last executing test programs: 39.024580193s ago: executing program 4 (id=592): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000001010400000000141a0000020000002400018014000180"], 0x64}}, 0x4000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) 38.828810597s ago: executing program 4 (id=594): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000140)=0xffffffc0) 38.598955189s ago: executing program 4 (id=597): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x40, 0xe, 0xd, "d023e80fd5d202bc5c4e14eb5f"}, 0x0, 0x0}) 37.054674593s ago: executing program 1 (id=615): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) fallocate(r0, 0x1, 0x9, 0x7) creat(&(0x7f0000000080)='./file0\x00', 0x1de) 36.858009573s ago: executing program 1 (id=618): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 36.626816124s ago: executing program 4 (id=621): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 36.238918542s ago: executing program 4 (id=623): r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001340)=""/90, 0x5a}], 0x1, 0x0, 0xd) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) 35.965113963s ago: executing program 1 (id=624): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d40)=ANY=[@ANYBLOB="1c0000001a0069ae26bd7000000000001c000000ff00000405"], 0x1c}}, 0x0) 35.096159184s ago: executing program 1 (id=626): r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) ioctl$int_in(r0, 0x5452, &(0x7f0000000c00)) 35.078298833s ago: executing program 4 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 34.880127156s ago: executing program 1 (id=628): newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 34.610313178s ago: executing program 0 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) 34.590310241s ago: executing program 1 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 34.131392209s ago: executing program 0 (id=633): unshare(0x28000600) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f00000001c0)=0x1, 0x4) 33.854247591s ago: executing program 0 (id=635): unshare(0x26020400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x9) 25.878347581s ago: executing program 0 (id=643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000012000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.536104618s ago: executing program 0 (id=645): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) 25.156553187s ago: executing program 0 (id=647): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 21.646063804s ago: executing program 3 (id=651): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000240)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r1, 0x1}}, 0x18) 21.492012503s ago: executing program 3 (id=652): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x62c42) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) 21.338306835s ago: executing program 3 (id=653): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x500}, {0x85, 0x0, 0x0, 0x86}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40e00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc5}, 0x94) 21.180996496s ago: executing program 3 (id=654): r0 = epoll_create1(0x80000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x80000001}) 21.063859798s ago: executing program 3 (id=655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0xb, 0x42, 0x1, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f00000002c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r0, &(0x7f0000000540)="5aab9251de2b", 0x0}, 0x20) 20.961338142s ago: executing program 3 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebb, &(0x7f0000000040)={0x81, 0x8, 0x1ff, 0x2, 0x4}) 20.010120533s ago: executing program 32 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 19.465449356s ago: executing program 33 (id=632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000108000240000000000800044000000002080003400000000008000540000000af0900010073797a30000000000900020073797a32"], 0x98}}, 0x0) 17.601876022s ago: executing program 2 (id=660): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) 17.331061178s ago: executing program 2 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002680), r0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f00000026c0)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000000) 17.115084502s ago: executing program 2 (id=662): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.925153254s ago: executing program 2 (id=663): syz_clone3(&(0x7f00000002c0)={0x8500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16.264021447s ago: executing program 2 (id=664): timer_create(0x3, &(0x7f0000000480)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000004c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 15.21720041s ago: executing program 2 (id=665): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x6}], 0x1, 0x0, 0x0) 9.993083108s ago: executing program 34 (id=647): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5.490417123s ago: executing program 35 (id=656): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x8010aebb, &(0x7f0000000040)={0x81, 0x8, 0x1ff, 0x2, 0x4}) 0s ago: executing program 36 (id=665): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/17, 0x11}, 0x6}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.225' (ED25519) to the list of known hosts. [ 80.832836][ T5823] cgroup: Unknown subsys name 'net' [ 81.060315][ T5823] cgroup: Unknown subsys name 'cpuset' [ 81.116008][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.913046][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.786836][ T990] cfg80211: failed to load regulatory.db [ 86.867486][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.874443][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.875206][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.877211][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.877952][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.959210][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.962984][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.963560][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.964458][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.968054][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.968948][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.970025][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.970927][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.986450][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.987217][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.119305][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.121490][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.122611][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.125929][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.134388][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.165077][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.170425][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.171179][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.172764][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.173507][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.895109][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.911747][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.237073][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.330555][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 88.508158][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 88.827297][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.827459][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.828052][ T5840] bridge_slave_0: entered allmulticast mode [ 88.831091][ T5840] bridge_slave_0: entered promiscuous mode [ 88.870841][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.870944][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.871056][ T5841] bridge_slave_0: entered allmulticast mode [ 88.872561][ T5841] bridge_slave_0: entered promiscuous mode [ 88.914510][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.914618][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.914733][ T5840] bridge_slave_1: entered allmulticast mode [ 88.918304][ T5840] bridge_slave_1: entered promiscuous mode [ 88.942237][ T5842] Bluetooth: hci0: command tx timeout [ 89.015934][ T5842] Bluetooth: hci1: command tx timeout [ 89.015940][ T5156] Bluetooth: hci2: command tx timeout [ 89.018584][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.018780][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.018949][ T5841] bridge_slave_1: entered allmulticast mode [ 89.021831][ T5841] bridge_slave_1: entered promiscuous mode [ 89.175552][ T5156] Bluetooth: hci3: command tx timeout [ 89.255572][ T5156] Bluetooth: hci4: command tx timeout [ 89.527804][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.528031][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.528219][ T5848] bridge_slave_0: entered allmulticast mode [ 89.530717][ T5848] bridge_slave_0: entered promiscuous mode [ 89.620572][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.641386][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.641725][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.641853][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.642385][ T5848] bridge_slave_1: