ 110.061872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.061893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.280888][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.346438][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.346470][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.351300][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.389993][ T5845] veth0_vlan: entered promiscuous mode [ 110.453811][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.453831][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.480683][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.506758][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.543899][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.552124][ T5845] veth1_vlan: entered promiscuous mode [ 110.615589][ T1442] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.662081][ T5833] veth0_macvtap: entered promiscuous mode [ 110.725185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.725208][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.844472][ T5833] veth1_macvtap: entered promiscuous mode [ 111.036816][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.105837][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.111635][ T5845] veth0_macvtap: entered promiscuous mode [ 111.290634][ T5845] veth1_macvtap: entered promiscuous mode [ 111.302329][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.302438][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.302454][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.338852][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.367407][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.397455][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.620581][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.620604][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.747184][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.876041][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.935207][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.943362][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.946280][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.953740][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.211883][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.211907][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.665423][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.665456][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.703896][ T5218] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.789362][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.789387][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.903150][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.903184][ T5218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 112.903211][ T5218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 112.903232][ T5218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 112.903275][ T5218] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 112.903299][ T5218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.011455][ T5218] usb 3-1: config 0 descriptor?? [ 113.129137][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.129160][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.238983][ T5218] hdpvr 3-1:0.0: firmware version 0x0 dated [ 113.239004][ T5218] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 113.853632][ T979] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.874195][ T5218] hdpvr 3-1:0.0: Could not setup controls [ 113.875083][ T5218] hdpvr 3-1:0.0: registering videodev failed [ 113.969791][ T5218] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71 [ 114.018879][ T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.018917][ T979] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.018959][ T979] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.018981][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.075227][ T5218] usb 3-1: USB disconnect, device number 2 [ 114.095865][ T5961] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 114.120852][ T979] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.323837][ T5923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.478136][ T5923] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.478167][ T5923] usb 5-1: config 0 has no interface number 0 [ 114.564613][ T979] usb 1-1: USB disconnect, device number 2 [ 114.602368][ T5923] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 114.602409][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.602430][ T5923] usb 5-1: Product: syz [ 114.602444][ T5923] usb 5-1: Manufacturer: syz [ 114.602458][ T5923] usb 5-1: SerialNumber: syz [ 114.764923][ T5923] usb 5-1: config 0 descriptor?? [ 114.889904][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.101790][ T5923] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 115.121681][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.186956][ T5923] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 115.187860][ T5923] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 115.187946][ T5923] usb 5-1: media controller created [ 115.476289][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.765155][ T5923] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 116.061242][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.266095][ T5923] usb 5-1: USB disconnect, device number 2 [ 117.193588][ T5964] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.354554][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 117.357500][ T5964] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 117.357532][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.426829][ T5964] pvrusb2: Hardware description: Terratec Grabster AV400 [ 117.426850][ T5964] pvrusb2: ********** [ 117.426857][ T5964] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 117.426869][ T5964] pvrusb2: Important functionality might not be entirely working. [ 117.426878][ T5964] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 117.426889][ T5964] pvrusb2: ********** [ 117.634495][ T2364] pvrusb2: Invalid write control endpoint [ 117.765233][ T6008] process 'syz.0.19' launched './file0' with NULL argv: empty string added [ 117.913881][ T6000] pvrusb2: Invalid write control endpoint [ 117.917284][ T5847] usb 5-1: USB disconnect, device number 3 [ 118.076603][ T2364] pvrusb2: Invalid write control endpoint [ 118.076620][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 118.076628][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 118.076636][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 118.076646][ T2364] pvrusb2: Device being rendered inoperable [ 118.094196][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 118.094259][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 118.124837][ T2364] pvrusb2: Attached sub-driver cx25840 [ 118.124852][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 118.124861][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.168194][ T6021] syz.0.25 (6021) used greatest stack depth: 18472 bytes left [ 123.356578][ T6073] netlink: 165 bytes leftover after parsing attributes in process `syz.4.43'. [ 123.814520][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.970930][ T49] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 123.970962][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.003951][ T49] usb 4-1: config 0 descriptor?? [ 124.026124][ T49] gspca_main: spca508-2.14.0 probing 8086:0110 [ 124.216170][ T49] gspca_spca508: reg_read err -71 [ 124.216635][ T49] gspca_spca508: reg_read err -71 [ 124.217131][ T49] gspca_spca508: reg_read err -71 [ 124.251380][ T49] gspca_spca508: reg_read err -71 [ 124.251963][ T49] gspca_spca508: reg_read err -71 [ 124.252422][ T49] gspca_spca508: reg write: error -71 [ 124.252526][ T49] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 124.266415][ T49] usb 4-1: USB disconnect, device number 2 [ 124.434266][ T5964] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.586446][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.586670][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 124.586702][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 124.590318][ T5964] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 124.590345][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.590366][ T5964] usb 1-1: Product: syz [ 124.590380][ T5964] usb 1-1: Manufacturer: syz [ 124.590394][ T5964] usb 1-1: SerialNumber: syz [ 124.666548][ T5964] usb 1-1: config 0 descriptor?? [ 124.668350][ T6088] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.889582][ T5964] powermate: unknown product id 0240 [ 124.889602][ T5964] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 124.975661][ T5964] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 125.099784][ T6095] netlink: 256 bytes leftover after parsing attributes in process `syz.3.51'. [ 125.463892][ C0] powermate: config urb returned -71 [ 125.464153][ C0] powermate: config urb returned -71 [ 125.464405][ C0] powermate: config urb returned -71 [ 125.466635][ T31] usb 1-1: USB disconnect, device number 3 [ 125.466666][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 126.415758][ T6106] sp0: Synchronizing with TNC [ 126.962755][ T6114] program syz.0.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.477868][ T37] audit: type=1326 audit(1757989165.416:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 127.477928][ T37] audit: type=1326 audit(1757989165.416:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6103 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 128.532805][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.533191][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.533381][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.534259][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.534452][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.534648][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.534834][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.535020][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.535200][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.535375][ T6139] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 128.975934][ T6145] Illegal XDP return value 4294967274 on prog (id 10) dev N/A, expect packet loss! [ 130.583636][ T5848] Bluetooth: hci4: command tx timeout [ 131.133614][ T5964] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 131.295458][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.2.86'. [ 131.343540][ T5964] usb 2-1: Using ep0 maxpacket: 16 [ 131.346286][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.346345][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.346373][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 131.346395][ T5964] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 131.346417][ T5964] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.348104][ T5964] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.348129][ T5964] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.348149][ T5964] usb 2-1: Manufacturer: syz [ 131.390305][ T5964] usb 2-1: config 0 descriptor?? [ 