last executing test programs: 24.755893662s ago: executing program 0 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 24.056199085s ago: executing program 0 (id=262): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x400261f2, 0x0) 23.691872003s ago: executing program 4 (id=264): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, 0x0, 0x40624, 0x10243}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 22.892270109s ago: executing program 4 (id=266): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 22.886812669s ago: executing program 2 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 22.708137762s ago: executing program 4 (id=269): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009058389b5"], 0x0) creat(0x0, 0x51) syz_usb_connect(0x0, 0x4a, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x3, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3efc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x4, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x7, 0x6, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x4000000) pipe2$watch_queue(&(0x7f0000000140), 0x80) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x3, [{0x5, 0x3}, {0x0, 0x4}]}, @ptr, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x2e]}}, 0x0, 0x63}, 0x28) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 21.876236399s ago: executing program 2 (id=272): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 21.698477402s ago: executing program 0 (id=273): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 21.653347203s ago: executing program 2 (id=274): landlock_create_ruleset(&(0x7f0000000040)={0x8000, 0x3, 0x1}, 0x18, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x1a1042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x3, 0x27, 0xaf0, 0x71, 0x1, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) 20.488122866s ago: executing program 0 (id=275): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed4010203010902"], 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 20.369775698s ago: executing program 2 (id=278): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000680)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x1000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000001200)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0xaade}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x13, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@call={0x61, 0x11, 0x78}]}, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) 19.166844132s ago: executing program 3 (id=281): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20022}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 19.071200054s ago: executing program 1 (id=282): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 18.932168267s ago: executing program 3 (id=283): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee43f6642531e08004800002c0000e000021190476d0000800100004e20000c907861100001"], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340), &(0x7f00000000c0)) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 18.931964217s ago: executing program 1 (id=284): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) capset(&(0x7f0000000000)={0x20080522}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 18.902116547s ago: executing program 4 (id=285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x890, &(0x7f0000000300)={0x0, 0xd73, 0x80, 0xfffffffd, 0x281}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 18.780409319s ago: executing program 1 (id=286): unshare(0x24020400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) 18.704217001s ago: executing program 4 (id=287): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$fb(r1, &(0x7f0000000040)='u', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 18.628221933s ago: executing program 1 (id=288): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582aef4"], 0x0) 18.441129996s ago: executing program 3 (id=289): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 18.26383509s ago: executing program 0 (id=290): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18.26356212s ago: executing program 3 (id=291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000010900010073797a31000000001800048014000180090001006d61737100000000040002800900020073797a32000000000b000740636558aa5035c10014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)=ANY=[@ANYBLOB="78000000070a0101"], 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x80) 18.049804324s ago: executing program 3 (id=292): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xd, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 17.884726237s ago: executing program 3 (id=293): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x5, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 17.606211303s ago: executing program 4 (id=294): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_open_dev$MSR(0x0, 0x0, 0x0) 17.484101175s ago: executing program 2 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) pipe2(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) close(0x3) 17.305290729s ago: executing program 0 (id=296): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009058389b5"], 0x0) creat(0x0, 0x51) syz_usb_connect(0x0, 0x4a, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x3, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3efc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x4, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x7, 0x6, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x4000000) pipe2$watch_queue(&(0x7f0000000140), 0x80) socket$nl_crypto(0x10, 0x3, 0x15) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 16.561607134s ago: executing program 1 (id=297): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) 16.484108365s ago: executing program 2 (id=298): bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0xc, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 16.380215417s ago: executing program 1 (id=299): unshare(0x20060400) r0 = socket$inet6(0xa, 0x2, 0x3a) bind(r0, 0x0, 0x0) 2.195781367s ago: executing program 32 (id=296): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009058389b5"], 0x0) creat(0x0, 0x51) syz_usb_connect(0x0, 0x4a, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16=0x0], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x3, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3efc}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x4, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x7, 0x6, 0x2}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x4000000) pipe2$watch_queue(&(0x7f0000000140), 0x80) socket$nl_crypto(0x10, 0x3, 0x15) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 2.02741589s ago: executing program 33 (id=293): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000480)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x5, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 1.467273401s ago: executing program 34 (id=294): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_open_dev$MSR(0x0, 0x0, 0x0) 88.916348ms ago: executing program 35 (id=299): unshare(0x20060400) r0 = socket$inet6(0xa, 0x2, 0x3a) bind(r0, 0x0, 0x0) 0s ago: executing program 36 (id=298): bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0xc, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) kernel console output (not intermixed with test programs): [ 34.621744][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.630617][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: [ 35.141940][ T4020] ssh-keygen (4020) used greatest stack depth: 18896 bytes left OK syzkaller Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. syzkaller login: [ 56.802913][ T4258] cgroup: Unknown subsys name 'net' [ 56.917607][ T4258] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.186530][ T4258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.056928][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.064773][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.074068][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.081892][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.089884][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.097807][ T4283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.101422][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.106009][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.112933][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.119674][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.127304][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.133769][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.140546][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.147996][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.154446][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.161360][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.175362][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.175740][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.182767][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.190453][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.196697][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.203804][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.211277][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.225769][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.233552][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.240922][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.257537][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.267444][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.275093][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.282213][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.606754][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 60.716654][ T4268] chnl_net:caif_netlink_parms(): no params data found [ 60.775532][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.788769][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.799633][ T4276] device bridge_slave_0 entered promiscuous mode [ 60.811393][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 60.831672][ T4269] chnl_net:caif_netlink_parms(): no params data found [ 60.841992][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.849158][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.856855][ T4276] device bridge_slave_1 entered promiscuous mode [ 60.877059][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 60.930124][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.954024][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.997308][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.004629][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.012336][ T4268] device bridge_slave_0 entered promiscuous mode [ 61.045843][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.053040][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.060719][ T4268] device bridge_slave_1 entered promiscuous mode [ 61.083109][ T4276] team0: Port device team_slave_0 added [ 61.108191][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.115390][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.124191][ T4269] device bridge_slave_0 entered promiscuous mode [ 61.132206][ T4276] team0: Port device team_slave_1 added [ 61.145342][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.152450][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.160351][ T4275] device bridge_slave_0 entered promiscuous mode [ 61.173793][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.180838][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.188690][ T4279] device bridge_slave_0 entered promiscuous mode [ 61.196021][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.205749][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.213516][ T4269] device bridge_slave_1 entered promiscuous mode [ 61.227998][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.235198][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.243489][ T4275] device bridge_slave_1 entered promiscuous mode [ 61.252938][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.262162][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.269443][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.277301][ T4279] device bridge_slave_1 entered promiscuous mode [ 61.304916][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.326844][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.334049][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.360192][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.393090][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.402660][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.409616][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.435938][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.448574][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.466909][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.478222][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.488400][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.511904][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.523254][ T4268] team0: Port device team_slave_0 added [ 61.558999][ T4269] team0: Port device team_slave_0 added [ 61.567008][ T4268] team0: Port device team_slave_1 added [ 61.595242][ T4279] team0: Port device team_slave_0 added [ 61.602082][ T4269] team0: Port device team_slave_1 added [ 61.624214][ T4275] team0: Port device team_slave_0 added [ 61.630380][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.637660][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.663768][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.676583][ T4279] team0: Port device team_slave_1 added [ 61.683084][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.690031][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.716370][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.740704][ T4275] team0: Port device team_slave_1 added [ 61.765579][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.772540][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.798668][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.829986][ T4276] device hsr_slave_0 entered promiscuous mode [ 61.837063][ T4276] device hsr_slave_1 entered promiscuous mode [ 61.844521][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.851461][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.877612][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.899312][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.906310][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.932786][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.944450][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.951400][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.977816][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.002682][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.009640][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.035645][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.049760][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.057148][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.083242][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.139809][ T4268] device hsr_slave_0 entered promiscuous mode [ 62.146884][ T4268] device hsr_slave_1 entered promiscuous mode [ 62.153620][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.161397][ T4268] Cannot create hsr debugfs directory [ 62.182522][ T4275] device hsr_slave_0 entered promiscuous mode [ 62.189249][ T4275] device hsr_slave_1 entered promiscuous mode [ 62.195953][ T4275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.204039][ T4275] Cannot create hsr debugfs directory [ 62.212460][ T4269] device hsr_slave_0 entered promiscuous mode [ 62.219149][ T4269] device hsr_slave_1 entered promiscuous mode [ 62.226468][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.234109][ T4269] Cannot create hsr debugfs directory [ 62.273308][ T4279] device hsr_slave_0 entered promiscuous mode [ 62.280103][ T4279] device hsr_slave_1 entered promiscuous mode [ 62.286817][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.294452][ T4279] Cannot create hsr debugfs directory [ 62.343673][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 62.350413][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 62.350434][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 62.350586][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 62.356706][ T4274] Bluetooth: hci1: command 0x0409 tx timeout [ 62.627647][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.639456][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.648445][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.657624][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.713621][ T4269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.735516][ T4269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.746935][ T4269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.769736][ T4269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.806908][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.845154][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.868171][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.877250][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.896967][ T4276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.934300][ T4276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.959244][ T4276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.970204][ T4276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.006774][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.025149][ T4269] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.037872][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.046999][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.056549][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.070432][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.081056][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.091907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.102100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.111841][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.119281][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.135912][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.148739][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.156978][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.178552][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.187345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.197656][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.204801][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.242691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.252105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.261497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.271420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.280228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.289307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.298010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.305830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.315583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.340363][ T4268] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.352055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.361232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.370598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.381286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.392089][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.430470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.439869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.449696][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.456825][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.466820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.512298][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.528216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.537913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.547134][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.554286][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.585037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.595276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.604765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.614880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.625244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.634123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.645302][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.659454][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.670890][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.679489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.688876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.698870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.725808][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.739451][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.752170][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.777680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.788112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.803543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.812026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.824310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.833591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.841957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.851145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.859835][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.866957][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.875272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.883508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.891356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.900189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.908973][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.916160][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.924951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.933416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.942848][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.977404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.989005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.998844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.008237][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.015413][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.024996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.034649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.043696][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.050789][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.058741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.068383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.077809][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.084945][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.093911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.102864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.110918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.134553][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.141654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.151448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.160575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.184023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.203153][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.210271][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.233108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.243470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.301510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.311365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.323547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.332271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.341596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.350131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.359845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.369534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.379004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.387567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.396563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.405061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.413194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.421614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.429057][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 64.429090][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 64.429130][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 64.429162][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 64.435575][ T4273] Bluetooth: hci1: command 0x041b tx timeout [ 64.447686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.480608][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.491754][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.513723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.522200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.538185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.550630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.578732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.591697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.601700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.619014][ T4276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.635801][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.657714][ T4279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.689689][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.705518][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.714565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.722282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.731014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.739960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.748994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.757725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.766384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.774678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.785653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.850436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.869871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.906796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.947496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.000659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.027203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.060851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.093569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.105302][ T4268] device veth0_vlan entered promiscuous mode [ 65.139235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.149845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.176216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.186113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.208367][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.217505][ T4268] device veth1_vlan entered promiscuous mode [ 65.229393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.258903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.279637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.317149][ T4269] device veth0_vlan entered promiscuous mode [ 65.343836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.364527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.384475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.398540][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.406227][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.421489][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.430471][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.450979][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.462160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.473608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.484714][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.493651][ T4269] device veth1_vlan entered promiscuous mode [ 65.524984][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.534617][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.543581][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.568094][ T4268] device veth0_macvtap entered promiscuous mode [ 65.580581][ T4275] device veth0_vlan entered promiscuous mode [ 65.588365][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.597909][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.606526][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.616015][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.625628][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.634982][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.643713][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.652221][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.661910][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.671077][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.687327][ T4268] device veth1_macvtap entered promiscuous mode [ 65.700662][ T4275] device veth1_vlan entered promiscuous mode [ 65.724002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.732178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.751726][ T4269] device veth0_macvtap entered promiscuous mode [ 65.762024][ T4269] device veth1_macvtap entered promiscuous mode [ 65.784755][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.792249][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.802242][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.811963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.820686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.829297][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.837914][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.848580][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.857363][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.866395][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.874441][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.888415][ T4279] device veth0_vlan entered promiscuous mode [ 65.898381][ T4276] device veth0_vlan entered promiscuous mode [ 65.905253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.913925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.922188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.931289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.954263][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.967854][ T4279] device veth1_vlan entered promiscuous mode [ 65.981119][ T4276] device veth1_vlan entered promiscuous mode [ 65.994518][ T4275] device veth0_macvtap entered promiscuous mode [ 66.005546][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.015736][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.025333][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.039335][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.051549][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.060798][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.068887][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.077668][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.086545][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.095137][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.104851][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.130106][ T4275] device veth1_macvtap entered promiscuous mode [ 66.139748][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.150618][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.163668][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.196769][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.205292][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.213955][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.222228][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.231782][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.242480][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.253972][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.265224][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.291028][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.305108][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.315232][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.325902][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.337144][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.346149][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.355676][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.365045][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.373915][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.385050][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.394148][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.403068][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.411755][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.430326][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.441887][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.460840][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.472194][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.482088][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.492994][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.506517][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.507525][ T4273] Bluetooth: hci1: command 0x040f tx timeout [ 66.517279][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 66.522841][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 66.525937][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 66.531788][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 66.546937][ T4276] device veth0_macvtap entered promiscuous mode [ 66.558585][ T4276] device veth1_macvtap entered promiscuous mode [ 66.567580][ T4279] device veth0_macvtap entered promiscuous mode [ 66.576616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.585601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.593731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.602213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.611061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.621510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.630220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.646623][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.655646][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.665912][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.686980][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.705068][ T4279] device veth1_macvtap entered promiscuous mode [ 66.757568][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.782475][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.799882][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.810238][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.820836][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.831419][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.842196][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.854318][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.863297][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.873853][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.883864][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.894539][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.906615][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.923995][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.934125][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.944846][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.956163][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.979699][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.991192][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.001383][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.012137][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.023056][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.033548][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.045161][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.052515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.061303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.070810][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.079495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.088335][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.097082][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.110103][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.120885][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.130989][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.142375][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.153467][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.163926][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.173817][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.184409][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.195618][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.222065][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.232042][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.241199][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.250304][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.261604][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.270415][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.284757][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.295395][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299142][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.305099][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.313130][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.328355][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.340037][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.354048][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.370745][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.378926][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.406140][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.424660][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.461180][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.478357][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.486817][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.500784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.559403][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.570589][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.605709][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.630059][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.634839][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.663467][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.668916][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.689451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.722141][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.745108][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.748920][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.761064][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.823312][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.863978][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.871952][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.011203][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.019365][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.028156][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.583283][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 68.590823][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 68.597494][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 68.597514][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 68.603841][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 69.031153][ T4406] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.118432][ T4406] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.967952][ T4420] binder_alloc: 4409: binder_alloc_buf, no vma [ 70.613375][ T26] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 70.983843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.992170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.000527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 71.008820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 71.017112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 71.025419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.033779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.042110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.050475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 71.163863][ T4431] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.187045][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 71.235979][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.243002][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.270266][ T26] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 71.299594][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.318285][ T26] usb 4-1: Product: syz [ 71.324959][ T26] usb 4-1: Manufacturer: syz [ 71.336050][ T26] usb 4-1: SerialNumber: syz [ 71.360841][ T26] usb 4-1: config 0 descriptor?? [ 71.376868][ T26] hub 4-1:0.0: bad descriptor, ignoring hub [ 71.390858][ T26] hub: probe of 4-1:0.0 failed with error -5 [ 71.414971][ T26] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 71.681712][ T4424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.709652][ T4424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.828044][ T4424] netlink: 'syz.3.11': attribute type 6 has an invalid length. [ 72.765503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.677181][ T26] usb 4-1: USB disconnect, device number 2 [ 74.828505][ T4475] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 74.835471][ T4475] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 74.843539][ T4475] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 74.850208][ T4475] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 74.856913][ T4475] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 74.863667][ T4475] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 74.870480][ T4475] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 74.877261][ T4475] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 74.883990][ T4475] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 74.891995][ T4475] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 74.898649][ T4475] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 74.905538][ T4475] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 74.913699][ T4475] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 74.920934][ T4475] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 74.927883][ T4475] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 74.935299][ T4475] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 74.942048][ T4475] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 74.949329][ T4475] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 74.956164][ T4475] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 74.963534][ T4475] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 74.970269][ T4475] comedi comedi3: 8255: I/O port conflict (0x2000e67,4) [ 74.977627][ T4475] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 74.984345][ T4475] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 74.992380][ T4475] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 74.999134][ T4475] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 76.251333][ T4481] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 76.258134][ T4481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.266549][ T4481] vhci_hcd vhci_hcd.0: Device attached [ 76.345818][ T14] cfg80211: failed to load regulatory.db [ 76.468793][ T4482] vhci_hcd: connection closed [ 76.474607][ T4459] vhci_hcd: stop threads [ 77.018506][ T4459] vhci_hcd: release socket [ 77.063999][ T4459] vhci_hcd: disconnect device [ 77.814905][ T4497] kvm [4496]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 77.864149][ T4497] kvm [4496]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 80.478722][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 83.562854][ T14] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 83.705726][ T4582] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 84.416011][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 84.494593][ T14] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 84.509466][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.519559][ T14] usb 3-1: Product: syz [ 84.524118][ T14] usb 3-1: Manufacturer: syz [ 84.529660][ T14] usb 3-1: SerialNumber: syz [ 84.551557][ T14] usb 3-1: config 0 descriptor?? [ 84.570084][ T14] hub 3-1:0.0: bad descriptor, ignoring hub [ 84.576867][ T14] hub: probe of 3-1:0.0 failed with error -5 [ 84.586142][ T14] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 84.960065][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.985919][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.998220][ T4569] netlink: 'syz.2.54': attribute type 6 has an invalid length. [ 85.021311][ T4596] netlink: 100 bytes leftover after parsing attributes in process `syz.1.64'. [ 88.273530][ T4318] usb 3-1: USB disconnect, device number 2 [ 88.280734][ T4621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.619538][ T4430] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 89.659360][ T4627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.72'. [ 89.786640][ T4430] usb 2-1: device descriptor read/64, error -71 [ 91.042821][ T4636] netlink: 32 bytes leftover after parsing attributes in process `syz.2.73'. [ 91.252722][ T4430] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 91.565252][ T4643] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 91.591660][ T4643] CIFS mount error: No usable UNC path provided in device string! [ 91.591660][ T4643] [ 91.601809][ T4643] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.725148][ T4651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.80'. [ 91.792108][ T4654] fuse: Bad value for 'fd' [ 91.817962][ T4430] usb 2-1: device descriptor read/64, error -71 [ 91.849758][ T4653] fuse: root generation should be zero [ 91.953599][ T4430] usb usb2-port1: attempt power cycle [ 92.332732][ T128] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.572850][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 92.617192][ T128] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 92.747403][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.821335][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 92.828523][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 