entered allmulticast mode [ 89.643966][ T5848] bridge_slave_1: entered promiscuous mode [ 89.748811][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.820410][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.897162][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.897299][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.897486][ T5854] bridge_slave_0: entered allmulticast mode [ 89.900252][ T5854] bridge_slave_0: entered promiscuous mode [ 90.156392][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.156538][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.156720][ T5854] bridge_slave_1: entered allmulticast mode [ 90.158604][ T5854] bridge_slave_1: entered promiscuous mode [ 90.510510][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.510659][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.510833][ T5856] bridge_slave_0: entered allmulticast mode [ 90.512640][ T5856] bridge_slave_0: entered promiscuous mode [ 90.518433][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.619333][ T5840] team0: Port device team_slave_0 added [ 90.626353][ T5841] team0: Port device team_slave_0 added [ 90.627035][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.627199][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.627376][ T5856] bridge_slave_1: entered allmulticast mode [ 90.629930][ T5856] bridge_slave_1: entered promiscuous mode [ 90.639677][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.739767][ T5840] team0: Port device team_slave_1 added [ 90.742033][ T5841] team0: Port device team_slave_1 added [ 90.882348][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.015610][ T5156] Bluetooth: hci0: command tx timeout [ 91.095553][ T5156] Bluetooth: hci2: command tx timeout [ 91.105689][ T5156] Bluetooth: hci1: command tx timeout [ 91.159061][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.255650][ T5156] Bluetooth: hci3: command tx timeout [ 91.293255][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.295117][ T5848] team0: Port device team_slave_0 added [ 91.335569][ T5156] Bluetooth: hci4: command tx timeout [ 91.368416][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.368432][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.368455][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.372391][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.372406][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.372429][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.378665][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.381658][ T5848] team0: Port device team_slave_1 added [ 91.711400][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.711416][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.711439][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.713208][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.713219][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.713232][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.948886][ T5854] team0: Port device team_slave_0 added [ 92.088945][ T5854] team0: Port device team_slave_1 added [ 92.094004][ T5856] team0: Port device team_slave_0 added [ 92.095061][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.095076][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.095098][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.202051][ T5856] team0: Port device team_slave_1 added [ 92.202947][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.202958][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.202974][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.468142][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.468158][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.468182][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.835960][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.835975][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.835997][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.841856][ T5840] hsr_slave_0: entered promiscuous mode [ 92.842771][ T5840] hsr_slave_1: entered promiscuous mode [ 92.861800][ T5841] hsr_slave_0: entered promiscuous mode [ 92.863138][ T5841] hsr_slave_1: entered promiscuous mode [ 92.864168][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 92.864278][ T5841] Cannot create hsr debugfs directory [ 92.876689][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.876705][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.876728][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.905327][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.905819][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.905845][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.095778][ T5156] Bluetooth: hci0: command tx timeout [ 93.175590][ T5156] Bluetooth: hci1: command tx timeout [ 93.175623][ T5156] Bluetooth: hci2: command tx timeout [ 93.252193][ T5848] hsr_slave_0: entered promiscuous mode [ 93.252942][ T5848] hsr_slave_1: entered promiscuous mode [ 93.253591][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 93.253609][ T5848] Cannot create hsr debugfs directory [ 93.335653][ T5842] Bluetooth: hci3: command tx timeout [ 93.415618][ T5842] Bluetooth: hci4: command tx timeout [ 93.669151][ T5854] hsr_slave_0: entered promiscuous mode [ 93.670579][ T5854] hsr_slave_1: entered promiscuous mode [ 93.671088][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 93.671115][ T5854] Cannot create hsr debugfs directory [ 93.921304][ T5856] hsr_slave_0: entered promiscuous mode [ 93.922064][ T5856] hsr_slave_1: entered promiscuous mode [ 93.922604][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 93.922622][ T5856] Cannot create hsr debugfs directory [ 95.149100][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.175732][ T5842] Bluetooth: hci0: command tx timeout [ 95.195283][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.223254][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.255663][ T5156] Bluetooth: hci1: command tx timeout [ 95.255716][ T5842] Bluetooth: hci2: command tx timeout [ 95.282472][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.404987][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.415461][ T5842] Bluetooth: hci3: command tx timeout [ 95.454769][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.485248][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.496247][ T5842] Bluetooth: hci4: command tx timeout [ 95.539814][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.682884][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.724729][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.770545][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.820108][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.001964][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.037981][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.083101][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.143494][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.255746][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.323326][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.369223][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.408314][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.450466][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.512725][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.572506][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.573413][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.615326][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.644990][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.645102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.768779][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.834119][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.848059][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.848272][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.891905][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.892035][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.967883][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.004666][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.038296][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.039168][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.128298][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.128580][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.232656][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.304147][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.309002][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.309196][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.360555][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.365648][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.499260][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.546212][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.574448][ T1359] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.575626][ T1359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.667528][ T1359] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.667747][ T1359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.903841][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.054354][ T5840] veth0_vlan: entered promiscuous