last executing test programs: 21.029161715s ago: executing program 0 (id=676): r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x42, 0x1) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 20.914489401s ago: executing program 3 (id=678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x3b3, 0x88}, 0x90) 20.767745402s ago: executing program 2 (id=680): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0xffffffffffffff81, 0x2, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) 20.754866956s ago: executing program 0 (id=681): r0 = syz_usb_connect$hid(0x3, 0x9a, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="000145000000450ef9"], 0x0, 0x0, 0x0, 0x0}, 0x0) 20.536884465s ago: executing program 2 (id=684): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231309e53f070d0000002a940183"], 0x0}, 0x0) 19.961001082s ago: executing program 3 (id=691): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) 19.863593614s ago: executing program 3 (id=692): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 19.038012563s ago: executing program 4 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 19.037530511s ago: executing program 1 (id=699): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x8}, 0x1c) 18.83336732s ago: executing program 0 (id=700): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="280000002d0001"], 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) 18.83212324s ago: executing program 4 (id=701): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x224100, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x10) 18.821612314s ago: executing program 3 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r1, 0x1, 0x4, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.630349029s ago: executing program 2 (id=703): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) 18.38862005s ago: executing program 1 (id=704): setreuid(0xee01, 0xee01) r0 = msgget$private(0x0, 0x402) msgsnd(r0, &(0x7f00000013c0)={0x2}, 0x8, 0x800) 18.343692278s ago: executing program 4 (id=705): r0 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) 18.33643319s ago: executing program 0 (id=706): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) 18.311213108s ago: executing program 3 (id=707): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x5d67, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89ef, 0x7, 0x400, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x200000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 17.932717008s ago: executing program 1 (id=708): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd700003000000010000000c0002000600000000000000400007800c0001"], 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x0) 17.891795899s ago: executing program 0 (id=709): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000400)=0x1) 17.850481201s ago: executing program 3 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20018080}, 0x94) 16.870743109s ago: executing program 0 (id=711): unshare(0x26020480) r0 = socket$kcm(0x2d, 0x2, 0x0) getsockopt(r0, 0x5, 0xcd, 0x0, 0x0) 16.855133263s ago: executing program 1 (id=712): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 16.46032661s ago: executing program 4 (id=713): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f018, 0x1}) 16.299858479s ago: executing program 1 (id=714): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xcd97, 0x4) 16.20755241s ago: executing program 2 (id=715): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 16.19266379s ago: executing program 4 (id=716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x4c051}, 0xc0) 16.087179388s ago: executing program 1 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 15.884633432s ago: executing program 4 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad00c5fce2b5cbaaadc5829fda", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.873942589s ago: executing program 2 (id=719): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x683) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0x4c09, 0x0) 15.608899855s ago: executing program 2 (id=720): unshare(0x22020400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 2.619419947s ago: executing program 32 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20018080}, 0x94) 1.649113972s ago: executing program 33 (id=711): unshare(0x26020480) r0 = socket$kcm(0x2d, 0x2, 0x0) getsockopt(r0, 0x5, 0xcd, 0x0, 0x0) 571.253473ms ago: executing program 34 (id=717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 358.509378ms ago: executing program 35 (id=718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x27, 0xe, 0x0, &(0x7f00000002c0)="f8ad00c5fce2b5cbaaadc5829fda", 0x0, 0x9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 36 (id=720): unshare(0x22020400) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 80.071978][ T5828] cgroup: Unknown subsys name 'net' [ 80.304034][ T5828] cgroup: Unknown subsys name 'cpuset' [ 80.359743][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.155725][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.867783][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.897746][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.901847][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.905397][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.910496][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.924892][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.925619][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.925783][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.926250][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.930592][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.938521][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.938598][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.938926][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.941071][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.942093][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.943217][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.943453][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.944699][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.944785][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.945421][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.946702][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.947624][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.948775][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.102367][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.103159][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.859091][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.902209][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 86.209087][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.290239][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 86.608515][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 86.778414][ T1198] cfg80211: failed to load regulatory.db [ 86.846614][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.847868][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.848401][ T5847] bridge_slave_0: entered allmulticast mode [ 86.851007][ T5847] bridge_slave_0: entered promiscuous mode [ 86.872036][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.872228][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.872411][ T5849] bridge_slave_0: entered allmulticast mode [ 86.874991][ T5849] bridge_slave_0: entered promiscuous mode [ 86.932680][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.932915][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.933404][ T5847] bridge_slave_1: entered allmulticast mode [ 86.934966][ T5847] bridge_slave_1: entered promiscuous mode [ 86.937068][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.937156][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.937289][ T5849] bridge_slave_1: entered allmulticast mode [ 86.941409][ T5849] bridge_slave_1: entered promiscuous mode [ 87.010219][ T59] Bluetooth: hci2: command tx timeout [ 87.079275][ T59] Bluetooth: hci1: command tx timeout [ 87.159335][ T5850] Bluetooth: hci0: command tx timeout [ 87.159350][ T59] Bluetooth: hci3: command tx timeout [ 87.239652][ T5850] Bluetooth: hci4: command tx timeout [ 87.630771][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.630913][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.631081][ T5839] bridge_slave_0: entered allmulticast mode [ 87.633819][ T5839] bridge_slave_0: entered promiscuous mode [ 87.672297][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.677242][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.760645][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.760777][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.760943][ T5839] bridge_slave_1: entered allmulticast mode [ 87.763849][ T5839] bridge_slave_1: entered promiscuous mode [ 87.802767][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.804983][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.805207][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.805304][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.805402][ T5840] bridge_slave_0: entered allmulticast mode [ 87.806827][ T5840] bridge_slave_0: entered promiscuous mode [ 88.084395][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.084515][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.084632][ T5840] bridge_slave_1: entered allmulticast mode [ 88.086172][ T5840] bridge_slave_1: entered promiscuous mode [ 88.582757][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.584781][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.584997][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.585171][ T5857] bridge_slave_0: entered allmulticast mode [ 88.586687][ T5857] bridge_slave_0: entered promiscuous mode [ 88.600737][ T5847] team0: Port device team_slave_0 added [ 88.605607][ T5849] team0: Port device team_slave_0 added [ 88.712635][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.714136][ T5847] team0: Port device team_slave_1 added [ 88.716758][ T5849] team0: Port device team_slave_1 added [ 88.717221][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.717359][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.717465][ T5857] bridge_slave_1: entered allmulticast mode [ 88.718944][ T5857] bridge_slave_1: entered promiscuous mode [ 88.739089][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.057354][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.079369][ T5850] Bluetooth: hci2: command tx timeout [ 89.159309][ T5850] Bluetooth: hci1: command tx timeout [ 89.239288][ T5850] Bluetooth: hci0: command tx timeout [ 89.249269][ T5850] Bluetooth: hci3: command tx timeout [ 89.319315][ T5850] Bluetooth: hci4: command tx timeout [ 89.431542][ T5839] team0: Port device team_slave_0 added [ 89.433162][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.433171][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.433184][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.602699][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.602715][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.602739][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.610624][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.734261][ T5839] team0: Port device team_slave_1 added [ 89.735525][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.735536][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.735559][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.737148][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.737159][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.737175][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.741458][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.743592][ T5840] team0: Port device team_slave_0 added [ 89.941264][ T5840] team0: Port device team_slave_1 added [ 90.174474][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.174489][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.174512][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.178127][ T5857] team0: Port device team_slave_0 added [ 90.421356][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.421372][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.421395][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.425453][ T5857] team0: Port device team_slave_1 added [ 90.427793][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.427804][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.427817][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.670558][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.670570][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.670583][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.785234][ T5847] hsr_slave_0: entered promiscuous mode [ 90.786153][ T5847] hsr_slave_1: entered promiscuous mode [ 90.803407][ T5849] hsr_slave_0: entered promiscuous mode [ 90.804201][ T5849] hsr_slave_1: entered promiscuous mode [ 90.804838][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.804915][ T5849] Cannot create hsr debugfs directory [ 