131.585461][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.747397][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.747447][ T31] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 131.747471][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.810235][ T31] usb 5-1: config 0 descriptor?? [ 132.103683][ T5964] rc_core: IR keymap rc-hauppauge not found [ 132.103708][ T5964] Registered IR keymap rc-empty [ 132.104418][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.128845][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.148296][ T5964] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 132.169536][ T5964] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 132.220546][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.233845][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.257178][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.276124][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.294484][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.315681][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.333821][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.354529][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.385189][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.403684][ T5964] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 132.489933][ T31] razer 0003:1532:010E.0001: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 132.575975][ T5964] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 132.576003][ T5964] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 132.642735][ T5964] usb 2-1: USB disconnect, device number 2 [ 132.689874][ T31] usb 5-1: USB disconnect, device number 4 [ 132.869534][ T6197] fido_id[6197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 132.923235][ T6196] mkiss: ax0: crc mode is auto. [ 133.072813][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073833][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.897369][ T6212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.95'. [ 135.331790][ T5848] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 135.712943][ T6248] Zero length message leads to an empty skb [ 135.713021][ T43] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.714482][ T813] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.715173][ T43] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.715215][ T43] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.824017][ T49] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.993557][ T49] usb 1-1: Using ep0 maxpacket: 16 [ 135.996226][ T49] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 135.996268][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 135.999692][ T49] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 135.999718][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.999738][ T49] usb 1-1: Product: syz [ 135.999752][ T49] usb 1-1: Manufacturer: syz [ 135.999765][ T49] usb 1-1: SerialNumber: syz [ 136.066839][ T49] usb 1-1: config 0 descriptor?? [ 136.099323][ T49] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.099358][ T49] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 136.739918][ T49] em28xx 1-1:0.0: chip ID is em2874 [ 136.957427][ T5837] usb 1-1: USB disconnect, device number 4 [ 136.960087][ T5837] em28xx 1-1:0.0: Disconnecting em28xx [ 137.015321][ T5837] em28xx 1-1:0.0: Freeing device [ 137.938139][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.130'. [ 138.443615][ T5963] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.606018][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 138.609512][ T5963] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 138.609548][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 138.637051][ T5963] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.637081][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.637099][ T5963] usb 4-1: Product: syz [ 138.637111][ T5963] usb 4-1: Manufacturer: syz [ 138.637124][ T5963] usb 4-1: SerialNumber: syz [ 138.677142][ T5963] usb 4-1: config 0 descriptor?? [ 138.715251][ T5963] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 138.715288][ T5963] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 139.263587][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.328444][ T5963] em28xx 4-1:0.0: chip ID is em28174 [ 139.385859][ T5848] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 139.385982][ T5848] Bluetooth: hci4: Injecting HCI hardware error event [ 139.388436][ T5152] Bluetooth: hci4: hardware error 0x00 [ 139.413520][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 139.430928][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.430962][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.431003][ T31] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 139.431026][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.478480][ T6317] capability: warning: `syz.1.144' uses 32-bit capabilities (legacy support in use) [ 139.480760][ T31] usb 1-1: config 0 descriptor?? [ 139.552356][ T5847] usb 4-1: USB disconnect, device number 3 [ 139.600984][ T5847] em28xx 4-1:0.0: Disconnecting em28xx [ 139.659380][ T5847] em28xx 4-1:0.0: Freeing device [ 139.730045][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.758127][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.984880][ T31] hid (null): unknown global tag 0xc [ 139.984924][ T31] hid (null): invalid report_count 47589 [ 140.176973][ T31] usb 1-1: string descriptor 0 read error: -71 [ 140.223000][ T31] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 140.223101][ T31] letsketch 0003:6161:4D15.0002: probe with driver letsketch failed with error -32 [ 140.257035][ T31] usb 1-1: USB disconnect, device number 5 [ 140.610245][ T6328] input: syz0 as /devices/virtual/input/input9 [ 141.005184][ T6332] netlink: 188 bytes leftover after parsing attributes in process `syz.3.149'. [ 141.783640][ T5152] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 141.803748][ T5916] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.985692][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 141.989443][ T5916] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.991234][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.026195][ T5916] usb 2-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 142.026228][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.026248][ T5916] usb 2-1: Product: syz [ 142.026263][ T5916] usb 2-1: Manufacturer: syz [ 142.026277][ T5916] usb 2-1: SerialNumber: syz [ 142.109517][ T5916] usb 2-1: config 0 descriptor?? [ 142.330968][ T6361] syz.0.163 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.343829][ T5916] usb 2-1: USB disconnect, device number 3 [ 142.863730][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.953573][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.029399][ T5916] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 143.029434][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.029454][ T5916] usb 4-1: Product: syz [ 143.029469][ T5916] usb 4-1: Manufacturer: syz [ 143.029483][ T5916] usb 4-1: SerialNumber: syz [ 143.078904][ T5916] usb 4-1: config 0 descriptor?? [ 143.094500][ T5916] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 004 [ 143.103992][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 143.122660][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.122696][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.122738][ T5847] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 143.122762][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.158397][ T5847] usb 1-1: config 0 descriptor?? [ 143.220453][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 143.553619][ T5916] (null): failure reading functionality [ 143.595542][ T5916] i2c i2c-1: connected i2c-tiny-usb device [ 143.732945][ T5847] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 143.767797][ T6383] Bluetooth: MGMT ver 1.23 [ 143.780955][ T49] usb 4-1: USB disconnect, device number 4 [ 143.870939][ T5847] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 144.075021][ T5847] ft260 0003:0403:6030.0003: failed to retrieve system status [ 144.075622][ T5847] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 144.185730][ T5847] usb 1-1: USB disconnect, device number 6 [ 147.174914][ T6448] netlink: 'syz.0.200': attribute type 11 has an invalid length. [ 147.174940][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'. [ 148.370829][ T37] audit: type=1326 audit(1757989186.296:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.371163][ T37] audit: type=1326 audit(1757989186.306:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.383970][ T6461] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.399656][ T37] audit: type=1326 audit(1757989186.336:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.399708][ T37] audit: type=1326 audit(1757989186.336:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.399748][ T37] audit: type=1326 audit(1757989186.336:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.430994][ T37] audit: type=1326 audit(1757989186.366:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.431044][ T37] audit: type=1326 audit(1757989186.366:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401e47eba9 code=0x7ffc0000 [ 148.435857][ T37] audit: type=1326 audit(1757989186.376:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f401e475b67 code=0x7ffc0000 [ 148.437213][ T37] audit: type=1326 audit(1757989186.376:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f401e41ada9 code=0x7ffc0000 [ 148.437257][ T37] audit: type=1326 audit(1757989186.376:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6467 comm="syz.0.