mode [ 98.140093][ T5840] veth1_vlan: entered promiscuous mode [ 98.159855][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.308772][ T5848] veth0_vlan: entered promiscuous mode [ 98.394640][ T5848] veth1_vlan: entered promiscuous mode [ 98.401202][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.440932][ T5840] veth0_macvtap: entered promiscuous mode [ 98.473710][ T5840] veth1_macvtap: entered promiscuous mode [ 98.520697][ T5854] veth0_vlan: entered promiscuous mode [ 98.539736][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.612287][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.650527][ T5854] veth1_vlan: entered promiscuous mode [ 98.652825][ T5848] veth0_macvtap: entered promiscuous mode [ 98.690248][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.720427][ T5848] veth1_macvtap: entered promiscuous mode [ 98.755081][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.771277][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.781983][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.785888][ T5841] veth0_vlan: entered promiscuous mode [ 98.792347][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.903668][ T5841] veth1_vlan: entered promiscuous mode [ 98.925202][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.048978][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.051630][ T5854] veth0_macvtap: entered promiscuous mode [ 99.140314][ T5854] veth1_macvtap: entered promiscuous mode [ 99.150131][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.162866][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.182425][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.201472][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.293842][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.293867][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.364820][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.424827][ T5841] veth0_macvtap: entered promiscuous mode [ 99.508012][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.529393][ T5841] veth1_macvtap: entered promiscuous mode [ 99.551394][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.551413][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.594960][ T1470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.621540][ T1470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.640674][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.640691][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.677782][ T1470] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.697633][ T1470] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.704399][ T5856] veth0_vlan: entered promiscuous mode [ 99.814163][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.900331][ T5856] veth1_vlan: entered promiscuous mode [ 99.904909][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.904928][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.920363][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.093830][ T1470] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.101208][ T1470] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.126132][ T1470] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.129199][ T1470] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.137722][ T5953] CUSE: unknown device info "" [ 100.137736][ T5953] CUSE: zero length info key specified [ 100.270925][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.270943][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.486039][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.551103][ T5856] veth0_macvtap: entered promiscuous mode [ 100.659671][ T5856] veth1_macvtap: entered promiscuous mode [ 100.666539][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.666558][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.855234][ T5967] sock: sock_timestamping_bind_phc: sock not bind to device [ 100.865342][ T1470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.865516][ T1470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.958703][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.117274][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.204142][ T1470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.204160][ T1470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.204989][ T1359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.216949][ T1359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.221145][ T1359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.221390][ T1359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.072348][ T1489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.072369][ T1489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.266408][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.357797][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.357826][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.454646][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 102.454674][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 102.454695][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 102.454712][ T5917] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 102.454749][ T5917] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 102.454770][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.599375][ T5917] usb 2-1: config 0 descriptor?? [ 102.949222][ T5987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.959557][ T5987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.962912][ T5917] hdpvr 2-1:0.0: firmware version 0xd dated [ 103.166086][ T5917] hdpvr 2-1:0.0: device init failed [ 103.166217][ T5917] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 103.216143][ T5917] usb 2-1: USB disconnect, device number 2 [ 103.814907][ T6027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.086581][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.235542][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 104.259930][ T5889] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 104.259962][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.259982][ T5889] usb 3-1: Product: syz [ 104.259996][ T5889] usb 3-1: Manufacturer: syz [ 104.260010][ T5889] usb 3-1: SerialNumber: syz [ 104.329828][ T5889] usb 3-1: config 0 descriptor?? [ 104.367316][ T5889] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 104.858092][ T5889] usb 3-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 105.081729][ T990] usb 3-1: USB disconnect, device number 2 [ 105.144126][ T990] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 105.145100][ T990] visor 3-1:0.0: device disconnected [ 105.651415][ T6060] ======================================================= [ 105.651415][ T6060] WARNING: The mand mount option has been deprecated and [ 105.651415][ T6060] and is ignored by this kernel. Remove the mand [ 105.651415][ T6060] option from the mount to silence this warning. [ 105.651415][ T6060] ======================================================= [ 105.877395][ T37] audit: type=1400 audit(1758494411.495:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6065 comm="syz.2.51" src=1 dest=20000 netif=wpan0 [ 106.197277][ T6075] netlink: 36 bytes leftover after parsing attributes in process `syz.3.55'. [ 107.033944][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.66'. [ 107.647884][ T37] audit: type=1326 audit(1758494413.245:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6116 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 107.657304][ T37] audit: type=1326 audit(1758494413.275:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6116 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 107.657355][ T37] audit: type=1326 audit(1758494413.275:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6116 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 108.057762][ T6132] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 108.907493][ T5924] kernel write not supported for file /46/loginuid (pid: 5924 comm: kworker/0:5) [ 109.515610][ T990] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.664826][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.102'. [ 109.667113][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 109.713103][ T990] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.713140][ T990] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 109.713164][ T990] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 109.713189][ T990] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.777808][ T990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 109.777844][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.777864][ T990] usb 3-1: Product: syz [ 109.777878][ T990] usb 3-1: Manufacturer: syz [ 109.777890][ T990] usb 3-1: SerialNumber: syz [ 109.847707][ T990] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 109.851894][ T990] usbtest 3-1:1.0: Linux user mode ISO test driver [ 109.851915][ T990] usbtest 3-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 110.125605][ T45] usb 3-1: USB disconnect, device number 3 [ 110.238195][ T6209] netlink: 'syz.1.106': attribute type 1 has an invalid length. [ 110.375593][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.545488][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 110.548513][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 