92.837185][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 92.847738][ T4671] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 92.853845][ T128] usb 3-1: Product: syz [ 92.860139][ T4671] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 92.863626][ T128] usb 3-1: Manufacturer: syz [ 92.873079][ T4430] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 92.914817][ T128] usb 3-1: SerialNumber: syz [ 92.993892][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 93.007539][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 93.018210][ T4430] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.033776][ T4430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 93.048802][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 93.054046][ T4430] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 93.067478][ T4430] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.068046][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 93.083375][ T4430] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 93.093969][ T4671] wlan0 speed is unknown, defaulting to 1000 [ 93.112124][ T4430] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.130227][ T4430] usb 2-1: Manufacturer: syz [ 93.134498][ T128] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 93.140168][ T4430] usb 2-1: config 0 descriptor?? [ 93.169167][ T128] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 93.235506][ T128] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 93.350397][ T128] usb 3-1: USB disconnect, device number 3 [ 93.374942][ T128] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 93.438780][ T128] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 93.480254][ T128] visor 3-1:1.0: device disconnected [ 93.549667][ T4691] overlayfs: failed to clone upperpath [ 93.612683][ T4430] rc_core: IR keymap rc-hauppauge not found [ 93.618786][ T4430] Registered IR keymap rc-empty [ 93.644499][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 93.703359][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 93.743706][ T4430] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 93.777212][ T4430] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 93.834089][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 93.872962][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 93.912907][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 93.947742][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 94.002862][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 94.053431][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 94.112942][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 94.142944][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 94.863062][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 94.906509][ T4430] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 95.014452][ T4430] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.034787][ T4430] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.099513][ T4430] usb 2-1: USB disconnect, device number 4 [ 100.083405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805585b400: rx timeout, send abort [ 100.980342][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805585b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 100.995547][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055858c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 101.594276][ T4746] netlink: 100 bytes leftover after parsing attributes in process `syz.1.104'. [ 103.356003][ T27] audit: type=1326 audit(1758043598.611:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 103.449076][ T27] audit: type=1326 audit(1758043598.611:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 103.732031][ T27] audit: type=1326 audit(1758043598.631:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 104.592212][ T27] audit: type=1326 audit(1758043598.631:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 104.708424][ T27] audit: type=1326 audit(1758043598.631:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 104.907699][ T27] audit: type=1326 audit(1758043598.631:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 105.008641][ T22] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.018379][ T27] audit: type=1326 audit(1758043598.631:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 105.041169][ T27] audit: type=1326 audit(1758043598.631:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 105.083943][ T27] audit: type=1326 audit(1758043598.631:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 105.123215][ T27] audit: type=1326 audit(1758043598.631:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4753 comm="syz.1.109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f728d38eba9 code=0x7ffc0000 [ 105.464931][ T4011] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.093728][ T22] usb 3-1: device descriptor read/64, error -71 [ 106.334708][ T4011] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.362832][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.522798][ T22] usb 3-1: device descriptor read/64, error -71 [ 106.576060][ T4011] usb 5-1: config 0 has no interfaces? [ 106.600714][ T4011] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 106.620621][ T4011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.641298][ T4011] usb 5-1: config 0 descriptor?? [ 106.650578][ T22] usb usb3-port1: attempt power cycle [ 106.677856][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 106.688986][ T4799] netlink: 100 bytes leftover after parsing attributes in process `syz.1.123'. [ 107.118725][ T4791] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 108.380422][ T4791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 108.514430][ T4791] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 108.552199][ T4791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.569932][ T4791] usb 1-1: Product: syz [ 108.577608][ T4791] usb 1-1: Manufacturer: syz [ 108.582348][ T4791] usb 1-1: SerialNumber: syz [ 108.610692][ T4791] usb 1-1: config 0 descriptor?? [ 108.640269][ T4791] hub 1-1:0.0: bad descriptor, ignoring hub [ 108.647417][ T4791] hub: probe of 1-1:0.0 failed with error -5 [ 108.656365][ T4791] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 108.861310][ T4795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.873593][ T4795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.888876][ T4795] netlink: 'syz.0.121': attribute type 6 has an invalid length. [ 109.285262][ T4011] usb 1-1: USB disconnect, device number 2 [ 110.003296][ T4325] usb 5-1: USB disconnect, device number 2 [ 110.273085][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 111.693685][ T4835] netlink: 100 bytes leftover after parsing attributes in process `syz.2.136'. [ 111.937955][ T4850] wlan0 speed is unknown, defaulting to 1000 [ 113.577771][ T4867] program syz.1.143 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.934435][ T4282] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 115.413092][ T4891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 115.428889][ T4891] netlink: 100 bytes leftover after parsing attributes in process `syz.2.153'. [ 115.467825][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.487426][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.534828][ T4889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.155976][ T4905] netlink: 'syz.2.156': attribute type 15 has an invalid length. [ 116.436273][ T4905] netlink: 666 bytes leftover after parsing attributes in process `syz.2.156'. [ 117.937469][ T4909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.958218][ T4909] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.974657][ T4909] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 118.313942][ T4909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.339805][ T4909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.765445][ T4914] overlayfs: failed to clone upperpath [ 118.824392][ T4909] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 118.835320][ T4909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.841320][ T4909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.861052][ T4909] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 118.870802][ T4909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.996809][ T4909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.116442][ T4909] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 119.175045][ T4909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 119.224571][ T4909] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 119.295446][ T4909] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 119.952883][ T4282] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.270365][ T4946] netlink: 100 bytes leftover after parsing attributes in process `syz.3.171'. [ 120.422669][ T4282] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.902697][ T4282] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.908880][ T4273] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.482109][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.175'. [ 121.703083][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.022753][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 122.502758][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 122.982902][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 122.989131][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 123.449997][ T4974] program syz.1.179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.782682][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 123.942879][ T4985] netlink: 100 bytes leftover after parsing attributes in process `syz.1.183'. [ 124.271394][ T4993] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 126.016521][ T5011] mmap: syz.0.191 (5011) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.325737][ T5020] netlink: 100 bytes leftover after parsing attributes in process `syz.1.195'. [ 127.428647][ T5040] netlink: 'syz.3.199': attribute type 6 has an invalid length. [ 127.673286][ T5045] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.405483][ T5067] netlink: 100 bytes leftover after parsing attributes in process `syz.4.209'. [ 130.441067][ T5069] syz.3.210 uses obsolete (PF_INET,SOCK_PACKET) [ 131.820141][ T5100] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 132.335251][ T5104] netlink: 20 bytes leftover after parsing attributes in process `syz.2.222'. [ 132.345971][ T4318] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 133.000814][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.099991][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.464924][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 133.487515][ T4318] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 133.510004][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.512711][ T5107] netlink: 100 bytes leftover after parsing attributes in process `syz.3.223'. [ 133.518339][ T4318] usb 2-1: Product: syz [ 133.534227][ T5111] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 133.545570][ T4318] usb 2-1: Manufacturer: syz [ 133.546199][ T5111] netlink: 100 bytes leftover after parsing attributes in process `syz.0.225'. [ 133.555955][ T4318] usb 2-1: SerialNumber: syz [ 133.605115][ T4318] usb 2-1: config 0 descriptor?? [ 133.617182][ T4318] hub 2-1:0.0: bad descriptor, ignoring hub [ 133.630954][ T4318] hub: probe of 2-1:0.0 failed with error -5 [ 133.667927][ T4318] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 133.839893][ T5091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.885059][ T5091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.917272][ T5091] netlink: 'syz.1.218': attribute type 6 has an invalid length. [ 134.562901][ T4791] usb 2-1: USB disconnect, device number 5 [ 134.565511][ T4395] kernel write not supported for file /131/attr/exec (pid: 4395 comm: kworker/0:9) [ 135.227095][ T5155] netlink: 100 bytes leftover after parsing attributes in process `syz.3.239'. [ 136.862846][ T4325] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 137.216493][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 137.234174][ T4325] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 137.243385][ T4325] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.251356][ T4325] usb 3-1: Product: syz [ 137.262691][ T4325] usb 3-1: Manufacturer: syz [ 137.267454][ T4325] usb 3-1: SerialNumber: syz [ 137.310579][ T4325] usb 3-1: config 0 descriptor?? [ 137.350989][ T4325] hub 3-1:0.0: bad descriptor, ignoring hub [ 137.362743][ T4325] hub: probe of 3-1:0.0 failed with error -5 [ 137.421036][ T4325] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 137.504598][ T5190] netlink: 100 bytes leftover after parsing attributes in process `syz.4.253'. [ 137.557798][ T5181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.592248][ T5181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.649966][ T5181] netlink: 'syz.2.248': attribute type 6 has an invalid length. [ 138.835705][ T5215] Bluetooth: MGMT ver 1.22 [ 139.205377][ T4325] usb 3-1: USB disconnect, device number 7 [ 140.528207][ T5230] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 140.568522][ T5231] netlink: 100 bytes leftover after parsing attributes in process `syz.1.265'. [ 141.502828][ T4325] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 141.701266][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 141.738571][ T4325] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 141.752786][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.761265][ T4325] usb 5-1: Product: syz [ 141.767908][ T4325] usb 5-1: Manufacturer: syz [ 141.774301][ T4325] usb 5-1: SerialNumber: syz [ 141.798095][ T4325] usb 5-1: config 0 descriptor?? [ 141.816295][ T4325] hub 5-1:0.0: bad descriptor, ignoring hub [ 141.822377][ T4325] hub: probe of 5-1:0.0 failed with error -5 [ 141.839123][ T5244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.270'. [ 141.840715][ T4325] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 142.186844][ T5239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.271055][ T5239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.290810][ T5239] netlink: 'syz.4.269': attribute type 6 has an invalid length. [ 143.762839][ T4325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.992113][ T5270] netlink: 100 bytes leftover after parsing attributes in process `syz.1.279'. [ 144.108115][ T4325] usb 1-1: Using ep0 maxpacket: 8 [ 144.118258][ T4325] usb 1-1: config 0 has no interfaces? [ 144.150121][ T4325] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 144.190094][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.199506][ T7] usb 5-1: USB disconnect, device number 3 [ 144.224218][ T4325] usb 1-1: Product: syz [ 144.228444][ T4325] usb 1-1: Manufacturer: syz [ 144.266046][ T4325] usb 1-1: SerialNumber: syz [ 144.291220][ T4325] usb 1-1: config 0 descriptor?? [ 144.530412][ T4318] usb 1-1: USB disconnect, device number 3 [ 145.102846][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.276872][ T5299] netlink: 100 bytes leftover after parsing attributes in process `syz.3.291'. [ 145.338320][ T4318] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 244 [ 145.355613][ T5301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 145.362157][ T4318] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 145.388935][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.408317][ T4318] usb 2-1: config 0 descriptor?? [ 145.416939][ T5290] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 147.027610][ T4325] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 147.244630][ T4325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 