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f401e475b67 code=0x7ffc0000 [ 148.853605][ T49] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.014640][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 149.021777][ T49] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 149.021809][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.021830][ T49] usb 5-1: Product: syz [ 149.021844][ T49] usb 5-1: Manufacturer: syz [ 149.021858][ T49] usb 5-1: SerialNumber: syz [ 149.097765][ T49] r8152-cfgselector 5-1: Unknown version 0x0000 [ 149.097792][ T49] r8152-cfgselector 5-1: config 0 descriptor?? [ 149.139929][ T49] hub 5-1:0.0: bad descriptor, ignoring hub [ 149.139977][ T49] hub 5-1:0.0: probe with driver hub failed with error -5 [ 149.664803][ T31] r8152-cfgselector 5-1: reset high-speed USB device number 5 using dummy_hcd [ 150.141899][ T6501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.225'. [ 150.164010][ T5964] r8152-cfgselector 5-1: USB disconnect, device number 5 [ 150.411117][ T6508] input: syz1 as /devices/virtual/input/input10 [ 151.210022][ T6526] netlink: 'syz.0.236': attribute type 11 has an invalid length. [ 152.373537][ T49] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 152.377368][ T6556] warning: `syz.0.249' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.509574][ T6558] netlink: 'syz.2.250': attribute type 1 has an invalid length. [ 152.526912][ T49] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 152.526942][ T49] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 152.526963][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 152.527061][ T49] usb 2-1: config 1 has no interface number 0 [ 152.527119][ T49] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.527146][ T49] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 152.527190][ T49] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 152.527214][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.601088][ T49] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 152.870256][ T6562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.014821][ T6549] syz.3.246 (6549) used greatest stack depth: 17584 bytes left [ 153.185147][ T49] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 153.392699][ T5837] usb 2-1: USB disconnect, device number 4 [ 153.398688][ T5837] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 153.784288][ T49] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.803619][ T5964] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 153.896841][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 153.896865][ T6579] netlink: 26 bytes leftover after parsing attributes in process `syz.3.260'. [ 153.933656][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 153.936296][ T49] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.936359][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.936386][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.936408][ T49] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.936431][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.938064][ T49] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 153.938091][ T49] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 153.938110][ T49] usb 5-1: Manufacturer: syz [ 153.955660][ T49] usb 5-1: config 0 descriptor?? [ 154.031771][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 154.031806][ T5964] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 154.031831][ T5964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 154.069577][ T5964] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 154.069611][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.069631][ T5964] usb 3-1: Product: syz [ 154.069646][ T5964] usb 3-1: Manufacturer: syz [ 154.069661][ T5964] usb 3-1: SerialNumber: syz [ 154.110195][ T5964] usb 3-1: config 0 descriptor?? [ 154.111470][ T6573] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 154.111778][ T6573] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 154.135582][ T5964] usb 3-1: ucan: probing device on interface #0 [ 154.403647][ T49] rc_core: IR keymap rc-hauppauge not found [ 154.403671][ T49] Registered IR keymap rc-empty [ 154.403853][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.424060][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.447405][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 154.468968][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 154.499360][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.514155][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.539745][ T5964] usb 3-1: ucan: device reported invalid tx-fifo size [ 154.539769][ T5964] usb 3-1: ucan: probe failed; try to update the device firmware [ 154.542403][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.569822][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.589028][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.604070][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.623914][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.644434][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.673948][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.693855][ T49] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 154.844332][ T49] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.844360][ T49] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.852293][ T5916] usb 3-1: USB disconnect, device number 3 [ 154.967626][ T49] usb 5-1: USB disconnect, device number 6 [ 155.369875][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.374610][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.728165][ T6606] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 155.728190][ T6606] netlink: 'syz.4.270': attribute type 2 has an invalid length. [ 155.728204][ T6606] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 155.728217][ T6606] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.270'. [ 156.743877][ T5847] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.896385][ T5847] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.896417][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.933666][ T5847] usb 3-1: config 0 descriptor?? [ 156.938424][ T5847] cp210x 3-1:0.0: cp210x converter detected [ 156.939134][ T6632] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.940486][ T6632] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.557510][ T5847] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 157.557574][ T5847] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 157.601954][ T5847] usb 3-1: cp210x converter now attached to ttyUSB0 [ 157.649616][ T5847] usb 3-1: USB disconnect, device number 4 [ 157.687280][ T5847] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.688346][ T5847] cp210x 3-1:0.0: device disconnected [ 158.096915][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 158.096935][ T37] audit: type=1326 audit(1757989196.036:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62072aada9 code=0x7ffc0000 [ 158.096980][ T37] audit: type=1326 audit(1757989196.036:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620730eba9 code=0x7ffc0000 [ 158.097027][ T37] audit: type=1326 audit(1757989196.036:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620730eba9 code=0x7ffc0000 [ 158.097074][ T37] audit: type=1326 audit(1757989196.036:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620730eba9 code=0x7ffc0000 [ 158.097119][ T37] audit: type=1326 audit(1757989196.036:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620730eba9 code=0x7ffc0000 [ 158.101830][ T37] audit: type=1326 audit(1757989196.036:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62072aada9 code=0x7ffc0000 [ 158.118698][ T37] audit: type=1326 audit(1757989196.046:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62072aada9 code=0x7ffc0000 [ 158.120646][ T37] audit: type=1326 audit(1757989196.056:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62072aada9 code=0x7ffc0000 [ 158.120996][ T37] audit: type=1326 audit(1757989196.056:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62072aada9 code=0x7ffc0000 [ 158.121331][ T37] audit: type=1326 audit(1757989196.056:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.4.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62072aada9 code=0x7ffc0000 [ 160.533557][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 160.693880][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 160.696519][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.696580][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.696609][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 160.696631][ T5923] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 160.696654][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.703162][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 160.703193][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 160.703212][ T5923] usb 4-1: Manufacturer: syz [ 160.805210][ T5923] usb 4-1: config 0 descriptor?? [ 161.003702][ T5964] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 161.163247][ T5964] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 161.163301][ T5964] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.163325][ T5964] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.163353][ T5964] usb 1-1: config 0 interface 0 has no altsetting 0 [ 161.163501][ T5964] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 161.163521][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.183509][ T5923] rc_core: IR keymap rc-hauppauge not found [ 161.183532][ T5923] Registered IR keymap rc-empty [ 161.183705][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.185984][ T5964] usb 1-1: config 0 descriptor?? [ 161.203856][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.225504][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 161.230187][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 161.299743][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.318521][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.333778][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.353864][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.373645][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.393652][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.417823][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.433679][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.453650][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.474017][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 161.506422][ T5923] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.506450][ T5923] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.582296][ T979] usb 4-1: USB disconnect, device number 5 [ 161.696229][ T5964] hid-alps 0003:044E:120C.0004: ignoring exceeding usage max [ 161.704790][ T5964] hid-alps 0003:044E:120C.0004: unbalanced collection at end of report description [ 161.709339][ T5964] hid-alps 0003:044E:120C.0004: parse failed [ 161.709463][ T5964] hid-alps 0003:044E:120C.0004: probe with driver hid-alps failed with error -22 [ 161.865660][ T5964] usb 1-1: USB disconnect, device number 7 [ 163.596727][ T6739] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 163.644044][ T6741] capability: warning: `syz.4.333' uses deprecated v2 capabilities in a way that may be insecure [ 163.704058][ T5964] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 163.866505][ T5964] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.866533][ T5964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.876338][ T5964] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.876368][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.876385][ T5964] usb 2-1: Product: syz [ 163.876398][ T5964] usb 2-1: Manufacturer: syz [ 163.876410][ T5964] usb 2-1: SerialNumber: syz [ 164.135447][ T5964] usb 2-1: 0:2 : does not exist [ 164.165168][ T5964] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 164.338990][ T5964] usb 2-1: USB disconnect, device number 5 [ 164.719287][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.780600][ T6762] netlink: 33 bytes leftover after parsing attributes in process `syz.3.343'. [ 165.109397][ T6764] loop9: detected capacity change from 0 to 8 [ 165.187220][ T6764] Dev loop9: unable to read RDB block 8 [ 165.187278][ T6764] loop9: unable to read partition table [ 165.187570][ T6764] loop9: partition table beyond EOD, truncated [ 165.187612][ T6764] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.412057][ T6768] debugfs: 'ttyS3' already exists in 'caif_serial' [ 165.685964][ T6774] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 