90.905420][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.905430][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.905443][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.981912][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.981927][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.981951][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.159307][ T5850] Bluetooth: hci2: command tx timeout [ 91.239492][ T5850] Bluetooth: hci1: command tx timeout [ 91.319406][ T5850] Bluetooth: hci3: command tx timeout [ 91.319433][ T5850] Bluetooth: hci0: command tx timeout [ 91.365353][ T5839] hsr_slave_0: entered promiscuous mode [ 91.366135][ T5839] hsr_slave_1: entered promiscuous mode [ 91.366661][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 91.366676][ T5839] Cannot create hsr debugfs directory [ 91.399406][ T59] Bluetooth: hci4: command tx timeout [ 91.614794][ T5840] hsr_slave_0: entered promiscuous mode [ 91.615563][ T5840] hsr_slave_1: entered promiscuous mode [ 91.616268][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 91.616288][ T5840] Cannot create hsr debugfs directory [ 92.064962][ T5857] hsr_slave_0: entered promiscuous mode [ 92.065696][ T5857] hsr_slave_1: entered promiscuous mode [ 92.066215][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 92.066230][ T5857] Cannot create hsr debugfs directory [ 93.201386][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.237091][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.245991][ T59] Bluetooth: hci2: command tx timeout [ 93.264051][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.309892][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.319319][ T59] Bluetooth: hci1: command tx timeout [ 93.399293][ T59] Bluetooth: hci0: command tx timeout [ 93.399322][ T59] Bluetooth: hci3: command tx timeout [ 93.441333][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.476578][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.479487][ T5850] Bluetooth: hci4: command tx timeout [ 93.528488][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.567204][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.710099][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.757427][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.796238][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.833132][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.001510][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.053561][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.095465][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.152408][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.308105][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.331301][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.386745][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.424537][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.464668][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.568738][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.621466][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.623154][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.657583][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.679751][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.680114][ T1565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.777344][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.817442][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.844607][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.844815][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.896793][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.898138][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.964125][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.998137][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.020745][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.020951][ T1565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.083337][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.083483][ T1545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.166492][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.197235][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.245549][ T1545] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.245759][ T1545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.306874][ T1557] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.307072][ T1557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.362612][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.424283][ T1545] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.424424][ T1545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.507800][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.508110][ T1545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.574199][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.872298][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.098367][ T5849] veth0_vlan: entered promiscuous mode [ 96.196583][ T5849] veth1_vlan: entered promiscuous mode [ 96.322785][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.448521][ T5849] veth0_macvtap: entered promiscuous mode [ 96.484841][ T5849] veth1_macvtap: entered promiscuous mode [ 96.504276][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.525035][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.586730][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.625925][ T5839] veth0_vlan: entered promiscuous mode [ 96.635408][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.691766][ T1234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.704881][ T1234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.705060][ T5847] veth0_vlan: entered promiscuous mode [ 96.707799][ T5839] veth1_vlan: entered promiscuous mode [ 96.716238][ T1234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.724940][ T1234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.818749][ T5847] veth1_vlan: entered promiscuous mode [ 96.918400][ T5840] veth0_vlan: entered promiscuous mode [ 97.027991][ T5857] veth0_vlan: entered promiscuous mode [ 97.093740][ T5840] veth1_vlan: entered promiscuous mode [ 97.139978][ T1545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.140004][ T1545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.141214][ T5857] veth1_vlan: entered promiscuous mode [ 97.173517][ T5839] veth0_macvtap: entered promiscuous mode [ 97.220135][ T5839] veth1_macvtap: entered promiscuous mode [ 97.263423][ T5847] veth0_macvtap: entered promiscuous mode [ 97.279813][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.279831][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.311745][ T5847] veth1_macvtap: entered promiscuous mode [ 97.375512][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.407476][ T5840] veth0_macvtap: entered promiscuous mode [ 97.411016][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.453943][ T5857] veth0_macvtap: entered promiscuous mode [ 97.468696][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.488804][ T5840] veth1_macvtap: entered promiscuous mode [ 97.514119][ T1545] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.529119][ T1545] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.542710][ T5857] veth1_macvtap: entered promiscuous mode [ 97.546538][ T1545] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.567829][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.582872][ T1545] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.677880][ T1234] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.709292][ T1234] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.714662][ T5959] use of bytesused == 0 is deprecated and will be removed in the future, [ 97.714675][ T5959] use the actual size instead. [ 97.714987][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.721653][ T1234] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.793963][ T1234] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.851982][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.857861][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.066056][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.069103][ T1234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.110065][ T1234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.166501][ T1234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.245381][ T4043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.307419][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.369483][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.402158][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.404283][ T1565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.404298][ T1565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.453561][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.774743][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.774762][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.844651][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.844665][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.003223][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.003243][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.110881][ T1545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.110908][ T1545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.243347][ T1545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.243360][ T1545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.436913][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.436931][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.705568][ T1565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.705588][ T1565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.100045][ T5994] ======================================================= [ 100.100045][ T5994] WARNING: The mand mount option has been deprecated and [ 100.100045][ T5994] and is ignored by this kernel. Remove the mand [ 100.100045][ T5994] option from the mount to silence this warning. [ 100.100045][ T5994] ======================================================= [ 100.692987][ T6009] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 100.739431][ T5930] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.768733][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.899672][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 100.932564][ T5930] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 100.932593][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.939358][ T5950] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 100.968876][ T5930] usb 5-1: config 0 descriptor?? [ 100.995647][ T5930] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 101.121015][ T5950] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 101.121047][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.158446][ T5950] usb 3-1: config 0 descriptor?? [ 101.193818][ T5950] cp210x 3-1:0.0: cp210x converter detected [ 101.469369][ T37] audit: type=1326 audit(1758846031.984:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6024 comm="syz.0.31" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff54ad3eec9 code=0x0 [ 101.712911][ T5930] gspca_sonixj: reg_w1 err -71 [ 101.712992][ T5930] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 101.744376][ T5930] usb 5-1: USB disconnect, device number 2 [ 101.747111][ T5950] usb 3-1: cp210x converter now attached to ttyUSB0 [ 101.926074][ T5852] usb 3-1: USB disconnect, device number 2 [ 101.992961][ T5852] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 102.032708][ T6036] capability: warning: `syz.3.34' uses deprecated v2 capabilities in a way that may be insecure [ 102.110326][ T5852] cp210x 3-1:0.0: device disconnected [ 102.725016][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 102.725038][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 103.364621][ T6075] usb usb8: usbfs: process 6075 (syz.1.52) did not claim interface 0 before use [ 103.731169][ T6087] mmap: syz.0.60 (6087) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.279734][ T5850] Bluetooth: hci4: command tx timeout [ 104.820092][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 105.084861][ T6132] program syz.4.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.273907][ T37] audit: type=1326 audit(1758846035.814:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.278366][ T37] audit: type=1326 audit(1758846035.814:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.342924][ T37] audit: type=1326 audit(1758846035.884:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.342974][ T37] audit: type=1326 audit(1758846035.884:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.343013][ T37] audit: type=1326 audit(1758846035.884:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.343642][ T37] audit: type=1326 audit(1758846035.884:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.343682][ T37] audit: type=1326 audit(1758846035.884:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 105.343720][ T37] audit: type=1326 audit(1758846035.884:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6136 comm="syz.1.