147.264491][ T4325] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 147.278703][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.290744][ T4325] usb 1-1: Product: syz [ 147.300328][ T4325] usb 1-1: Manufacturer: syz [ 147.306818][ T4325] usb 1-1: SerialNumber: syz [ 147.329667][ T4325] usb 1-1: config 0 descriptor?? [ 147.349829][ T4325] hub 1-1:0.0: bad descriptor, ignoring hub [ 147.361058][ T4325] hub: probe of 1-1:0.0 failed with error -5 [ 147.382169][ T4325] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 147.559910][ T5316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.585719][ T5316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.600280][ T5316] netlink: 'syz.0.296': attribute type 6 has an invalid length. [ 163.723321][ T4282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 163.733010][ T4282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 163.758282][ T4282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 163.761634][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.766266][ T4282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 163.780903][ T4282] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 163.789084][ T4282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.798569][ T4273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.813019][ T4283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.833950][ T4282] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.841433][ T4282] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.848974][ T4282] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.856699][ T4273] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 163.866904][ T4273] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 163.874743][ T4273] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 163.882654][ T4273] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 163.892373][ T4273] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 163.900520][ T4273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 163.963023][ T5339] wlan0 speed is unknown, defaulting to 1000 [ 164.021208][ T5341] wlan0 speed is unknown, defaulting to 1000 [ 164.084553][ T5340] wlan0 speed is unknown, defaulting to 1000 [ 164.423775][ T4283] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 164.439326][ T4283] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 164.451196][ T4283] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 164.464296][ T4283] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 164.472468][ T4283] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 164.480774][ T4283] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 164.533130][ T4282] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 164.543059][ T4282] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 164.550740][ T4282] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 164.560892][ T4282] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 164.568537][ T4282] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 164.576744][ T4282] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 164.672269][ T5345] wlan0 speed is unknown, defaulting to 1000 [ 164.683204][ T5348] wlan0 speed is unknown, defaulting to 1000 [ 164.971307][ T5339] chnl_net:caif_netlink_parms(): no params data found [ 165.008811][ T5340] chnl_net:caif_netlink_parms(): no params data found [ 165.063305][ T5341] chnl_net:caif_netlink_parms(): no params data found [ 165.081119][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 165.862934][ T4283] Bluetooth: hci6: command 0x0409 tx timeout [ 165.952909][ T4283] Bluetooth: hci7: command 0x0409 tx timeout [ 165.959384][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 166.512736][ T4283] Bluetooth: hci8: command 0x0409 tx timeout [ 166.663010][ T4283] Bluetooth: hci9: command 0x0409 tx timeout [ 167.942788][ T4283] Bluetooth: hci6: command 0x041b tx timeout [ 168.022819][ T4283] Bluetooth: hci7: command 0x041b tx timeout [ 168.034979][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 168.582676][ T4283] Bluetooth: hci8: command 0x041b tx timeout [ 168.742930][ T4283] Bluetooth: hci9: command 0x041b tx timeout [ 170.022866][ T4283] Bluetooth: hci6: command 0x040f tx timeout [ 170.102801][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 170.108856][ T4283] Bluetooth: hci7: command 0x040f tx timeout [ 170.672939][ T4283] Bluetooth: hci8: command 0x040f tx timeout [ 170.822812][ T4283] Bluetooth: hci9: command 0x040f tx timeout [ 172.112907][ T4283] Bluetooth: hci6: command 0x0419 tx timeout [ 172.182855][ T4283] Bluetooth: hci7: command 0x0419 tx timeout [ 172.188914][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 172.752821][ T4283] Bluetooth: hci8: command 0x0419 tx timeout [ 172.913214][ T4283] Bluetooth: hci9: command 0x0419 tx timeout [ 185.942748][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 185.948819][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 185.955037][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 185.961048][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 194.111002][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.117356][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.774244][ T3638] udevd[3638]: worker [4387] /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12/event5 is taking a long time [ 225.783829][ T4282] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 225.794577][ T4282] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 225.803012][ T4282] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 225.811655][ T4282] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 225.819728][ T4282] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 225.827227][ T4282] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 226.083592][ T4283] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 226.100862][ T4283] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 226.114835][ T4283] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 226.132826][ T4283] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 226.140500][ T4283] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 226.148922][ T4283] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 226.310672][ T4282] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 226.319857][ T4282] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 226.328320][ T4282] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 226.336275][ T4282] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 226.345892][ T4282] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 226.361361][ T4282] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 226.414914][ T4274] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 226.431140][ T4274] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 226.440054][ T4274] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 226.453330][ T4274] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 226.461734][ T4274] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 226.469958][ T4274] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 226.538508][ T4283] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 226.548206][ T4283] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 226.556450][ T4283] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 226.565535][ T4283] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 226.573964][ T4283] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 226.581429][ T4283] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 227.872913][ T4274] Bluetooth: hci10: command 0x0409 tx timeout [ 228.182954][ T4274] Bluetooth: hci11: command 0x0409 tx timeout [ 228.422859][ T4274] Bluetooth: hci12: command 0x0409 tx timeout [ 228.502853][ T4274] Bluetooth: hci13: command 0x0409 tx timeout [ 228.671651][ T4274] Bluetooth: hci14: command 0x0409 tx timeout [ 229.954196][ T4274] Bluetooth: hci10: command 0x041b tx timeout [ 230.262789][ T4274] Bluetooth: hci11: command 0x041b tx timeout [ 230.512900][ T4274] Bluetooth: hci12: command 0x041b tx timeout [ 230.582895][ T4274] Bluetooth: hci13: command 0x041b tx timeout [ 230.742877][ T4274] Bluetooth: hci14: command 0x041b tx timeout [ 232.022822][ T4274] Bluetooth: hci10: command 0x040f tx timeout [ 232.353029][ T4274] Bluetooth: hci11: command 0x040f tx timeout [ 232.582895][ T4274] Bluetooth: hci12: command 0x040f tx timeout [ 232.672885][ T4274] Bluetooth: hci13: command 0x040f tx timeout [ 232.832833][ T4274] Bluetooth: hci14: command 0x040f tx timeout [ 234.102822][ T4274] Bluetooth: hci10: command 0x0419 tx timeout [ 234.423151][ T4274] Bluetooth: hci11: command 0x0419 tx timeout [ 234.672965][ T4274] Bluetooth: hci12: command 0x0419 tx timeout [ 234.742725][ T4274] Bluetooth: hci13: command 0x0419 tx timeout [ 234.912783][ T4274] Bluetooth: hci14: command 0x0419 tx timeout [ 247.392883][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 255.546093][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552945][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.342935][ T4274] Bluetooth: hci6: command 0x0406 tx timeout [ 288.349033][ T4274] Bluetooth: hci5: command 0x0406 tx timeout [ 288.355179][ T4282] Bluetooth: hci7: command 0x0406 tx timeout [ 288.355198][ T4283] Bluetooth: hci8: command 0x0406 tx timeout [ 288.361167][ T4282] Bluetooth: hci9: command 0x0406 tx timeout [ 289.021631][ T4282] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 289.031057][ T4282] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 289.040551][ T4282] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 289.051402][ T4282] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 289.059227][ T4282] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 289.067618][ T4282] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 289.324441][ T4274] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 289.334163][ T4274] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 289.342380][ T4274] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 289.351278][ T4274] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 289.359853][ T4274] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 289.367432][ T4274] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 289.460037][ T4282] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 289.471138][ T4282] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 289.480133][ T4282] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 289.489229][ T4282] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 289.498565][ T4282] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 289.507036][ T4282] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 289.577747][ T4274] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 289.587109][ T4274] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 289.594995][ T4274] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 289.603905][ T4274] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 289.611478][ T4274] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 289.618908][ T4274] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 289.672048][ T4282] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 289.688858][ T4282] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 289.698983][ T4282] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 289.714173][ T4282] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 289.722483][ T4282] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 289.731347][ T4282] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 291.142876][ T4274] Bluetooth: hci15: command 0x0409 tx timeout [ 291.393366][ T4274] Bluetooth: hci16: command 0x0409 tx timeout [ 291.542759][ T4274] Bluetooth: hci17: command 0x0409 tx timeout [ 291.702849][ T4274] Bluetooth: hci18: command 0x0409 tx timeout [ 291.782811][ T4274] Bluetooth: hci19: command 0x0409 tx timeout [ 293.222789][ T4274] Bluetooth: hci15: command 0x041b tx timeout [ 293.472923][ T4274] Bluetooth: hci16: command 0x041b tx timeout [ 293.622819][ T4274] Bluetooth: hci17: command 0x041b tx timeout [ 293.782775][ T4274] Bluetooth: hci18: command 0x041b tx timeout [ 293.872899][ T4274] Bluetooth: hci19: command 0x041b tx timeout [ 295.302934][ T4274] Bluetooth: hci15: command 0x040f tx timeout [ 295.542688][ T4274] Bluetooth: hci16: command 0x040f tx timeout [ 295.712861][ T4274] Bluetooth: hci17: command 0x040f tx timeout [ 295.862853][ T4274] Bluetooth: hci18: command 0x040f tx timeout [ 295.952786][ T4274] Bluetooth: hci19: command 0x040f tx timeout [ 297.382703][ T4274] Bluetooth: hci15: command 0x0419 tx timeout [ 297.622697][ T4274] Bluetooth: hci16: command 0x0419 tx timeout [ 297.783074][ T4274] Bluetooth: hci17: command 0x0419 tx timeout [ 297.942940][ T4274] Bluetooth: hci18: command 0x0419 tx timeout [ 298.022758][ T4274] Bluetooth: hci19: command 0x0419 tx timeout [ 302.272917][ T28] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 302.280424][ T28] Not tainted syzkaller #0 [ 302.299318][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.313774][ T28] task:kworker/0:0 state:D stack:24648 pid:7 ppid:2 flags:0x00004000 [ 302.333840][ T28] Workqueue: usb_hub_wq hub_event [ 302.338950][ T28] Call Trace: [ 302.342235][ T28] [ 302.363434][ T28] __schedule+0x10ec/0x40b0 [ 302.368015][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 302.389143][ T28] ? __mutex_trylock_common+0x80/0x250 [ 302.406402][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 302.411658][ T28] schedule+0xb9/0x180 [ 302.435931][ T28] schedule_preempt_disabled+0xf/0x20 [ 302.470834][ T28] __mutex_lock+0x555/0xaf0 [ 302.498923][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 302.508404][ T28] ? __input_unregister_device+0x31/0x5f0 [ 302.522659][ T28] ? mutex_lock_nested+0x10/0x10 [ 302.527675][ T28] ? lockdep_hardirqs_on+0x94/0x140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.560289][ T28] ? _raw_spin_unlock_irq+0x2a/0x40 [ 302.569911][ T28] ? usb_hcd_flush_endpoint+0x3e1/0x3f0 [ 302.585799][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 302.591048][ T28] __input_unregister_device+0x31/0x5f0 [ 302.610855][ T28] input_unregister_device+0x97/0xf0 [ 302.621994][ T28] usbtouch_disconnect+0x84/0x200 [ 302.655200][ T28] usb_unbind_interface+0x1ee/0x860 [ 302.660472][ T28] ? kernfs_remove_by_name_ns+0x113/0x150 [ 302.699174][ T28] ? usb_driver_release_interface+0x1b0/0x1b0 [ 302.729493][ T28] device_release_driver_internal+0x522/0x850 [ 302.739501][ T28] bus_remove_device+0x2e2/0x400 [ 302.755234][ T28] device_del+0x628/0xa70 [ 302.760249][ T28] ? kill_device+0x160/0x160 [ 302.799491][ T28] ? kobject_put+0x424/0x460 [ 302.822097][ T28] usb_disable_device+0x3e2/0x890 [ 302.849637][ T28] usb_disconnect+0x348/0x8a0 [ 302.859916][ T28] hub_event+0x1e24/0x54e0 [ 302.889558][ T28] ? hub_post_resume+0x120/0x120 [ 302.908772][ T28] ? read_lock_is_recursive+0x10/0x10 [ 302.919913][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 302.938330][ T28] ? _raw_spin_unlock+0x40/0x40 [ 302.947712][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 302.966007][ T28] ? process_one_work+0x7a1/0x1160 [ 302.971172][ T28] process_one_work+0x898/0x1160 [ 302.985515][ T28] ? worker_detach_from_pool+0x240/0x240 [ 302.991201][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 303.007621][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 303.025376][ T28] ? kthread_data+0x4b/0xc0 [ 303.029935][ T28] worker_thread+0xaa2/0x1250 [ 303.045106][ T28] kthread+0x29d/0x330 [ 303.049229][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 303.072615][ T28] ? kthread_blkcg+0xd0/0xd0 [ 303.077273][ T28] ret_from_fork+0x1f/0x30 [ 