165.717058][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 166.544677][ T6802] block nbd0: shutting down sockets [ 167.112201][ T49] IPVS: starting estimator thread 0... [ 167.175686][ T6816] net_ratelimit: 44 callbacks suppressed [ 167.175708][ T6816] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 167.225044][ T6818] IPVS: using max 6 ests per chain, 14400 per kthread [ 167.952258][ T5964] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.103986][ T5964] usb 5-1: Using ep0 maxpacket: 8 [ 168.106461][ T5964] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.106493][ T5964] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.106516][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 168.106552][ T5964] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 168.106576][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.124795][ T5964] usb 5-1: config 0 descriptor?? [ 168.551420][ T5964] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 168.551457][ T5964] steelseries 0003:1038:1410.0005: unknown main item tag 0x0 [ 168.551481][ T5964] steelseries 0003:1038:1410.0005: item fetching failed at offset 2/5 [ 168.552471][ T5964] steelseries 0003:1038:1410.0005: parse failed [ 168.552628][ T5964] steelseries 0003:1038:1410.0005: probe with driver steelseries failed with error -22 [ 168.751404][ T49] usb 5-1: USB disconnect, device number 7 [ 170.269595][ T6846] bridge0: entered promiscuous mode [ 170.270212][ T6846] macvtap1: entered allmulticast mode [ 170.270231][ T6846] bridge0: entered allmulticast mode [ 170.289486][ T6846] bridge0: port 3(macvtap1) entered blocking state [ 170.304642][ T6846] bridge0: port 3(macvtap1) entered disabled state [ 170.451814][ T6846] bridge0: left allmulticast mode [ 170.451890][ T6846] bridge0: left promiscuous mode [ 171.447060][ T6859] mmap: syz.4.385 (6859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 172.730334][ T6887] bond0: entered promiscuous mode [ 172.730358][ T6887] bond_slave_0: entered promiscuous mode [ 172.730646][ T6887] bond_slave_1: entered promiscuous mode [ 172.778060][ T6887] bond0: left promiscuous mode [ 172.778085][ T6887] bond_slave_0: left promiscuous mode [ 172.778418][ T6887] bond_slave_1: left promiscuous mode [ 173.873676][ T37] kauditd_printk_skb: 322 callbacks suppressed [ 173.873696][ T37] audit: type=1326 audit(1757989211.806:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.922936][ T37] audit: type=1326 audit(1757989211.816:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.922995][ T37] audit: type=1326 audit(1757989211.856:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.968907][ T37] audit: type=1326 audit(1757989211.856:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.968963][ T37] audit: type=1326 audit(1757989211.856:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.969009][ T37] audit: type=1326 audit(1757989211.856:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.969062][ T37] audit: type=1326 audit(1757989211.866:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.969109][ T37] audit: type=1326 audit(1757989211.866:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.969156][ T37] audit: type=1326 audit(1757989211.866:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 173.969210][ T37] audit: type=1326 audit(1757989211.866:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6914 comm="syz.1.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94d593eba9 code=0x7ffc0000 [ 174.824093][ T6937] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 175.485219][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz.3.429'. [ 175.840840][ T6966] Dead loop on virtual device ip6_vti0, fix it urgently! [ 176.452617][ T6985] bond0: entered promiscuous mode [ 176.452642][ T6985] bond_slave_0: entered promiscuous mode [ 176.483750][ T6985] bond_slave_1: entered promiscuous mode [ 176.489126][ T6987] loop6: detected capacity change from 0 to 2560 [ 176.526508][ T6985] bond0: left promiscuous mode [ 176.526533][ T6985] bond_slave_0: left promiscuous mode [ 176.526827][ T6985] bond_slave_1: left promiscuous mode [ 177.142229][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 177.142267][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 177.536704][ T7008] tun0: tun_chr_ioctl cmd 3223385353 [ 177.767666][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.457'. [ 181.144175][ T5916] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 181.294027][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 181.297226][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.297273][ T5916] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 181.297298][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.328591][ T5916] usb 1-1: config 0 descriptor?? [ 181.812509][ T5916] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 181.812545][ T5916] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 181.812571][ T5916] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 181.812604][ T5916] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 181.812630][ T5916] hid-multitouch 0003:0EEF:72C4.0006: unknown main item tag 0x0 [ 181.938011][ T5916] hid-multitouch 0003:0EEF:72C4.0006: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 182.137420][ T5847] usb 1-1: USB disconnect, device number 8 [ 182.301659][ T7117] fido_id[7117]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.386609][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.386744][ T7143] netlink: 1 bytes leftover after parsing attributes in process `syz.1.512'. [ 183.483424][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.519465][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.554830][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.606636][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.656379][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.682658][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.742512][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.768387][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.817637][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.884863][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.943746][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.984859][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.032228][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.081597][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.129040][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.151923][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.187543][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.250632][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.287492][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.334833][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.455939][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.559702][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.614684][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.638648][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.687920][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.717173][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.718395][ T7158] loop7: detected capacity change from 0 to 524255231 [ 184.770158][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.819764][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.884890][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.921141][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.964276][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.022607][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.048539][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.096378][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.134604][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.171311][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.221196][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.269628][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.334788][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.367524][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.400554][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.437475][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.473833][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.498973][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.538081][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.567516][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.628133][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.652626][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.736897][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.786666][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.847249][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.870697][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.918771][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.956776][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.003565][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.051220][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.085886][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.135461][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.186284][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.251367][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.313156][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.351121][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.386011][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.421406][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.470991][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.517103][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.555001][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.780792][ T7173] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 192.989115][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 194.523945][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524035][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.172323][ C0] sched: DL replenish lagged too much [ 196.595615][ T7200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.168243][ T7158] loop7: detected capacity change from 524255231 to 524287912 [ 201.252990][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.272135][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.290901][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.292663][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.310833][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 203.145015][ T5152] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 203.151440][ T5152] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 203.152775][ T5152] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.188108][ T5152] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.189565][ T5152] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 203.384091][ T5152] Bluetooth: hci5: command tx timeout [ 205.223688][ T5152] Bluetooth: hci6: command tx timeout [ 205.473622][ T5152] Bluetooth: hci5: command tx timeout [ 205.947950][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 