110.553005][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.553031][ T9] usb 4-1: config 0 has no interface number 0 [ 110.562320][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.562346][ T9] usb 4-1: config 0 has no interface number 0 [ 110.563888][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.563918][ T9] usb 4-1: config 0 has no interface number 0 [ 110.574514][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.574539][ T9] usb 4-1: config 0 has no interface number 0 [ 110.595421][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.595446][ T9] usb 4-1: config 0 has no interface number 0 [ 110.617938][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.617964][ T9] usb 4-1: config 0 has no interface number 0 [ 110.634086][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.634113][ T9] usb 4-1: config 0 has no interface number 0 [ 110.643334][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 110.643360][ T9] usb 4-1: config 0 has no interface number 0 [ 110.675498][ T9] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 110.675527][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.675546][ T9] usb 4-1: Product: syz [ 110.675559][ T9] usb 4-1: Manufacturer: syz [ 110.675572][ T9] usb 4-1: SerialNumber: syz [ 110.699248][ T9] usb 4-1: config 0 descriptor?? [ 110.751588][ T9] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 110.987428][ T6223] Illegal XDP return value 65535 on prog (id 13) dev N/A, expect packet loss! [ 111.419028][ T6235] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure [ 112.637278][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.788061][ T45] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 112.788088][ T45] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 112.788105][ T45] usb 1-1: config 0 has no interface number 0 [ 112.788150][ T45] usb 1-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.788266][ T45] usb 1-1: config 0 interface 30 has no altsetting 0 [ 112.788302][ T45] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 112.788325][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.865968][ T45] usb 1-1: config 0 descriptor?? [ 112.902584][ T45] usb 1-1: unknown interface protocol 0x41, assuming v1 [ 112.902615][ T45] usb 1-1: 30:2 : does not exist [ 113.102093][ T45] usb 1-1: USB disconnect, device number 2 [ 113.253146][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.372731][ T9] etas_es58x 4-1:0.2: could not retrieve the product info string [ 113.469591][ T990] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.654560][ T990] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 113.654587][ T990] usb 3-1: config 0 has no interface number 0 [ 113.668329][ T990] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 113.668360][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.668379][ T990] usb 3-1: Product: syz [ 113.668393][ T990] usb 3-1: Manufacturer: syz [ 113.668407][ T990] usb 3-1: SerialNumber: syz [ 113.748374][ T990] usb 3-1: config 0 descriptor?? [ 113.796471][ T9] usb 4-1: USB disconnect, device number 2 [ 113.799921][ T9] etas_es58x 4-1:0.2: Disconnecting syz syz [ 114.026338][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 114.026429][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 114.084706][ T6273] netlink: 108 bytes leftover after parsing attributes in process `syz.3.131'. [ 114.084733][ T6273] block nbd0: Unsupported socket: shutdown callout must be supported. [ 114.436200][ T6277] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.440885][ T990] usb 3-1: Firmware version (0.0) predates our first public release. [ 114.440911][ T990] usb 3-1: Please update to version 0.2 or newer [ 114.655266][ T990] usb 3-1: USB disconnect, device number 4 [ 115.285707][ T6297] capability: warning: `syz.3.145' uses 32-bit capabilities (legacy support in use) [ 115.891814][ T6319] binder: 6317:6319 ioctl 541b 0 returned -22 [ 116.371690][ T6017] IPVS: starting estimator thread 0... [ 116.475700][ T6333] IPVS: using max 8 ests per chain, 19200 per kthread [ 116.868549][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.015589][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 117.021706][ T9] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 117.041803][ T9] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 117.041838][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.041856][ T9] usb 1-1: Product: syz [ 117.041869][ T9] usb 1-1: Manufacturer: syz [ 117.041881][ T9] usb 1-1: SerialNumber: syz [ 117.090513][ T9] usb 1-1: config 0 descriptor?? [ 117.105195][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 117.105265][ T9] usb 1-1: setting power ON [ 117.122512][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 117.142228][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.143459][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 117.143548][ T9] usb 1-1: media controller created [ 117.203068][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.296229][ T9] usb 1-1: selecting invalid altsetting 6 [ 117.296252][ T9] usb 1-1: digital interface selection failed (-22) [ 117.296281][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 117.299818][ T9] usb 1-1: setting power OFF [ 117.299942][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 117.299959][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 117.299971][ T9] (NULL device *): no alternate interface [ 117.354986][ T6344] dvb-usb: bulk message failed: -22 (3/0) [ 117.355011][ T6344] cxusb: i2c wr: len=80 is too big! [ 117.355011][ T6344] [ 117.488812][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 117.515386][ T9] usb 1-1: USB disconnect, device number 3 [ 117.855544][ T990] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.015575][ T990] usb 4-1: Using ep0 maxpacket: 32 [ 118.022564][ T990] usb 4-1: config 0 interface 0 has no altsetting 0 [ 118.040139][ T990] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 118.040167][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.040186][ T990] usb 4-1: Product: syz [ 118.040199][ T990] usb 4-1: Manufacturer: syz [ 118.040213][ T990] usb 4-1: SerialNumber: syz [ 118.053435][ T990] usb 4-1: config 0 descriptor?? [ 118.507254][ T990] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 118.507303][ T990] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 118.666711][ T6396] sp0: Synchronizing with TNC [ 118.718040][ T9] usb 4-1: USB disconnect, device number 3 [ 119.276990][ T6416] process 'syz.4.194' launched '/dev/fd/3' with NULL argv: empty string added [ 119.414626][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 119.975635][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.137942][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.137983][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.140943][ T9] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 120.140969][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.140986][ T9] usb 1-1: Product: syz [ 120.140997][ T9] usb 1-1: Manufacturer: syz [ 120.141009][ T9] usb 1-1: SerialNumber: syz [ 120.199402][ T9] usb 1-1: config 0 descriptor?? [ 120.221382][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 120.262305][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.276142][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 120.276206][ T9] usb 1-1: media controller created [ 120.361279][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.468801][ T9] DVB: Unable to find symbol tda10046_attach() [ 120.468816][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 120.468829][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 120.695883][ T37] audit: type=1326 audit(1758494426.325:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6433 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7fc00000 [ 120.887282][ T9] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 120.906897][ T9] usb 1-1: USB disconnect, device number 4 [ 121.679854][ T6479] overlayfs: missing 'workdir' [ 121.896127][ T6017] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.063009][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 122.063059][ T6017] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 122.063081][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.103918][ T6017] usb 5-1: config 0 descriptor?? [ 122.560572][ T6017] logitech 0003:046D:C626.0001: ignoring exceeding usage max [ 122.561875][ T6017] logitech 0003:046D:C626.0001: unbalanced delimiter at end of report description [ 122.562760][ T6017] logitech 0003:046D:C626.0001: parse failed [ 122.562869][ T6017] logitech 0003:046D:C626.0001: probe with driver logitech failed with error -22 [ 122.752671][ T6017] usb 5-1: USB disconnect, device number 2 [ 122.973604][ T6515] mmap: syz.2.242 (6515) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.031671][ T37] audit: type=1326 audit(1758494428.655:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6516 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 123.031723][ T37] audit: type=1326 audit(1758494428.655:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6516 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 123.067028][ T37] audit: type=1326 audit(1758494428.695:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6516 