303.081715][ T28] [ 303.099199][ T28] INFO: task kworker/u4:0:9 blocked for more than 144 seconds. [ 303.111466][ T28] Not tainted syzkaller #0 [ 303.126984][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.143190][ T28] task:kworker/u4:0 state:D stack:24640 pid:9 ppid:2 flags:0x00004000 [ 303.152437][ T28] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 303.179959][ T28] Call Trace: [ 303.187011][ T28] [ 303.189971][ T28] __schedule+0x10ec/0x40b0 [ 303.207445][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 303.220099][ T28] ? kthread_data+0x4b/0xc0 [ 303.237888][ T28] ? wq_worker_sleeping+0x60/0x280 [ 303.249523][ T28] schedule+0xb9/0x180 [ 303.263240][ T28] schedule_timeout+0x97/0x280 [ 303.269570][ T28] ? console_conditional_schedule+0x40/0x40 [ 303.288026][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 303.298599][ T28] ? lock_chain_count+0x20/0x20 [ 303.315998][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 303.321071][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 303.340150][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 303.349228][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 303.366880][ T28] ? wait_for_completion+0x268/0x590 [ 303.379560][ T28] wait_for_completion+0x2b9/0x590 [ 303.397333][ T28] ? io_schedule+0xd0/0xd0 [ 303.401791][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 303.420182][ T28] ? debug_object_active_state+0x6b/0x340 [ 303.429504][ T28] __synchronize_srcu+0x283/0x310 [ 303.446124][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 303.452071][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 303.468234][ T28] ? rcu_read_lock_any_held+0x120/0x120 [ 303.489046][ T28] ? __rwlock_init+0x140/0x140 [ 303.500431][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 303.514502][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 303.520086][ T28] ? synchronize_srcu+0x192/0x1b0 [ 303.535931][ T28] ? process_one_work+0x7a1/0x1160 [ 303.541080][ T28] fsnotify_connector_destroy_workfn+0x40/0xa0 [ 303.557658][ T28] ? process_one_work+0x7a1/0x1160 [ 303.571440][ T28] process_one_work+0x898/0x1160 [ 303.590161][ T28] ? worker_detach_from_pool+0x240/0x240 [ 303.602658][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 303.607726][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 303.626236][ T28] ? kthread_data+0x4b/0xc0 [ 303.630791][ T28] worker_thread+0xaa2/0x1250 [ 303.648741][ T28] kthread+0x29d/0x330 [ 303.656419][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 303.661475][ T28] ? kthread_blkcg+0xd0/0xd0 [ 303.680613][ T28] ret_from_fork+0x1f/0x30 [ 303.689758][ T28] [ 303.705407][ T28] INFO: task acpid:3623 blocked for more than 144 seconds. [ 303.724014][ T28] Not tainted syzkaller #0 [ 303.728988][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 303.749904][ T28] task:acpid state:D stack:21760 pid:3623 ppid:1 flags:0x00004002 [ 303.769664][ T28] Call Trace: [ 303.776986][ T28] [ 303.781461][ T28] __schedule+0x10ec/0x40b0 [ 303.799859][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 303.810492][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 303.827051][ T28] ? do_raw_spin_lock+0x11d/0x280 [ 303.832131][ T28] ? prepare_to_wait_event+0x430/0x470 [ 303.846706][ T28] schedule+0xb9/0x180 [ 303.850827][ T28] synchronize_rcu_expedited+0x71b/0x830 [ 303.869498][ T28] ? synchronize_rcu+0x380/0x380 [ 303.878525][ T28] ? wake_bit_function+0x200/0x200 [ 303.896073][ T28] ? verify_lock_unused+0x140/0x140 [ 303.901331][ T28] ? do_raw_spin_lock+0x11d/0x280 [ 303.921914][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 303.930698][ T28] ? mark_lock+0x94/0x320 [ 303.945965][ T28] synchronize_rcu+0x11c/0x380 [ 303.950800][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 303.970752][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 303.980249][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 303.997432][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 304.011832][ T28] ? _raw_spin_unlock+0x40/0x40 [ 304.022250][ T28] ? trace_rpm_return_int_rcuidle+0x1e/0x1f0 [ 304.042026][ T28] ? rpm_idle+0xaa/0x920 [ 304.049853][ T28] ? __pm_runtime_idle+0x138/0x1a0 [ 304.065275][ T28] ? usb_autopm_get_interface+0x44/0x50 [ 304.070867][ T28] ? usbtouch_open+0xdf/0x270 [ 304.085857][ T28] input_open_device+0x1be/0x2e0 [ 304.092365][ T28] mousedev_open_device+0xc3/0x150 [ 304.111597][ T28] mousedev_open+0x2e5/0x4a0 [ 304.120095][ T28] chrdev_open+0x597/0x670 [ 304.135172][ T28] ? cd_forget+0x160/0x160 [ 304.139637][ T28] ? tomoyo_file_open+0xe9/0x170 [ 304.157362][ T28] ? fsnotify_perm+0x39b/0x550 [ 304.162172][ T28] ? cd_forget+0x160/0x160 [ 304.176435][ T28] do_dentry_open+0x7e9/0x10d0 [ 304.181256][ T28] path_openat+0x25c6/0x2e70 [ 304.202664][ T28] ? do_sys_openat2+0xcf/0x490 [ 304.207490][ T28] ? __x64_sys_openat+0x135/0x160 [ 304.212532][ T28] ? do_syscall_64+0x4c/0xa0 [ 304.231739][ T28] ? do_filp_open+0x3c0/0x3c0 [ 304.240389][ T28] do_filp_open+0x1c1/0x3c0 [ 304.256005][ T28] ? vfs_tmpfile+0x480/0x480 [ 304.260666][ T28] ? _raw_spin_unlock+0x24/0x40 [ 304.279558][ T28] ? alloc_fd+0x58f/0x630 [ 304.291383][ T28] do_sys_openat2+0x142/0x490 [ 304.304036][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 304.309284][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 304.329881][ T28] ? do_sys_open+0xe0/0xe0 [ 304.334406][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 304.340412][ T28] ? lock_chain_count+0x20/0x20 [ 304.391603][ T28] __x64_sys_openat+0x135/0x160 [ 304.398158][ T28] do_syscall_64+0x4c/0xa0 [ 304.431274][ T28] ? clear_bhb_loop+0x60/0xb0 [ 304.436115][ T28] ? clear_bhb_loop+0x60/0xb0 [ 304.440811][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.454221][ T28] RIP: 0033:0x7fc01628d407 [ 304.458682][ T28] RSP: 002b:00007ffc13a36db0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 304.471845][ T28] RAX: ffffffffffffffda RBX: 00007fc016203740 RCX: 00007fc01628d407 [ 304.482165][ T28] RDX: 0000000000080800 RSI: 00007ffc13a36fc0 RDI: ffffffffffffff9c [ 304.495691][ T28] RBP: 00007ffc13a36fc0 R08: 0000000000000000 R09: 0000000000000000 [ 304.511765][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000020 [ 304.526569][ T28] R13: 00007ffc13a370c0 R14: 000055bf702257fe R15: 00007ffc13a370c0 [ 304.536606][ T28] [ 304.539698][ T28] INFO: task udevd:4387 blocked for more than 145 seconds. [ 304.552281][ T28] Not tainted syzkaller #0 [ 304.559267][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.588793][ T28] task:udevd state:D stack:24352 pid:4387 ppid:3638 flags:0x00004002 [ 304.621766][ T28] Call Trace: [ 304.625138][ T28] [ 304.628079][ T28] __schedule+0x10ec/0x40b0 [ 304.652651][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 304.657916][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 304.689518][ T28] ? do_raw_spin_lock+0x11d/0x280 [ 304.694925][ T28] ? prepare_to_wait_event+0x430/0x470 [ 304.700412][ T28] schedule+0xb9/0x180 [ 304.722808][ T28] synchronize_rcu_expedited+0x71b/0x830 [ 304.735396][ T28] ? synchronize_rcu+0x380/0x380 [ 304.740356][ T28] ? wake_bit_function+0x200/0x200 [ 304.769531][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 304.775531][ T28] ? preempt_schedule+0xa7/0xb0 [ 304.780401][ T28] ? preempt_schedule_common+0xa5/0xd0 [ 304.819502][ T28] synchronize_rcu+0x11c/0x380 [ 304.839178][ T28] ? schedule_delayed_monitor_work+0x160/0x160 [ 304.859719][ T28] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 304.865704][ T28] ? _raw_spin_unlock+0x40/0x40 [ 304.870572][ T28] ? trace_rpm_return_int_rcuidle+0x1e/0x1f0 [ 304.910267][ T28] ? rpm_idle+0xc1/0x920 [ 304.914627][ T28] ? __pm_runtime_idle+0x138/0x1a0 [ 304.919756][ T28] ? usbtouch_open+0x20b/0x270 [ 304.989310][ T28] input_open_device+0x1be/0x2e0 [ 305.002866][ T28] evdev_open+0x4b0/0x5b0 [ 305.007256][ T28] chrdev_open+0x597/0x670 [ 305.012310][ T28] ? cd_forget+0x160/0x160 [ 305.062644][ T28] ? tomoyo_file_open+0xe9/0x170 [ 305.067661][ T28] ? fsnotify_perm+0x39b/0x550 [ 305.072452][ T28] ? cd_forget+0x160/0x160 [ 305.130225][ T28] do_dentry_open+0x7e9/0x10d0 [ 305.151279][ T28] path_openat+0x25c6/0x2e70 [ 305.162622][ T28] ? do_sys_openat2+0xcf/0x490 [ 305.167433][ T28] ? __x64_sys_openat+0x135/0x160 [ 305.172475][ T28] ? do_syscall_64+0x4c/0xa0 [ 305.218057][ T28] ? do_filp_open+0x3c0/0x3c0 [ 305.237259][ T28] do_filp_open+0x1c1/0x3c0 [ 305.241828][ T28] ? vfs_tmpfile+0x480/0x480 [ 305.264771][ T28] ? _raw_spin_unlock+0x24/0x40 [ 305.269679][ T28] ? alloc_fd+0x58f/0x630 [ 305.282623][ T28] do_sys_openat2+0x142/0x490 [ 305.287363][ T28] ? do_sys_open+0xe0/0xe0 [ 305.291795][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 305.312830][ T28] ? lock_chain_count+0x20/0x20 [ 305.328415][ T28] __x64_sys_openat+0x135/0x160 [ 305.349237][ T28] do_syscall_64+0x4c/0xa0 [ 305.354723][ T28] ? clear_bhb_loop+0x60/0xb0 [ 305.359426][ T28] ? clear_bhb_loop+0x60/0xb0 [ 305.391309][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.410212][ T28] RIP: 0033:0x7fbec40a7407 [ 305.419655][ T28] RSP: 002b:00007ffcd0015810 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 305.444934][ T28] RAX: ffffffffffffffda RBX: 00007fbec48b5880 RCX: 00007fbec40a7407 [ 305.486790][ T28] RDX: 0000000000080000 RSI: 000055943132f520 RDI: ffffffffffffff9c [ 305.498823][ T28] RBP: 0000559431341ad0 R08: 0000000000000000 R09: 0000000000000000 [ 305.522243][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 305.548155][ T28] R13: 00000000000002c0 R14: 0000559407f73f50 R15: 0000559407f73f50 [ 305.559179][ T28] [ 305.562243][ T28] INFO: task kworker/u4:9:4483 blocked for more than 146 seconds. [ 305.578240][ T28] Not tainted syzkaller #0 [ 305.587230][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.598807][ T28] task:kworker/u4:9 state:D stack:22560 pid:4483 ppid:2 flags:0x00004000 [ 305.610007][ T28] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 305.626254][ T28] Call Trace: [ 305.629575][ T28] [ 305.632515][ T28] __schedule+0x10ec/0x40b0 [ 305.664625][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 305.670582][ T28] ? kthread_data+0x4b/0xc0 [ 305.692612][ T28] ? wq_worker_sleeping+0x60/0x280 [ 305.697789][ T28] schedule+0xb9/0x180 [ 305.701875][ T28] schedule_timeout+0x97/0x280 [ 305.732654][ T28] ? console_conditional_schedule+0x40/0x40 [ 305.738619][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 305.752616][ T28] ? lock_chain_count+0x20/0x20 [ 305.757526][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 305.783374][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 305.788816][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 305.802637][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 305.807897][ T28] ? wait_for_completion+0x268/0x590 [ 305.822654][ T28] wait_for_completion+0x2b9/0x590 [ 305.842697][ T28] ? io_schedule+0xd0/0xd0 [ 305.847175][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 305.879596][ T28] ? debug_object_active_state+0x6b/0x340 [ 305.885459][ T28] __synchronize_srcu+0x283/0x310 [ 305.890507][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 305.918299][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 305.931599][ T28] ? rcu_read_lock_any_held+0x120/0x120 [ 305.952747][ T28] ? __rwlock_init+0x140/0x140 [ 305.957570][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 305.972620][ T28] ? synchronize_srcu+0x192/0x1b0 [ 305.977709][ T28] ? process_one_work+0x7a1/0x1160 [ 305.992612][ T28] fsnotify_mark_destroy_workfn+0xfe/0x2e0 [ 305.998466][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 306.012694][ T28] ? fsnotify_connector_destroy_workfn+0xa0/0xa0 [ 306.019093][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 306.039941][ T28] ? process_one_work+0x7a1/0x1160 [ 306.045998][ T28] process_one_work+0x898/0x1160 [ 306.050977][ T28] ? worker_detach_from_pool+0x240/0x240 [ 306.080657][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 306.085792][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 306.091180][ T28] ? kthread_data+0x4b/0xc0 [ 306.141000][ T28] worker_thread+0xaa2/0x1250 [ 306.145796][ T28] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 306.151722][ T28] ? __kthread_parkme+0x162/0x1c0 [ 306.177616][ T28] kthread+0x29d/0x330 [ 306.181769][ T28] ? worker_clr_flags+0x1a0/0x1a0 [ 306.211774][ T28] ? kthread_blkcg+0xd0/0xd0 [ 306.216458][ T28] ret_from_fork+0x1f/0x30 [ 306.220903][ T28] [ 306.242716][ T28] INFO: task syz.3.293:5304 blocked for more than 147 seconds. [ 306.250306][ T28] Not tainted syzkaller #0 [ 306.292838][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 306.301555][ T28] task:syz.3.293 state:D stack:25440 pid:5304 ppid:4275 flags:0x00004004 [ 306.322736][ T28] Call Trace: [ 306.326066][ T28] [ 306.329010][ T28] __schedule+0x10ec/0x40b0 [ 306.342626][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 306.348578][ T28] ? wq_worker_last_func+0x40/0x40 [ 306.373334][ T28] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 306.379300][ T28] ? prepare_to_wait_event+0x430/0x470 [ 306.409362][ T28] schedule+0xb9/0x180 [ 306.413536][ T28] synchronize_rcu_expedited+0x67d/0x830 [ 306.419194][ T28] ? synchronize_rcu+0x380/0x380 [ 306.449783][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 306.462624][ T28] ? lock_chain_count+0x20/0x20 [ 306.468159][ T28] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 306.492807][ T28] ? namespace_unlock+0x18a/0x3c0 [ 306.497903][ T28] ? __lock_acquire+0x7c50/0x7c50 [ 306.529464][ T28] ? __wake_up+0x11b/0x190 [ 306.534058][ T28] ? wake_bit_function+0x200/0x200 [ 306.539186][ T28] ? preempt_count_add+0x8d/0x190 [ 306.562633][ T28] ? shrink_dentry_list+0x688/0x6a0 [ 306.567903][ T28] ? up_write+0x1bb/0x420 [ 306.572259][ T28] namespace_unlock+0x1e3/0x3c0 [ 306.602645][ T28] ? __lock_acquire+0x7c50/0x7c50 [ 306.607740][ T28] ? umount_tree+0xe00/0xe00 [ 306.612351][ T28] ? umount_mnt+0x2c0/0x2c0 [ 306.637489][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 306.644765][ T28] ? __fput+0x7b6/0x920 [ 306.669627][ T28] dissolve_on_fput+0x103/0x130 [ 306.674570][ T28] __fput+0x7b6/0x920 [ 306.678591][ T28] task_work_run+0x1ca/0x250 [ 306.703427][ T28] ? task_work_cancel+0x230/0x230 [ 306.708514][ T28] ? __close_range+0x1c5/0x730 [ 306.722624][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 306.728174][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 306.733571][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 306.739136][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 306.778065][ T28] do_syscall_64+0x58/0xa0 [ 306.782610][ T28] ? clear_bhb_loop+0x60/0xb0 [ 306.787299][ T28] ? clear_bhb_loop+0x60/0xb0 [ 306.791986][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.837189][ T28] RIP: 0033:0x7f66e418eba9 [ 306.841664][ T28] RSP: 002b:00007ffcfeccd468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 306.876226][ T28] RAX: 0000000000000000 RBX: 000000000002388f RCX: 00007f66e418eba9 [ 306.909585][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 306.940164][ T28] RBP: 00007f66e43d7da0 R08: 0000000000000001 R09: 00000008feccd75f [ 306.948952][ T28] R10: 0000001b2ea20000 R11: 0000000000000246 R12: 00007f66e43d5fac [ 306.975835][ T28] R13: 00007f66e43d5fa0 R14: ffffffffffffffff R15: 00007ffcfeccd580 [ 307.019706][ T28] [ 307.022838][ T28] INFO: task syz.4.294:5310 blocked for more than 148 seconds. [ 307.030387][ T28] Not tainted syzkaller #0 [ 307.053188][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.070062][ T28] task:syz.4.294 state:D stack:27152 pid:5310 ppid:4269 flags:0x00004004 [ 307.092664][ T28] Call Trace: [ 307.095995][ T28] [ 307.098933][ T28] __schedule+0x10ec/0x40b0 [ 307.112619][ T28] ? verify_lock_unused+0x140/0x140 [ 