207.303589][ T5152] Bluetooth: hci6: command tx timeout [ 207.543596][ T5152] Bluetooth: hci5: command tx timeout [ 208.823081][ T7242] input: syz0 as /devices/virtual/input/input13 [ 209.384703][ T5152] Bluetooth: hci6: command tx timeout [ 209.625639][ T5152] Bluetooth: hci5: command tx timeout [ 209.752679][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 209.918669][ T7214] chnl_net:caif_netlink_parms(): no params data found [ 211.464442][ T5152] Bluetooth: hci6: command tx timeout [ 222.579315][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 222.589680][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 222.590948][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 222.592294][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 222.593178][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 224.346819][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 224.346870][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 224.672728][ T5844] Bluetooth: hci7: command tx timeout [ 225.515028][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 225.548859][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 225.550215][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 225.551615][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 225.586769][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 226.749309][ T5835] Bluetooth: hci7: command tx timeout [ 228.078772][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.096058][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.097356][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.100314][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.101220][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.823779][ T5839] Bluetooth: hci7: command tx timeout [ 230.903756][ T5839] Bluetooth: hci7: command tx timeout [ 242.425805][ T7258] block nbd0: shutting down sockets [ 254.690545][ T5152] Bluetooth: hci0: command tx timeout [ 254.690940][ T5152] Bluetooth: hci8: command tx timeout [ 255.964463][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.964564][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.824044][ T5848] Bluetooth: hci8: command tx timeout [ 256.903717][ T5848] Bluetooth: hci0: command tx timeout [ 258.915984][ T5848] Bluetooth: hci8: command tx timeout [ 258.985082][ T5848] Bluetooth: hci0: command tx timeout [ 260.983652][ T5848] Bluetooth: hci8: command tx timeout [ 261.070900][ T5848] Bluetooth: hci0: command tx timeout [ 261.696038][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.736772][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.763952][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.765448][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.767887][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.114737][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.120055][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.138879][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.140465][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.141410][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.431723][ T5848] Bluetooth: hci1: command tx timeout [ 272.503852][ T5848] Bluetooth: hci1: command tx timeout [ 272.509540][ T5152] Bluetooth: hci4: command tx timeout [ 274.679577][ T5152] Bluetooth: hci4: command tx timeout [ 274.679615][ T5152] Bluetooth: hci1: command tx timeout [ 276.744863][ T5152] Bluetooth: hci4: command tx timeout [ 276.748590][ T5848] Bluetooth: hci1: command tx timeout [ 279.223804][ T5848] Bluetooth: hci4: command tx timeout [ 283.314615][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.339005][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.341211][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.342860][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.378767][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.463746][ T5848] Bluetooth: hci2: command tx timeout [ 285.614790][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.654300][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.656548][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.661188][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.662179][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.543859][ T5848] Bluetooth: hci2: command tx timeout [ 287.783901][ T5848] Bluetooth: hci3: command tx timeout [ 288.713128][ T5152] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 288.739209][ T5152] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 288.740581][ T5152] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 288.742014][ T5152] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 288.775231][ T5152] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 289.631026][ T5848] Bluetooth: hci2: command tx timeout [ 289.883631][ T5848] Bluetooth: hci3: command tx timeout [ 291.004748][ T5848] Bluetooth: hci9: command tx timeout [ 291.923750][ T5848] Bluetooth: hci2: command tx timeout [ 291.959155][ T5848] Bluetooth: hci3: command tx timeout [ 293.084366][ T5848] Bluetooth: hci9: command tx timeout [ 294.023680][ T5848] Bluetooth: hci3: command tx timeout [ 295.147859][ T5848] Bluetooth: hci9: command tx timeout [ 297.223571][ T5848] Bluetooth: hci9: command tx timeout [ 318.485925][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.486021][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.184673][ T5152] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 322.196949][ T5152] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 322.198397][ T5152] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 322.199821][ T5152] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 322.203179][ T5152] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 324.451032][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 324.465633][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 324.467024][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 324.471991][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 324.472916][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 324.586434][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 329.783750][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 339.887722][ T7217] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 341.226150][ T5152] Bluetooth: hci10: command tx timeout [ 341.469584][ T5152] Bluetooth: hci11: command tx timeout [ 343.227287][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 343.256096][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 343.257387][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 343.258712][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 343.262775][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 343.313668][ T5835] Bluetooth: hci10: command tx timeout [ 343.543618][ T5839] Bluetooth: hci11: command tx timeout [ 345.063724][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 345.383619][ T5839] Bluetooth: hci10: command tx timeout [ 345.625331][ T5839] Bluetooth: hci11: command tx timeout [ 346.267773][ T5848] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 346.286075][ T5848] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 346.287598][ T5848] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 346.289942][ T5848] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 346.291031][ T5848] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 347.463935][ T5839] Bluetooth: hci10: command tx timeout [ 347.703615][ T5839] Bluetooth: hci11: command tx timeout [ 348.731263][ T5849] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 348.758562][ T5849] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 348.759989][ T5849] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 348.761571][ T5849] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 348.762763][ T5849] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 378.103831][ T5844] Bluetooth: hci12: command tx timeout [ 378.847330][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.847420][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.190751][ T5844] Bluetooth: hci12: command tx timeout [ 382.263509][ T5835] Bluetooth: hci12: command tx timeout [ 382.286524][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.318112][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.319974][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.333407][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.353596][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.344605][ T5835] Bluetooth: hci12: command tx timeout [ 384.945384][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 384.985535][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 384.987939][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 384.990997][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 384.991915][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 396.274297][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 396.274344][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 400.022724][ T5849] Bluetooth: hci14: command tx timeout [ 401.783768][ T5152] Bluetooth: hci13: command tx timeout [ 402.103905][ T5152] Bluetooth: hci14: command tx timeout [ 403.873741][ T5152] Bluetooth: hci13: command tx timeout [ 404.003037][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 404.027261][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 404.028589][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 404.030099][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 404.058136][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 404.183536][ T5152] Bluetooth: hci14: command tx timeout [ 405.947452][ T5152] Bluetooth: hci13: command tx timeout [ 406.320250][ T5848] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 406.340819][ T5848] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 406.342147][ T5848] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 406.364863][ T5848] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 406.365865][ T5848] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 408.130311][ T5152] Bluetooth: hci14: command tx timeout [ 408.130354][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 408.130383][ T5152] Bluetooth: hci13: command tx timeout [ 409.502376][ T7364] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 409.527479][ T7364] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 409.532180][ T7364] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 409.583979][ T7366] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 409.585002][ T7366] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 411.623562][ T5152] Bluetooth: hci9: command 0x0406 tx timeout [ 411.623886][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 419.842996][ T38] INFO: task syz.0.542:7220 blocked for more than 144 seconds. [ 419.843020][ T38] Not tainted syzkaller #0 [ 419.843029][ T38] Blocked by coredump. [ 419.843035][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.843045][ T38] task:syz.0.542 state:D stack:25128 pid:7220 tgid:7220 ppid:5833 task_flags:0x40044c flags:0x00004006 [ 419.843107][ T38] Call Trace: [ 419.843115][ T38] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.843131][ T38] __schedule+0x16f3/0x4c20 [ 419.843173][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.843197][ T38] ? arch_stack_walk+0xfc/0x150 [ 419.843237][ T38] ? __pfx___schedule+0x10/0x10 [ 419.913790][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.913844][ T38] rt_mutex_schedule+0x77/0xf0 [ 419.913867][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 419.913893][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 419.913939][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 419.913968][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 419.913995][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 419.914041][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 419.914077][ T38] ? tun_chr_close+0x41/0x1c0 [ 419.914105][ T38] mutex_lock_nested+0x16a/0x1d0 [ 419.914133][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 419.914163][ T38] tun_chr_close+0x41/0x1c0 [ 419.914195][ T38] __fput+0x45b/0xa80 [ 419.914231][ T38] task_work_run+0x1d4/0x260 [ 419.914258][ T38] ? __pfx_task_work_run+0x10/0x10 [ 419.914281][ T38] ? do_exit+0x6b0/0x2300 [ 419.914299][ T38] ? kmem_cache_free+0x195/0x510 [ 419.914335][ T38] do_exit+0x6b5/0x2300 [ 419.914362][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.914400][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.914431][ T38] ? __pfx_do_exit+0x10/0x10 [ 419.914448][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 419.914477][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 419.914514][ T38] do_group_exit+0x21c/0x2d0 [ 419.914541][ T38] get_signal+0x125e/0x1310 [ 419.914595][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 419.914621][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 419.914645][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.914696][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 419.914740][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 419.914774][ T38] exit_to_user_mode_loop+0x75/0x110 [ 419.914802][ T38] do_syscall_64+0x2bd/0x3b0 [ 419.914820][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.914850][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.914871][ T38] ? clear_bhb_loop+0x60/0xb0 [ 419.914896][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.914917][ T38] RIP: 0033:0x7f401e47eba9 [ 419.914936][ T38] RSP: 002b:00007fff8779d4b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 419.914960][ T38] RAX: 0000000000000000 RBX: 000000000003252f RCX: 00007f401e47eba9 [ 419.914975][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 419.914987][ T38] RBP: 00007f401e6c7da0 R08: 0000000000000001 R09: 000000048779d7af [ 419.915001][ T38] R10: 0000001b30320000 R11: 0000000000000246 R12: 00007f401e6c5fac [ 419.915014][ T38] R13: 00007f401e6c5fa0 R14: ffffffffffffffff R15: 00007fff8779d5d0 [ 419.915051][ T38] [ 419.915066][ T38] INFO: task syz.2.552:7258 blocked for more than 144 seconds. [ 419.915082][ T38] Not tainted syzkaller #0 [ 419.915092][ T38] Blocked by coredump. [ 419.915099][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.915108][ T38] task:syz.2.552 state:D stack:25608 pid:7258 tgid:7257 ppid:5836 task_flags:0x40054c flags:0x00004002 [ 419.915172][ T38] Call Trace: [ 419.915179][ T38] [ 419.915192][ T38] __schedule+0x16f3/0x4c20 [ 419.915230][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.915253][ T38] ? arch_stack_walk+0xfc/0[ 419.915253][ T38] ? arch_stack_walk+0xfc/0x150 [ 419.915302][ T38] ? __pfx___schedule+0x10/0x10 [ 419.915361][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.915395][ T38] rt_mutex_schedule+0x77/0xf0 [ 419.915416][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 419.915441][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 419.915487][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 419.915516][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 419.915542][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 419.915587][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 419.915622][ T38] ? tun_chr_close+0x41/0x1c0 [ 419.915649][ T38] mutex_lock_nested+0x16a/0x1d0 [ 419.915686][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 419.915717][ T38] tun_chr_close+0x41/0x1c0 [ 419.915748][ T38] __fput+0x45b/0xa80 [ 419.915783][ T38] task_work_run+0x1d4/0x260 [ 419.915808][ T38] ? __pfx_task_work_run+0x10/0x10 [ 419.915830][ T38] ? do_exit+0x6b0/0x2300 [ 419.915848][ T38] ? kmem_cache_free+0x195/0x510 [ 419.915882][ T38] do_exit+0x6b5/0x2300 [ 419.915901][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 419.915938][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.915969][ T38] ? __pfx_do_exit+0x10/0x10 [ 419.915985][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 419.916014][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 419.916051][ T38] do_group_exit+0x21c/0x2d0 [ 419.916078][ T38] get_signal+0x125e/0x1310 [ 419.916130][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 419.916155][ T38] ? __x64_sys_sendmsg+0x236/0x260 [ 419.916187][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 419.916230][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 419.916262][ T38] exit_to_user_mode_loop+0x75/0x110 [ 419.916291][ T38] do_syscall_64+0x2bd/0x3b0 [ 419.916309][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.916338][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.916367][ T38] ? clear_bhb_loop+0x60/0xb0 [ 419.916394][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.916413][ T38] RIP: 0033:0x7feadccbeba9 [ 419.916430][ T38] RSP: 002b:00007feadaf1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.916449][ T38] RAX: 000000000000003c RBX: 00007feadcf05fa0 RCX: 00007feadccbeba9 [ 419.916464][ T38] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000005 [ 419.916477][ T38] RBP: 00007feadcd41e19 R08: 0000000000000000 R09: 0000000000000000 [ 419.916490][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.916503][ T38] R13: 00007feadcf06038 R14: 00007feadcf05fa0 R15: 00007ffeabeb6728 [ 419.916538][ T38] [ 419.916551][ T38] INFO: task syz-executor:7289 blocked for more than 144 seconds. [ 419.916565][ T38] Not tainted syzkaller #0 [ 419.916575][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.916585][ T38] task:syz-executor state:D stack:26952 pid:7289 tgid:7289 ppid:1 task_flags:0x400140 flags:0x00004004 [ 419.916642][ T38] Call Trace: [ 419.916650][ T38] [ 419.916663][ T38] __schedule+0x16f3/0x4c20 [ 419.916724][ T38] ? __pfx___schedule+0x10/0x10 [ 419.916774][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.916807][ T38] rt_mutex_schedule+0x77/0xf0 [ 419.916838][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 419.916863][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 419.916909][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 419.916937][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 419.916963][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 419.916986][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.917026][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 419.917058][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 419.917091][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 419.917111][ T38] mutex_lock_nested+0x16a/0x1d0 [ 419.917143][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 419.917177][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 419.917223][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 419.917245][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 419.917273][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.917302][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 419.917329][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.917387][ T38] netlink_rcv_skb+0x205/0x470 [ 419.917414][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.917441][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.917472][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.917515][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.917553][ T38] netlink_unicast+0x843/0xa10 [ 419.917590][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 419.917617][ T38] ? netlink_sendmsg+0x642/0xb30 [ 419.917643][ T38] ? skb_put+0x11b/0x210 [ 419.917678][ T38] netlink_sendmsg+0x805/0xb30 [ 419.917719][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.917758][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.917780][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.917810][ T38] __sock_sendmsg+0x219/0x270 [ 419.917852][ T38] __sys_sendto+0x3c7/0x520 [ 419.917886][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 419.917950][ T38] ? exc_page_fault+0x76/0xf0 [ 419.917985][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 419.918017][ T38] __x64_sys_sendto+0xde/0x100 [ 419.918051][ T38] do_syscall_64+0xfa/0x3b0 [ 419.918070][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.918099][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.918119][ T38] ? clear_bhb_loop+0x60/0xb0 [ 419.918145][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.918165][ T38] RIP: 0033:0x7f3bb4c30a3c [ 419.918181][ T38] RSP: 002b:00007ffc66ec14a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.918201][ T38] RAX: ffffffffffffffda RBX: 00007f3bb59a4620 RCX: 00007f3bb4c30a3c [ 419.918216][ T38] RDX: 0000000000000028 RSI: 00007f3bb59a4670 RDI: 0000000000000003 [ 419.918228][ T38] RBP: 0000000000000000 R08: 00007ffc66ec14f4 R09: 000000000000000c [ 419.918241][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 419.918253][ T38] R13: 0000000000000000 R14: 00007f3bb59a4670 R15: 0000000000000000 [ 419.918287][ T38] [ 419.918296][ T38] INFO: task syz-executor:7293 blocked for more than 144 seconds. [ 419.918309][ T38] Not tainted syzkaller #0 [ 419.918319][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.918328][ T38] task:syz-executor state:D stack:26568 pid:7293 tgid:7293 ppid:1 task_flags:0x400140 flags:0x00004004 [ 419.918395][ T38] Call Trace: [ 419.918402][ T38] [ 419.918415][ T38] __schedule+0x16f3/0x4c20 [ 419.918476][ T38] ? __pfx___schedule+0x10/0x10 [ 419.918527][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.918560][ T38] rt_mutex_schedule+0x77/0xf0 [ 419.918580][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 419.918604][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 419.918649][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 419.918678][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 419.918704][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 419.918726][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.918766][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 419.918797][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 419.918829][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 419.918849][ T38] mutex_lock_nested+0x16a/0x1d0 [ 419.918880][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 419.918915][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 419.918960][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 419.918983][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 419.919009][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.919038][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 