last executing test programs: 1m29.200436677s ago: executing program 1 (id=258): timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, &(0x7f0000000000)={0x77359400}, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="00bdbfaef7d43daf", 0x8, 0x4000000, 0x0, 0x0) 1m28.617575349s ago: executing program 0 (id=259): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff8000}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x11}, 0x1c) close(0x3) 1m26.776754018s ago: executing program 0 (id=262): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000001c40)=[{{&(0x7f0000000380)=@phonet, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000001cc0)=""/4097}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000005c0)=""/203}], 0x0, &(0x7f00000001c0)=""/40}, 0x2}], 0x641, 0x40000103, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004184, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m26.465239739s ago: executing program 1 (id=263): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x40, 0x1}}, 0x50) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r1, 0x0, &(0x7f0000605000/0x3000)=nil, 0x3000, 0x100}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000020"]) 1m25.55428396s ago: executing program 0 (id=265): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto(r0, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000003140)=[{0x0}, {&(0x7f0000000800)=""/123, 0x7b}], 0x2}}], 0x1, 0x10000, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) 1m25.459449411s ago: executing program 1 (id=266): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m24.372692434s ago: executing program 0 (id=268): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1m24.103263936s ago: executing program 4 (id=269): prctl$PR_SET_CHILD_SUBREAPER(0x4a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) mount$9p_unix(&(0x7f0000000140)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages/file0\x00', &(0x7f00000001c0)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', &(0x7f0000000200), 0x0, &(0x7f0000000380)={'trans=unix,', {[{@access_uid={'access', 0x3d, r0}}, {@ignoreqv}, {@noxattr}, {@posixacl}, {@cache_loose}], [{@smackfsroot={'smackfsroot', 0x3d, ':$,-$'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'sysfs\x00'}}]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/kernel/mm/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) 1m23.674302713s ago: executing program 1 (id=270): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) 1m22.550845226s ago: executing program 4 (id=271): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x20}}, 0x80) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0xc000) 1m22.481783019s ago: executing program 1 (id=272): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) landlock_restrict_self(r0, 0xe) 1m21.057320744s ago: executing program 0 (id=273): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x162}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m20.329497859s ago: executing program 4 (id=274): socket$kcm(0xa, 0x922000000003, 0x11) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) 1m19.646718556s ago: executing program 4 (id=276): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000680000000400000003"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000002c0)=@tcp6=r0, 0x1}, 0x20) 1m18.545220684s ago: executing program 1 (id=279): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f00000000c0), 0x0}, 0x20) 1m18.524030469s ago: executing program 4 (id=280): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r0, &(0x7f0000000000)='27', 0x2) r1 = syz_open_dev$video(&(0x7f0000000540), 0x4, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x8, @pix={0x2, 0x0, 0x30314247, 0x3, 0x0, 0x0, 0x2, 0x1, 0x3, 0x6, 0x0, 0x1}}) io_setup(0x8fc, &(0x7f0000000040)) 1m18.455840172s ago: executing program 0 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m15.344517679s ago: executing program 4 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x13, &(0x7f00000006c0)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x19}}]}}]}, 0x40}}, 0x4c000) 1m3.0342921s ago: executing program 32 (id=279): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000004000000080000000000000001"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f00000000c0), 0x0}, 0x20) 1m2.614109501s ago: executing program 33 (id=281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.564840526s ago: executing program 3 (id=298): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x44081}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4014) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 59.789056321s ago: executing program 34 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x13, &(0x7f00000006c0)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x19}}]}}]}, 0x40}}, 0x4c000) 59.547916152s ago: executing program 3 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000540)={0x17c, 0x1a, 0x1498231eaa93e3f8, 0x70bd28, 0x25dfdbfc, "", [@nested={0x4, 0x113}, @nested={0x4, 0x75}, @nested={0x161, 0x106, 0x0, 0x1, [@typed={0xc5, 0xf9, 0x0, 0x0, @binary="6d0fad1571cd3cc31ce72cc16f60b0ea26a4ce485928002fbc25aa12622b3eb386190910f8a75bdeda67450b5e115223094de9cb4eecce933aca3a6161f201f6461833bdfa8dd447c3ea21e6e1b52f0848ce07744f8e872dd6a733c10d131b45164b83baa94173256faaefee6d973b7ff6c3b82da92b1435dcf29a7ffd4e12d3f228e3d5cf5bf69ee930454338fbfcb2a7e1a32983da0a66dfa89207b4523517203ed983ff71ae891ba24a4f2b068a2600b9dc868c2369def761e4b56d2c85e394"}, @nested={0x4, 0x12a}, @generic="8c1bbd5f944b6dc2ad205e8ac98865855886b819bed8af", @typed={0x7, 0xeb, 0x0, 0x0, @str='&W\x00'}, @generic="67300f6c096e8a27071f74277e47421d27b72fdc0d20f06856672e901d3b1e794ba916e325a8194cc45abc7f01f519da1a87a33ed4089d8596d3b1d0ebbbcf7776064eeea60412e0aa953d59ee5382ca8e2c463fbfd07bb07b3a05e4900f459cd25b887d892f4e093e9125e0eb46b77f90bd"]}]}, 0x17c}], 0x1, 0x0, 0x0, 0x4000}, 0x89c7e8cc3d87834e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 56.750836294s ago: executing program 3 (id=303): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) 54.405993716s ago: executing program 3 (id=305): openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = dup(r0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7a, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r1}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 52.107178456s ago: executing program 3 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x22}, 0x78, r2}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={r3, r4/1000+60000}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x8918, &(0x7f0000000000)) 49.61866138s ago: executing program 3 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010007, 0x0, 0x2}]}) 34.271291666s ago: executing program 35 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010007, 0x0, 0x2}]}) 28.545763427s ago: executing program 2 (id=320): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x261c5000) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/19, 0x13}}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 27.348934659s ago: executing program 2 (id=321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0xf0, 0x10, 0x1, 0x70bc28, 0xfffffffd, {{@in6=@mcast2, @in6=@loopback, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) 26.373225643s ago: executing program 2 (id=322): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0xc031, 0xffffffffffffffff, 0x9d33a000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 24.601284655s ago: executing program 2 (id=323): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23.077571835s ago: executing program 2 (id=324): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000002180)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x20, 0x20, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0xb386, 0x2, 0xd, 0x7, 0x5}}}}}, 0x0) 15.811041723s ago: executing program 2 (id=325): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20004000, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) shutdown(0xffffffffffffffff, 0x1) 0s ago: executing program 36 (id=325): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20004000, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) shutdown(0xffffffffffffffff, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 75.609045][ T5578] cgroup: Unknown subsys name 'net' [ 75.850561][ T5578] cgroup: Unknown subsys name 'cpuset' [ 75.914285][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.559288][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.908761][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.943414][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.952192][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.952866][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.966870][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.996897][ T4907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.997203][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.008506][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.031934][ T4907] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.047659][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.134805][ T4907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.162307][ T4907] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.168126][ T4907] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.184067][ T4907] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.198908][ T4907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.257355][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.271937][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.291410][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.292641][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.292815][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.296353][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.303107][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.304219][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.323964][ T4907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.358406][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.025700][ T5592] Bluetooth: hci0: command tx timeout [ 82.183887][ T5592] Bluetooth: hci1: command tx timeout [ 82.263834][ T5592] Bluetooth: hci2: command tx timeout [ 82.423895][ T5592] Bluetooth: hci4: command tx timeout [ 82.434199][ T5592] Bluetooth: hci3: command tx timeout [ 82.651311][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.652448][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.652565][ T5590] bridge_slave_0: entered allmulticast mode [ 82.654628][ T5590] bridge_slave_0: entered promiscuous mode [ 82.722155][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.722262][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.722421][ T5590] bridge_slave_1: entered allmulticast mode [ 82.725162][ T5590] bridge_slave_1: entered promiscuous mode [ 82.788883][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.789025][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.789125][ T5594] bridge_slave_0: entered allmulticast mode [ 82.790585][ T5594] bridge_slave_0: entered promiscuous mode [ 82.844910][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.845057][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.846043][ T5594] bridge_slave_1: entered allmulticast mode [ 82.847729][ T5594] bridge_slave_1: entered promiscuous mode [ 82.886136][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.934306][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.999203][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.999441][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.999604][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.999751][ T5600] bridge_slave_0: entered allmulticast mode [ 83.002933][ T5600] bridge_slave_0: entered promiscuous mode [ 83.013998][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.014194][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.014827][ T5597] bridge_slave_0: entered allmulticast mode [ 83.017429][ T5597] bridge_slave_0: entered promiscuous mode [ 83.064834][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.065298][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.065435][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.065587][ T5600] bridge_slave_1: entered allmulticast mode [ 83.068566][ T5600] bridge_slave_1: entered promiscuous mode [ 83.073994][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.074113][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.076425][ T5597] bridge_slave_1: entered allmulticast mode [ 83.078904][ T5597] bridge_slave_1: entered promiscuous mode [ 83.081631][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.081762][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.081913][ T5599] bridge_slave_0: entered allmulticast mode [ 83.085445][ T5599] bridge_slave_0: entered promiscuous mode [ 83.097181][ T5590] team0: Port device team_slave_0 added [ 83.247833][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.247935][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.248033][ T5599] bridge_slave_1: entered allmulticast mode [ 83.249881][ T5599] bridge_slave_1: entered promiscuous mode [ 83.253575][ T5590] team0: Port device team_slave_1 added [ 83.330006][ T5594] team0: Port device team_slave_0 added [ 83.333550][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.356255][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.390760][ T5594] team0: Port device team_slave_1 added [ 83.393018][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.396541][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.401917][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.406802][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.406832][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.406856][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.493269][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.495012][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.495027][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.495052][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.580704][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.580720][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.580734][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.583577][ T5600] team0: Port device team_slave_0 added [ 83.590957][ T5597] team0: Port device team_slave_0 added [ 83.621919][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.621937][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.621961][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.626505][ T5600] team0: Port device team_slave_1 added [ 83.629182][ T5597] team0: Port device team_slave_1 added [ 83.631866][ T5599] team0: Port device team_slave_0 added [ 83.709513][ T5599] team0: Port device team_slave_1 added [ 83.759069][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.759083][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.759096][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.760128][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.760141][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.760165][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.769560][ T5590] hsr_slave_0: entered promiscuous mode [ 83.771084][ T5590] hsr_slave_1: entered promiscuous mode [ 83.816081][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.816099][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.816124][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.818516][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.818532][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.818557][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.820768][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.820781][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.820805][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.875391][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.875408][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.875432][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.885995][ T5594] hsr_slave_0: entered promiscuous mode [ 83.888230][ T5594] hsr_slave_1: entered promiscuous mode [ 83.889276][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 83.889400][ T5594] Cannot create hsr debugfs directory [ 84.104518][ T5592] Bluetooth: hci0: command tx timeout [ 84.119925][ T5597] hsr_slave_0: entered promiscuous mode [ 84.122037][ T5597] hsr_slave_1: entered promiscuous mode [ 84.122587][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 84.122610][ T5597] Cannot create hsr debugfs directory [ 84.133102][ T5600] hsr_slave_0: entered promiscuous mode [ 84.134848][ T5600] hsr_slave_1: entered promiscuous mode [ 84.136216][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 84.136242][ T5600] Cannot create hsr debugfs directory [ 84.201522][ T5599] hsr_slave_0: entered promiscuous mode [ 84.205517][ T5599] hsr_slave_1: entered promiscuous mode [ 84.206480][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 84.206504][ T5599] Cannot create hsr debugfs directory [ 84.263879][ T5592] Bluetooth: hci1: command tx timeout [ 84.343920][ T5592] Bluetooth: hci2: command tx timeout [ 84.503829][ T5592] Bluetooth: hci3: command tx timeout [ 84.504949][ T5592] Bluetooth: hci4: command tx timeout [ 85.326659][ T5590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.375306][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.380293][ T5590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.409593][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.411268][ T5590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.451944][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.475348][ T5590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.498409][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.613409][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.657747][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.663128][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.689266][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.702444][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.726808][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.757488][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.788061][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.914813][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.950095][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.953354][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.007941][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.013397][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.037874][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.068621][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.102851][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.184265][ T5592] Bluetooth: hci0: command tx timeout [ 86.246078][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.276715][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.282283][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.307406][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.314560][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.349485][ T5592] Bluetooth: hci1: command tx timeout [ 86.366484][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.408884][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.423885][ T5592] Bluetooth: hci2: command tx timeout [ 86.444426][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.586373][ T5592] Bluetooth: hci4: command tx timeout [ 86.586409][ T5592] Bluetooth: hci3: command tx timeout [ 86.595417][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.635039][ T5599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.680829][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.698882][ T5599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.736550][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.743182][ T5599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.786681][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.791561][ T5599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.809183][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.865981][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.871756][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.932258][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.932343][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.991171][ T1000] cfg80211: failed to load regulatory.db [ 87.042325][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.042475][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.082581][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.137398][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.138104][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.143475][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.218891][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.219058][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.295194][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.346308][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.346434][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.386794][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.406218][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.406425][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.601281][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.677509][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.726668][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.726879][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.831921][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.832034][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.944160][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.010558][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.010688][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.102200][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.102335][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.265368][ T4907] Bluetooth: hci0: command tx timeout [ 88.424760][ T4907] Bluetooth: hci1: command tx timeout [ 88.468574][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.504445][ T4907] Bluetooth: hci2: command tx timeout [ 88.675369][ T5592] Bluetooth: hci4: command tx timeout [ 88.675465][ T4907] Bluetooth: hci3: command tx timeout [ 88.795782][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.912226][ T5590] veth0_vlan: entered promiscuous mode [ 89.009194][ T5590] veth1_vlan: entered promiscuous mode [ 89.169460][ T5594] veth0_vlan: entered promiscuous mode [ 89.235254][ T5594] veth1_vlan: entered promiscuous mode [ 89.261612][ T5590] veth0_macvtap: entered promiscuous mode [ 89.291918][ T5590] veth1_macvtap: entered promiscuous mode [ 89.395506][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.461259][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.510923][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.580197][ T5594] veth0_macvtap: entered promiscuous mode [ 89.618973][ T5594] veth1_macvtap: entered promiscuous mode [ 89.631120][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.845731][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.874602][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.994375][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.336022][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.336041][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.429818][ T5597] veth0_vlan: entered promiscuous mode [ 90.683258][ T5600] veth0_vlan: entered promiscuous mode [ 90.694521][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.694542][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.708583][ T5597] veth1_vlan: entered promiscuous mode [ 90.773336][ T5599] veth0_vlan: entered promiscuous mode [ 90.788891][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.788913][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.827521][ T5600] veth1_vlan: entered promiscuous mode [ 90.874984][ T5599] veth1_vlan: entered promiscuous mode [ 90.939652][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.939674][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.019894][ T5597] veth0_macvtap: entered promiscuous mode [ 91.083040][ T5600] veth0_macvtap: entered promiscuous mode [ 91.101223][ T5597] veth1_macvtap: entered promiscuous mode [ 91.129868][ T5600] veth1_macvtap: entered promiscuous mode [ 91.159292][ T5599] veth0_macvtap: entered promiscuous mode [ 91.198546][ T5599] veth1_macvtap: entered promiscuous mode [ 91.231907][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.276942][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.283559][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.335329][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.362830][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.396621][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.462691][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.827114][ T5788] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.556187][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.783169][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.783190][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.968190][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.968212][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.243365][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.243387][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.244850][ T1335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.492089][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.492107][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.499857][ T1142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500115][ T1142] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500150][ T1142] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500183][ T1142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.500217][ T1142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.552569][ T1333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.739700][ T1329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.744706][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.755456][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.755478][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.078562][ T1335] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078672][ T1335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078708][ T1335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078742][ T1335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078776][ T1335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078811][ T1335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078845][ T1335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078879][ T1335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.078912][ T1335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208210][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.208235][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.377368][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.787185][ T5823] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 95.962988][ T5843] ======================================================= [ 95.962988][ T5843] WARNING: The mand mount option has been deprecated and [ 95.962988][ T5843] and is ignored by this kernel. Remove the mand [ 95.962988][ T5843] option from the mount to silence this warning. [ 95.962988][ T5843] ======================================================= [ 96.287422][ T5606] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.562536][ T5606] usb 3-1: Using ep0 maxpacket: 32 [ 96.567066][ T5606] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 96.751063][ T5848] process 'syz.1.25' launched '/dev/fd/3' with NULL argv: empty string added [ 96.837206][ T5606] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.837241][ T5606] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.843487][ T5606] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 96.843516][ T5606] usb 3-1: Product: syz [ 96.843530][ T5606] usb 3-1: Manufacturer: syz [ 97.478041][ T5606] hub 3-1:4.0: USB hub found [ 97.668670][ T5606] hub 3-1:4.0: 2 ports detected [ 98.225755][ T5606] hub 3-1:4.0: set hub depth failed [ 98.429902][ T5606] usb 3-1: USB disconnect, device number 2 [ 98.459049][ T13] usb 3-1: Failed to suspend device, error -71 [ 99.803344][ T5886] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 101.413159][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 102.052682][ T5923] capability: warning: `syz.4.49' uses deprecated v2 capabilities in a way that may be insecure [ 103.597479][ T5943] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 103.874428][ T5954] netlink: 7 bytes leftover after parsing attributes in process `syz.0.57'. [ 104.718955][ T5973] netlink: 'syz.4.67': attribute type 3 has an invalid length. [ 104.719095][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 104.814519][ T5890] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.044908][ T5890] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 105.046436][ T5890] usb 2-1: config 4 has an invalid interface number: 15 but max is 0 [ 105.046460][ T5890] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.046479][ T5890] usb 2-1: config 4 has no interface number 0 [ 105.046506][ T5890] usb 2-1: too many endpoints for config 4 interface 15 altsetting 48: 193, using maximum allowed: 30 [ 105.046541][ T5890] usb 2-1: config 4 interface 15 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 193 [ 105.046681][ T5890] usb 2-1: config 4 interface 15 has no altsetting 0 [ 105.049613][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.049638][ T5890] usb 2-1: Product: syz [ 105.049652][ T5890] usb 2-1: Manufacturer: syz [ 105.049667][ T5890] usb 2-1: SerialNumber: syz [ 105.642549][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 105.642573][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 105.644313][ T5890] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 105.895097][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 105.909712][ T5890] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 105.909820][ T5890] usb 2-1: media controller created [ 105.951332][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.984598][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 105.984622][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 106.082805][ T5890] DVB: Unable to find symbol dib7000p_attach() [ 106.082839][ T5890] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 106.088044][ T5969] i2c i2c-1: Invalid block size returned: 206 [ 106.095911][ T5998] Zero length message leads to an empty skb [ 106.123797][ T1346] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.129807][ T1227] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.129846][ T1227] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.129877][ T1227] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.246136][ T5890] rc_core: IR keymap rc-dib0700-rc5 not found [ 106.246157][ T5890] Registered IR keymap rc-empty [ 106.253288][ T5890] dvb-usb: could not initialize remote control. [ 106.253304][ T5890] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 106.357081][ T5890] usb 2-1: USB disconnect, device number 2 [ 106.497892][ T5890] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 107.618993][ T6029] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 107.916172][ T6034] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 108.021112][ T6038] FAULT_INJECTION: forcing a failure. [ 108.021112][ T6038] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.021163][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.021192][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.021211][ T6038] Call Trace: [ 108.021220][ T6038] [ 108.021229][ T6038] dump_stack_lvl+0xe8/0x150 [ 108.021276][ T6038] should_fail_ex+0x46b/0x600 [ 108.021311][ T6038] _copy_to_user+0x31/0xb0 [ 108.021343][ T6038] bpf_verifier_vlog+0x606/0x900 [ 108.021381][ T6038] __btf_verifier_log+0xe2/0x140 [ 108.021405][ T6038] ? __sort_r+0x2c44/0x3530 [ 108.021438][ T6038] ? __pfx___btf_verifier_log+0x10/0x10 [ 108.021475][ T6038] __btf_verifier_log_type+0x3c8/0x6a0 [ 108.021513][ T6038] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 108.021552][ T6038] btf_datasec_check_meta+0x40e/0xad0 [ 108.021586][ T6038] ? __pfx_sort+0x10/0x10 [ 108.021613][ T6038] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 108.021650][ T6038] btf_parse_type_sec+0x3cf/0x2360 [ 108.021687][ T6038] ? __pfx_btf_check_sec_info+0x10/0x10 [ 108.021722][ T6038] ? btf_parse_str_sec+0x244/0x2f0 [ 108.021755][ T6038] btf_new_fd+0x4ad/0xc70 [ 108.021793][ T6038] __sys_bpf+0xd2e/0xd90 [ 108.021832][ T6038] ? __pfx___sys_bpf+0x10/0x10 [ 108.021866][ T6038] ? do_futex+0x3e7/0x4e0 [ 108.021916][ T6038] ? rcu_is_watching+0x16/0xb0 [ 108.021955][ T6038] __x64_sys_bpf+0xba/0xd0 [ 108.021994][ T6038] do_syscall_64+0x166/0x520 [ 108.022017][ T6038] ? trace_irq_disable+0x3b/0x140 [ 108.022045][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.022067][ T6038] ? clear_bhb_loop+0x70/0xc0 [ 108.022093][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.022114][ T6038] RIP: 0033:0x7fa45dc9e159 [ 108.022142][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.022160][ T6038] RSP: 002b:00007fa45bef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 108.022185][ T6038] RAX: ffffffffffffffda RBX: 00007fa45df25fa0 RCX: 00007fa45dc9e159 [ 108.022201][ T6038] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 108.022212][ T6038] RBP: 00007fa45dd3506b R08: 0000000000000000 R09: 0000000000000000 [ 108.022223][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.022233][ T6038] R13: 00007fa45df26038 R14: 00007fa45df25fa0 R15: 00007ffcb1f16e58 [ 108.022260][ T6038] [ 108.402727][ T6046] FAULT_INJECTION: forcing a failure. [ 108.402727][ T6046] name failslab, interval 1, probability 0, space 0, times 1 [ 108.402767][ T6046] CPU: 0 UID: 0 PID: 6046 Comm: syz.2.87 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.402791][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.402804][ T6046] Call Trace: [ 108.402814][ T6046] [ 108.402824][ T6046] dump_stack_lvl+0xe8/0x150 [ 108.402862][ T6046] should_fail_ex+0x46b/0x600 [ 108.402897][ T6046] should_failslab+0xa8/0x100 [ 108.402921][ T6046] __kmalloc_node_track_caller_noprof+0xfb/0x7b0 [ 108.402953][ T6046] ? kobject_set_name_vargs+0x61/0x110 [ 108.402977][ T6046] ? kobject_set_name_vargs+0x61/0x110 [ 108.403020][ T6046] kstrdup+0x42/0x100 [ 108.403042][ T6046] kobject_set_name_vargs+0x61/0x110 [ 108.403068][ T6046] dev_set_name+0xe2/0x140 [ 108.403099][ T6046] ? __pfx_dev_set_name+0x10/0x10 [ 108.403122][ T6046] ? __init_waitqueue_head+0xad/0x160 [ 108.403148][ T6046] ? device_initialize+0x3ac/0x490 [ 108.403178][ T6046] netdev_register_kobject+0xb7/0x350 [ 108.403214][ T6046] register_netdevice+0x1455/0x1ed0 [ 108.403258][ T6046] ? __pfx_register_netdevice+0x10/0x10 [ 108.403282][ T6046] ? __kasan_kmalloc+0x93/0xb0 [ 108.403316][ T6046] ? register_vlan_dev+0x34f/0x850 [ 108.403351][ T6046] register_vlan_dev+0x3a0/0x850 [ 108.403389][ T6046] register_vlan_device+0x393/0x4b0 [ 108.403419][ T6046] ? __pfx_register_vlan_device+0x10/0x10 [ 108.403445][ T6046] ? security_capable+0x7e/0x2c0 [ 108.403480][ T6046] vlan_ioctl_handler+0x248/0x630 [ 108.403507][ T6046] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 108.403542][ T6046] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 108.403564][ T6046] ? mutex_lock_nested+0x152/0x1d0 [ 108.403594][ T6046] ? sock_ioctl+0x5ee/0x7f0 [ 108.403622][ T6046] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 108.403651][ T6046] sock_ioctl+0x615/0x7f0 [ 108.403678][ T6046] ? __pfx_sock_ioctl+0x10/0x10 [ 108.403702][ T6046] ? __fget_files+0x2a/0x420 [ 108.403723][ T6046] ? __fget_files+0x3a8/0x420 [ 108.403743][ T6046] ? __fget_files+0x2a/0x420 [ 108.403769][ T6046] ? bpf_lsm_file_ioctl+0x9/0x20 [ 108.403795][ T6046] ? __pfx_sock_ioctl+0x10/0x10 [ 108.403823][ T6046] __se_sys_ioctl+0xff/0x170 [ 108.403856][ T6046] do_syscall_64+0x166/0x520 [ 108.403878][ T6046] ? trace_irq_disable+0x3b/0x140 [ 108.403906][ T6046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.403927][ T6046] ? clear_bhb_loop+0x70/0xc0 [ 108.403953][ T6046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.403974][ T6046] RIP: 0033:0x7fdabb63e159 [ 108.404012][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.404030][ T6046] RSP: 002b:00007fdab9896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.404052][ T6046] RAX: ffffffffffffffda RBX: 00007fdabb8c5fa0 RCX: 00007fdabb63e159 [ 108.404067][ T6046] RDX: 0000200000000200 RSI: 0000000000008982 RDI: 0000000000000003 [ 108.404080][ T6046] RBP: 00007fdabb6d506b R08: 0000000000000000 R09: 0000000000000000 [ 108.404093][ T6046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.404104][ T6046] R13: 00007fdabb8c6038 R14: 00007fdabb8c5fa0 R15: 00007ffcc64e40d8 [ 108.404135][ T6046] [ 108.966507][ T6073] warning: `syz.0.