307.117876][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 307.142629][ T28] schedule+0xb9/0x180 [ 307.146756][ T28] schedule_timeout+0x97/0x280 [ 307.151536][ T28] ? console_conditional_schedule+0x40/0x40 [ 307.172697][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 307.178752][ T28] ? lock_chain_count+0x20/0x20 [ 307.203020][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 307.208113][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 307.222618][ T28] ? lock_chain_count+0x20/0x20 [ 307.232633][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 307.237881][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 307.262871][ T28] ? wait_for_completion+0x268/0x590 [ 307.268225][ T28] wait_for_completion+0x2b9/0x590 [ 307.282627][ T28] ? io_schedule+0xd0/0xd0 [ 307.287107][ T28] ? try_to_wake_up+0x67c/0x1080 [ 307.292064][ T28] ? __init_swait_queue_head+0xa5/0x150 [ 307.312798][ T28] vhost_dev_flush+0x194/0x1e0 [ 307.317634][ T28] ? vhost_poll_stop+0x80/0x80 [ 307.322419][ T28] ? vhost_dev_flush+0x1e0/0x1e0 [ 307.342620][ T28] ? try_to_wake_up+0x67c/0x1080 [ 307.347627][ T28] vhost_dev_set_owner+0x7e1/0xa40 [ 307.362614][ T28] ? slab_free_freelist_hook+0x131/0x1a0 [ 307.368907][ T28] ? __mutex_trylock_common+0x14f/0x250 [ 307.398489][ T28] ? vhost_dev_has_owner+0x40/0x40 [ 307.412775][ T28] ? vhost_set_backend_features+0x1b0/0x1b0 [ 307.418719][ T28] ? rcu_is_watching+0x11/0xa0 [ 307.432611][ T28] ? trace_contention_end+0x5f/0x170 [ 307.437972][ T28] ? __mutex_lock+0x19e/0xaf0 [ 307.452632][ T28] vhost_dev_ioctl+0xa4/0xed0 [ 307.457378][ T28] ? vhost_vsock_dev_ioctl+0x211/0xdb0 [ 307.468185][ T28] ? mutex_lock_nested+0x10/0x10 [ 307.473317][ T28] ? vhost_init_device_iotlb+0x200/0x200 [ 307.478991][ T28] vhost_vsock_dev_ioctl+0x21f/0xdb0 [ 307.502620][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 307.507889][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 307.522616][ T28] ? security_file_ioctl+0x7c/0xa0 [ 307.532640][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 307.537878][ T28] __se_sys_ioctl+0xfa/0x170 [ 307.542491][ T28] do_syscall_64+0x4c/0xa0 [ 307.574005][ T28] ? clear_bhb_loop+0x60/0xb0 [ 307.578747][ T28] ? clear_bhb_loop+0x60/0xb0 [ 307.592616][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.598572][ T28] RIP: 0033:0x7f149858eba9 [ 307.612609][ T28] RSP: 002b:00007f14967f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.621083][ T28] RAX: ffffffffffffffda RBX: 00007f14987d5fa0 RCX: 00007f149858eba9 [ 307.652643][ T28] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 307.660693][ T28] RBP: 00007f1498611e19 R08: 0000000000000000 R09: 0000000000000000 [ 307.669088][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.692609][ T28] R13: 00007f14987d6038 R14: 00007f14987d5fa0 R15: 00007ffdb200a2f8 [ 307.700652][ T28] [ 307.729585][ T28] INFO: task syz.4.294:5312 blocked for more than 148 seconds. [ 307.759471][ T28] Not tainted syzkaller #0 [ 307.765107][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 307.792610][ T28] task:syz.4.294 state:D stack:28096 pid:5312 ppid:4269 flags:0x00004004 [ 307.802474][ T28] Call Trace: [ 307.812607][ T28] [ 307.815576][ T28] __schedule+0x10ec/0x40b0 [ 307.820113][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 307.853872][ T28] ? __mutex_trylock_common+0x80/0x250 [ 307.859397][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 307.872650][ T28] schedule+0xb9/0x180 [ 307.881674][ T28] schedule_preempt_disabled+0xf/0x20 [ 307.903305][ T28] __mutex_lock+0x555/0xaf0 [ 307.907872][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 307.912737][ T28] ? vhost_vsock_dev_ioctl+0x211/0xdb0 [ 307.918419][ T28] ? mutex_lock_nested+0x10/0x10 [ 307.942912][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 307.949005][ T28] ? lock_chain_count+0x20/0x20 [ 307.962620][ T28] vhost_vsock_dev_ioctl+0x211/0xdb0 [ 307.967960][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 307.979250][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 308.002793][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 308.008164][ T28] ? security_file_ioctl+0x70/0xa0 [ 308.052774][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 308.057771][ T28] ? security_file_ioctl+0x7c/0xa0 [ 308.069757][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 308.075037][ T28] __se_sys_ioctl+0xfa/0x170 [ 308.079654][ T28] do_syscall_64+0x4c/0xa0 [ 308.102830][ T28] ? clear_bhb_loop+0x60/0xb0 [ 308.107566][ T28] ? clear_bhb_loop+0x60/0xb0 [ 308.112255][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.131566][ T28] RIP: 0033:0x7f149858eba9 [ 308.136322][ T28] RSP: 002b:00007f14967d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.145421][ T28] RAX: ffffffffffffffda RBX: 00007f14987d6090 RCX: 00007f149858eba9 [ 308.154226][ T28] RDX: 0000200000000080 RSI: 000000004008af12 RDI: 0000000000000003 [ 308.162227][ T28] RBP: 00007f1498611e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.171720][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.179899][ T28] R13: 00007f14987d6128 R14: 00007f14987d6090 R15: 00007ffdb200a2f8 [ 308.190111][ T28] [ 308.195211][ T28] INFO: task syz.4.294:5314 blocked for more than 149 seconds. [ 308.203535][ T28] Not tainted syzkaller #0 [ 308.208484][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.218027][ T28] task:syz.4.294 state:D stack:27712 pid:5314 ppid:4269 flags:0x00004004 [ 308.229269][ T28] Call Trace: [ 308.238280][ T28] [ 308.241244][ T28] __schedule+0x10ec/0x40b0 [ 308.247875][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 308.254735][ T28] ? __mutex_trylock_common+0x80/0x250 [ 308.260217][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 308.266774][ T28] schedule+0xb9/0x180 [ 308.270865][ T28] schedule_preempt_disabled+0xf/0x20 [ 308.277141][ T28] __mutex_lock+0x555/0xaf0 [ 308.281672][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 308.288667][ T28] ? vhost_vsock_dev_ioctl+0x211/0xdb0 [ 308.300593][ T28] ? mutex_lock_nested+0x10/0x10 [ 308.309348][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 308.322966][ T28] ? lock_chain_count+0x20/0x20 [ 308.327887][ T28] vhost_vsock_dev_ioctl+0x211/0xdb0 [ 308.340825][ T28] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 308.349398][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 308.362701][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 308.367968][ T28] ? security_file_ioctl+0x75/0xa0 [ 308.381448][ T28] ? security_file_ioctl+0x28/0xa0 [ 308.387372][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 308.394588][ T28] ? security_file_ioctl+0x7c/0xa0 [ 308.399737][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 308.413780][ T28] __se_sys_ioctl+0xfa/0x170 [ 308.418437][ T28] do_syscall_64+0x4c/0xa0 [ 308.435504][ T28] ? clear_bhb_loop+0x60/0xb0 [ 308.440248][ T28] ? clear_bhb_loop+0x60/0xb0 [ 308.450318][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.460536][ T28] RIP: 0033:0x7f149858eba9 [ 308.469954][ T28] RSP: 002b:00007f14967b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.486899][ T28] RAX: ffffffffffffffda RBX: 00007f14987d6180 RCX: 00007f149858eba9 [ 308.499813][ T28] RDX: 0000200000000300 RSI: 000000004004af07 RDI: 0000000000000003 [ 308.515884][ T28] RBP: 00007f1498611e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.530813][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.545001][ T28] R13: 00007f14987d6218 R14: 00007f14987d6180 R15: 00007ffdb200a2f8 [ 308.558718][ T28] [ 308.561794][ T28] INFO: task syz.4.294:5317 blocked for more than 149 seconds. [ 308.582747][ T28] Not tainted syzkaller #0 [ 308.587721][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.609481][ T28] task:syz.4.294 state:D stack:28096 pid:5317 ppid:4269 flags:0x00004004 [ 308.622282][ T28] Call Trace: [ 308.631212][ T28] [ 308.637988][ T28] __schedule+0x10ec/0x40b0 [ 308.642550][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 308.649902][ T28] ? __mutex_trylock_common+0x80/0x250 [ 308.666393][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 308.680727][ T28] schedule+0xb9/0x180 [ 308.689914][ T28] schedule_preempt_disabled+0xf/0x20 [ 308.702142][ T28] __mutex_lock+0x555/0xaf0 [ 308.709779][ T28] ? __mutex_lock+0x3a5/0xaf0 [ 308.719921][ T28] ? vhost_vsock_dev_ioctl+0x211/0xdb0 [ 308.729189][ T28] ? mutex_lock_nested+0x10/0x10 [ 308.738898][ T28] vhost_vsock_dev_ioctl+0x211/0xdb0 [ 308.749683][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 308.759633][ T28] ? bpf_lsm_file_ioctl+0x5/0x10 [ 308.769441][ T28] ? security_file_ioctl+0x7c/0xa0 [ 308.780358][ T28] ? vhost_vsock_chr_poll+0x50/0x50 [ 308.789177][ T28] __se_sys_ioctl+0xfa/0x170 [ 308.800602][ T28] do_syscall_64+0x4c/0xa0 [ 308.810027][ T28] ? clear_bhb_loop+0x60/0xb0 [ 308.819393][ T28] ? clear_bhb_loop+0x60/0xb0 [ 308.827792][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.838320][ T28] RIP: 0033:0x7f149858eba9 [ 308.847113][ T28] RSP: 002b:00007f1496391038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.861358][ T28] RAX: ffffffffffffffda RBX: 00007f14987d6270 RCX: 00007f149858eba9 [ 308.878913][ T28] RDX: 0000200000000040 RSI: 000000004008af20 RDI: 0000000000000003 [ 308.889196][ T28] RBP: 00007f1498611e19 R08: 0000000000000000 R09: 0000000000000000 [ 308.905920][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.918976][ T28] R13: 00007f14987d6308 R14: 00007f14987d6270 R15: 00007ffdb200a2f8 [ 308.932268][ T28] [ 308.939092][ T28] [ 308.939092][ T28] Showing all locks held in the system: [ 308.951671][ T28] 6 locks held by kworker/0:0/7: [ 308.961008][ T28] #0: ffff8881422b7938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 308.978074][ T28] #1: ffffc900000c7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 308.999354][ T28] #2: ffff888027d24190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 309.012878][ T28] #3: ffff88807afec190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x107/0x8a0 [ 309.022182][ T28] #4: ffff88807afe8118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb2/0x850 [ 309.042629][ T28] #5: ffff88807afe92c0 (&dev->mutex#2){+.+.}-{3:3}, at: __input_unregister_device+0x31/0x5f0 [ 309.061346][ T28] 2 locks held by kworker/u4:0/9: [ 309.067117][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.087662][ T28] #1: ffffc900000e7d00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.102757][ T28] 1 lock held by rcu_tasks_kthre/12: [ 309.109608][ T28] #0: ffffffff8cb2b570 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 309.130256][ T28] 1 lock held by rcu_tasks_trace/13: [ 309.137634][ T28] #0: ffffffff8cb2bd90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 309.157425][ T28] 3 locks held by kworker/1:0/22: [ 309.162484][ T28] #0: ffff88814c9ee138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.183577][ T28] #1: ffffc900001c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.208421][ T28] #2: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x15/0x30 [ 309.221867][ T28] 1 lock held by khungtaskd/28: [ 309.232474][ T28] #0: ffffffff8cb2abe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 309.251852][ T28] 2 locks held by acpid/3623: [ 309.258772][ T28] #0: ffff888077a17158 (&mousedev->mutex#2){+.+.}-{3:3}, at: mousedev_open_device+0x23/0x150 [ 309.277378][ T28] #1: ffff88807afe92c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_open_device+0x4e/0x2e0 [ 309.291224][ T28] 2 locks held by getty/4034: [ 309.301549][ T28] #0: ffff88814d1b5098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 309.318896][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 309.336900][ T28] 5 locks held by kworker/0:5/4318: [ 309.342144][ T28] 2 locks held by udevd/4387: [ 309.351102][ T28] #0: ffff88807460b110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_open+0x2d2/0x5b0 [ 309.369934][ T28] #1: ffff8880557fd2c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_open_device+0x4e/0x2e0 [ 309.382784][ T28] 2 locks held by kworker/u4:9/4483: [ 309.388098][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.408615][ T28] #1: ffffc90004c6fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.422935][ T28] 3 locks held by kworker/u4:17/5006: [ 309.428337][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.449435][ T28] #1: ffffc9000ce27d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 309.462728][ T28] #2: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 309.471754][ T28] 1 lock held by syz.3.293/5304: [ 309.489836][ T28] #0: ffffffff8cb308b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 309.509881][ T28] 1 lock held by syz.4.294/5310: [ 309.517453][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.535925][ T28] 1 lock held by syz.4.294/5312: [ 309.540893][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.562353][ T28] 1 lock held by syz.4.294/5314: [ 309.569171][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.589665][ T28] 1 lock held by syz.4.294/5317: [ 309.597853][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.615730][ T28] 1 lock held by syz.4.294/5318: [ 309.621296][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.639875][ T28] 1 lock held by syz.4.294/5319: [ 309.649572][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.669121][ T28] 1 lock held by syz.4.294/5323: [ 309.676305][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.696570][ T28] 1 lock held by syz.4.294/5325: [ 309.701549][ T28] #0: ffff888050540070 (&dev->mutex#5){+.+.}-{3:3}, at: vhost_vsock_dev_ioctl+0x211/0xdb0 [ 309.725385][ T28] 4 locks held by vhost-5310/5311: [ 309.730532][ T28] #0: ffffffff8cb53628 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_attach_task_all+0x22/0xe0 [ 309.746668][ T28] #1: ffffffff8c9c7a70 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_attach_lock+0xd/0x30 [ 309.760967][ T28] #2: ffffffff8cb53810 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_attach_task_all+0x2c/0xe0 [ 309.777364][ T28] #3: ffffffff8cb308b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 309.797907][ T28] 3 locks held by syz.2.298/5320: [ 309.807325][ T28] #0: ffff8880743ab810 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 309.826658][ T28] #1: ffffffff8dda0490 ((netlink_chain).