419.919065][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.919115][ T38] netlink_rcv_skb+0x205/0x470 [ 419.919141][ T38] ? __lock_acquire+0xab9/0xd20 [ 419.919168][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.919207][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.919250][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.919289][ T38] netlink_unicast+0x843/0xa10 [ 419.919326][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 419.919361][ T38] ? netlink_sendmsg+0x642/0xb30 [ 419.919387][ T38] ? skb_put+0x11b/0x210 [ 419.919422][ T38] netlink_sendmsg+0x805/0xb30 [ 419.919462][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.919502][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 419.919522][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.919552][ T38] __sock_sendmsg+0x219/0x270 [ 419.919582][ T38] __sys_sendto+0x3c7/0x520 [ 419.919614][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 419.919678][ T38] ? exc_page_fault+0x76/0xf0 [ 419.919711][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 419.919743][ T38] __x64_sys_sendto+0xde/0x100 [ 419.919777][ T38] do_syscall_64+0xfa/0x3b0 [ 419.919795][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.919824][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.919844][ T38] ? clear_bhb_loop+0x60/0xb0 [ 419.919870][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.919890][ T38] RIP: 0033:0x7fe313ae0a3c [ 419.919906][ T38] RSP: 002b:00007fffa265e980 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 419.919926][ T38] RAX: ffffffffffffffda RBX: 00007fe314854620 RCX: 00007fe313ae0a3c [ 419.919940][ T38] RDX: 0000000000000028 RSI: 00007fe314854670 RDI: 0000000000000003 [ 419.919953][ T38] RBP: 0000000000000000 R08: 00007fffa265e9d4 R09: 000000000000000c [ 419.919966][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 419.919978][ T38] R13: 0000000000000000 R14: 00007fe314854670 R15: 0000000000000000 [ 419.920012][ T38] [ 419.920041][ T38] [ 419.920041][ T38] Showing all locks held in the system: [ 419.920050][ T38] 4 locks held by kworker/0:0/9: [ 419.920061][ T38] #0: ffff88805bd3e138 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.920123][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.920192][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 419.920243][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 419.920297][ T38] 2 locks held by ksoftirqd/0/15: [ 419.920309][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 419.920372][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 419.920420][ T38] 1 lock held by khungtaskd/38: [ 419.920431][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 419.920473][ T38] 3 locks held by kworker/u8:3/57: [ 419.920483][ T38] #0: ffff88814ce80938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.920530][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.920573][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 419.920685][ T38] 6 locks held by kworker/u9:0/59: [ 419.920700][ T38] #0: ffff888035beb138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.920753][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.920803][ T38] #2: ffff88803ab5ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 419.920851][ T38] #3: ffff88803ab5c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 419.920905][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 419.920960][ T38] #5: ffff88805f8beb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 419.921031][ T38] 6 locks held by irq/10-virtio2/198: [ 419.921045][ T38] 4 locks held by kworker/u8:5/813: [ 419.921056][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.921111][ T38] #1: ffffc90004647bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.921162][ T38] #2: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 419.921217][ T38] #3: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 419.921272][ T38] 2 locks held by kworker/0:2/979: [ 419.921288][ T38] 3 locks held by kworker/u8:7/1182: [ 419.921300][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.921353][ T38] #1: ffffc90004e3fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.921463][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 419.921535][ T38] 2 locks held by getty/5595: [ 419.921547][ T38] #0: ffff88823bf620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 419.921605][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 419.921656][ T38] 5 locks held by syz-executor/5822: [ 419.921668][ T38] 4 locks held by kworker/u9:2/5835: [ 419.921679][ T38] #0: ffff88802eb8d138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.921745][ T38] #1: ffffc90004ebfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.921798][ T38] #2: ffff88802b0e80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 419.921861][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 419.921916][ T38] 5 locks held by kworker/u9:3/5839: [ 419.921927][ T38] #0: ffff88805de0a138 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.921984][ T38] #1: ffffc90004f3fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.922036][ T38] #2: ffff8880641f4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 419.922086][ T38] #3: ffff8880641f40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 419.922141][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 419.922196][ T38] 5 locks held by kworker/u9:4/5842: [ 419.922208][ T38] #0: ffff8880287fe938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.922265][ T38] #1: ffffc90004f4fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.922316][ T38] #2: ffff888038df0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 419.922374][ T38] #3: ffff888038df00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 419.922430][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 419.922485][ T38] 5 locks held by kworker/u9:5/5843: [ 419.922496][ T38] #0: ffff888070970938 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.922548][ T38] #1: ffffc90004f5fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.922609][ T38] #2: ffff888063470e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 419.922656][ T38] #3: ffff8880634700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 419.922712][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 419.922770][ T38] 4 locks held by kworker/u9:6/5844: [ 419.922781][ T38] #0: ffff888070776138 ((wq_completion)hci0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.922839][ T38] #1: ffffc90004f6fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.922891][ T38] #2: ffff88805638c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 419.922946][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 419.923001][ T38] 4 locks held by kworker/u9:7/5848: [ 419.923021][ T38] #0: ffff88803cbce938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 419.923077][ T38] #1: ffffc90004fbfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 419.923129][ T38] #2: ffff88805376c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 419.923179][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 419.923232][ T38] 4 locks held by kworker/u9:8/5849: [ 419.923243][ T38] #0: ffff88805f420138 ((wq_completion)hci6#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.282524][ T38] #1: ffffc90004fcfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.282582][ T38] #2: ffff88805feec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 420.282643][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 420.282703][ T38] 3 locks held by kworker/1:3/5891: [ 420.282715][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.282769][ T38] #1: ffffc90004d6fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.282821][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 420.282877][ T38] 4 locks held by kworker/0:6/5963: [ 420.282889][ T38] #0: ffff88805bcf5138 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.282947][ T38] #1: ffffc900055afbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.283000][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 420.283052][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 420.283104][ T38] 4 locks held by kworker/0:7/5964: [ 420.283116][ T38] #0: ffff88805bd2a138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.283172][ T38] #1: ffffc900059cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.283239][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 420.283582][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 420.283644][ T38] 2 locks held by kworker/0:8/7182: [ 420.283657][ T38] 2 locks held by kworker/u8:13/7206: [ 420.283668][ T38] 2 locks held by syz-executor/7214: [ 420.283680][ T38] #0: ffff888027080e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 420.283732][ T38] #1: ffff8880270800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 420.283788][ T38] 1 lock held by syz-executor/7217: [ 420.283799][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 420.283856][ T38] 1 lock held by syz.0.542/7220: [ 420.283867][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 420.283932][ T38] 1 lock held by syz.3.548/7240: [ 420.283952][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 420.284029][ T38] 4 locks held by kworker/0:11/7255: [ 420.284041][ T38] #0: ffff888029672d38 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.284116][ T38] #1: ffffc90004637bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.284197][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 420.284261][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 420.284313][ T38] 4 locks held by kworker/0:12/7256: [ 420.284324][ T38] #0: ffff88805bb53938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.284381][ T38] #1: ffffc90004617bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.284447][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 420.284498][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 420.284550][ T38] 1 lock held by syz.2.552/7258: [ 420.284562][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 420.284617][ T38] 3 locks held by syz-executor/7260: [ 420.284628][ T38] #0: ffff88805cde8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 420.284689][ T38] #1: ffff88805cde80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 420.284741][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 420.284792][ T38] 1 lock held by syz-executor/7289: [ 420.284803][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.284853][ T38] 1 lock held by syz-executor/7293: [ 420.284865][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.284913][ T38] 1 lock held by syz-executor/7300: [ 420.284924][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.284972][ T38] 1 lock held by syz-executor/7304: [ 420.284983][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285032][ T38] 1 lock held by syz-executor/7308: [ 420.285043][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285092][ T38] 1 lock held by syz-executor/7316: [ 420.285102][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285150][ T38] 1 lock held by syz-executor/7322: [ 420.285162][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285211][ T38] 1 lock held by syz-executor/7328: [ 420.285222][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285271][ T38] 1 lock held by syz-executor/7331: [ 420.285282][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285331][ T38] 1 lock held by syz-executor/7334: [ 420.285342][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285389][ T38] 1 lock held by syz-executor/7340: [ 420.285400][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285447][ T38] 1 lock held by dhcpcd/7344: [ 420.285458][ T38] #0: ffff88805da23f38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 420.285516][ T38] 1 lock held by dhcpcd/7346: [ 420.285527][ T38] #0: ffff88805db131b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 420.285581][ T38] 1 lock held by dhcpcd/7347: [ 420.285592][ T38] #0: ffff88805db12438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 420.285657][ T38] 1 lock held by syz-executor/7348: [ 420.285668][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285716][ T38] 1 lock held by dhcpcd/7350: [ 420.285727][ T38] #0: ffff88805f100ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 420.285782][ T38] 1 lock held by dhcpcd/7351: [ 420.285793][ T38] #0: ffff88803e485a38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 420.285848][ T38] 1 lock held by dhcpcd/7352: [ 420.285858][ T38] #0: ffff88803e486e78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 420.285913][ T38] 1 lock held by syz-executor/7357: [ 420.285925][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.285974][ T38] 1 lock held by syz-executor/7360: [ 420.285985][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.286034][ T38] 1 lock held by syz-executor/7363: [ 420.286045][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 420.286094][ T38] 5 locks held by kworker/u9:9/7364: [ 420.286105][ T38] #0: ffff88803d66a938 ((wq_completion)hci3#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.286168][ T38] #1: ffffc90004e7fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.286221][ T38] #2: ffff88803a7bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 420.286270][ T38] #3: ffff88803a7bc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 420.286325][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 420.286382][ T38] 4 locks held by kworker/u9:11/7367: [ 420.286392][ T38] #0: ffff888036c84938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 420.286448][ T38] #1: ffffc90003ef7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 420.286501][ T38] #2: ffff88803a7ac0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 420.286552][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 420.286614][ T38] 4 locks held by kworker/0:16/7370: [ 420.286628][ T38] [ 420.286641][ T38] ============================================= [ 420.286641][ T38] [ 420.286650][ T38] NMI backtrace for cpu 1 [ 420.286665][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.286688][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.286699][ T38] Call Trace: [ 420.286707][ T38] [ 420.286718][ T38] dump_stack_lvl+0x189/0x250 [ 420.286752][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.286781][ T38] ? __pfx__printk+0x10/0x10 [ 420.286819][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 420.286848][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 420.286877][ T38] ? __pfx__printk+0x10/0x10 [ 420.286904][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.286932][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 420.286961][ T38] watchdog+0xf93/0xfe0 [ 420.286993][ T38] ? watchdog+0x1de/0xfe0 [ 420.287026][ T38] kthread+0x70e/0x8a0 [ 420.287060][ T38] ? __pfx_watchdog+0x10/0x10 [ 420.287085][ T38] ? __pfx_kthread+0x10/0x10 [ 420.287120][ T38] ? __pfx_kthread+0x10/0x10 [ 420.287152][ T38] ret_from_fork+0x439/0x7d0 [ 420.287181][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 420.287214][ T38] ? __switch_to_asm+0x39/0x70 [ 420.287233][ T38] ? __switch_to_asm+0x33/0x70 [ 420.287250][ T38] ? __pfx_kthread+0x10/0x10 [ 420.287281][ T38] ret_from_fork_asm+0x1a/0x30 [ 420.287318][ T38] [ 420.287326][ T38] Sending NMI from CPU 1 to CPUs 0: [ 420.287354][ C0] NMI backtrace for cpu 0 [ 420.287370][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.287400][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.287409][ C0] RIP: 0010:stack_depot_save_flags+0x92/0x860 [ 420.287435][ C0] Code: fe 04 72 6f 89 e8 89 e9 4c 89 f2 03 0a 03 42 04 03 6a 08 89 ef c1 c7 04 29 e9 31 cf 01 c5 29 f8 41 89 f8 41 c1 c0 06 41 31 c0 <01> ef 45 89 c1 41 c1 c1 08 44 29 c5 41 31 e9 41 01 f8 44 29 cf 44 [ 420.287449][ C0] RSP: 0018:ffffc90000156c48 EFLAGS: 00000206 [ 420.287464][ C0] RAX: 000000006852d207 RBX: 0000000000000000 RCX: 000000004c21a30e [ 420.287476][ C0] RDX: ffffc90000156d10 RSI: 0000000000000014 RDI: 000000004dae7328 [ 420.287487][ C0] RBP: 00000000161a4231 R08: 0000000003ce1814 R09: 00000000fdad531d [ 420.287497][ C0] R10: 0000000000000016 R11: ffffffff81aaf310 R12: ffff8880295ee140 [ 420.287508][ C0] R13: 0000000000000000 R14: ffffc90000156cb0 R15: ffffc90000156cb0 [ 420.287519][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 420.287532][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.287544][ C0] CR2: 00007f9f251e1d55 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 420.287560][ C0] Call Trace: [ 420.287566][ C0] [ 420.287577][ C0] kasan_save_track+0x4f/0x80 [ 420.287595][ C0] ? kasan_save_track+0x3e/0x80 [ 420.287611][ C0] ? kasan_save_free_info+0x46/0x50 [ 420.287625][ C0] ? __kasan_slab_free+0x5b/0x80 [ 420.287642][ C0] ? kmem_cache_free+0x195/0x510 [ 420.287662][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 420.287678][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 420.287694][ C0] ? nft_do_chain+0x409/0x1920 [ 420.287708][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 420.287724][ C0] ? nf_hook_slow+0xc5/0x220 [ 420.287744][ C0] ? NF_HOOK+0x206/0x3a0 [ 420.287762][ C0] ? ip6_input+0x16a/0x270 [ 420.287780][ C0] ? NF_HOOK+0x309/0x3a0 [ 420.287798][ C0] ? __netif_receive_skb+0xd3/0x380 [ 420.287816][ C0] ? process_backlog+0x31e/0x900 [ 420.287834][ C0] ? __napi_poll+0xb3/0x540 [ 420.287850][ C0] ? net_rx_action+0x707/0xe00 [ 420.287868][ C0] ? handle_softirqs+0x22f/0x710 [ 420.287886][ C0] ? run_ktimerd+0xcf/0x190 [ 420.287905][ C0] ? smpboot_thread_fn+0x53f/0xa60 [ 420.287922][ C0] ? kthread+0x70e/0x8a0 [ 420.287942][ C0] ? ret_from_fork+0x439/0x7d0 [ 420.287960][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 420.287992][ C0] kasan_save_free_info+0x46/0x50 [ 420.288007][ C0] __kasan_slab_free+0x5b/0x80 [ 420.288025][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 420.288040][ C0] kmem_cache_free+0x195/0x510 [ 420.288063][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 420.288082][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 420.288100][ C0] ? nf_ip_checksum+0x13c/0x510 [ 420.288119][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 420.288138][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 420.288155][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 420.288182][ C0] nft_do_chain+0x409/0x1920 [ 420.288204][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 420.288218][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 420.288257][ C0] nft_do_chain_inet+0x25d/0x340 [ 420.288273][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 420.288288][ C0] ? __lock_acquire+0xab9/0xd20 [ 420.288313][ C0] ? NF_HOOK+0x9a/0x3a0 [ 420.288332][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 420.288349][ C0] nf_hook_slow+0xc5/0x220 [ 420.288373][ C0] NF_HOOK+0x206/0x3a0 [ 420.288400][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 420.288419][ C0] ? NF_HOOK+0x9a/0x3a0 [ 420.288438][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 420.288458][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 420.288483][ C0] ip6_input+0x16a/0x270 [ 420.288502][ C0] ? ip6_input+0x23/0x270 [ 420.288522][ C0] NF_HOOK+0x309/0x3a0 [ 420.288541][ C0] ? skb_orphan+0xaf/0xd0 [ 420.288560][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 420.288579][ C0] ? NF_HOOK+0x9a/0x3a0 [ 420.288597][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 420.288617][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 420.288642][ C0] __netif_receive_skb+0xd3/0x380 [ 420.288660][ C0] ? rt_spin_unlock+0x65/0x80 [ 420.288681][ C0] ? process_backlog+0x27b/0x900 [ 420.288700][ C0] process_backlog+0x31e/0x900 [ 420.288725][ C0] __napi_poll+0xb3/0x540 [ 420.288745][ C0] net_rx_action+0x707/0xe00 [ 420.288773][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 420.288795][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 420.288820][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 420.288842][ C0] handle_softirqs+0x22f/0x710 [ 420.288865][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 420.288888][ C0] run_ktimerd+0xcf/0x190 [ 420.288908][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 420.288927][ C0] ? schedule+0x91/0x360 [ 420.288951][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 420.288968][ C0] smpboot_thread_fn+0x53f/0xa60 [ 420.288987][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 420.289018][ C0] kthread+0x70e/0x8a0 [ 420.289041][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 420.289059][ C0] ? __pfx_kthread+0x10/0x10 [ 420.289083][ C0] ? __pfx_kthread+0x10/0x10 [ 420.289105][ C0] ret_from_fork+0x439/0x7d0 [ 420.289125][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 420.289147][ C0] ? __switch_to_asm+0x39/0x70 [ 420.289161][ C0] ? __switch_to_asm+0x33/0x70 [ 420.289175][ C0] ? __pfx_kthread+0x10/0x10 [ 420.289197][ C0] ret_from_fork_asm+0x1a/0x30 [ 420.289219][ C0] [ 420.289351][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 420.289366][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 420.289387][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 420.289397][ T38] Call Trace: [ 420.289405][ T38] [ 420.289413][ T38] dump_stack_lvl+0x99/0x250 [ 420.289444][ T38] ? __asan_memcpy+0x40/0x70 [ 420.289466][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.289495][ T38] ? __pfx__printk+0x10/0x10 [ 420.289532][ T38] vpanic+0x281/0x750 [ 420.289565][ T38] ? __pfx_vpanic+0x10/0x10 [ 420.289592][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 420.289613][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.289661][ T38] panic+0xb9/0xc0 [ 420.289690][ T38] ? __pfx_panic+0x10/0x10 [ 420.289722][ T38] ? irq_work_queue+0xc3/0x140 [ 420.289753][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 420.289782][ T38] watchdog+0xfd2/0xfe0 [ 420.289812][ T38] ? watchdog+0x1de/0xfe0 [ 420.289845][ T38] kthread+0x70e/0x8a0 [ 420.289879][ T38] ? __pfx_watchdog+0x10/0x10 [ 420.289904][ T38] ? __pfx_kthread+0x10/0x10 [ 420.289939][ T38] ? __pfx_kthread+0x10/0x10 [ 420.289971][ T38] ret_from_fork+0x439/0x7d0 [ 420.290001][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 420.290034][ T38] ? __switch_to_asm+0x39/0x70 [ 420.290052][ T38] ? __switch_to_asm+0x33/0x70 [ 420.290070][ T38] ? __pfx_kthread+0x10/0x10 [ 420.290101][ T38] ret_from_fork_asm+0x1a/0x30 [ 420.290138][ T38] [ 420.290427][ T38] Kernel Offset: disabled