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.567890][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.95'. [ 109.615574][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.4.95'. [ 110.695534][ T6109] netlink: 'syz.1.104': attribute type 10 has an invalid length. [ 110.968270][ T6109] syz_tun: entered promiscuous mode [ 111.028529][ T6109] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.945432][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.996649][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 115.324689][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 115.504694][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.504724][ T9] usb 4-1: Product: syz [ 115.504739][ T9] usb 4-1: Manufacturer: syz [ 115.504765][ T9] usb 4-1: SerialNumber: syz [ 115.582613][ T9] usb 4-1: config 0 descriptor?? [ 115.970999][ T9] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 115.994250][ T6183] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.224964][ T6187] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 116.252099][ T6188] FAULT_INJECTION: forcing a failure. [ 116.252099][ T6188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.252137][ T6188] CPU: 1 UID: 0 PID: 6188 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 116.252162][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.252180][ T6188] Call Trace: [ 116.252189][ T6188] [ 116.252201][ T6188] dump_stack_lvl+0xe8/0x150 [ 116.252239][ T6188] should_fail_ex+0x46b/0x600 [ 116.252273][ T6188] _copy_to_user+0x31/0xb0 [ 116.252307][ T6188] do_tcp_getsockopt+0x194f/0x2b50 [ 116.252340][ T6188] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 116.252362][ T6188] ? sock_recv_errqueue+0x530/0x5e0 [ 116.252398][ T6188] ? lock_acquire+0x115/0x350 [ 116.252425][ T6188] ? futex_unqueue+0x22/0x240 [ 116.252464][ T6188] ? futex_unqueue+0x22/0x240 [ 116.252494][ T6188] ? futex_unqueue+0x22/0x240 [ 116.252521][ T6188] ? futex_unqueue+0x22/0x240 [ 116.252552][ T6188] ? futex_unqueue+0x211/0x240 [ 116.252581][ T6188] ? __futex_wait+0x1e3/0x410 [ 116.252607][ T6188] ? __futex_wait+0x35a/0x410 [ 116.252639][ T6188] ? __lock_acquire+0x747/0x2de0 [ 116.252677][ T6188] ? try_to_wake_up+0x84b/0x1430 [ 116.252710][ T6188] ? lock_acquire+0x115/0x350 [ 116.252748][ T6188] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 116.252779][ T6188] tcp_getsockopt+0x83/0x130 [ 116.252800][ T6188] ? sock_recv_errqueue+0x530/0x5e0 [ 116.252829][ T6188] ? sock_recv_errqueue+0x530/0x5e0 [ 116.252858][ T6188] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 116.252889][ T6188] do_sock_getsockopt+0x51d/0x7e0 [ 116.252924][ T6188] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 116.252984][ T6188] ? __fget_files+0x3a8/0x420 [ 116.253010][ T6188] ? __fget_files+0x2a/0x420 [ 116.253039][ T6188] __x64_sys_getsockopt+0x1aa/0x250 [ 116.253071][ T6188] do_syscall_64+0x166/0x520 [ 116.253093][ T6188] ? trace_irq_disable+0x3b/0x140 [ 116.253120][ T6188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.253142][ T6188] ? clear_bhb_loop+0x70/0xc0 [ 116.253167][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.253188][ T6188] RIP: 0033:0x7f5d9986e159 [ 116.253208][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.253225][ T6188] RSP: 002b:00007f5d97ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 116.253248][ T6188] RAX: ffffffffffffffda RBX: 00007f5d99af5fa0 RCX: 00007f5d9986e159 [ 116.253264][ T6188] RDX: 0000000000000025 RSI: 0000000000000006 RDI: 0000000000000003 [ 116.253278][ T6188] RBP: 00007f5d9990506b R08: 00002000000000c0 R09: 0000000000000000 [ 116.253292][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.253304][ T6188] R13: 00007f5d99af6038 R14: 00007f5d99af5fa0 R15: 00007ffca66ebfa8 [ 116.253337][ T6188] [ 116.744894][ T6187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.121325][ T6190] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 117.165114][ T1333] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.303273][ T1329] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.420317][ T5687] kernel write not supported for file bpf-prog (pid: 5687 comm: kworker/0:3) [ 117.476685][ T9] usb write operation failed. (-71) [ 117.640853][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 117.641609][ T9] dvbdev: DVB: registering new adapter (Terratec H7) [ 117.641662][ T9] usb 4-1: media controller created [ 117.648132][ T9] usb read operation failed. (-71) [ 117.658425][ T9] usb write operation failed. (-71) [ 117.723011][ T9] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 117.854894][ T9] usb 4-1: USB disconnect, device number 2 [ 119.409622][ T6253] netlink: 'syz.0.145': attribute type 12 has an invalid length. [ 119.409648][ T6253] netlink: 'syz.0.145': attribute type 29 has an invalid length. [ 119.409661][ T6253] netlink: 148 bytes leftover after parsing attributes in process `syz.0.145'. [ 119.409686][ T6253] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 119.409698][ T6253] netlink: 'syz.0.145': attribute type 2 has an invalid length. [ 119.409710][ T6253] netlink: 11 bytes leftover after parsing attributes in process `syz.0.145'. [ 119.411084][ T6253] netlink: 'syz.0.145': attribute type 12 has an invalid length. [ 119.411106][ T6253] netlink: 'syz.0.145': attribute type 29 has an invalid length. [ 119.411119][ T6253] netlink: 148 bytes leftover after parsing attributes in process `syz.0.145'. [ 119.411137][ T6253] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 119.411150][ T6253] netlink: 'syz.0.145': attribute type 2 has an invalid length. [ 119.411162][ T6253] netlink: 11 bytes leftover after parsing attributes in process `syz.0.145'. [ 121.593938][ T5606] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.756323][ T5606] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 121.757861][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.757894][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.757929][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.852409][ T5606] usb 2-1: config 0 descriptor?? [ 122.079042][ T6306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.161'. [ 122.515883][ T5606] usb 2-1: language id specifier not provided by device, defaulting to English [ 123.143197][ T5606] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71 [ 123.143304][ T5606] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 123.143410][ T5606] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 123.218302][ T5606] usb 2-1: USB disconnect, device number 3 [ 124.273958][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.442531][ T5890] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 124.448140][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.448200][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.744417][ T5707] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.008049][ T5707] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 125.023788][ T5707] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.023820][ T5707] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 125.023844][ T5707] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.023883][ T5707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.245757][ T6349] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 125.276879][ T5890] as10x_usb: device has been detected [ 125.312838][ T5890] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 125.623884][ T5890] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 126.146917][ T5707] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 126.207410][ T5707] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input6 [ 127.438566][ T6375] FAULT_INJECTION: forcing a failure. [ 127.438566][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.438606][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.1.185 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 127.438631][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.438644][ T6375] Call Trace: [ 127.438652][ T6375] [ 127.438661][ T6375] dump_stack_lvl+0xe8/0x150 [ 127.438698][ T6375] should_fail_ex+0x46b/0x600 [ 127.438734][ T6375] _copy_to_user+0x31/0xb0 [ 127.438768][ T6375] bpf_verifier_vlog+0x496/0x900 [ 127.438808][ T6375] __btf_verifier_log+0xe2/0x140 [ 127.438838][ T6375] ? __pfx___btf_verifier_log+0x10/0x10 [ 127.438868][ T6375] ? btf_parse_hdr+0x1da/0x810 [ 127.438900][ T6375] btf_parse_hdr+0x4a2/0x810 [ 127.438934][ T6375] btf_new_fd+0x337/0xc70 [ 127.438971][ T6375] __sys_bpf+0xd2e/0xd90 [ 127.439009][ T6375] ? __pfx___sys_bpf+0x10/0x10 [ 127.439043][ T6375] ? do_futex+0x3e7/0x4e0 [ 127.439091][ T6375] ? rcu_is_watching+0x16/0xb0 [ 127.439129][ T6375] __x64_sys_bpf+0xba/0xd0 [ 127.439160][ T6375] do_syscall_64+0x166/0x520 [ 127.439182][ T6375] ? trace_irq_disable+0x3b/0x140 [ 127.439220][ T6375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.439241][ T6375] ? clear_bhb_loop+0x70/0xc0 [ 127.439267][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.439288][ T6375] RIP: 0033:0x7f5d9986e159 [ 127.439308][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.439326][ T6375] RSP: 002b:00007f5d97ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.439349][ T6375] RAX: ffffffffffffffda RBX: 00007f5d99af5fa0 RCX: 00007f5d9986e159 [ 127.439365][ T6375] RDX: 0000000000000028 RSI: 0000200000001b40 RDI: 0000000000000012 [ 127.439378][ T6375] RBP: 00007f5d9990506b R08: 0000000000000000 R09: 0000000000000000 [ 127.439392][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.439404][ T6375] R13: 00007f5d99af6038 R14: 00007f5d99af5fa0 R15: 00007ffca66ebfa8 [ 127.439436][ T6375] [ 127.830932][ T5890] as10x_usb: error during firmware upload part1 [ 127.831434][ T5890] Registered device Abilis Systems DVB-Titan [ 128.203856][ T5708] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.292254][ T5890] usb 2-1: USB disconnect, device number 4 [ 128.392401][ T5708] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.523315][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.523345][ T5708] usb 5-1: Product: syz [ 128.523361][ T5708] usb 5-1: Manufacturer: syz [ 128.523375][ T5708] usb 5-1: SerialNumber: syz [ 133.692547][ T5707] usb 3-1: USB disconnect, device number 3 [ 133.710837][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.710938][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.742094][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 133.742164][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 133.742186][ T5708] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.940290][ T5890] Unregistered device Abilis Systems DVB-Titan [ 135.063150][ T5890] as10x_usb: device has been disconnected [ 135.743777][ T1000] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.744039][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 135.862026][ T6428] FAULT_INJECTION: forcing a failure. [ 135.862026][ T6428] name failslab, interval 1, probability 0, space 0, times 0 [ 135.862066][ T6428] CPU: 1 UID: 0 PID: 6428 Comm: syz.3.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 135.862091][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.862104][ T6428] Call Trace: [ 135.862112][ T6428] [ 135.862122][ T6428] dump_stack_lvl+0xe8/0x150 [ 135.862158][ T6428] should_fail_ex+0x46b/0x600 [ 135.862190][ T6428] ? alloc_inode+0xb8/0x1b0 [ 135.862211][ T6428] should_failslab+0xa8/0x100 [ 135.862234][ T6428] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 135.862265][ T6428] ? alloc_inode+0xb8/0x1b0 [ 135.862291][ T6428] alloc_inode+0xb8/0x1b0 [ 135.862314][ T6428] alloc_anon_inode+0x1e/0x340 [ 135.862343][ T6428] anon_inode_make_secure_inode+0x7b/0x180 [ 135.862379][ T6428] ? __pfx_anon_inode_make_secure_inode+0x10/0x10 [ 135.862421][ T6428] __se_sys_memfd_secret+0xe1/0x580 [ 135.862447][ T6428] do_syscall_64+0x166/0x520 [ 135.862469][ T6428] ? trace_irq_disable+0x3b/0x140 [ 135.862494][ T6428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.862513][ T6428] ? clear_bhb_loop+0x70/0xc0 [ 135.862536][ T6428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.862554][ T6428] RIP: 0033:0x7fd01cb6e159 [ 135.862573][ T6428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.862599][ T6428] RSP: 002b:00007fd01adc6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 135.862620][ T6428] RAX: ffffffffffffffda RBX: 00007fd01cdf5fa0 RCX: 00007fd01cb6e159 [ 135.862634][ T6428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.862645][ T6428] RBP: 00007fd01cc0506b R08: 0000000000000000 R09: 0000000000000000 [ 135.862658][ T6428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.862671][ T6428] R13: 00007fd01cdf6038 R14: 00007fd01cdf5fa0 R15: 00007fff94bd29a8 [ 135.862702][ T6428] [ 136.024000][ T1000] usb 1-1: device descriptor read/64, error -32 [ 136.078992][ T5708] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 136.278636][ T5708] usb 5-1: USB disconnect, device number 2 [ 136.413767][ T1000] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 136.663791][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 136.665622][ T1000] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 136.668215][ T1000] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 136.668261][ T1000] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 136.668302][ T1000] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 103, changing to 10 [ 136.668330][ T1000] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 26217, setting to 1024 [ 136.668358][ T1000] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 136.668386][ T1000] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.676890][ T1000] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 136.676917][ T1000] usb 1-1: Product: syz [ 136.676940][ T1000] usb 1-1: Manufacturer: syz [ 136.676954][ T1000] usb 1-1: SerialNumber: syz [ 136.732062][ T1000] usb 1-1: config 0 descriptor?? [ 136.942780][ T6424] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 