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 123.067079][ T37] audit: type=1326 audit(1758494428.695:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6516 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 123.078789][ T37] audit: type=1326 audit(1758494428.695:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6516 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 123.078838][ T37] audit: type=1326 audit(1758494428.705:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6516 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 123.448150][ T6526] gretap0: entered promiscuous mode [ 124.085527][ T6032] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.281519][ T6032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.281551][ T6032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.281587][ T6032] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 124.281614][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.293111][ T6032] usb 4-1: config 0 descriptor?? [ 124.718943][ T6032] arvo 0003:1E7D:30D4.0002: unbalanced collection at end of report description [ 124.719776][ T6032] arvo 0003:1E7D:30D4.0002: parse failed [ 124.719846][ T6032] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -22 [ 124.916567][ T6017] usb 4-1: USB disconnect, device number 4 [ 125.306538][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.455792][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 125.471978][ T9] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 125.472007][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.472026][ T9] usb 2-1: Product: syz [ 125.472039][ T9] usb 2-1: Manufacturer: syz [ 125.472052][ T9] usb 2-1: SerialNumber: syz [ 125.521249][ T9] usb 2-1: config 0 descriptor?? [ 125.545934][ T9] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 125.721435][ T6009] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.754219][ T10] usb 2-1: USB disconnect, device number 3 [ 125.870099][ T6009] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 125.870131][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.897585][ T6009] usb 1-1: config 0 descriptor?? [ 125.958903][ T6009] gspca_main: spca508-2.14.0 probing 8086:0110 [ 126.137479][ T6009] gspca_spca508: reg_read err -32 [ 126.351346][ T6009] gspca_spca508: reg_read err -71 [ 126.351879][ T6009] gspca_spca508: reg_read err -71 [ 126.352305][ T6009] gspca_spca508: reg_read err -71 [ 126.352701][ T6009] gspca_spca508: reg write: error -71 [ 126.352785][ T6009] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 126.390492][ T6009] usb 1-1: USB disconnect, device number 5 [ 126.660391][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 127.133980][ T37] audit: type=1326 audit(1758494432.755:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.2.291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a537fec29 code=0x0 [ 127.858340][ T37] audit: type=1326 audit(1758494433.485:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 127.867239][ T37] audit: type=1326 audit(1758494433.495:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 127.867497][ T37] audit: type=1326 audit(1758494433.495:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 127.872833][ T37] audit: type=1326 audit(1758494433.495:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 127.872893][ T37] audit: type=1326 audit(1758494433.495:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 127.873553][ T37] audit: type=1326 audit(1758494433.495:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 127.873595][ T37] audit: type=1326 audit(1758494433.495:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6633 comm="syz.1.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05783aec29 code=0x7ffc0000 [ 128.016198][ T6639] Bluetooth: MGMT ver 1.23 [ 128.805698][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.311'. [ 130.055532][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.055814][ T5842] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 131.366394][ T6750] tipc: Started in network mode [ 131.366427][ T6750] tipc: Node identity 76642aa803ed, cluster identity 4711 [ 131.367838][ T6750] tipc: Enabled bearer , priority 0 [ 132.505787][ T6017] tipc: Node number set to 1971923624 [ 132.870815][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870913][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.900451][ T6792] vlan3: entered allmulticast mode [ 133.222932][ T6801] netlink: 'syz.1.376': attribute type 12 has an invalid length. [ 133.222952][ T6801] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.376'. [ 133.359000][ T6806] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 133.635626][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.806988][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.807036][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 133.807057][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.848555][ T9] usb 4-1: config 0 descriptor?? [ 134.189808][ T990] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.281255][ T9] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x1 [ 134.324236][ T9] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 134.335560][ T990] usb 2-1: Using ep0 maxpacket: 16 [ 134.338538][ T990] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.338562][ T990] usb 2-1: config 0 has no interface number 0 [ 134.338607][ T990] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.338631][ T990] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.338667][ T990] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 134.338689][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.371541][ T990] usb 2-1: config 0 descriptor?? [ 134.502880][ T5889] usb 4-1: USB disconnect, device number 5 [ 134.699461][ T6834] fido_id[6834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 134.739213][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 134.887672][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.887720][ T9] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 134.887744][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.937441][ T9] usb 5-1: config 0 descriptor?? [ 134.989236][ T990] uclogic 0003:28BD:0071.0004: failed retrieving string descriptor #100: -71 [ 134.989296][ T990] uclogic 0003:28BD:0071.0004: failed retrieving pen parameters: -71 [ 134.989318][ T990] uclogic 0003:28BD:0071.0004: pen probing failed: -71 [ 134.989338][ T990] uclogic 0003:28BD:0071.0004: failed probing parameters: -71 [ 134.989454][ T990] uclogic 0003:28BD:0071.0004: probe with driver uclogic failed with error -71 [ 135.051198][ T990] usb 2-1: USB disconnect, device number 4 [ 135.373544][ T9] steelseries 0003:1038:12B6.0005: unknown main item tag 0x2 [ 135.373580][ T9] steelseries 0003:1038:12B6.0005: item fetching failed at offset 6/7 [ 135.374411][ T9] steelseries 0003:1038:12B6.0005: probe with driver steelseries failed with error -22 [ 135.563773][ T9] usb 5-1: USB disconnect, device number 3 [ 136.285174][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.297307][ T6866] Zero length message leads to an empty skb [ 136.299358][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.299402][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.299435][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.465498][ T37] audit: type=1326 audit(1758494442.085:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6873 comm="syz.4.413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f30a4c7ec29 code=0x0 [ 136.613486][ T6879] netlink: 'syz.0.414': attribute type 29 has an invalid length. [ 136.643634][ T6879] netlink: 'syz.0.414': attribute type 29 has an invalid length. [ 137.585474][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 137.748327][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 137.748356][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 66 [ 137.748422][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.748461][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 137.748480][ T10] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.815810][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 137.815838][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.815855][ T10] usb 3-1: Product: syz [ 137.815867][ T10] usb 3-1: Manufacturer: syz [ 137.815879][ T10] usb 3-1: SerialNumber: syz [ 137.887722][ T6915] sp0: Synchronizing with TNC [ 138.116377][ T6920] netlink: 277 bytes leftover after parsing attributes in process `syz.4.431'. [ 138.523130][ T10] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 138.523268][ T10] cdc_ncm 3-1:1.0: bind() failure [ 138.601760][ T10] usb 3-1: USB disconnect, device number 5 [ 138.845801][ T6939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.845964][ T6939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 138.846015][ T6939] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 138.846066][ T6939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.846113][ T6939] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 138.846160][ T6939] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 138.846208][ T6939] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 138.846255][ T6939] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 138.846307][ T6939] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 