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d447beec9 code=0x7ffc0000 [ 106.394428][ T6170] Bluetooth: MGMT ver 1.23 [ 107.252392][ T6187] netlink: 7 bytes leftover after parsing attributes in process `syz.3.105'. [ 107.564888][ T6201] usb usb8: usbfs: process 6201 (syz.0.110) did not claim interface 0 before use [ 107.589767][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.742021][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.742055][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.742095][ T5852] usb 3-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 107.742126][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.812785][ T5852] usb 3-1: config 0 descriptor?? [ 108.235850][ T5852] hid (null): usage index exceeded [ 108.275400][ T5852] wacom 0003:056A:00F4.0001: ignoring exceeding usage max [ 108.276656][ T5852] wacom 0003:056A:00F4.0001: ignoring exceeding usage max [ 108.276673][ T5852] wacom 0003:056A:00F4.0001: usage index exceeded [ 108.276686][ T5852] wacom 0003:056A:00F4.0001: item 0 1 2 2 parsing failed [ 108.277579][ T5852] wacom 0003:056A:00F4.0001: parse failed [ 108.277666][ T5852] wacom 0003:056A:00F4.0001: probe with driver wacom failed with error -22 [ 108.454889][ T5852] usb 3-1: USB disconnect, device number 3 [ 108.920367][ T5850] Bluetooth: hci2: command tx timeout [ 108.949301][ T6004] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 109.125918][ T6241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 109.142005][ T6004] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.142031][ T6004] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 109.142081][ T6004] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 109.142102][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.191190][ T6004] usb 1-1: config 0 descriptor?? [ 109.219088][ T6245] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 109.248255][ T6004] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 109.248556][ T6004] dvb-usb: bulk message failed: -22 (3/0) [ 109.283073][ T6004] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 109.285302][ T6004] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 109.285390][ T6004] usb 1-1: media controller created [ 109.310659][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.371767][ T6004] dvb-usb: bulk message failed: -22 (6/0) [ 109.371888][ T6004] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 109.385108][ T6004] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 109.425614][ T6232] dvb-usb: bulk message failed: -22 (2/0) [ 109.425727][ T6232] dvb-usb: bulk message failed: -22 (4/0) [ 109.533828][ T6004] dvb-usb: schedule remote query interval to 150 msecs. [ 109.533850][ T6004] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 109.569542][ T6004] usb 1-1: USB disconnect, device number 2 [ 109.990067][ T6004] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.063026][ T6271] capability: warning: `syz.1.145' uses 32-bit capabilities (legacy support in use) [ 110.269293][ T5226] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.436855][ T6282] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 110.456896][ T5226] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 110.456924][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.456943][ T5226] usb 4-1: Product: syz [ 110.456956][ T5226] usb 4-1: Manufacturer: syz [ 110.456970][ T5226] usb 4-1: SerialNumber: syz [ 110.491265][ T5226] usb 4-1: config 0 descriptor?? [ 110.534513][ T5226] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 110.999273][ T59] Bluetooth: hci2: command tx timeout [ 111.188671][ T6008] usb 4-1: USB disconnect, device number 2 [ 111.857906][ T6326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.244747][ T6340] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.246335][ T6340] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.926706][ T6364] warning: `syz.0.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.079444][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 113.305841][ T991] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.459327][ T991] usb 2-1: Using ep0 maxpacket: 32 [ 113.461685][ T991] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.461716][ T991] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.461749][ T991] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 113.461771][ T991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.468933][ T991] usb 2-1: config 0 descriptor?? [ 113.982790][ T991] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 113.982829][ T991] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 113.982853][ T991] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 113.982876][ T991] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 113.990434][ T991] corsair-psu 0003:1B1C:1C09.0002: unknown main item tag 0x0 [ 114.038968][ T991] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 114.120244][ T991] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-38) [ 114.163177][ T991] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -38 [ 114.189653][ T991] usb 2-1: USB disconnect, device number 2 [ 114.249304][ T1198] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.384814][ T6399] fido_id[6399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 114.409417][ T1198] usb 3-1: Using ep0 maxpacket: 8 [ 114.414830][ T1198] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 114.414853][ T1198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.414868][ T1198] usb 3-1: Product: syz [ 114.414879][ T1198] usb 3-1: Manufacturer: syz [ 114.414891][ T1198] usb 3-1: SerialNumber: syz [ 114.433850][ T1198] usb 3-1: config 0 descriptor?? [ 114.485265][ T37] audit: type=1326 audit(1758846045.024:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e59eec9 code=0x7ffc0000 [ 114.488329][ T37] audit: type=1326 audit(1758846045.024:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e59eec9 code=0x7ffc0000 [ 114.508680][ T37] audit: type=1326 audit(1758846045.044:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f8b9e59eec9 code=0x7ffc0000 [ 114.511704][ T37] audit: type=1326 audit(1758846045.054:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e59eec9 code=0x7ffc0000 [ 114.516946][ T37] audit: type=1326 audit(1758846045.054:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.4.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9e59eec9 code=0x7ffc0000 [ 114.710091][ T1198] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 115.084262][ T1198] gspca_sunplus: reg_w_riv err -71 [ 115.084355][ T1198] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 115.099325][ T1198] usb 3-1: USB disconnect, device number 4 [ 115.198723][ T6424] Bluetooth: MGMT ver 1.23 [ 115.613022][ T6440] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 116.667748][ T6476] syz.2.243 (6476) used greatest stack depth: 17496 bytes left [ 116.889423][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 117.096184][ T6492] netlink: 140 bytes leftover after parsing attributes in process `syz.2.250'. [ 117.248131][ T6496] ALSA: seq fatal error: cannot create timer (-22) [ 118.250917][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 118.299297][ T6004] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 118.326158][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 118.326179][ T6541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.273'. [ 118.454882][ T6004] usb 3-1: Using ep0 maxpacket: 32 [ 118.457409][ T6004] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 118.457435][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.496325][ T6004] usb 3-1: config 0 descriptor?? [ 118.508580][ T6004] gspca_main: sq930x-2.14.0 probing 041e:403c [ 118.536709][ T6546] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 118.619817][ T6008] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.773933][ T6008] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 118.773963][ T6008] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.832894][ T6008] usb 2-1: config 0 descriptor?? [ 118.892717][ T6008] gspca_main: spca508-2.14.0 probing 8086:0110 [ 119.431126][ T6008] gspca_spca508: reg_read err -110 [ 119.448981][ T6008] gspca_spca508: reg_read err -32 [ 119.454783][ T6008] gspca_spca508: reg_read err -32 [ 119.455366][ T6008] gspca_spca508: reg_read err -32 [ 119.456301][ T6008] gspca_spca508: reg_read err -32 [ 119.458626][ T6008] gspca_spca508: reg write: error -32 [ 119.458715][ T6008] spca508 2-1:0.0: probe with driver spca508 failed with error -32 [ 119.469299][ T6004] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 119.469395][ T6004] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 119.478760][ T6004] usb 3-1: USB disconnect, device number 5 [ 120.408991][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.290'. [ 121.367585][ T991] usb 2-1: USB disconnect, device number 3 [ 121.429870][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.579284][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 121.584062][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.585626][ T31] usb 5-1: config 4 interface 0 has no altsetting 0 [ 121.591734][ T31] usb 5-1: string descriptor 0 read error: -22 [ 121.591874][ T31] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 121.591895][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.678404][ T31] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 121.743254][ T31] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.756977][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 121.757031][ T31] usb 5-1: media controller created [ 121.840136][ T6609] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 121.937035][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.151007][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 122.345887][ T31] usb 5-1: USB disconnect, device number 3 [ 124.069748][ T991] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.219611][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 124.293286][ T991] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 124.293315][ T991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.293334][ T991] usb 1-1: Product: syz [ 124.293347][ T991] usb 1-1: Manufacturer: syz [ 124.293360][ T991] usb 1-1: SerialNumber: syz [ 124.305046][ T991] usb 1-1: config 0 descriptor?? [ 124.362084][ T6688] tipc: Enabling of bearer rejected, failed to enable media [ 124.372310][ T991] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 124.372779][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 124.400785][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.401788][ T991] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 124.401853][ T991] usb 1-1: media controller created [ 124.540503][ T6680] cxusb: i2c wr: len=79 is too big! [ 124.540503][ T6680] [ 124.561475][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.706498][ T991] cxusb: set interface failed [ 124.706523][ T991] dvb-usb: bulk message failed: -22 (1/0) [ 124.776054][ T991] DVB: Unable to find symbol mt352_attach() [ 124.776068][ T991] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 124.797121][ T6703] netlink: 'syz.1.349': attribute type 61 has an invalid length. [ 124.919447][ T991] rc_core: IR keymap rc-dvico-portable not found [ 124.919469][ T991] Registered IR keymap rc-empty [ 124.921908][ T991] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 124.925193][ T991] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 124.969823][ T991] dvb-usb: schedule remote query interval to 100 msecs. [ 124.969843][ T991] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 125.009737][ T991] usb 1-1: USB disconnect, device number 3 [ 125.127367][ T6716] xt_HMARK: spi-set and port-set can't be combined [ 125.299299][ T37] audit: type=1326 audit(1758846055.824:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54ad3eec9 code=0x7ffc0000 [ 125.299350][ T37] audit: type=1326 audit(1758846055.824:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54ad3eec9 code=0x7ffc0000 [ 125.299388][ T37] audit: type=1326 audit(1758846055.824:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54ad3eec9 code=0x7ffc0000 [ 125.299426][ T37] audit: type=1326 audit(1758846055.824:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff54ad3eec9 code=0x7ffc0000 [ 125.299465][ T37] audit: type=1326 audit(1758846055.824:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6717 comm="syz.0.