137.318136][ T6436] loop2: detected capacity change from 0 to 7 [ 137.670090][ T1000] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 137.745736][ T1000] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 138.194923][ T6436] Dev loop2: unable to read RDB block 7 [ 138.194980][ T6436] loop2: unable to read partition table [ 138.195193][ T6436] loop2: partition table beyond EOD, truncated [ 138.195236][ T6436] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.687851][ T1000] usb 1-1: USB disconnect, device number 3 [ 138.927702][ T1000] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 138.944197][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 139.183407][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.212570][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.212598][ T9] usb 2-1: Product: syz [ 139.212613][ T9] usb 2-1: Manufacturer: syz [ 139.212628][ T9] usb 2-1: SerialNumber: syz [ 139.259354][ T9] usb 2-1: config 0 descriptor?? [ 139.548321][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.409434][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 140.452781][ T9] usb 2-1: USB disconnect, device number 5 [ 142.493819][ T5606] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.813928][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 142.835456][ T5606] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.40 [ 142.837189][ T5606] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 142.837223][ T5606] usb 2-1: config 1 interface 0 has no altsetting 0 [ 142.840770][ T5606] usb 2-1: string descriptor 0 read error: -22 [ 142.840920][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.893012][ T6494] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 144.953016][ T5606] usbhid 2-1:1.0: can't add hid device: -71 [ 144.953142][ T5606] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 145.133962][ T5606] usb 2-1: USB disconnect, device number 6 [ 147.399200][ T6506] syz.3.225 (6506) used greatest stack depth: 18888 bytes left [ 147.757549][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 150.037836][ T6532] FAULT_INJECTION: forcing a failure. [ 150.037836][ T6532] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.037876][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.2.236 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.037901][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.037914][ T6532] Call Trace: [ 150.037922][ T6532] [ 150.037932][ T6532] dump_stack_lvl+0xe8/0x150 [ 150.037970][ T6532] should_fail_ex+0x46b/0x600 [ 150.038005][ T6532] prepare_alloc_pages+0x223/0x650 [ 150.038043][ T6532] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 150.038075][ T6532] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.038108][ T6532] ? __pfx_policy_nodemask+0x10/0x10 [ 150.038127][ T6532] ? filemap_get_entry+0x374/0x3f0 [ 150.038149][ T6532] ? __pfx_filemap_get_entry+0x10/0x10 [ 150.038173][ T6532] alloc_pages_mpol+0xd4/0x280 [ 150.038199][ T6532] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 150.038223][ T6532] shmem_get_folio_gfp+0x6ee/0x1c40 [ 150.038248][ T6532] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 150.038294][ T6532] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 150.038326][ T6532] shmem_fallocate+0x937/0xe40 [ 150.038373][ T6532] ? __pfx_shmem_fallocate+0x10/0x10 [ 150.038414][ T6532] ? lock_acquire+0x115/0x350 [ 150.038467][ T6532] vfs_fallocate+0x663/0x7f0 [ 150.038529][ T6532] ? __fget_files+0x2a/0x420 [ 150.038577][ T6532] ? __pfx_vfs_fallocate+0x10/0x10 [ 150.038612][ T6532] __x64_sys_fallocate+0xbf/0x110 [ 150.038641][ T6532] do_syscall_64+0x166/0x520 [ 150.038662][ T6532] ? trace_irq_disable+0x3b/0x140 [ 150.038689][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.038711][ T6532] ? clear_bhb_loop+0x70/0xc0 [ 150.038751][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.038772][ T6532] RIP: 0033:0x7fdabb63e159 [ 150.038793][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.038810][ T6532] RSP: 002b:00007fdab9896028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 150.038834][ T6532] RAX: ffffffffffffffda RBX: 00007fdabb8c5fa0 RCX: 00007fdabb63e159 [ 150.038850][ T6532] RDX: 0000000000008e14 RSI: 0000000000000000 RDI: 0000000000000004 [ 150.038864][ T6532] RBP: 00007fdabb6d506b R08: 0000000000000000 R09: 0000000000000000 [ 150.038877][ T6532] R10: 000000000000e229 R11: 0000000000000246 R12: 0000000000000000 [ 150.038891][ T6532] R13: 00007fdabb8c6038 R14: 00007fdabb8c5fa0 R15: 00007ffcc64e40d8 [ 150.038926][ T6532] [ 151.190515][ T6543] loop3: detected capacity change from 0 to 7 [ 151.262523][ T6543] Dev loop3: unable to read RDB block 7 [ 151.262571][ T6543] loop3: unable to read partition table [ 151.262899][ T6543] loop3: partition table beyond EOD, truncated [ 151.262919][ T6543] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 161.738311][ T6621] FAULT_INJECTION: forcing a failure. [ 161.738311][ T6621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.738353][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.4.267 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 161.738389][ T6621] Tainted: [L]=SOFTLOCKUP [ 161.738397][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.738410][ T6621] Call Trace: [ 161.738418][ T6621] [ 161.738428][ T6621] dump_stack_lvl+0xe8/0x150 [ 161.738464][ T6621] should_fail_ex+0x46b/0x600 [ 161.738500][ T6621] _copy_to_user+0x31/0xb0 [ 161.738531][ T6621] bpf_verifier_vlog+0x52a/0x900 [ 161.738568][ T6621] btf_verifier_log+0x11d/0x1a0 [ 161.738596][ T6621] ? __pfx_btf_verifier_log+0x10/0x10 [ 161.738614][ T6621] ? __btf_verifier_log+0xe2/0x140 [ 161.738639][ T6621] ? __pfx___btf_verifier_log+0x10/0x10 [ 161.738663][ T6621] btf_func_proto_log+0x6dc/0x840 [ 161.738696][ T6621] __btf_verifier_log_type+0x45d/0x6a0 [ 161.738731][ T6621] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 161.738763][ T6621] ? __pfx_sort+0x10/0x10 [ 161.738791][ T6621] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 161.738837][ T6621] btf_func_proto_check_meta+0xc7/0x160 [ 161.738878][ T6621] btf_parse_type_sec+0x3cf/0x2360 [ 161.738915][ T6621] ? __pfx_btf_check_sec_info+0x10/0x10 [ 161.738950][ T6621] ? btf_parse_str_sec+0x244/0x2f0 [ 161.738982][ T6621] btf_new_fd+0x4ad/0xc70 [ 161.739020][ T6621] __sys_bpf+0xd2e/0xd90 [ 161.739059][ T6621] ? __pfx___sys_bpf+0x10/0x10 [ 161.739092][ T6621] ? do_futex+0x3e7/0x4e0 [ 161.739141][ T6621] ? rcu_is_watching+0x16/0xb0 [ 161.739185][ T6621] __x64_sys_bpf+0xba/0xd0 [ 161.739218][ T6621] do_syscall_64+0x166/0x520 [ 161.739240][ T6621] ? trace_irq_disable+0x3b/0x140 [ 161.739267][ T6621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.739289][ T6621] ? clear_bhb_loop+0x70/0xc0 [ 161.739314][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.739338][ T6621] RIP: 0033:0x7fa45dc9e159 [ 161.739358][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.739376][ T6621] RSP: 002b:00007fa45bef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.739399][ T6621] RAX: ffffffffffffffda RBX: 00007fa45df25fa0 RCX: 00007fa45dc9e159 [ 161.739416][ T6621] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 161.739430][ T6621] RBP: 00007fa45dd3506b R08: 0000000000000000 R09: 0000000000000000 [ 161.739443][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.739461][ T6621] R13: 00007fa45df26038 R14: 00007fa45df25fa0 R15: 00007ffcb1f16e58 [ 161.739492][ T6621] [ 161.818122][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 171.663859][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 171.847134][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 171.851915][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.851971][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 171.851998][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 171.852024][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 171.852046][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.395135][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 172.395165][ T9] usb 3-1: Product: syz [ 172.395181][ T9] usb 3-1: Manufacturer: syz [ 172.395195][ T9] usb 3-1: SerialNumber: syz [ 172.432198][ T9] usb 3-1: config 0 descriptor?? [ 174.433789][ T9] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 174.434151][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 176.234530][ T9] usb 3-1: USB disconnect, device number 4 [ 181.300022][ T37] audit: type=1326 audit(1790766102.036:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6703 comm="syz.2.290" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdabb63e159 code=0x0 [ 183.042127][ T6716] FAULT_INJECTION: forcing a failure. [ 183.042127][ T6716] name failslab, interval 1, probability 0, space 0, times 0 [ 183.042170][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.2.293 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 183.042215][ T6716] Tainted: [L]=SOFTLOCKUP [ 183.042223][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.042236][ T6716] Call Trace: [ 183.042244][ T6716] [ 183.042254][ T6716] dump_stack_lvl+0xe8/0x150 [ 183.042290][ T6716] should_fail_ex+0x46b/0x600 [ 183.042325][ T6716] should_failslab+0xa8/0x100 [ 183.042349][ T6716] __kmalloc_noprof+0xfb/0x790 [ 183.042377][ T6716] ? __asan_memcpy+0x40/0x70 [ 183.042403][ T6716] ? mpi_alloc+0x77/0x140 [ 183.042431][ T6716] ? mpi_alloc+0x77/0x140 [ 183.042466][ T6716] mpi_alloc+0x77/0x140 [ 183.042496][ T6716] mpi_read_raw_data+0x139/0x970 [ 183.042532][ T6716] dh_set_secret+0x193/0x320 [ 183.042556][ T6716] ? crypto_create_tfm_node+0x81/0x3c0 [ 183.042582][ T6716] ? __pfx_dh_set_secret+0x10/0x10 [ 183.042612][ T6716] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 183.042641][ T6716] __keyctl_dh_compute+0x5ae/0xd10 [ 183.042677][ T6716] ? futex_unqueue+0x22/0x240 [ 183.042710][ T6716] ? futex_unqueue+0x211/0x240 [ 183.042742][ T6716] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 183.042763][ T6716] ? __futex_wait+0x35a/0x410 [ 183.042794][ T6716] ? __pfx___futex_wait+0x10/0x10 [ 183.042824][ T6716] ? __pfx_futex_wake_mark+0x10/0x10 [ 183.042870][ T6716] keyctl_dh_compute+0x124/0x180 [ 183.042896][ T6716] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 183.042935][ T6716] __se_sys_keyctl+0x44c/0x9d0 [ 183.042968][ T6716] ? __pfx___se_sys_keyctl+0x10/0x10 [ 183.042999][ T6716] ? __pfx_do_futex+0x10/0x10 [ 183.043029][ T6716] ? __se_sys_futex+0x3a8/0x450 [ 183.043057][ T6716] ? __pfx___se_sys_futex+0x10/0x10 [ 183.043087][ T6716] ? __x64_sys_keyctl+0x20/0xc0 [ 183.043118][ T6716] do_syscall_64+0x166/0x520 [ 183.043140][ T6716] ? trace_irq_disable+0x3b/0x140 [ 183.043166][ T6716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.043188][ T6716] ? clear_bhb_loop+0x70/0xc0 [ 183.043213][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.043233][ T6716] RIP: 0033:0x7fdabb63e159 [ 183.043253][ T6716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.043271][ T6716] RSP: 002b:00007fdab9896028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 183.043294][ T6716] RAX: ffffffffffffffda RBX: 00007fdabb8c5fa0 RCX: 00007fdabb63e159 [ 183.043309][ T6716] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000017 [ 183.043323][ T6716] RBP: 00007fdabb6d506b R08: 0000000000000000 R09: 0000000000000000 [ 183.043337][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.043350][ T6716] R13: 00007fdabb8c6038 R14: 00007fdabb8c5fa0 R15: 00007ffcc64e40d8 [ 183.043382][ T6716] [ 186.075951][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.123120][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.261682][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.301681][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.303937][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.883146][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.969447][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 186.975619][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.002838][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.017560][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.503777][ T5592] Bluetooth: hci5: command tx timeout [ 189.239019][ T5598] Bluetooth: hci6: command tx timeout [ 189.602135][ T5598] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 189.698130][ T5598] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 189.711839][ T5598] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 189.727697][ T5598] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 189.902424][ T5598] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 190.583929][ T5592] Bluetooth: hci5: command tx timeout [ 191.313390][ T5592] Bluetooth: hci6: command tx timeout [ 192.103872][ T5592] Bluetooth: hci7: command tx timeout [ 192.663781][ T5592] Bluetooth: hci5: command tx timeout [ 193.383746][ T5592] Bluetooth: hci6: command tx timeout [ 194.184119][ T5592] Bluetooth: hci7: command tx timeout [ 194.438966][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.439042][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.743732][ T5592] Bluetooth: hci5: command tx timeout [ 195.463755][ T5592] Bluetooth: hci6: command tx timeout [ 196.411879][ T5592] Bluetooth: hci7: command tx timeout [ 196.593072][ T6775] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 198.423777][ T5598] Bluetooth: hci7: command tx timeout [ 206.813952][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 206.814001][ T5595] Bluetooth: hci3: command 0x0406 tx timeout [ 206.814029][ T5595] Bluetooth: hci2: command 0x0406 tx timeout [ 206.814057][ T5595] Bluetooth: hci4: command 0x0406 tx timeout [ 212.680351][ T6729] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.680491][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.680720][ T6729] bridge_slave_0: entered allmulticast mode [ 212.700195][ T6729] bridge_slave_0: entered promiscuous mode [ 212.931294][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.931518][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.931719][ T6729] bridge_slave_1: entered allmulticast mode [ 212.944188][ T6729] bridge_slave_1: entered promiscuous mode [ 213.193831][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 213.425628][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.427393][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 213.427430][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 213.429950][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.429984][ T9] usb 3-1: Product: syz [ 213.429999][ T9] usb 3-1: Manufacturer: syz [ 213.430014][ T9] usb 3-1: SerialNumber: syz [ 214.727724][ T6839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.728370][ T6839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.352436][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.408280][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.430492][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.463783][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.470670][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.600691][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 215.774019][ T9] usb 3-1: USB disconnect, device number 5 [ 216.667257][ T6754] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.667386][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.667597][ T6754] bridge_slave_0: entered allmulticast mode [ 216.706726][ T6754] bridge_slave_0: entered promiscuous mode [ 216.768839][ T6729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.594901][ T6754] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.600246][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.603528][ T6754] bridge_slave_1: entered allmulticast mode [ 217.613575][ T6754] bridge_slave_1: entered promiscuous mode [ 217.633780][ T4907] Bluetooth: hci0: command tx timeout [ 217.781397][ T6729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.703862][ T4907] Bluetooth: hci0: command tx timeout [ 219.880712][ T6754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.260215][ T6729] team0: Port device team_slave_0 added [ 220.443907][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.444053][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.444262][ T6730] bridge_slave_0: entered allmulticast mode [ 220.446967][ T6730] bridge_slave_0: entered promiscuous mode [ 220.453401][ T6754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.471653][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.471779][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.471982][ T6730] bridge_slave_1: entered allmulticast mode [ 220.556199][ T6730] bridge_slave_1: entered promiscuous mode [ 220.771332][ T6729] team0: Port device team_slave_1 added [ 221.784027][ T4907] Bluetooth: hci0: command tx timeout [ 221.956188][ T6754] team0: Port device team_slave_0 added [ 222.259560][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.261700][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.261719][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.261745][ T6729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.360664][ T6754] team0: Port device team_slave_1 added [ 222.384070][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.562357][ T6729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.562378][ T6729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.562406][ T6729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.519711][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.519730][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.519755][ T6754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.530508][ T6730] team0: Port device team_slave_0 added [ 223.863723][ T4907] Bluetooth: hci0: command tx timeout [ 226.089708][ T6754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.089727][ T6754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.089752][ T6754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.435049][ T6730] team0: Port device team_slave_1 added [ 231.861193][ T6729] hsr_slave_0: entered promiscuous mode [ 232.060187][ T6729] hsr_slave_1: entered promiscuous mode [ 232.063800][ T6729] debugfs: 'hsr0' already exists in 'hsr' [ 232.063827][ T6729] Cannot create hsr debugfs directory [ 232.105836][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.105858][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.105883][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.650911][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.650932][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.650959][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.132482][ T6754] hsr_slave_0: entered promiscuous mode [ 235.161700][ T6754] hsr_slave_1: entered promiscuous mode [ 235.173152][ T6754] debugfs: 'hsr0' already exists in 'hsr' [ 235.173183][ T6754] Cannot create hsr debugfs directory [ 241.011894][ T6661] bond0: (slave syz_tun): Releasing backup interface [ 246.664990][ T6730] hsr_slave_0: entered promiscuous mode [ 246.666319][ T6730] hsr_slave_1: entered promiscuous mode [ 246.667292][ T6730] debugfs: 'hsr0' already exists in 'hsr' [ 246.667317][ T6730] Cannot create hsr debugfs directory [ 247.711854][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.751958][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.815864][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.822135][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.846921][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.958658][ T4907] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.064136][ T4907] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.069134][ T4907] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.071373][ T4907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.078229][ T4907] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.467202][ T4907] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 249.502272][ T4907] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 249.524965][ T4907] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 249.698623][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 249.743191][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 249.758132][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 249.767790][ T5592] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 249.795303][ T5592] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 249.813427][ T5592] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 249.817731][ T5592] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 249.953793][ T5592] Bluetooth: hci1: command tx timeout [ 250.276404][ T4907] Bluetooth: hci4: command tx timeout [ 251.949269][ T4907] Bluetooth: hci9: command tx timeout [ 252.023917][ T4907] Bluetooth: hci1: command tx timeout [ 252.103902][ T4907] Bluetooth: hci8: command tx timeout [ 252.344968][ T4907] Bluetooth: hci4: command tx timeout [ 253.433294][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.433422][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.434728][ T6845] bridge_slave_0: entered allmulticast mode [ 253.745688][ T6845] bridge_slave_0: entered promiscuous mode [ 254.066914][ T4907] Bluetooth: hci9: command tx timeout [ 254.103697][ T4907] Bluetooth: hci1: command tx timeout [ 254.183830][ T4907] Bluetooth: hci8: command tx timeout [ 254.424076][ T4907] Bluetooth: hci4: command tx timeout [ 255.004489][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.004628][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.006443][ T6845] bridge_slave_1: entered allmulticast mode [ 255.068921][ T6845] bridge_slave_1: entered promiscuous mode [ 256.070503][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.070581][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.103859][ T4907] Bluetooth: hci9: command tx timeout [ 256.184054][ T4907] Bluetooth: hci1: command tx timeout [ 256.263806][ T4907] Bluetooth: hci8: command tx timeout [ 256.504073][ T4907] Bluetooth: hci4: command tx timeout [ 258.184496][ T4907] Bluetooth: hci9: command tx timeout [ 258.343752][ T4907] Bluetooth: hci8: command tx timeout [ 269.068387][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.522070][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.797935][ T5592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.815207][ T5592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.858046][ T5592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.884959][ T5592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.885634][ T5592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.063784][ T4907] Bluetooth: hci5: command tx timeout [ 279.143780][ T4907] Bluetooth: hci5: command tx timeout [ 281.224780][ T4907] Bluetooth: hci5: command tx timeout [ 283.304689][ T4907] Bluetooth: hci5: command tx timeout [ 299.315228][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.315467][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.315691][ T6889] bridge_slave_0: entered allmulticast mode [ 299.321646][ T6889] bridge_slave_0: entered promiscuous mode [ 302.544266][ T6895] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.544407][ T6895] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.544632][ T6895] bridge_slave_0: entered allmulticast mode [ 302.601172][ T6895] bridge_slave_0: entered promiscuous mode [ 303.046515][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.089162][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.106955][ T6889] bridge_slave_1: entered allmulticast mode [ 303.199384][ T6889] bridge_slave_1: entered promiscuous mode [ 303.710273][ T6895] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.710401][ T6895] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.710639][ T6895] bridge_slave_1: entered allmulticast mode [ 303.729064][ T6895] bridge_slave_1: entered promiscuous mode [ 307.103066][ T5592] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.140057][ T5592] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.141329][ T5592] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.142560][ T5592] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.143204][ T5592] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.385907][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.423898][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.429327][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.457703][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.460314][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.028574][ T6070] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.223712][ T5592] Bluetooth: hci0: command tx timeout [ 309.577842][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.645405][ T61] Bluetooth: hci2: command tx timeout [ 309.645823][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.673016][ T4907] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.690947][ T4907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.707656][ T4907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.959623][ T5592] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.003026][ T5592] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.017025][ T5592] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.033429][ T5592] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.071797][ T5592] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.311135][ T4907] Bluetooth: hci0: command tx timeout [ 311.711209][ T4907] Bluetooth: hci2: command tx timeout [ 311.979152][ T4907] Bluetooth: hci6: command tx timeout [ 313.257847][ T4907] Bluetooth: hci7: command tx timeout [ 313.394217][ T4907] Bluetooth: hci0: command tx timeout [ 313.784181][ T4907] Bluetooth: hci2: command tx timeout [ 314.023837][ T4907] Bluetooth: hci6: command tx timeout [ 315.303757][ T4907] Bluetooth: hci7: command tx timeout [ 315.487319][ T4907] Bluetooth: hci0: command tx timeout [ 315.896461][ T4907] Bluetooth: hci2: command tx timeout [ 316.117458][ T4907] Bluetooth: hci6: command tx timeout [ 317.550238][ T4907] Bluetooth: hci7: command tx timeout [ 317.583858][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.583930][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.190419][ T4907] Bluetooth: hci6: command tx timeout [ 319.623703][ T4907] Bluetooth: hci7: command tx timeout [ 326.056135][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.056347][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.056548][ T6950] bridge_slave_0: entered allmulticast mode [ 326.061589][ T6950] bridge_slave_0: entered promiscuous mode [ 326.842995][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.843160][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.843390][ T6950] bridge_slave_1: entered allmulticast mode [ 326.871429][ T6950] bridge_slave_1: entered promiscuous mode [ 330.727615][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.967730][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.641713][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 336.764254][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 336.785874][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.814686][ T5592] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.837264][ T5592] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.110566][ T4907] Bluetooth: hci4: command tx timeout [ 341.145463][ T4907] Bluetooth: hci4: command tx timeout [ 343.223851][ T4907] Bluetooth: hci4: command tx timeout [ 345.303733][ T4907] Bluetooth: hci4: command tx timeout [ 355.101969][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.102099][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.102324][ T7013] bridge_slave_0: entered allmulticast mode [ 355.193790][ T7013] bridge_slave_0: entered promiscuous mode [ 355.650551][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.650681][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.650905][ T7013] bridge_slave_1: entered allmulticast mode [ 355.657748][ T7013] bridge_slave_1: entered promiscuous mode [ 357.761464][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.785336][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.795768][ T7009] bridge_slave_0: entered allmulticast mode [ 357.834045][ T7009] bridge_slave_0: entered promiscuous mode [ 358.154401][ T6999] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.154555][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.154786][ T6999] bridge_slave_0: entered allmulticast mode [ 358.159711][ T6999] bridge_slave_0: entered promiscuous mode [ 358.548856][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.548983][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.549185][ T7009] bridge_slave_1: entered allmulticast mode [ 358.559690][ T7009] bridge_slave_1: entered promiscuous mode [ 362.379049][ T6999] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.380769][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.381013][ T6999] bridge_slave_1: entered allmulticast mode [ 362.388973][ T6999] bridge_slave_1: entered promiscuous mode [ 363.019491][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.025108][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.025353][ T6996] bridge_slave_0: entered allmulticast mode [ 363.031014][ T6996] bridge_slave_0: entered promiscuous mode [ 363.122579][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.413357][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.413487][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.413912][ T6996] bridge_slave_1: entered allmulticast mode [ 366.420823][ T6996] bridge_slave_1: entered promiscuous mode [ 366.781625][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.351883][ T7009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.746774][ T7009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.675360][ T4907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.791562][ T4907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.859725][ T4907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.886419][ T4907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.903302][ T4907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.146230][ T5608] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 369.171781][ T5608] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 369.192168][ T5608] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 369.213190][ T5608] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 369.265533][ T5608] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 370.710251][ T5592] Bluetooth: hci1: command 0x0406 tx timeout [ 370.830681][ T5592] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 370.897875][ T5592] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 370.903416][ T5592] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 370.946636][ T5592] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 370.951783][ T5592] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 371.073873][ T5592] Bluetooth: hci5: command tx timeout [ 371.523848][ T5592] Bluetooth: hci8: command tx timeout [ 371.540106][ T5592] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 371.605368][ T5592] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 371.664509][ T5592] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 371.670534][ T5592] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 371.719234][ T5592] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 373.144177][ T5598] Bluetooth: hci5: command tx timeout [ 373.543860][ T5598] Bluetooth: hci8: command tx timeout [ 373.787433][ T5598] Bluetooth: hci10: command tx timeout [ 374.814922][ T5598] Bluetooth: hci9: command tx timeout [ 375.224099][ T5598] Bluetooth: hci5: command tx timeout [ 375.623654][ T5598] Bluetooth: hci8: command tx timeout [ 375.873657][ T5598] Bluetooth: hci10: command tx timeout [ 376.823755][ T5598] Bluetooth: hci9: command tx timeout [ 377.356727][ T5598] Bluetooth: hci5: command tx timeout [ 377.703824][ T5598] Bluetooth: hci8: command tx timeout [ 377.943659][ T5598] Bluetooth: hci10: command tx timeout [ 378.794271][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.794354][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.903709][ T5598] Bluetooth: hci9: command tx timeout [ 380.083827][ T5598] Bluetooth: hci10: command tx timeout [ 380.983647][ T5598] Bluetooth: hci9: command tx timeout [ 391.114004][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.114132][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.114377][ T7061] bridge_slave_0: entered allmulticast mode [ 391.157227][ T7061] bridge_slave_0: entered promiscuous mode [ 391.375879][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.376017][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.376262][ T7061] bridge_slave_1: entered allmulticast mode [ 391.420899][ T7061] bridge_slave_1: entered promiscuous mode [ 392.196926][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.386762][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.999725][ T7061] team0: Port device team_slave_0 added [ 395.098539][ T7061] team0: Port device team_slave_1 added [ 396.892585][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.937656][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.941534][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.977647][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.997156][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 399.243699][ T5608] Bluetooth: hci0: command tx timeout [ 401.303729][ T5608] Bluetooth: hci0: command tx timeout [ 403.073861][ T38] INFO: task syz.4.284:6680 blocked for more than 143 seconds. [ 403.073890][ T38] Tainted: G L syzkaller #0 [ 403.073901][ T38] Blocked by coredump. [ 403.073907][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.073916][ T38] task:syz.4.284 state:D stack:21928 pid:6680 tgid:6680 ppid:5600 task_flags:0x40044c flags:0x00080003 [ 403.073985][ T38] Call Trace: [ 403.073993][ T38] [ 403.074006][ T38] __schedule+0x16d9/0x5700 [ 403.074072][ T38] ? __pfx___schedule+0x10/0x10 [ 403.074116][ T38] rt_mutex_schedule+0x76/0xf0 [ 403.074142][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 403.074183][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 403.074211][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 403.074238][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 403.074281][ T38] ? rcu_barrier+0x4c/0x530 [ 403.074307][ T38] ? rcu_barrier+0x4c/0x530 [ 403.074324][ T38] mutex_lock_nested+0x168/0x1d0 [ 403.074349][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.074379][ T38] rcu_barrier+0x4c/0x530 [ 403.074409][ T38] netdev_run_todo+0x2fc/0x1060 [ 403.074438][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 403.074470][ T38] ? __pfx_ ** replaying previous printk message ** [ 403.074470][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 403.074492][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 403.074527][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 403.074556][ T38] ? netdev_state_change+0x1bc/0x210 [ 403.074579][ T38] tun_chr_close+0x13f/0x1c0 [ 403.074612][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 403.074636][ T38] __fput+0x42a/0xa80 [ 403.074664][ T38] task_work_run+0x1d9/0x270 [ 403.074690][ T38] ? __pfx_task_work_run+0x10/0x10 [ 403.074712][ T38] ? do_exit+0x735/0x2360 [ 403.074730][ T38] ? kmem_cache_free+0x187/0x6d0 [ 403.074756][ T38] ? put_net+0x191/0x260 [ 403.074779][ T38] ? do_exit+0x735/0x2360 [ 403.074803][ T38] do_exit+0x73a/0x2360 [ 403.074824][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.074851][ T38] ? __pfx_do_exit+0x10/0x10 [ 403.074870][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.074904][ T38] ? rt_spin_unlock+0x159/0x200 [ 403.074932][ T38] do_group_exit+0x22d/0x2f0 [ 403.074952][ T38] ? rt_spin_unlock+0x165/0x200 [ 403.074980][ T38] get_signal+0x121b/0x12c0 [ 403.075025][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 403.075058][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 403.075104][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 403.093733][ T38] ? rcu_is_watching+0x16/0xb0 [ 403.093777][ T38] do_syscall_64+0x328/0x520 [ 403.093799][ T38] ? trace_irq_disable+0x3b/0x140 [ 403.093823][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.093842][ T38] ? clear_bhb_loop+0x70/0xc0 [ 403.093865][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.093900][ T38] RIP: 0033:0x7fa45dc9e159 [ 403.093923][ T38] RSP: 002b:00007ffcb1f16fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 403.093943][ T38] RAX: 0000000000000000 RBX: 00007fa45df27da0 RCX: 00007fa45dc9e159 [ 403.093957][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 403.093968][ T38] RBP: 00007fa45df27da0 R08: 0000000000000006 R09: 0000000000000000 [ 403.093980][ T38] R10: 00007fa45df27cb0 R11: 0000000000000246 R12: 000000000002a1b6 [ 403.093993][ T38] R13: 00007fa45df25fac R14: 000000000002a151 R15: 00007ffcb1f170c0 [ 403.094031][ T38] [ 403.094040][ T38] INFO: task syz-executor:6729 blocked for more than 143 seconds. [ 403.094055][ T38] Tainted: G L syzkaller #0 [ 403.094064][ T38] Blocked by coredump. [ 403.094069][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.094076][ T38] task:syz-executor state:D stack:19192 pid:6729 tgid:6729 ppid:1 task_flags:0x40054c flags:0x00080003 [ 403.094120][ T38] Call Trace: [ 403.094126][ T38] [ 403.094137][ T38] __schedule+0x16d9/0x5700 [ 403.094191][ T38] ? __pfx___schedule+0x10/0x10 [ 403.094233][ T38] rt_mutex_schedule+0x76/0xf0 [ 403.094257][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 403.094296][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 403.094323][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 403.094349][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 403.094390][ T38] ? rcu_barrier+0x4c/0x530 [ 403.094416][ T38] ? rcu_barrier+0x4c/0x530 [ 403.094433][ T38] mutex_lock_nested+0x168/0x1d0 [ 403.094456][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.094484][ T38] rcu_barrier+0x4c/0x530 [ 403.094513][ T38] netdev_run_todo+0x2fc/0x1060 [ 403.094540][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 403.094568][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 403.094588][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 403.094614][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 403.094641][ T38] ? netdev_state_change+0x1bc/0x210 [ 403.094663][ T38] tun_chr_close+0x13f/0x1c0 [ 403.094687][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 