138.846356][ T6939] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 138.846410][ T6939] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 138.846459][ T6939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.846506][ T6939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 138.846553][ T6939] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 138.846645][ T6939] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 138.846699][ T6939] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 138.846748][ T6939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 138.846795][ T6939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.846928][ T6939] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 140.144633][ T6975] lo speed is unknown, defaulting to 1000 [ 140.144759][ T6975] lo speed is unknown, defaulting to 1000 [ 140.151317][ T6975] lo speed is unknown, defaulting to 1000 [ 140.191650][ T6975] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.217411][ T6975] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.299253][ T6975] lo speed is unknown, defaulting to 1000 [ 140.390055][ T6975] lo speed is unknown, defaulting to 1000 [ 140.437529][ T6975] lo speed is unknown, defaulting to 1000 [ 140.482054][ T6975] lo speed is unknown, defaulting to 1000 [ 140.682797][ T6975] lo speed is unknown, defaulting to 1000 [ 140.771045][ T6989] netlink: 'syz.1.464': attribute type 1 has an invalid length. [ 140.788891][ T37] audit: type=1326 audit(1758494446.405:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.788946][ T37] audit: type=1326 audit(1758494446.405:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.863985][ T37] audit: type=1326 audit(1758494446.485:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.864035][ T37] audit: type=1326 audit(1758494446.485:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.864075][ T37] audit: type=1326 audit(1758494446.485:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.864114][ T37] audit: type=1326 audit(1758494446.485:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.864152][ T37] audit: type=1326 audit(1758494446.485:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 140.864190][ T37] audit: type=1326 audit(1758494446.485:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6987 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7606c3ec29 code=0x7ffc0000 [ 141.616766][ T7016] loop6: detected capacity change from 0 to 524287999 [ 141.676969][ T5924] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.836245][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 141.841832][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.841863][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.841899][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.841921][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.895946][ T5924] usb 4-1: config 0 descriptor?? [ 141.923707][ T5924] hub 4-1:0.0: USB hub found [ 141.996224][ T7020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.476'. [ 142.112523][ T5924] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 142.147314][ T5963] udevd[5963]: symlink '../../loop6' '/dev/disk/by-diskseq/69.tmp-b7:6' failed: Read-only file system [ 142.340073][ T5924] usbhid 4-1:0.0: can't add hid device: -71 [ 142.340191][ T5924] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 142.344888][ T5963] udevd[5963]: symlink '../../loop6' '/dev/disk/by-diskseq/69.tmp-b7:6' failed: Read-only file system [ 142.400744][ T5924] usb 4-1: USB disconnect, device number 6 [ 142.448638][ T5963] udevd[5963]: symlink '../../loop6' '/dev/disk/by-diskseq/69.tmp-b7:6' failed: Read-only file system [ 142.801989][ T7040] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.708505][ T7064] vlan3: entered allmulticast mode [ 143.708526][ T7064] bond0: entered allmulticast mode [ 143.708539][ T7064] bond_slave_0: entered allmulticast mode [ 143.708560][ T7064] bond_slave_1: entered allmulticast mode [ 144.062074][ T7074] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 144.062131][ T7074] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 144.062224][ T7074] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 144.062378][ T7074] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 144.062431][ T7074] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 144.062481][ T7074] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 144.062616][ T7074] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 144.062666][ T7074] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 144.062713][ T7074] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 144.062759][ T7074] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 144.062806][ T7074] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 144.062856][ T7074] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 144.615723][ T7087] netlink: 'syz.0.507': attribute type 62 has an invalid length. [ 145.408746][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 145.515730][ T7113] erspan0: entered promiscuous mode [ 145.535582][ T7113] erspan0: left promiscuous mode [ 145.549970][ T5963] udevd[5963]: symlink '../../loop6' '/dev/disk/by-diskseq/70.tmp-b7:6' failed: Read-only file system [ 145.565560][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.727116][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.727164][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 145.727187][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.775548][ T9] usb 2-1: config 0 descriptor?? [ 146.308727][ T9] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 146.529593][ T9] steelseries 0003:1038:12B6.0006: hid_hw_raw_request() failed with -71 [ 146.608052][ T9] usb 2-1: USB disconnect, device number 5 [ 146.786653][ T37] audit: type=1400 audit(1758494452.405:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7141 comm="syz.3.533" src=1 dest=20000 netif=wpan0 [ 147.417698][ T37] audit: type=1804 audit(1758494453.025:31): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.538" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=590 res=1 errno=0 [ 147.464308][ T37] audit: type=1800 audit(1758494453.075:32): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.538" name="cgroup.controllers" dev="tmpfs" ino=590 res=0 errno=0 [ 147.695992][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.546'. [ 147.696033][ T7171] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 148.826467][ T7210] No buffer was provided with the request [ 149.024324][ T7212] overlayfs: workdir and upperdir must be separate subtrees [ 149.593522][ T7223] netlink: 'syz.1.571': attribute type 1 has an invalid length. [ 149.593543][ T7223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 149.593558][ T7223] nbd: illegal input index 65544 [ 149.653503][ T7214] erspan0: entered promiscuous mode [ 149.653734][ T7214] macsec1: entered promiscuous mode [ 149.719678][ T7214] erspan0: left promiscuous mode [ 150.255947][ T5924] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 150.315558][ T6032] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 150.408157][ T5924] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 150.408191][ T5924] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 150.408217][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.408250][ T5924] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 150.408273][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.436729][ T5924] usb 4-1: config 0 descriptor?? [ 150.444234][ T7235] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 150.475501][ T6032] usb 5-1: Using ep0 maxpacket: 16 [ 150.496948][ T6032] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.496973][ T6032] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 150.500373][ T6032] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.500400][ T6032] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.500418][ T6032] usb 5-1: Product: syz [ 150.500439][ T6032] usb 5-1: Manufacturer: syz [ 150.500453][ T6032] usb 5-1: SerialNumber: syz [ 150.927550][ T5924] uclogic 0003:28BD:0074.0007: interface is invalid, ignoring [ 150.995981][ T6032] usb 5-1: USB disconnect, device number 4 [ 151.025559][ T5889] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 151.084973][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.122099][ T5924] usb 4-1: USB disconnect, device number 7 [ 151.190871][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.190901][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.190922][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.190961][ T5889] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 151.190982][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.268157][ T5889] usb 3-1: config 0 descriptor?? [ 151.760350][ T5889] dragonrise 0003:0079:0011.0008: invalid report_count -326368751 [ 151.760376][ T5889] dragonrise 0003:0079:0011.0008: item 0 4 1 9 parsing failed [ 151.761160][ T5889] dragonrise 0003:0079:0011.0008: parse failed [ 151.761231][ T5889] dragonrise 0003:0079:0011.0008: probe with driver dragonrise failed with error -22 [ 151.945552][ T5924] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 151.947116][ T6017] usb 3-1: USB disconnect, device number 6 [ 