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff54ad3eec9 code=0x7ffc0000 [ 125.380483][ T991] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 125.939501][ T6743] netlink: 'syz.3.367': attribute type 3 has an invalid length. [ 126.609483][ T5226] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.768424][ T5226] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 126.768454][ T5226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.768472][ T5226] usb 5-1: Product: syz [ 126.768483][ T5226] usb 5-1: Manufacturer: syz [ 126.768496][ T5226] usb 5-1: SerialNumber: syz [ 126.811480][ T5226] usb 5-1: config 0 descriptor?? [ 126.916827][ T6772] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 127.041437][ T5226] usb 5-1: USB disconnect, device number 4 [ 127.929361][ T991] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 128.079331][ T991] usb 2-1: Using ep0 maxpacket: 8 [ 128.082527][ T991] usb 2-1: unable to get BOS descriptor or descriptor too short [ 128.084699][ T991] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 128.084721][ T991] usb 2-1: config 4 has no interface number 0 [ 128.084778][ T991] usb 2-1: config 4 interface 30 has no altsetting 0 [ 128.094093][ T991] usb 2-1: string descriptor 0 read error: -22 [ 128.094240][ T991] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 128.094262][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.160677][ T991] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 128.160728][ T991] dw2102: su3000_power_ctrl: 1, initialized 0 [ 128.160747][ T991] dvb-usb: bulk message failed: -22 (2/0) [ 128.185029][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.186633][ T991] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 128.186682][ T991] usb 2-1: media controller created [ 128.186815][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 128.186829][ T991] dw2102: i2c transfer failed. [ 128.186845][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 128.186858][ T991] dw2102: i2c transfer failed. [ 128.186873][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 128.186885][ T991] dw2102: i2c transfer failed. [ 128.186900][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 128.186912][ T991] dw2102: i2c transfer failed. [ 128.186928][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 128.186939][ T991] dw2102: i2c transfer failed. [ 128.186962][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 128.186974][ T991] dw2102: i2c transfer failed. [ 128.186982][ T991] dvb-usb: MAC address: 02:02:02:02:02:02 [ 128.209255][ T5226] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.318470][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.321899][ T6796] dvb-usb: bulk message failed: -22 (3/0) [ 128.321915][ T6796] dw2102: i2c transfer failed. [ 128.433569][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 128.433594][ T991] dw2102: command 0x0e transfer failed. [ 128.433603][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 128.433615][ T991] dw2102: command 0x0e transfer failed. [ 128.470701][ T5226] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 128.470725][ T5226] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 128.470741][ T5226] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 128.470758][ T5226] usb 1-1: config 220 has no interface number 2 [ 128.470829][ T5226] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 128.470853][ T5226] usb 1-1: config 220 interface 0 has no altsetting 0 [ 128.470869][ T5226] usb 1-1: config 220 interface 76 has no altsetting 0 [ 128.470885][ T5226] usb 1-1: config 220 interface 1 has no altsetting 0 [ 128.473980][ T5226] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 128.474007][ T5226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.474027][ T5226] usb 1-1: Product: syz [ 128.474040][ T5226] usb 1-1: Manufacturer: syz [ 128.474054][ T5226] usb 1-1: SerialNumber: syz [ 128.742359][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 128.742381][ T991] dw2102: command 0x0e transfer failed. [ 128.742389][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 128.742402][ T991] dw2102: command 0x0e transfer failed. [ 128.742409][ T991] dvb-usb: bulk message failed: -22 (1/0) [ 128.742423][ T991] dw2102: command 0x51 transfer failed. [ 128.742431][ T991] dvb-usb: bulk message failed: -22 (5/0) [ 128.742443][ T991] dw2102: i2c probe for address 0x68 failed. [ 128.742453][ T991] dvb-usb: bulk message failed: -22 (5/0) [ 128.742466][ T991] dw2102: i2c probe for address 0x69 failed. [ 128.742476][ T991] dvb-usb: bulk message failed: -22 (5/0) [ 128.742488][ T991] dw2102: i2c probe for address 0x6a failed. [ 128.742497][ T991] dw2102: probing for demodulator failed. Is the external power switched on? [ 128.742506][ T991] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 128.856746][ T5226] usb 1-1: selecting invalid altsetting 0 [ 128.859088][ T5226] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 128.859121][ T5226] usb 1-1: No valid video chain found. [ 128.897472][ T5226] usb 1-1: selecting invalid altsetting 0 [ 128.897511][ T5226] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 128.915771][ T5226] usb 1-1: USB disconnect, device number 4 [ 129.045498][ T991] rc_core: IR keymap rc-tt-1500 not found [ 129.045517][ T991] Registered IR keymap rc-empty [ 129.047609][ T991] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 129.131389][ T991] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input7 [ 129.146778][ T991] dvb-usb: schedule remote query interval to 250 msecs. [ 129.146798][ T991] dw2102: su3000_power_ctrl: 0, initialized 1 [ 129.146810][ T991] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 129.199796][ T991] usb 2-1: USB disconnect, device number 4 [ 129.450693][ T6834] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 129.516460][ T991] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 129.677534][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.413'. [ 129.860469][ T991] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.014064][ T991] usb 2-1: Using ep0 maxpacket: 8 [ 130.028389][ T991] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 130.028418][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.028436][ T991] usb 2-1: Product: syz [ 130.028449][ T991] usb 2-1: Manufacturer: syz [ 130.028461][ T991] usb 2-1: SerialNumber: syz [ 130.093185][ T991] usb 2-1: config 0 descriptor?? [ 130.127391][ T991] gspca_main: se401-2.14.0 probing 047d:5003 [ 130.675092][ T991] gspca_se401: Bayer format not supported! [ 130.918406][ T6004] usb 2-1: USB disconnect, device number 5 [ 130.968525][ T6879] xt_l2tp: wrong L2TP version: 1 [ 131.420053][ T5226] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 131.569389][ T5226] usb 4-1: Using ep0 maxpacket: 8 [ 131.576312][ T5226] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 131.576341][ T5226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.576360][ T5226] usb 4-1: Product: syz [ 131.576374][ T5226] usb 4-1: Manufacturer: syz [ 131.576388][ T5226] usb 4-1: SerialNumber: syz [ 131.653403][ T5226] usb 4-1: config 0 descriptor?? [ 131.683201][ T5226] gspca_main: sq930x-2.14.0 probing 2770:930c [ 132.132040][ T6911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.445'. [ 132.203547][ T991] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 132.319293][ T5226] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 132.352924][ T991] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 132.352949][ T991] usb 5-1: config 0 has no interface number 0 [ 132.357373][ T991] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 132.357398][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.357417][ T991] usb 5-1: Product: syz [ 132.357536][ T991] usb 5-1: Manufacturer: syz [ 132.357551][ T991] usb 5-1: SerialNumber: syz [ 132.412695][ T991] usb 5-1: config 0 descriptor?? [ 132.539293][ T5226] gspca_sq930x: Sensor ov9630 not yet treated [ 132.539391][ T5226] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 132.542523][ T5226] usb 4-1: USB disconnect, device number 3 [ 132.849961][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850059][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034964][ T6927] netlink: 32 bytes leftover after parsing attributes in process `syz.1.453'. [ 133.057267][ T991] usb 5-1: Firmware version (0.0) predates our first public release. [ 133.057290][ T991] usb 5-1: Please update to version 0.2 or newer [ 133.310060][ T991] usb 5-1: USB disconnect, device number 5 [ 134.752189][ T6982] veth0_to_team: entered promiscuous mode [ 135.640013][ T991] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 135.664781][ T7016] netlink: 64 bytes leftover after parsing attributes in process `syz.2.495'. [ 135.664813][ T7016] netlink: 136 bytes leftover after parsing attributes in process `syz.2.495'. [ 135.789352][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 135.795857][ T991] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 135.795886][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.837870][ T991] usb 5-1: config 0 descriptor?? [ 135.862749][ T991] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 136.150875][ T7029] 9pnet_rdma: rdma_create_trans (7029): problem binding to privport: 13 [ 136.474790][ T991] gspca_vc032x: reg_w err -71 [ 136.474817][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474828][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474837][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474845][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474853][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474862][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474870][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474878][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474886][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474894][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474902][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474911][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474918][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474926][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474934][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474942][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474949][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474957][ T991] gspca_vc032x: I2c Bus Busy Wait 00 [ 136.474965][ T991] gspca_vc032x: Unknown sensor... [ 136.475047][ T991] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 136.579406][ T6004] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 136.613353][ T991] usb 5-1: USB disconnect, device number 6 [ 136.729325][ T6004] usb 2-1: Using ep0 maxpacket: 8 [ 136.732376][ T6004] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.732429][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.732453][ T6004] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.732490][ T6004] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 136.732511][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.744180][ T6004] usb 2-1: config 0 descriptor?? [ 137.042538][ T7049] genirq: Flags mismatch irq 4. 00202000 (pcl818) vs. 00202080 (ttyS0) [ 137.221332][ T6004] kye 0003:0458:5005.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 137.234014][ T6004] kye 0003:0458:5005.0003: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0 [ 137.234044][ T6004] kye 0003:0458:5005.0003: tablet-enabling feature report not found [ 137.234058][ T6004] kye 0003:0458:5005.0003: tablet enabling failed [ 137.419914][ T5226] usb 2-1: USB disconnect, device number 6 [ 137.545588][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 138.099103][ T7076] Bluetooth: MGMT ver 1.23 [ 138.571611][ T7084] mkiss: ax0: crc mode is auto. [ 138.653475][ T7090] netlink: 216 bytes leftover after parsing attributes in process `syz.4.528'. [ 138.653499][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 138.653514][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 140.062488][ T7131] binder: 7130:7131 ioctl c00c620f 200000000500 returned -22 [ 141.646849][ T7183] tipc: Started in network mode [ 141.646881][ T7183] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 141.648066][ T7183] tipc: Enabled bearer , priority 10 [ 142.761534][ T991] tipc: Node number set to 10398378 [ 143.141952][ T7223] syz.2.587 uses obsolete (PF_INET,SOCK_PACKET) [ 144.112321][ T7244] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.598'. [ 144.112354][ T7244] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 144.112370][ T7244] openvswitch: netlink: Message has 6332 unknown bytes. [ 144.277445][ T7092] syz.3.530 (7092): drop_caches: 1 [ 144.625865][ T7259] syz.1.604 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 145.925839][ T7303] netlink: 'syz.2.625': attribute type 9 has an invalid length. [ 146.029385][ T6004] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.184152][ T6004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.184178][ T6004] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 146.188368][ T6004] usb 5-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice=e5.83 [ 146.188394][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.188413][ T6004] usb 5-1: Product: syz [ 146.188426][ T6004] usb 5-1: Manufacturer: syz [ 146.188440][ T6004] usb 5-1: SerialNumber: syz [ 146.252005][ T6004] usb 5-1: config 0 descriptor?? [ 146.267210][ T37] audit: type=1800 audit(1758846076.714:21): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.630" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 146.461464][ T5845] usb 5-1: USB disconnect, device number 7 [ 147.089299][ T991] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.249339][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 147.252040][ T991] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.252069][ T991] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.252102][ T991] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 147.252124][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.333029][ T991] usb 4-1: config 0 descriptor?? [ 147.679272][ T5917] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.774711][ T991] kye 0003:0458:0087.0004: unknown main item tag 0x0 [ 