403.094712][ T38] __fput+0x42a/0xa80 [ 403.094740][ T38] task_work_run+0x1d9/0x270 [ 403.094764][ T38] ? __pfx_task_work_run+0x10/0x10 [ 403.094785][ T38] ? do_exit+0x735/0x2360 [ 403.094802][ T38] ? kmem_cache_free+0x187/0x6d0 [ 403.094827][ T38] ? put_net+0x191/0x260 [ 403.094849][ T38] ? do_exit+0x735/0x2360 [ 403.094872][ T38] do_exit+0x73a/0x2360 [ 403.094892][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.094921][ T38] ? __pfx_do_exit+0x10/0x10 [ 403.094940][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 403.094977][ T38] ? rt_spin_unlock+0x159/0x200 [ 403.095020][ T38] do_group_exit+0x22d/0x2f0 [ 403.095046][ T38] ? rt_spin_unlock+0x165/0x200 [ 403.095073][ T38] get_signal+0x121b/0x12c0 [ 403.095123][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 403.095154][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 403.095180][ T38] ? kmem_cache_free+0x539/0x6d0 [ 403.095222][ T38] exit_to_user_mode_loop+0x10e/0x770 [ 403.095247][ T38] ? rcu_is_watching+0x16/0xb0 [ 403.095278][ T38] do_syscall_64+0x328/0x520 [ 403.095296][ T38] ? trace_irq_disable+0x3b/0x140 [ 403.095318][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.095338][ T38] ? clear_bhb_loop+0x70/0xc0 [ 403.095360][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.095379][ T38] RIP: 0033:0x7f876cb6e98e [ 403.095396][ T38] RSP: 002b:00007ffd8a7da238 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 403.095414][ T38] RAX: 0000000000000060 RBX: 0000555582ef4500 RCX: 00007f876cb6e98e [ 403.095427][ T38] RDX: 0000000000000060 RSI: 00007f876d964670 RDI: 0000000000000003 [ 403.095438][ T38] RBP: 0000000000000001 R08: 00007ffd8a7da2b4 R09: 000000000000000c [ 403.095450][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 403.095461][ T38] R13: 0000000000000000 R14: 00007f876d964670 R15: 0000000000000000 [ 403.095491][ T38] [ 403.095564][ T38] [ 403.095564][ T38] Showing all locks held in the system: [ 403.095576][ T38] locks held by pr/ttyS0/17: 3, last CPU#0: [ 403.095590][ T38] #0: ffffffff8e09d7d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 403.095643][ T38] #1: ffffffff99ea93f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 403.095694][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 403.095743][ T38] locks held by rcuc/0/20: 4, last CPU#0: [ 403.095757][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 403.095806][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 403.095857][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 403.095907][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 403.095955][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 403.095968][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 403.096030][ T38] locks held by kworker/u8:8/1142: 6, last CPU#1: [ 403.096044][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.096098][ T38] #1: ffffc90006cbfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.096152][ T38] #2: ffff8880605e0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 403.096205][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 403.096257][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 403.096308][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 403.096358][ T38] locks held by kworker/0:2/1208: 3, last CPU#0: [ 403.096372][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.096421][ T38] #1: ffffc90006ecfc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.096470][ T38] #2: ffffffff8ed10278 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 403.096534][ T38] locks held by kworker/u8:16/1332: 2, on CPU#0: [ 403.096547][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.096593][ T38] #1: ffffc900072dfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.096658][ T38] locks held by getty/5345: 2, on CPU#1: [ 403.096670][ T38] #0: ffff888036beb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 403.096717][ T38] #1: ffffc900044ce2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 403.234504][ T38] locks held by kworker/u8:33/6070: 6, on CPU#0: [ 403.234522][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.234588][ T38] #1: ffffc900070bfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 403.234637][ T38] #2: ffffffff8f5c71a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 403.234694][ T38] #3: ffff88805d25e160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 403.234746][ T38] #4: ffff88803b6aa310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 403.234793][ T38] #5: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.234840][ T38] locks held by syz.1.279/6661: 1, on CPU#1: [ 403.234853][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.234897][ T38] locks held by syz.4.284/6680: 1, on CPU#0: [ 403.234910][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.234983][ T38] locks held by syz-executor/6729: 1, on CPU#1: [ 403.234996][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235040][ T38] locks held by syz-executor/6730: 1, on CPU#1: [ 403.235053][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235102][ T38] locks held by syz-executor/6754: 1, on CPU#1: [ 403.235116][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235183][ T38] locks held by syz.3.308/6790: 1, on CPU#0: [ 403.235196][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235238][ T38] locks held by syz-executor/6845: 1, on CPU#1: [ 403.235251][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235295][ T38] locks held by syz.2.325/6881: 1, on CPU#0: [ 403.235306][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235350][ T38] locks held by syz-executor/6889: 2, on CPU#1: [ 403.235364][ T38] #0: ffffffff8ed35168 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 403.235413][ T38] #1: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235454][ T38] locks held by syz-executor/6895: 1, on CPU#0: [ 403.235466][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235518][ T38] locks held by syz-executor/6907: 1, on CPU#0: [ 403.235531][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235585][ T38] locks held by syz-executor/6908: 1, on CPU#0: [ 403.235598][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235655][ T38] locks held by syz-executor/6950: 1, on CPU#1: [ 403.235691][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235739][ T38] locks held by syz-executor/6996: 1, on CPU#0: [ 403.235767][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235810][ T38] locks held by syz-executor/6999: 1, on CPU#1: [ 403.235857][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235904][ T38] locks held by syz-executor/7009: 1, on CPU#1: [ 403.235917][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.235996][ T38] locks held by syz-executor/7013: 1, on CPU#1: [ 403.236009][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.236060][ T38] locks held by syz-executor/7061: 1, on CPU#1: [ 403.236078][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 403.236129][ T38] locks held by syz-executor/7100: 2, on CPU#0: [ 403.236142][ T38] #0: ffffffff8ed42968 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 403.236191][ T38] #1: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 403.236234][ T38] locks held by syz-executor/7102: 2, last CPU#0: [ 403.236247][ T38] #0: ffffffff8fb246e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 403.236296][ T38] #1: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 403.236344][ T38] locks held by syz-executor/7116: 1, on CPU#0: [ 403.236357][ T38] #0: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 403.236401][ T38] locks held by syz-executor/7166: 2, on CPU#0: [ 403.236413][ T38] #0: ffffffff8f5c71a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 403.236464][ T38] #1: ffffffff8f5d5a38 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 403.236522][ T38] locks held by modprobe/7189: 2, last CPU#0: [ 403.236535][ T38] #0: ffff88803e46deb8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 403.236594][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 403.236657][ T38] [ 403.236662][ T38] ============================================= [ 403.236662][ T38] [ 403.236683][ T38] NMI backtrace for cpu 1 [ 403.236704][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.236729][ T38] Tainted: [L]=SOFTLOCKUP [ 403.236736][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.236746][ T38] Call Trace: [ 403.236754][ T38] [ 403.236763][ T38] dump_stack_lvl+0xe8/0x150 [ 403.236792][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 403.236818][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 403.236840][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 403.236867][ T38] sys_info+0x135/0x170 [ 403.236889][ T38] watchdog+0xfd7/0x1030 [ 403.236921][ T38] ? watchdog+0x1c7/0x1030 [ 403.236957][ T38] kthread+0x38b/0x470 [ 403.236976][ T38] ? __pfx_watchdog+0x10/0x10 [ 403.236998][ T38] ? __pfx_kthread+0x10/0x10 [ 403.237018][ T38] ret_from_fork+0x514/0xb70 [ 403.237039][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 403.237061][ T38] ? __switch_to+0xc89/0x1420 [ 403.237093][ T38] ? __pfx_kthread+0x10/0x10 [ 403.237117][ T38] ret_from_fork_asm+0x1a/0x30 [ 403.237149][ T38] [ 403.237156][ T38] Sending NMI from CPU 1 to CPUs 0: [ 403.237190][ C0] NMI backtrace for cpu 0 [ 403.237205][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.237228][ C0] Tainted: [L]=SOFTLOCKUP [ 403.237234][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.237243][ C0] RIP: 0010:delay_tsc+0x73/0xd0 [ 403.237268][ C0] Code: e8 22 b9 3d f6 65 48 8b 05 6a b7 4e 07 48 85 c0 74 1c f3 90 bf 01 00 00 00 e8 b9 b7 3d f6 e8 44 7a 01 00 39 c5 75 0e 0f 01 f9 <66> 90 eb bb e8 94 fc db f5 eb dd 4c 29 fb e8 2a 7a 01 00 89 c5 0f [ 403.237283][ C0] RSP: 0000:ffffc900001678b8 EFLAGS: 00000246 [ 403.237299][ C0] RAX: 000000006a2b26fc RBX: 0000000000000899 RCX: 0000000000000000 [ 403.237310][ C0] RDX: 00000000000000d4 RSI: ffffffff8bcc4b60 RDI: ffffffff8bcc4b20 [ 403.237323][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.237333][ C0] R10: dffffc0000000000 R11: ffffffff8b570850 R12: 1ffffffff33d52d9 [ 403.237346][ C0] R13: 00000000ffffffff R14: 000000d46a2b1f42 R15: 0000000000000730 [ 403.237358][ C0] FS: 0000000000000000(0000) GS:ffff888125bc4000(0000) knlGS:0000000000000000 [ 403.237373][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.237384][ C0] CR2: 00007f48191ab6b0 CR3: 0000000073a24000 CR4: 00000000003526f0 [ 403.237400][ C0] Call Trace: [ 403.237406][ C0] [ 403.237414][ C0] wait_for_lsr+0x14d/0x300 [ 403.237446][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 403.237478][ C0] serial8250_console_write+0xac5/0x1230 [ 403.237506][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 403.237537][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 403.237570][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 403.237597][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 403.237632][ C0] nbcon_kthread_func+0x679/0x880 [ 403.237658][ C0] ? nbcon_kthread_func+0x163/0x880 [ 403.237680][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 403.237707][ C0] ? __kthread_parkme+0x71/0x1f0 [ 403.237733][ C0] ? __kthread_parkme+0x199/0x1f0 [ 403.237759][ C0] kthread+0x38b/0x470 [ 403.237776][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 403.237798][ C0] ? __pfx_kthread+0x10/0x10 [ 403.237816][ C0] ret_from_fork+0x514/0xb70 [ 403.237833][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 403.237849][ C0] ? __switch_to+0xc89/0x1420 [ 403.237874][ C0] ? __pfx_kthread+0x10/0x10 [ 403.237891][ C0] ret_from_fork_asm+0x1a/0x30 [ 403.237914][ C0] [ 403.238195][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 404.887708][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 404.898905][ T38] Tainted: [L]=SOFTLOCKUP [ 404.903225][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.913282][ T38] Call Trace: [ 404.916557][ T38] [ 404.919482][ T38] vpanic+0x56d/0xa60 [ 404.923461][ T38] ? __pfx_vpanic+0x10/0x10 [ 404.927978][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 404.933530][ T38] panic+0xc5/0xd0 [ 404.937249][ T38] ? __pfx_panic+0x10/0x10 [ 404.941662][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 404.946718][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 404.952873][ T38] watchdog+0x1030/0x1030 [ 404.957207][ T38] ? watchdog+0x1c7/0x1030 [ 404.961624][ T38] kthread+0x38b/0x470 [ 404.965682][ T38] ? __pfx_watchdog+0x10/0x10 [ 404.970349][ T38] ? __pfx_kthread+0x10/0x10 [ 404.974936][ T38] ret_from_fork+0x514/0xb70 [ 404.979522][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 404.984625][ T38] ? __switch_to+0xc89/0x1420 [ 404.989303][ T38] ? __pfx_kthread+0x10/0x10 [ 404.993891][ T38] ret_from_fork_asm+0x1a/0x30 [ 404.998665][ T38] [ 405.001956][ T38] Kernel Offset: disabled [ 405.006273][ T38] Rebooting in 86400 seconds..