152.095544][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 152.099568][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.099598][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.099619][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.099659][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.099682][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.151792][ T5924] usb 1-1: config 0 descriptor?? [ 152.285592][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 152.435522][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 152.439502][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.460639][ T10] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 152.460657][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.460667][ T10] usb 5-1: Product: syz [ 152.460675][ T10] usb 5-1: Manufacturer: syz [ 152.460682][ T10] usb 5-1: SerialNumber: syz [ 152.543201][ T10] usb 5-1: config 0 descriptor?? [ 152.749536][ T5924] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 152.749570][ T5924] microsoft 0003:045E:07DA.0009: no inputs found [ 152.749583][ T5924] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 152.816088][ T5889] usb 1-1: USB disconnect, device number 6 [ 153.011675][ T10] gs_usb 5-1:0.0: Configuring for 16 interfaces [ 153.011699][ T10] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 153.011735][ T10] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 153.130336][ T7295] fido_id[7295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.259221][ T5889] usb 5-1: USB disconnect, device number 5 [ 153.604699][ T7314] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 153.604757][ T7314] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.604805][ T7314] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 153.604919][ T7314] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 153.604993][ T7314] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 153.711648][ T7318] lo speed is unknown, defaulting to 1000 [ 153.711739][ T7318] lo speed is unknown, defaulting to 1000 [ 153.713223][ T7318] lo speed is unknown, defaulting to 1000 [ 153.794355][ T7318] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 153.947610][ C1] vkms_vblank_simulate: vblank timer overrun [ 153.952105][ T7318] lo speed is unknown, defaulting to 1000 [ 153.955058][ T7318] lo speed is unknown, defaulting to 1000 [ 153.979410][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.003626][ T7318] lo speed is unknown, defaulting to 1000 [ 154.011086][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.031251][ T7318] lo speed is unknown, defaulting to 1000 [ 154.044314][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.045805][ T5924] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 154.053791][ T7318] lo speed is unknown, defaulting to 1000 [ 154.078108][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.111732][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.144394][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.183145][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.218242][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.252597][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.268267][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 154.268489][ T5924] usb 4-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 154.268512][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.288511][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.358364][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.377850][ T5924] usb 4-1: config 0 descriptor?? [ 154.428263][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.461796][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.495313][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.524475][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.578975][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.644766][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.680558][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.713887][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.747593][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.781587][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.801281][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.941881][ T5924] waltop 0003:172F:0502.000A: unknown main item tag 0x2 [ 154.941916][ T5924] waltop 0003:172F:0502.000A: item fetching failed at offset 4/5 [ 154.942803][ T5924] waltop 0003:172F:0502.000A: probe with driver waltop failed with error -22 [ 154.967505][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.001006][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.066574][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.099326][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.131430][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.163948][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.171556][ T5924] usb 4-1: USB disconnect, device number 8 [ 155.196442][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.229826][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.262413][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.297322][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.329468][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.362878][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.445772][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.496572][ T7340] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 155.530963][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.563349][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.597344][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.629093][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.698276][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.747266][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.780513][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.812848][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.981788][ T7347] random: crng reseeded on system resumption [ 155.985092][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.018270][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.081984][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.116065][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.146551][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.177794][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.208543][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.239246][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.271128][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.302319][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.335257][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.367910][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.467066][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.503145][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.534413][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.582284][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.620323][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.653771][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.687037][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.735095][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.817255][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.844753][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.917942][ C1] vkms_vblank_simulate: vblank timer overrun [ 157.953561][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.001679][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.039367][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.074176][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.107800][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.141711][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.176021][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.208899][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.243164][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.277530][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.362181][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.415246][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.448824][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.483658][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.532462][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.565128][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.599252][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.634257][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.673535][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.705327][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.737593][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.769683][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.802135][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.835294][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.887040][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.936767][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.970094][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.002794][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.036053][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.069405][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.154383][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.187088][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.219289][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.252782][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.285570][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.368316][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.455113][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.480105][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.639'. [ 