147.774746][ T991] kye 0003:0458:0087.0004: unknown main item tag 0x0 [ 147.774772][ T991] kye 0003:0458:0087.0004: unknown main item tag 0x0 [ 147.774796][ T991] kye 0003:0458:0087.0004: unknown main item tag 0x0 [ 147.774820][ T991] kye 0003:0458:0087.0004: unknown main item tag 0x0 [ 147.810527][ T991] kye 0003:0458:0087.0004: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0 [ 147.839330][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 147.860628][ T5917] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 147.860656][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.872806][ T5917] usb 2-1: config 0 descriptor?? [ 147.917275][ T6008] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.976781][ T6004] usb 4-1: USB disconnect, device number 4 [ 148.059354][ T6008] usb 3-1: Using ep0 maxpacket: 8 [ 148.064101][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.064130][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.064220][ T6008] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 148.064242][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.115568][ T6008] usb 3-1: config 0 descriptor?? [ 148.455674][ T5917] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 148.455715][ T5917] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 148.455741][ T5917] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 148.456528][ T5917] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 148.456560][ T5917] magicmouse 0003:05AC:0269.0005: unknown main item tag 0x0 [ 148.566375][ T5917] magicmouse 0003:05AC:0269.0005: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 148.586557][ T6008] logitech 0003:046D:C20E.0006: rdesc size test failed for formula gp [ 148.588182][ T6008] logitech 0003:046D:C20E.0006: item fetching failed at offset 8/11 [ 148.588988][ T6008] logitech 0003:046D:C20E.0006: parse failed [ 148.589083][ T6008] logitech 0003:046D:C20E.0006: probe with driver logitech failed with error -22 [ 148.764967][ T5917] usb 2-1: USB disconnect, device number 7 [ 148.877915][ T6008] usb 3-1: USB disconnect, device number 6 [ 149.094803][ T7379] fido_id[7379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 149.387605][ T7398] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.392964][ T7398] team0: Device ipvlan2 is already an upper device of the team interface [ 149.422112][ T7396] fido_id[7396]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.149516][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.682'. [ 150.329420][ T6008] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 150.479291][ T5845] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.479329][ T6008] usb 1-1: Using ep0 maxpacket: 16 [ 150.481943][ T6008] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 150.481988][ T6008] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 150.482028][ T6008] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 150.482050][ T6008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.563928][ T6008] usb 1-1: config 0 descriptor?? [ 150.639594][ T5845] usb 3-1: Using ep0 maxpacket: 16 [ 150.641918][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.641946][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.641967][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.642007][ T5845] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.642030][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.713303][ T5845] usb 3-1: config 0 descriptor?? [ 151.002919][ T7442] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 151.006754][ T7442] team0: Device ipvlan2 is already an upper device of the team interface [ 151.038815][ T6008] kye 0003:0458:5019.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 151.055158][ T6008] kye 0003:0458:5019.0007: unexpected long global item [ 151.058784][ T6008] kye 0003:0458:5019.0007: parse failed [ 151.058849][ T6008] kye 0003:0458:5019.0007: probe with driver kye failed with error -22 [ 151.209723][ T5845] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 151.209756][ T5845] microsoft 0003:045E:07DA.0008: no inputs found [ 151.209768][ T5845] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 151.244496][ T6008] usb 1-1: USB disconnect, device number 5 [ 151.386759][ T5845] usb 3-1: USB disconnect, device number 7 [ 151.636968][ T7458] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.697'. [ 151.641889][ T7458] openvswitch: netlink: Port -8 exceeds max allowable 65535 [ 152.119651][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.700'. [ 152.729325][ T991] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 152.889318][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 152.891666][ T991] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.891692][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.951455][ T991] usb 3-1: config 0 descriptor?? [ 153.334141][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.708'. [ 153.774561][ T991] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 153.775083][ T991] asix 3-1:0.0: probe with driver asix failed with error -71 [ 153.868281][ T991] usb 3-1: USB disconnect, device number 8 [ 157.954638][ C1] sched: DL replenish lagged too much [ 171.582267][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.617179][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.618424][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.643230][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.644037][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 171.735864][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 171.772599][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 171.795779][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 171.797924][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 171.819867][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.337199][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 172.349457][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.356312][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.357582][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.358689][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.497020][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 172.510064][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 172.511243][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 172.514854][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 172.515682][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 172.627859][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 172.647065][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 172.648163][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 172.665286][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 172.666209][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 173.809403][ T59] Bluetooth: hci5: command tx timeout [ 173.882335][ T59] Bluetooth: hci6: command tx timeout [ 174.439396][ T59] Bluetooth: hci7: command tx timeout [ 174.599294][ T59] Bluetooth: hci8: command tx timeout [ 174.759630][ T59] Bluetooth: hci9: command tx timeout [ 175.611815][ T7525] chnl_net:caif_netlink_parms(): no params data found [ 175.665497][ T7521] chnl_net:caif_netlink_parms(): no params data found [ 175.815832][ T7516] chnl_net:caif_netlink_parms(): no params data found [ 175.879479][ T59] Bluetooth: hci5: command tx timeout [ 175.961257][ T59] Bluetooth: hci6: command tx timeout [ 176.519345][ T59] Bluetooth: hci7: command tx timeout [ 176.679387][ T59] Bluetooth: hci8: command tx timeout [ 176.840991][ T59] Bluetooth: hci9: command tx timeout [ 177.959422][ T59] Bluetooth: hci5: command tx timeout [ 178.047002][ T59] Bluetooth: hci6: command tx timeout [ 178.599381][ T59] Bluetooth: hci7: command tx timeout [ 178.759486][ T59] Bluetooth: hci8: command tx timeout [ 178.920169][ T59] Bluetooth: hci9: command tx timeout [ 180.039343][ T59] Bluetooth: hci5: command tx timeout [ 180.119482][ T59] Bluetooth: hci6: command tx timeout [ 180.682082][ T59] Bluetooth: hci7: command tx timeout [ 180.839489][ T59] Bluetooth: hci8: command tx timeout [ 180.999497][ T59] Bluetooth: hci9: command tx timeout [ 189.321389][ T7523] chnl_net:caif_netlink_parms(): no params data found [ 194.339534][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339614][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.517128][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.535420][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.536575][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.537790][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.587955][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 231.000664][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.008669][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.031097][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.032426][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.033298][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.380265][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.382675][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.383752][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.385289][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.427746][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.575267][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 232.593983][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 232.595242][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 232.614337][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 232.622824][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 232.981681][ T5853] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 232.988537][ T5853] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 233.034039][ T5853] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 233.036031][ T5853] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 233.036904][ T5853] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 240.441164][ T59] Bluetooth: hci1: command tx timeout [ 240.441450][ T59] Bluetooth: hci2: command tx timeout [ 240.441592][ T59] Bluetooth: hci11: command tx timeout [ 240.441712][ T59] Bluetooth: hci10: command tx timeout [ 240.441826][ T59] Bluetooth: hci4: command tx timeout [ 242.519647][ T59] Bluetooth: hci11: command tx timeout [ 242.519679][ T59] Bluetooth: hci4: command tx timeout [ 242.519700][ T59] Bluetooth: hci10: command tx timeout [ 242.519719][ T59] Bluetooth: hci2: command tx timeout [ 242.519738][ T59] Bluetooth: hci1: command tx timeout [ 244.599707][ T5860] Bluetooth: hci2: command tx timeout [ 244.599739][ T5860] Bluetooth: hci10: command tx timeout [ 244.599759][ T5860] Bluetooth: hci1: command tx timeout [ 244.599778][ T5860] Bluetooth: hci4: command tx timeout [ 244.599796][ T5860] Bluetooth: hci11: command tx timeout [ 246.679691][ T59] Bluetooth: hci11: command tx timeout [ 246.679721][ T59] Bluetooth: hci4: command tx timeout [ 246.679741][ T59] Bluetooth: hci1: command tx timeout [ 246.679760][ T59] Bluetooth: hci10: command tx timeout [ 246.679779][ T59] Bluetooth: hci2: command tx timeout [ 252.718919][ T7516] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 255.742250][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.742330][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.911052][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.932889][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.934681][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.935994][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.937380][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.560734][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.577154][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.586946][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.596992][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.612492][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 291.087604][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.108565][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.117215][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.118950][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.136911][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.604594][ T5850] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 291.607399][ T5850] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 291.608564][ T5850] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 291.634826][ T5850] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 291.635649][ T5850] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 292.103340][ T5856] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 292.106120][ T5856] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 292.107252][ T5856] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 292.108446][ T5856] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 292.142912][ T5856] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 292.595784][ T59] Bluetooth: hci0: command tx timeout [ 293.159648][ T5856] Bluetooth: hci5: command tx timeout [ 294.606416][ T5856] Bluetooth: hci0: command tx timeout [ 294.679507][ T5856] Bluetooth: hci3: command tx timeout [ 294.679829][ T5856] Bluetooth: hci13: command tx timeout [ 294.679962][ T5856] Bluetooth: hci12: command tx timeout [ 295.239416][ T5860] Bluetooth: hci5: command tx timeout [ 296.697666][ T5856] Bluetooth: hci0: command tx timeout [ 296.763301][ T5860] Bluetooth: hci12: command tx timeout [ 296.763332][ T5860] Bluetooth: hci13: command tx timeout [ 296.763351][ T5860] Bluetooth: hci3: command tx timeout [ 297.319851][ T5853] Bluetooth: hci5: command tx timeout [ 298.759503][ T5860] Bluetooth: hci8: command 0x0406 tx timeout [ 298.759738][ T5860] Bluetooth: hci7: command 0x0406 tx timeout [ 298.759885][ T5860] Bluetooth: hci0: command tx timeout [ 298.839520][ T5860] Bluetooth: hci13: command tx timeout [ 298.839550][ T5860] Bluetooth: hci12: command tx timeout [ 298.839688][ T5853] Bluetooth: hci3: command tx timeout [ 299.399612][ T5853] Bluetooth: hci5: command tx timeout [ 300.920661][ T5853] Bluetooth: hci3: command tx timeout [ 300.920691][ T5853] Bluetooth: hci12: command tx timeout [ 300.920708][ T5853] Bluetooth: hci13: command tx timeout [ 317.488365][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.488441][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 351.450897][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.458434][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.460850][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.462171][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.463018][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 352.679093][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 352.697571][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 352.698746][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 352.726063][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 352.728070][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 352.891320][ T5856] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 352.918171][ T5856] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 352.927721][ T5856] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 352.937011][ T5856] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 352.938672][ T5856] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 353.519148][ T5846] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 353.527698][ T5846] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 353.528861][ T5846] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 353.559444][ T5846] Bluetooth: hci6: command tx timeout [ 353.560077][ T5846] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 353.561652][ T5846] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 353.773813][ T5846] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 353.799808][ T5846] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 353.801670][ T5846] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 353.802866][ T5846] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 353.840253][ T5846] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 354.919727][ T5856] Bluetooth: hci9: command tx timeout [ 354.999465][ T5846] Bluetooth: hci14: command tx timeout [ 355.639587][ T5846] Bluetooth: hci15: command tx timeout [ 355.639905][ T5846] Bluetooth: hci6: command tx timeout [ 355.880510][ T5856] Bluetooth: hci16: command tx timeout [ 356.999425][ T5856] Bluetooth: hci9: command tx timeout [ 357.079359][ T5856] Bluetooth: hci14: command tx timeout [ 357.723873][ T5856] Bluetooth: hci6: command tx timeout [ 357.723907][ T5856] Bluetooth: hci15: command tx timeout [ 357.969425][ T5846] Bluetooth: hci16: command tx timeout [ 359.079502][ T5846] Bluetooth: hci9: command tx timeout [ 359.159518][ T5846] Bluetooth: hci14: command tx timeout [ 359.802475][ T5846] Bluetooth: hci15: command tx timeout [ 359.802509][ T5846] Bluetooth: hci6: command tx timeout [ 360.039887][ T5856] Bluetooth: hci16: command tx timeout [ 361.159485][ T5856] Bluetooth: hci9: command tx timeout [ 361.242414][ T5856] Bluetooth: hci14: command tx timeout [ 361.879632][ T5856] Bluetooth: hci15: command tx timeout [ 362.122779][ T5856] Bluetooth: hci16: command tx timeout [ 365.339930][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 365.340056][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 365.340142][ T5856] Bluetooth: hci11: command 0x0406 tx timeout [ 365.340166][ T5856] Bluetooth: hci10: command 0x0406 tx timeout [ 378.622754][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.622833][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.919844][ T38] INFO: task syz.3.710:7485 blocked for more than 143 seconds. [ 386.919873][ T38] Not tainted syzkaller #0 [ 386.919883][ T38] Blocked by coredump. [ 386.919888][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.919895][ T38] task:syz.3.710 state:D stack:25608 pid:7485 tgid:7483 ppid:5849 task_flags:0x40054c flags:0x00004002 [ 386.919954][ T38] Call Trace: [ 386.919960][ T38] [ 386.919974][ T38] __schedule+0x16f3/0x4c20 [ 386.920011][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 386.920031][ T38] ? arch_stack_walk+0xfc/0x150 [ 386.920070][ T38] ? __pfx___schedule+0x10/0x10 [ 386.920112][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.920146][ T38] rt_mutex_schedule+0x77/0xf0 [ 386.920164][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 386.920186][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 386.920225][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 386.920249][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 386.920271][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 386.920309][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 386.920339][ T38] ? tun_chr_close+0x41/0x1c0 [ 386.920361][ T38] mutex_lock_nested+0x16a/0x1d0 [ 386.920384][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 386.920407][ T38] tun_chr_close+0x41/0x1c0 [ 386.920432][ T38] __fput+0x45b/0xa80 [ 386.920463][ T38] task_work_run+0x1d4/0x260 [ 386.920484][ T38] ? __pfx_task_work_run+0x10/0x10 [ 386.920503][ T38] ? do_exit+0x6b0/0x2300 [ 386.920519][ T38] ? kmem_cache_free+0x195/0x510 [ 386.920547][ T38] do_exit+0x6b5/0x2300 [ 386.920564][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.920593][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.920619][ T38] ? __pfx_do_exit+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 386.920632][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 386.920657][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 386.920688][ T38] do_group_exit+0x21c/0x2d0 [ 386.920712][ T38] get_signal+0x125e/0x1310 [ 386.920756][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 386.920778][ T38] ? __x64_sys_sendmsg+0x236/0x260 [ 386.920799][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0[ 386.920799][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.920837][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 386.920863][ T38] exit_to_user_mode_loop+0x75/0x110 [ 386.920885][ T38] do_syscall_64+0x2bd/0x3b0 [ 386.920901][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.920924][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.920943][ T38] ? clear_bhb_loop+0x60/0xb0 [ 386.920964][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.920986][ T38] RIP: 0033:0x7fc5165eeec9 [ 386.921006][ T38] RSP: 002b:00007fc514856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.921025][ T38] RAX: 000000000000005c RBX: 00007fc516845fa0 RCX: 00007fc5165eeec9 [ 386.921038][ T38] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000003 [ 386.921050][ T38] RBP: 00007fc516671f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.921061][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.921072][ T38] R13: 00007fc516846038 R14: 00007fc516845fa0 R15: 00007ffcfb45d2c8 [ 386.921103][ T38] [ 386.921123][ T38] INFO: task syz-executor:7571 blocked for more than 143 seconds. [ 386.921136][ T38] Not tainted syzkaller #0 [ 386.921151][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.921159][ T38] task:syz-executor state:D stack:26952 pid:7571 tgid:7571 ppid:1 task_flags:0x400140 flags:0x00004004 [ 386.921203][ T38] Call Trace: [ 386.921208][ T38] [ 386.921220][ T38] __schedule+0x16f3/0x4c20 [ 386.921271][ T38] ? __pfx___schedule+0x10/0x10 [ 386.921313][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.921339][ T38] rt_mutex_schedule+0x77/0xf0 [ 386.921356][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 386.921376][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 386.921415][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 386.921438][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 386.921459][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 386.921478][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.921510][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.921537][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 386.921564][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.921580][ T38] mutex_lock_nested+0x16a/0x1d0 [ 386.921607][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 386.921636][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.921674][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.921692][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 386.921715][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.921738][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 386.921760][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.921800][ T38] netlink_rcv_skb+0x208/0x470 [ 386.921821][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.921843][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.921866][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.921899][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.921930][ T38] netlink_unicast+0x846/0xa10 [ 386.921961][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 386.921985][ T38] ? netlink_sendmsg+0x642/0xb30 [ 386.922005][ T38] ? skb_put+0x11b/0x210 [ 386.922033][ T38] netlink_sendmsg+0x805/0xb30 [ 386.922066][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.922097][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.922115][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.922144][ T38] __sock_sendmsg+0x219/0x270 [ 386.922170][ T38] __sys_sendto+0x3c7/0x520 [ 386.922197][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 386.922248][ T38] ? exc_page_fault+0x76/0xf0 [ 386.922276][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 386.922302][ T38] __x64_sys_sendto+0xde/0x100 [ 386.922330][ T38] do_syscall_64+0xfa/0x3b0 [ 386.922346][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.922370][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.922387][ T38] ? clear_bhb_loop+0x60/0xb0 [ 386.922409][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.922425][ T38] RIP: 0033:0x7f7a7db90d5c [ 386.922440][ T38] RSP: 002b:00007ffffdbd76d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 386.922458][ T38] RAX: ffffffffffffffda RBX: 00007f7a7e914620 RCX: 00007f7a7db90d5c [ 386.922471][ T38] RDX: 0000000000000028 RSI: 00007f7a7e914670 RDI: 0000000000000003 [ 386.922483][ T38] RBP: 0000000000000000 R08: 00007ffffdbd7724 R09: 000000000000000c [ 386.922494][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 386.922505][ T38] R13: 0000000000000000 R14: 00007f7a7e914670 R15: 0000000000000000 [ 386.922534][ T38] [ 386.922541][ T38] INFO: task syz-executor:7574 blocked for more than 143 seconds. [ 386.922553][ T38] Not tainted syzkaller #0 [ 386.922562][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.922570][ T38] task:syz-executor state:D stack:26952 pid:7574 tgid:7574 ppid:1 task_flags:0x400140 flags:0x00004004 [ 386.922612][ T38] Call Trace: [ 386.922618][ T38] [ 386.922629][ T38] __schedule+0x16f3/0x4c20 [ 386.922679][ T38] ? __pfx___schedule+0x10/0x10 [ 386.922722][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.922748][ T38] rt_mutex_schedule+0x77/0xf0 [ 386.922765][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 386.922787][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 386.922826][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 386.922849][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 386.922871][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 386.922889][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.922922][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.922948][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 386.922974][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.922991][ T38] mutex_lock_nested+0x16a/0x1d0 [ 386.923017][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 386.923047][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.923085][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.923103][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 386.923125][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.923154][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 386.923175][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.923214][ T38] netlink_rcv_skb+0x208/0x470 [ 386.923234][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.923256][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.923280][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.923314][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.923345][ T38] netlink_unicast+0x846/0xa10 [ 386.923375][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 386.923398][ T38] ? netlink_sendmsg+0x642/0xb30 [ 386.923419][ T38] ? skb_put+0x11b/0x210 [ 386.923447][ T38] netlink_sendmsg+0x805/0xb30 [ 386.923479][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.923511][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.923528][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.923552][ T38] __sock_sendmsg+0x219/0x270 [ 386.923576][ T38] __sys_sendto+0x3c7/0x520 [ 386.923602][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 386.923653][ T38] ? exc_page_fault+0x76/0xf0 [ 386.923681][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 386.923706][ T38] __x64_sys_sendto+0xde/0x100 [ 386.923733][ T38] do_syscall_64+0xfa/0x3b0 [ 386.923749][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.923773][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.923790][ T38] ? clear_bhb_loop+0x60/0xb0 [ 386.923811][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.923828][ T38] RIP: 0033:0x7f65ed6e0d5c [ 386.923842][ T38] RSP: 002b:00007ffc35a2f960 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 386.923860][ T38] RAX: ffffffffffffffda RBX: 00007f65ee464620 RCX: 00007f65ed6e0d5c [ 386.923873][ T38] RDX: 0000000000000028 RSI: 00007f65ee464670 RDI: 0000000000000003 [ 386.923885][ T38] RBP: 0000000000000000 R08: 00007ffc35a2f9b4 R09: 000000000000000c [ 386.923895][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 386.923906][ T38] R13: 0000000000000000 R14: 00007f65ee464670 R15: 0000000000000000 [ 386.923935][ T38] [ 386.923943][ T38] INFO: task syz-executor:7576 blocked for more than 143 seconds. [ 386.923954][ T38] Not tainted syzkaller #0 [ 386.923963][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.923971][ T38] task:syz-executor state:D stack:26952 pid:7576 tgid:7576 ppid:1 task_flags:0x400140 flags:0x00004004 [ 386.924013][ T38] Call Trace: [ 386.924019][ T38] [ 386.924030][ T38] __schedule+0x16f3/0x4c20 [ 386.924080][ T38] ? __pfx___schedule+0x10/0x10 [ 386.924123][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.924156][ T38] rt_mutex_schedule+0x77/0xf0 [ 386.924173][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 386.924194][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 386.924233][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 386.924257][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 386.924279][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 386.924297][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.924330][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.924356][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 386.924382][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.924400][ T38] mutex_lock_nested+0x16a/0x1d0 [ 386.924426][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 386.924455][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.924493][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.924511][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 386.924533][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.924556][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 386.924578][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.924618][ T38] netlink_rcv_skb+0x208/0x470 [ 386.924638][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.924660][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.924684][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.924719][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.924750][ T38] netlink_unicast+0x846/0xa10 [ 386.924781][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 386.924804][ T38] ? netlink_sendmsg+0x642/0xb30 [ 386.924842][ T38] ? skb_put+0x11b/0x210 [ 386.924869][ T38] netlink_sendmsg+0x805/0xb30 [ 386.924902][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.924933][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.924951][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.924975][ T38] __sock_sendmsg+0x219/0x270 [ 386.924998][ T38] __sys_sendto+0x3c7/0x520 [ 386.925024][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 386.925076][ T38] ? exc_page_fault+0x76/0xf0 [ 386.925104][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 386.925129][ T38] __x64_sys_sendto+0xde/0x100 [ 386.925166][ T38] do_syscall_64+0xfa/0x3b0 [ 386.925181][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.925204][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.925222][ T38] ? clear_bhb_loop+0x60/0xb0 [ 386.925243][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.925261][ T38] RIP: 0033:0x7f4264d10d5c [ 386.925274][ T38] RSP: 002b:00007fff1b5e9640 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 386.925292][ T38] RAX: ffffffffffffffda RBX: 00007f4265a94620 RCX: 00007f4264d10d5c [ 386.925305][ T38] RDX: 0000000000000028 RSI: 00007f4265a94670 RDI: 0000000000000003 [ 386.925317][ T38] RBP: 0000000000000000 R08: 00007fff1b5e9694 R09: 000000000000000c [ 386.925328][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 386.925339][ T38] R13: 0000000000000000 R14: 00007f4265a94670 R15: 0000000000000000 [ 386.925368][ T38] [ 386.925375][ T38] INFO: task syz-executor:7578 blocked for more than 143 seconds. [ 386.925387][ T38] Not tainted syzkaller #0 [ 386.925396][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 386.925404][ T38] task:syz-executor state:D stack:26952 pid:7578 tgid:7578 ppid:1 task_flags:0x400140 flags:0x00004004 [ 386.925447][ T38] Call Trace: [ 386.925452][ T38] [ 386.925464][ T38] __schedule+0x16f3/0x4c20 [ 386.925515][ T38] ? __pfx___schedule+0x10/0x10 [ 386.925558][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.925585][ T38] rt_mutex_schedule+0x77/0xf0 [ 386.925602][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 386.925622][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 386.925661][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 386.925684][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 386.925706][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 386.925725][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.925758][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.925784][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 386.925811][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 386.925827][ T38] mutex_lock_nested+0x16a/0x1d0 [ 386.925854][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 386.925884][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.925921][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 386.925940][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 386.925961][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.925984][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 386.926006][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.926047][ T38] netlink_rcv_skb+0x208/0x470 [ 386.926067][ T38] ? __lock_acquire+0xab9/0xd20 [ 386.926089][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 386.926113][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 386.926154][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.926185][ T38] netlink_unicast+0x846/0xa10 [ 386.926215][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 386.926239][ T38] ? netlink_sendmsg+0x642/0xb30 [ 386.926259][ T38] ? skb_put+0x11b/0x210 [ 386.926286][ T38] netlink_sendmsg+0x805/0xb30 [ 386.926318][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.926350][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.926367][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.926390][ T38] __sock_sendmsg+0x219/0x270 [ 386.926415][ T38] __sys_sendto+0x3c7/0x520 [ 386.926441][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 386.926493][ T38] ? exc_page_fault+0x76/0xf0 [ 386.926520][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 386.926546][ T38] __x64_sys_sendto+0xde/0x100 [ 386.926573][ T38] do_syscall_64+0xfa/0x3b0 [ 386.926589][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.926612][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.926630][ T38] ? clear_bhb_loop+0x60/0xb0 [ 386.926651][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.926668][ T38] RIP: 0033:0x7f8cd78e0d5c [ 386.926683][ T38] RSP: 002b:00007ffc3f2aa8f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 386.926700][ T38] RAX: ffffffffffffffda RBX: 00007f8cd8664620 RCX: 00007f8cd78e0d5c [ 386.926713][ T38] RDX: 0000000000000028 RSI: 00007f8cd8664670 RDI: 0000000000000003 [ 386.926725][ T38] RBP: 0000000000000000 R08: 00007ffc3f2aa944 R09: 000000000000000c [ 386.926736][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 386.926747][ T38] R13: 0000000000000000 R14: 00007f8cd8664670 R15: 0000000000000000 [ 386.926776][ T38] [ 386.926800][ T38] [ 386.926800][ T38] Showing all locks held in the system: [ 386.926809][ T38] 3 locks held by kworker/0:1/10: [ 386.926819][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.926866][ T38] #1: ffffc900000f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.926906][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 386.926950][ T38] 2 locks held by kworker/u8:0/12: [ 386.926962][ T38] 2 locks held by rcuc/1/28: [ 386.926972][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.927015][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.927060][ T38] 4 locks held by kworker/1:0/31: [ 386.927070][ T38] 1 lock held by khungtaskd/38: [ 386.927080][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 386.927124][ T38] 5 locks held by kworker/u9:0/59: [ 386.927134][ T38] #0: ffff888021732138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.927184][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.927228][ T38] #2: ffff888033e1ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.927271][ T38] #3: ffff888033e1c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.927317][ T38] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.927365][ T38] 3 locks held by kworker/u8:4/67: [ 386.927375][ T38] #0: ffff88802ff8c138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.927419][ T38] #1: ffffc9000152fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.927463][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 386.927516][ T38] 4 locks held by kworker/1:2/1198: [ 386.927526][ T38] #0: ffff88805b033538 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.927575][ T38] #1: ffffc90004fdfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.927631][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.927674][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.927719][ T38] 3 locks held by kworker/u8:13/1557: [ 386.927729][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.927773][ T38] #1: ffffc90005befbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.927817][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 386.927872][ T38] 2 locks held by getty/5600: [ 386.927882][ T38] #0: ffff88823bf2c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 386.927929][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 386.927974][ T38] 1 lock held by syz-executor/5840: [ 386.927983][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 386.928026][ T38] 5 locks held by kworker/u9:4/5850: [ 386.928036][ T38] #0: ffff888061c1d938 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.928084][ T38] #1: ffffc90004cffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.928128][ T38] #2: ffff88804b1fce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.928175][ T38] #3: ffff88804b1fc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.928221][ T38] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.928267][ T38] 6 locks held by kworker/u9:5/5853: [ 386.928277][ T38] #0: ffff88802b600938 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.928320][ T38] #1: ffffc90004d2fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.928364][ T38] #2: ffff88801cb4ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.928406][ T38] #3: ffff88801cb4c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.928451][ T38] #4: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 386.928497][ T38] #5: ffff88805341e358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 386.928541][ T38] 1 lock held by syz-executor/5857: [ 386.928552][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 386.928593][ T38] 4 locks held by kworker/u9:8/5860: [ 386.928603][ T38] #0: ffff888027bd8938 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.928646][ T38] #1: ffffc90004dafbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.928690][ T38] #2: ffff88805ab98e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 386.928732][ T38] #3: ffff88805ab980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 386.928783][ T38] 4 locks held by kworker/1:7/6023: [ 386.928794][ T38] #0: ffff88805b3da538 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 386.928842][ T38] #1: ffffc90005637bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 386.928898][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 386.928941][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 386.928985][ T38] 1 lock held by syz.3.710/7485: [ 386.928995][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 386.929042][ T38] 2 locks held by kworker/1:9/7484: [ 386.929052][ T38] 