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain+0x5e/0x1b0 [ 309.843287][ T28] #2: ffff88814625acb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nft_rcv_nl_event+0x111/0x590 [ 309.861095][ T28] 1 lock held by dhcpcd/5331: [ 309.867851][ T28] #0: ffff888026198130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 309.884224][ T28] 1 lock held by dhcpcd/5332: [ 309.888922][ T28] #0: ffff8880aea88130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 309.907014][ T28] 1 lock held by dhcpcd/5333: [ 309.911776][ T28] #0: ffff88807dddc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 309.932645][ T28] 1 lock held by dhcpcd/5334: [ 309.937364][ T28] #0: ffff8880aea8a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 309.957112][ T28] 1 lock held by dhcpcd/5335: [ 309.961827][ T28] #0: ffff88802f8f8130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 309.980745][ T28] 1 lock held by dhcpcd/5336: [ 309.986066][ T28] #0: ffff888056858130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 310.004695][ T28] 1 lock held by syz-executor/5339: [ 310.009922][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.030608][ T28] 1 lock held by syz-executor/5340: [ 310.039344][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.058121][ T28] 1 lock held by syz-executor/5341: [ 310.065733][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.082242][ T28] 1 lock held by syz-executor/5345: [ 310.089708][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.106484][ T28] 1 lock held by syz-executor/5348: [ 310.111703][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xaa9/0x1ff0 [ 310.132075][ T28] 1 lock held by syz-executor/5364: [ 310.139360][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.158546][ T28] 1 lock held by syz-executor/5366: [ 310.166244][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.183985][ T28] 1 lock held by syz-executor/5368: [ 310.189206][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.205956][ T28] 1 lock held by syz-executor/5370: [ 310.211176][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.225803][ T28] 1 lock held by syz-executor/5372: [ 310.232517][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.252947][ T28] 1 lock held by syz-executor/5377: [ 310.258168][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.278877][ T28] 1 lock held by syz-executor/5381: [ 310.286589][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.304410][ T28] 1 lock held by syz-executor/5383: [ 310.309633][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.328084][ T28] 1 lock held by syz-executor/5385: [ 310.337204][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.354949][ T28] 1 lock held by syz-executor/5387: [ 310.360175][ T28] #0: ffffffff8dd422e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 310.376963][ T28] [ 310.379310][ T28] ============================================= [ 310.379310][ T28] [ 310.398802][ T28] NMI backtrace for cpu 1 [ 310.403172][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 310.410373][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.420452][ T28] Call Trace: [ 310.423736][ T28] [ 310.426669][ T28] dump_stack_lvl+0x168/0x22e [ 310.431353][ T28] ? irq_work_queue+0xb8/0x140 [ 310.436135][ T28] ? show_regs_print_info+0x12/0x12 [ 310.441343][ T28] ? load_image+0x3b0/0x3b0 [ 310.445856][ T28] ? vprintk_emit+0x571/0x680 [ 310.450550][ T28] ? printk_sprint+0x460/0x460 [ 310.455331][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 310.460284][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 310.466460][ T28] ? _printk+0xcc/0x110 [ 310.470624][ T28] ? load_image+0x3b0/0x3b0 [ 310.475138][ T28] ? load_image+0x3b0/0x3b0 [ 310.479653][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 310.485735][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 310.491724][ T28] watchdog+0xeee/0xf30 [ 310.495889][ T28] ? watchdog+0x1ed/0xf30 [ 310.500230][ T28] kthread+0x29d/0x330 [ 310.504311][ T28] ? hungtask_pm_notify+0x40/0x40 [ 310.509339][ T28] ? kthread_blkcg+0xd0/0xd0 [ 310.513948][ T28] ret_from_fork+0x1f/0x30 [ 310.518384][ T28] [ 310.522284][ T28] Sending NMI from CPU 1 to CPUs 0: [ 310.527720][ C0] NMI backtrace for cpu 0 [ 310.527730][ C0] CPU: 0 PID: 4318 Comm: kworker/0:5 Not tainted syzkaller #0 [ 310.527744][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.527753][ C0] Workqueue: usb_hub_wq hub_event [ 310.527775][ C0] RIP: 0010:stack_trace_consume_entry+0x3/0x270 [ 310.527794][ C0] Code: 25 28 00 00 00 48 3b 4c 24 78 75 09 48 8d 65 f0 5b 41 5e 5d c3 e8 ed 8b a7 08 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 41 57 <41> 56 41 55 41 54 53 48 83 ec 18 48 ba 00 00 00 00 00 fc ff df 4c [ 310.527806][ C0] RSP: 0018:ffffc90000007390 EFLAGS: 00000086 [ 310.527817][ C0] RAX: ffffffff8616b5c9 RBX: ffffc90000007460 RCX: 0000000080000100 [ 310.527828][ C0] RDX: ffffc90000007301 RSI: ffffffff8616b5c9 RDI: ffffc90000007460 [ 310.527838][ C0] RBP: ffffc90000007430 R08: ffffc900042e7458 R09: ffffc900000073f8 [ 310.527848][ C0] R10: fffff52000000e81 R11: 1ffff92000000e7f R12: ffff88802bb71dc0 [ 310.527858][ C0] R13: ffffc900000077b8 R14: ffffffff816fb740 R15: ffffc900000073a8 [ 310.527868][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 310.527881][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.527891][ C0] CR2: 0000562aa738ec70 CR3: 000000007dc3e000 CR4: 00000000003506f0 [ 310.527903][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 310.527911][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 310.527920][ C0] Call Trace: [ 310.527924][ C0] [ 310.527930][ C0] arch_stack_walk+0x100/0x140 [ 310.527948][ C0] ? usb_probe_device+0x139/0x270 [ 310.527965][ C0] stack_trace_save+0x98/0xe0 [ 310.527980][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 310.527995][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 310.528012][ C0] ? mark_lock+0x94/0x320 [ 310.528029][ C0] kasan_set_track+0x4b/0x70 [ 310.528045][ C0] ? kasan_set_track+0x4b/0x70 [ 310.528059][ C0] ? kasan_save_free_info+0x2d/0x50 [ 310.528076][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 310.528091][ C0] ? slab_free_freelist_hook+0x131/0x1a0 [ 310.528104][ C0] ? __kmem_cache_free+0xb6/0x1f0 [ 310.528116][ C0] ? skb_release_data+0x5db/0x7c0 [ 310.528131][ C0] ? consume_skb+0xa2/0x100 [ 310.528145][ C0] ? ath6kl_usb_recv_complete+0x1d2/0x4d0 [ 310.528162][ C0] ? __usb_hcd_giveback_urb+0x35f/0x520 [ 310.528179][ C0] ? dummy_timer+0x888/0x31b0 [ 310.528192][ C0] ? __hrtimer_run_queues+0x554/0xd60 [ 310.528205][ C0] ? hrtimer_run_softirq+0x183/0x2a0 [ 310.528218][ C0] ? handle_softirqs+0x2a1/0x920 [ 310.528236][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 310.528253][ C0] ? irq_exit_rcu+0x5/0x20 [ 310.528270][ C0] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 310.528287][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 310.528301][ C0] ? preempt_count_add+0x11f/0x190 [ 310.528314][ C0] ? unwind_next_frame+0xaf/0x20b0 [ 310.528335][ C0] ? arch_stack_walk+0x10c/0x140 [ 310.528349][ C0] ? stack_trace_save+0x98/0xe0 [ 310.528363][ C0] ? kasan_set_track+0x4b/0x70 [ 310.528377][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 310.528392][ C0] ? __kmalloc+0xb0/0x240 [ 310.528408][ C0] ? usb_alloc_urb+0x3f/0x140 [ 310.528420][ C0] ? ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 310.528436][ C0] ? ath6kl_usb_power_on+0x66/0x280 [ 310.528451][ C0] ? ath6kl_core_init+0x1ce/0x10c0 [ 310.528465][ C0] ? ath6kl_usb_probe+0x144a/0x1540 [ 310.528480][ C0] ? usb_probe_interface+0x5a0/0xaf0 [ 310.528494][ C0] ? really_probe+0x2aa/0xc70 [ 310.528511][ C0] ? __driver_probe_device+0x18c/0x330 [ 310.528527][ C0] ? driver_probe_device+0x4f/0x420 [ 310.528544][ C0] ? __device_attach_driver+0x2c6/0x510 [ 310.528561][ C0] ? bus_for_each_drv+0x175/0x200 [ 310.528575][ C0] ? __device_attach+0x29b/0x460 [ 310.528591][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.528605][ C0] ? device_add+0xa00/0xfb0 [ 310.528617][ C0] ? usb_set_configuration+0x1991/0x1fd0 [ 310.528632][ C0] ? usb_generic_driver_probe+0x89/0x150 [ 310.528654][ C0] ? __kmem_cache_free+0xb6/0x1f0 [ 310.528668][ C0] kasan_save_free_info+0x2d/0x50 [ 310.528685][ C0] ____kasan_slab_free+0x126/0x1e0 [ 310.528702][ C0] slab_free_freelist_hook+0x131/0x1a0 [ 310.528718][ C0] ? skb_release_data+0x5db/0x7c0 [ 310.528734][ C0] __kmem_cache_free+0xb6/0x1f0 [ 310.528749][ C0] skb_release_data+0x5db/0x7c0 [ 310.528768][ C0] consume_skb+0xa2/0x100 [ 310.528784][ C0] ath6kl_usb_recv_complete+0x1d2/0x4d0 [ 310.528803][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 310.528824][ C0] dummy_timer+0x888/0x31b0 [ 310.528850][ C0] ? mark_lock+0x94/0x320 [ 310.528869][ C0] ? lock_chain_count+0x20/0x20 [ 310.528885][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 310.528904][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 310.528925][ C0] ? dummy_free_streams+0x530/0x530 [ 310.528942][ C0] __hrtimer_run_queues+0x554/0xd60 [ 310.528960][ C0] ? dummy_free_streams+0x530/0x530 [ 310.528977][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 310.528990][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 310.529009][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 310.529025][ C0] handle_softirqs+0x2a1/0x920 [ 310.529046][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 310.529066][ C0] ? do_softirq+0x200/0x200 [ 310.529088][ C0] __irq_exit_rcu+0x12f/0x220 [ 310.529106][ C0] ? irq_exit_rcu+0x20/0x20 [ 310.529129][ C0] irq_exit_rcu+0x5/0x20 [ 310.529146][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 310.529162][ C0] [ 310.529166][ C0] [ 310.529171][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 310.529184][ C0] RIP: 0010:preempt_count_add+0x11f/0x190 [ 310.529199][ C0] Code: ff 48 c7 c7 c0 94 8b 8a 48 c7 c6 00 95 8b 8a e8 47 45 f5 ff 89 df 0f 0b e9 5e ff ff ff 48 c7 c1 40 91 be 96 80 e1 07 80 c1 03 <38> c1 0f 8c 00 ff ff ff 89 fb 48 c7 c7 40 91 be 96 e8 db 3b 79 00 [ 310.529210][ C0] RSP: 0018:ffffc900042e6730 EFLAGS: 00000206 [ 310.529221][ C0] RAX: 0000000000000004 RBX: ffffc900042e6828 RCX: ffffffff96be9103 [ 310.529231][ C0] RDX: dffffc0000000000 RSI: ffffffff850391fc RDI: 0000000000000001 [ 310.529240][ C0] RBP: ffffc900042e6870 R08: ffffc900042e68f0 R09: 000000000000000f [ 310.529250][ C0] R10: fffff5200085cd11 R11: 1ffff9200085cd0f R12: ffffffff850391fc [ 310.529260][ C0] R13: ffffc900042e7238 R14: dffffc0000000000 R15: dffffc0000000000 [ 310.529272][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.529289][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.529307][ C0] unwind_next_frame+0xaf/0x20b0 [ 310.529325][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.529349][ C0] ? stack_trace_save+0xe0/0xe0 [ 310.529364][ C0] arch_stack_walk+0x10c/0x140 [ 310.529380][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.529397][ C0] stack_trace_save+0x98/0xe0 [ 310.529412][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 310.529426][ C0] ? __driver_probe_device+0x18c/0x330 [ 310.529444][ C0] ? __device_attach+0x29b/0x460 [ 310.529459][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.529474][ C0] ? device_add+0xa00/0xfb0 [ 310.529486][ C0] ? usb_set_configuration+0x1991/0x1fd0 [ 310.529500][ C0] ? usb_generic_driver_probe+0x89/0x150 [ 310.529514][ C0] ? usb_probe_device+0x139/0x270 [ 310.529528][ C0] ? really_probe+0x2aa/0xc70 [ 310.529545][ C0] ? memset+0x1e/0x40 [ 310.529563][ C0] kasan_set_track+0x4b/0x70 [ 310.529577][ C0] ? kasan_set_track+0x4b/0x70 [ 310.529592][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 310.529607][ C0] ? __kmalloc+0xb0/0x240 [ 310.529623][ C0] ? usb_alloc_urb+0x3f/0x140 [ 310.529635][ C0] ? ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 310.529651][ C0] ? ath6kl_usb_power_on+0x66/0x280 [ 310.529666][ C0] ? ath6kl_core_init+0x1ce/0x10c0 [ 310.529680][ C0] ? ath6kl_usb_probe+0x144a/0x1540 [ 310.529695][ C0] ? usb_probe_interface+0x5a0/0xaf0 [ 310.529709][ C0] ? really_probe+0x2aa/0xc70 [ 310.529725][ C0] ? __driver_probe_device+0x18c/0x330 [ 310.529741][ C0] ? driver_probe_device+0x4f/0x420 [ 310.529758][ C0] ? __device_attach_driver+0x2c6/0x510 [ 310.529774][ C0] ? bus_for_each_drv+0x175/0x200 [ 310.529789][ C0] ? __device_attach+0x29b/0x460 [ 310.529805][ C0] ? bus_probe_device+0xbc/0x1e0 [ 310.529834][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 310.529849][ C0] __kasan_kmalloc+0x8e/0xa0 [ 310.529865][ C0] ? usb_alloc_urb+0x3f/0x140 [ 310.529877][ C0] __kmalloc+0xb0/0x240 [ 310.529895][ C0] usb_alloc_urb+0x3f/0x140 [ 310.529908][ C0] ath6kl_usb_post_recv_transfers+0x24f/0x6f0 [ 310.529931][ C0] ath6kl_usb_power_on+0x66/0x280 [ 310.529947][ C0] ath6kl_core_init+0x1ce/0x10c0 [ 310.529962][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 310.529982][ C0] ? ath6kl_core_rx_complete+0x70/0x70 [ 310.530000][ C0] ? ath6kl_core_create+0x7d6/0x980 [ 310.530016][ C0] ath6kl_usb_probe+0x144a/0x1540 [ 310.530039][ C0] usb_probe_interface+0x5a0/0xaf0 [ 310.530058][ C0] ? usb_register_driver+0x3d0/0x3d0 [ 310.530073][ C0] really_probe+0x2aa/0xc70 [ 310.530090][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 310.530109][ C0] __driver_probe_device+0x18c/0x330 [ 310.530127][ C0] driver_probe_device+0x4f/0x420 [ 310.530146][ C0] __device_attach_driver+0x2c6/0x510 [ 310.530163][ C0] ? coredump_store+0x90/0x90 [ 310.530181][ C0] bus_for_each_drv+0x175/0x200 [ 310.530196][ C0] ? _raw_spin_unlock+0x40/0x40 [ 310.530214][ C0] ? subsys_find_device_by_id+0x350/0x350 [ 310.530234][ C0] __device_attach+0x29b/0x460 [ 310.530252][ C0] ? device_attach+0x20/0x20 [ 310.530270][ C0] ? kobject_uevent_env+0x35f/0x8a0 [ 310.530289][ C0] bus_probe_device+0xbc/0x1e0 [ 310.530304][ C0] ? device_add+0x97c/0xfb0 [ 310.530317][ C0] device_add+0xa00/0xfb0 [ 310.530339][ C0] usb_set_configuration+0x1991/0x1fd0 [ 310.530365][ C0] usb_generic_driver_probe+0x89/0x150 [ 310.530380][ C0] usb_probe_device+0x139/0x270 [ 310.530396][ C0] ? usb_register_device_driver+0x230/0x230 [ 310.530410][ C0] really_probe+0x2aa/0xc70 [ 310.530429][ C0] ? pm_runtime_barrier+0x147/0x1c0 [ 310.530446][ C0] __driver_probe_device+0x18c/0x330 [ 310.530464][ C0] driver_probe_device+0x4f/0x420 [ 310.530483][ C0] __device_attach_driver+0x2c6/0x510 [ 310.530500][ C0] ? coredump_store+0x90/0x90 [ 310.530518][ C0] bus_for_each_drv+0x175/0x200 [ 310.530533][ C0] ? _raw_spin_unlock+0x40/0x40 [ 310.530550][ C0] ? subsys_find_device_by_id+0x350/0x350 [ 310.530570][ C0] __device_attach+0x29b/0x460 [ 310.530588][ C0] ? device_attach+0x20/0x20 [ 310.530604][ C0] ? __kmem_cache_free+0xb6/0x1f0 [ 310.530619][ C0] ? kobject_uevent_env+0x35f/0x8a0 [ 310.530637][ C0] bus_probe_device+0xbc/0x1e0 [ 310.530652][ C0] ? device_add+0x97c/0xfb0 [ 310.530666][ C0] device_add+0xa00/0xfb0 [ 310.530683][ C0] usb_new_device+0xd4d/0x1620 [ 310.530704][ C0] ? lock_chain_count+0x20/0x20 [ 310.530721][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 310.530738][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 310.530756][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 310.530773][ C0] hub_event+0x2d5e/0x54e0 [ 310.530810][ C0] ? hub_post_resume+0x120/0x120 [ 310.530828][ C0] ? read_lock_is_recursive+0x10/0x10 [ 310.530844][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 310.530862][ C0] ? _raw_spin_unlock+0x40/0x40 [ 310.530880][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 310.530899][ C0] ? process_one_work+0x7a1/0x1160 [ 310.530913][ C0] process_one_work+0x898/0x1160 [ 310.530933][ C0] ? worker_detach_from_pool+0x240/0x240 [ 310.530949][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 310.530966][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 310.530983][ C0] ? kthread_data+0x4b/0xc0 [ 310.531002][ C0] worker_thread+0xaa2/0x1250 [ 310.531024][ C0] ? __kthread_parkme+0x162/0x1c0 [ 310.531044][ C0] kthread+0x29d/0x330 [ 310.531060][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 310.531074][ C0] ? kthread_blkcg+0xd0/0xd0 [ 310.531092][ C0] ret_from_fork+0x1f/0x30 [ 310.531115][ C0] [ 311.674865][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 311.681742][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 311.688951][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.699016][ T28] Call Trace: [ 311.702298][ T28] [ 311.705234][ T28] dump_stack_lvl+0x168/0x22e [ 311.709919][ T28] ? memcpy+0x3c/0x60 [ 311.713971][ T28] ? show_regs_print_info+0x12/0x12 [ 311.719176][ T28] ? load_image+0x3b0/0x3b0 [ 311.723703][ T28] panic+0x2c9/0x710 [ 311.727615][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 311.733260][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 311.737769][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 311.743331][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 311.749501][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 311.755671][ T28] watchdog+0xf2d/0xf30 [ 311.759842][ T28] ? watchdog+0x1ed/0xf30 [ 311.764187][ T28] kthread+0x29d/0x330 [ 311.768274][ T28] ? hungtask_pm_notify+0x40/0x40 [ 311.773304][ T28] ? kthread_blkcg+0xd0/0xd0 [ 311.777903][ T28] ret_from_fork+0x1f/0x30 [ 311.782337][ T28] [ 311.785614][ T28] Kernel Offset: disabled [ 311.789951][ T28] Rebooting in 86400 seconds..