7 locks held by kworker/1:10/7486: [ 386.929063][ T38] 1 lock held by syz.1.717/7500: [ 386.929072][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 386.929118][ T38] 1 lock held by syz.4.718/7505: [ 386.929128][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 387.189464][ T38] 1 lock held by syz-executor/7515: [ 387.189476][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 387.189528][ T38] 1 lock held by syz-executor/7516: [ 387.189538][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 387.189583][ T38] 1 lock held by syz-executor/7521: [ 387.189593][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 387.189639][ T38] 1 lock held by syz-executor/7523: [ 387.189649][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 387.189694][ T38] 1 lock held by syz-executor/7525: [ 387.189704][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 387.189752][ T38] 3 locks held by syz-executor/7564: [ 387.189762][ T38] #0: ffff88802f574e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 387.189807][ T38] #1: ffff88802f5740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 387.189853][ T38] #2: ffffffff8ee3b3d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 387.189894][ T38] 1 lock held by syz-executor/7571: [ 387.189904][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.189947][ T38] 1 lock held by syz-executor/7574: [ 387.189956][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.189998][ T38] 1 lock held by syz-executor/7576: [ 387.190008][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190049][ T38] 1 lock held by syz-executor/7578: [ 387.190059][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190101][ T38] 1 lock held by syz-executor/7597: [ 387.190111][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190159][ T38] 1 lock held by syz-executor/7600: [ 387.190169][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190210][ T38] 1 lock held by syz-executor/7603: [ 387.190220][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190261][ T38] 1 lock held by syz-executor/7606: [ 387.190271][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190313][ T38] 1 lock held by syz-executor/7609: [ 387.190323][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190366][ T38] 1 lock held by syz-executor/7627: [ 387.190376][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190417][ T38] 1 lock held by syz-executor/7632: [ 387.190427][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190468][ T38] 1 lock held by syz-executor/7634: [ 387.190478][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190519][ T38] 1 lock held by syz-executor/7637: [ 387.190529][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190571][ T38] 1 lock held by syz-executor/7639: [ 387.190580][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 387.190621][ T38] 1 lock held by dhcpcd/7644: [ 387.190631][ T38] #0: ffff88803b7f2438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.190680][ T38] 1 lock held by dhcpcd/7645: [ 387.190689][ T38] #0: ffff88803dc696b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.190736][ T38] 1 lock held by dhcpcd/7646: [ 387.190746][ T38] #0: ffff88803dc6a438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.190793][ T38] 1 lock held by dhcpcd/7647: [ 387.190803][ T38] #0: ffff88803dd12438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.190850][ T38] 1 lock held by dhcpcd/7648: [ 387.190860][ T38] #0: ffff88803dd13f38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.190906][ T38] 1 lock held by dhcpcd/7649: [ 387.190915][ T38] #0: ffff88803dd10ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 387.190964][ T38] [ 387.190968][ T38] ============================================= [ 387.190968][ T38] [ 387.190990][ T38] NMI backtrace for cpu 0 [ 387.191018][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.191064][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.191087][ T38] Call Trace: [ 387.191103][ T38] [ 387.191122][ T38] dump_stack_lvl+0x189/0x250 [ 387.191150][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.191172][ T38] ? __pfx__printk+0x10/0x10 [ 387.191204][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 387.191229][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 387.191253][ T38] ? __pfx__printk+0x10/0x10 [ 387.191276][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 387.191299][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 387.191322][ T38] watchdog+0xf93/0xfe0 [ 387.191349][ T38] ? watchdog+0x1de/0xfe0 [ 387.191379][ T38] kthread+0x70e/0x8a0 [ 387.191405][ T38] ? __pfx_watchdog+0x10/0x10 [ 387.191426][ T38] ? __pfx_kthread+0x10/0x10 [ 387.191453][ T38] ? __pfx_kthread+0x10/0x10 [ 387.191476][ T38] ret_from_fork+0x436/0x7d0 [ 387.191500][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 387.191526][ T38] ? __switch_to_asm+0x39/0x70 [ 387.191541][ T38] ? __switch_to_asm+0x33/0x70 [ 387.191556][ T38] ? __pfx_kthread+0x10/0x10 [ 387.191580][ T38] ret_from_fork_asm+0x1a/0x30 [ 387.191611][ T38] [ 387.191618][ T38] Sending NMI from CPU 0 to CPUs 1: [ 387.191643][ C1] NMI backtrace for cpu 1 [ 387.191656][ C1] CPU: 1 UID: 0 PID: 7486 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.191673][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.191683][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 387.191704][ C1] RIP: 0010:unwind_next_frame+0x199a/0x2390 [ 387.191724][ C1] Code: 74 28 80 3d 98 70 94 0d 00 75 1f c6 05 8f 70 94 0d 01 48 c7 c7 e0 47 08 8b be 66 03 00 00 48 c7 c2 80 48 08 8b e8 b6 54 29 00 <48> c7 c7 80 8d 9a 8d 4c 89 fe e8 97 3a 29 00 e8 42 f9 32 00 89 d8 [ 387.191736][ C1] RSP: 0018:ffffc9001d2fe1d8 EFLAGS: 00000202 [ 387.191748][ C1] RAX: 0000000000000001 RBX: ffffffff902d1901 RCX: bd54fc01f0de8500 [ 387.191759][ C1] RDX: ffffc9001d2fe201 RSI: ffffffff8b621660 RDI: ffffffff8b621620 [ 387.191770][ C1] RBP: dffffc0000000000 R08: ffffc9001d2feed0 R09: 0000000000000000 [ 387.191780][ C1] R10: ffffc9001d2fe2f8 R11: fffff52003a5fc61 R12: ffffc9001d2feee0 [ 387.191791][ C1] R13: ffffc9001d2f8000 R14: ffffc9001d2fe2a8 R15: ffffffff8172c165 [ 387.191803][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 387.191815][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 387.191825][ C1] CR2: 000055e10eebb150 CR3: 0000000036b44000 CR4: 00000000003526f0 [ 387.191839][ C1] Call Trace: [ 387.191845][ C1] [ 387.191854][ C1] ? unwind_next_frame+0xa5/0x2390 [ 387.191878][ C1] ? NF_HOOK+0x206/0x3a0 [ 387.191898][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 387.191913][ C1] arch_stack_walk+0x11c/0x150 [ 387.191935][ C1] ? NF_HOOK+0x309/0x3a0 [ 387.191954][ C1] stack_trace_save+0x9c/0xe0 [ 387.191968][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 387.191987][ C1] kasan_save_track+0x3e/0x80 [ 387.192002][ C1] ? kasan_save_track+0x3e/0x80 [ 387.192016][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 387.192032][ C1] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 387.192049][ C1] ? __alloc_skb+0x112/0x2d0 [ 387.192066][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 387.192084][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 387.192099][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 387.192112][ C1] ? nft_do_chain+0x409/0x1920 [ 387.192125][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 387.192139][ C1] ? nf_hook_slow+0xc5/0x220 [ 387.192156][ C1] ? NF_HOOK+0x206/0x3a0 [ 387.192194][ C1] __kasan_slab_alloc+0x6c/0x80 [ 387.192210][ C1] ? __alloc_skb+0x112/0x2d0 [ 387.192227][ C1] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 387.192247][ C1] __alloc_skb+0x112/0x2d0 [ 387.192267][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 387.192292][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 387.192310][ C1] ? nft_synproxy_do_eval+0x3a0/0x570 [ 387.192324][ C1] ? synproxy_pernet+0x45/0x270 [ 387.192342][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 387.192360][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 387.192376][ C1] ? nf_ip_checksum+0x13c/0x510 [ 387.192394][ C1] nft_synproxy_do_eval+0x345/0x570 [ 387.192411][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 387.192435][ C1] nft_do_chain+0x409/0x1920 [ 387.192448][ C1] ? NF_HOOK+0x309/0x3a0 [ 387.192464][ C1] ? __netif_receive_skb+0x143/0x380 [ 387.192480][ C1] ? process_backlog+0x31e/0x900 [ 387.192497][ C1] ? __local_bh_enable_ip+0x179/0x270 [ 387.192513][ C1] ? wg_packet_tx_worker+0x586/0x7c0 [ 387.192530][ C1] ? worker_thread+0x8a0/0xda0 [ 387.192545][ C1] ? kthread+0x70e/0x8a0 [ 387.192566][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 387.192594][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 387.192613][ C1] nft_do_chain_inet+0x25d/0x340 [ 387.192627][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 387.192642][ C1] ? __lock_acquire+0xab9/0xd20 [ 387.192664][ C1] ? NF_HOOK+0x9a/0x3a0 [ 387.192681][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 387.192696][ C1] nf_hook_slow+0xc5/0x220 [ 387.192716][ C1] NF_HOOK+0x206/0x3a0 [ 387.192733][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 387.192750][ C1] ? NF_HOOK+0x9a/0x3a0 [ 387.192767][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 387.192783][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 387.192802][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 387.192820][ C1] ? skb_dst+0x4f/0xd0 [ 387.192837][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 387.192855][ C1] NF_HOOK+0x309/0x3a0 [ 387.192877][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 387.192894][ C1] ? NF_HOOK+0x9a/0x3a0 [ 387.192910][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 387.192928][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 387.192950][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 387.192966][ C1] __netif_receive_skb+0x143/0x380 [ 387.192982][ C1] ? rt_spin_unlock+0x65/0x80 [ 387.193000][ C1] ? process_backlog+0x27b/0x900 [ 387.193017][ C1] process_backlog+0x31e/0x900 [ 387.193039][ C1] __napi_poll+0xb6/0x540 [ 387.193058][ C1] net_rx_action+0x707/0xe00 [ 387.193084][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 387.193102][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 387.193125][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 387.193146][ C1] handle_softirqs+0x22f/0x710 [ 387.193167][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 387.193188][ C1] __local_bh_enable_ip+0x179/0x270 [ 387.193204][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 387.193221][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 387.193244][ C1] wg_packet_decrypt_worker+0x2e0/0xce0 [ 387.193266][ C1] ? wg_packet_decrypt_worker+0xcd/0xce0 [ 387.193289][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 387.193348][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 387.193368][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 387.193386][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 387.193402][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 387.193418][ C1] process_scheduled_works+0xade/0x17b0 [ 387.193448][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 387.193473][ C1] worker_thread+0x8a0/0xda0 [ 387.193490][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 387.193513][ C1] ? __kthread_parkme+0x7b/0x200 [ 387.193534][ C1] kthread+0x70e/0x8a0 [ 387.193593][ C1] ? __pfx_worker_thread+0x10/0x10 [ 387.193611][ C1] ? __pfx_kthread+0x10/0x10 [ 387.193631][ C1] ? __pfx_kthread+0x10/0x10 [ 387.193650][ C1] ret_from_fork+0x436/0x7d0 [ 387.193668][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 387.193687][ C1] ? __switch_to_asm+0x39/0x70 [ 387.193699][ C1] ? __switch_to_asm+0x33/0x70 [ 387.193712][ C1] ? __pfx_kthread+0x10/0x10 [ 387.193731][ C1] ret_from_fork_asm+0x1a/0x30 [ 387.193752][ C1] [ 387.194646][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 387.194660][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 387.194680][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.194689][ T38] Call Trace: [ 387.194696][ T38] [ 387.194704][ T38] dump_stack_lvl+0x99/0x250 [ 387.194728][ T38] ? __asan_memcpy+0x40/0x70 [ 387.194747][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.194770][ T38] ? __pfx__printk+0x10/0x10 [ 387.194800][ T38] vpanic+0x281/0x750 [ 387.194824][ T38] ? __pfx_vpanic+0x10/0x10 [ 387.194844][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 387.194862][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.194896][ T38] panic+0xb9/0xc0 [ 387.194917][ T38] ? __pfx_panic+0x10/0x10 [ 387.194942][ T38] ? irq_work_queue+0xc3/0x140 [ 387.194966][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 387.194990][ T38] watchdog+0xfd2/0xfe0 [ 387.195015][ T38] ? watchdog+0x1de/0xfe0 [ 387.195041][ T38] kthread+0x70e/0x8a0 [ 387.195067][ T38] ? __pfx_watchdog+0x10/0x10 [ 387.195086][ T38] ? __pfx_kthread+0x10/0x10 [ 387.195119][ T38] ? __pfx_kthread+0x10/0x10 [ 387.195143][ T38] ret_from_fork+0x436/0x7d0 [ 387.195166][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 387.195193][ T38] ? __switch_to_asm+0x39/0x70 [ 387.195208][ T38] ? __switch_to_asm+0x33/0x70 [ 387.195223][ T38] ? __pfx_kthread+0x10/0x10 [ 387.195251][ T38] ret_from_fork_asm+0x1a/0x30 [ 387.195283][ T38] [ 387.195594][ T38] Kernel Offset: disabled