159.504863][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.544340][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.594087][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.627812][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.682139][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.707870][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.762849][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.794874][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.825730][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.876420][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.934660][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.980152][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.118959][ T7373] siw: device registration error -23 [ 165.088703][ T37] audit: type=1326 audit(1758494470.715:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.088750][ T37] audit: type=1326 audit(1758494470.715:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.094200][ T37] audit: type=1326 audit(1758494470.715:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.094458][ T37] audit: type=1326 audit(1758494470.715:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.159487][ T37] audit: type=1326 audit(1758494470.715:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.159537][ T37] audit: type=1326 audit(1758494470.785:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.159578][ T37] audit: type=1326 audit(1758494470.785:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 165.159618][ T37] audit: type=1326 audit(1758494470.785:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.0.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43323ec29 code=0x7ffc0000 [ 169.080572][ T7399] program syz.3.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.265386][ C1] sched: DL replenish lagged too much [ 170.695487][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.849034][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.866549][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.869353][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.873233][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.904151][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.280141][ T7411] lo speed is unknown, defaulting to 1000 [ 172.284407][ T7411] lo speed is unknown, defaulting to 1000 [ 172.881934][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.901832][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.903439][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.904671][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.931188][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.981500][ T5842] Bluetooth: hci5: command tx timeout [ 174.502325][ T7419] lo speed is unknown, defaulting to 1000 [ 174.575319][ T7419] lo speed is unknown, defaulting to 1000 [ 175.026012][ T5842] Bluetooth: hci6: command tx timeout [ 175.816011][ T7411] chnl_net:caif_netlink_parms(): no params data found [ 176.056288][ T5842] Bluetooth: hci5: command tx timeout [ 177.095899][ T5842] Bluetooth: hci6: command tx timeout [ 178.136212][ T5842] Bluetooth: hci5: command tx timeout [ 179.175911][ T5842] Bluetooth: hci6: command tx timeout [ 180.216039][ T5156] Bluetooth: hci5: command tx timeout [ 181.255967][ T5842] Bluetooth: hci6: command tx timeout [ 181.425596][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 181.432840][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 181.461541][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 181.463285][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 181.464120][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 183.575621][ T5156] Bluetooth: hci7: command tx timeout [ 185.667602][ T5156] Bluetooth: hci7: command tx timeout [ 185.884187][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 185.910198][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 185.911380][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 185.931733][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 185.933110][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 187.735659][ T5842] Bluetooth: hci7: command tx timeout [ 187.975858][ T5842] Bluetooth: hci8: command tx timeout [ 189.815637][ T5842] Bluetooth: hci7: command tx timeout [ 190.055630][ T5842] Bluetooth: hci8: command tx timeout [ 191.752970][ T5156] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 191.770708][ T5156] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 191.772078][ T5156] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 191.773375][ T5156] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 191.774278][ T5156] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 192.135563][ T5156] Bluetooth: hci8: command tx timeout [ 193.895927][ T5156] Bluetooth: hci9: command tx timeout [ 194.215627][ T5156] Bluetooth: hci8: command tx timeout [ 194.318804][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318911][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.976137][ T5156] Bluetooth: hci9: command tx timeout [ 198.065963][ T5156] Bluetooth: hci9: command tx timeout [ 200.135710][ T5156] Bluetooth: hci9: command tx timeout [ 208.731197][ T7419] chnl_net:caif_netlink_parms(): no params data found [ 211.744720][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 232.067519][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 232.071099][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 232.072233][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 232.075855][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 232.084381][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 232.767938][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 232.789456][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 232.790630][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 232.791805][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 232.792602][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 242.270203][ T5846] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 242.289579][ T5846] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 242.290684][ T5846] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 242.315825][ T5846] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 242.330700][ T5846] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 246.557533][ T7509] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 246.574272][ T7509] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 246.587878][ T7509] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 246.589495][ T7509] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 246.590731][ T7509] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 252.463787][ T5847] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 252.487261][ T5847] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 252.488598][ T5847] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 252.489855][ T5847] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 252.490682][ T5847] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 256.999286][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.999363][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.957127][ T7529] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 292.964710][ T7529] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 292.982494][ T7529] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 292.983834][ T7529] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 292.984709][ T7529] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.303072][ T7532] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.321377][ T7532] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.322519][ T7532] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.323711][ T7532] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.324511][ T7532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.935726][ T7533] Bluetooth: hci6: command 0x0406 tx timeout [ 303.069129][ T7517] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.089165][ T7517] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.090423][ T7517] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.091739][ T7517] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.092636][ T7517] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.976323][ T7537] Bluetooth: hci7: command 0x0406 tx timeout [ 305.657467][ T38] INFO: task kworker/u8:2:43 blocked for more than 143 seconds. [ 305.657496][ T38] Not tainted syzkaller #0 [ 305.657506][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.657517][ T38] task:kworker/u8:2 state:D stack:20088 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 305.657572][ T38] Workqueue: events_unbound free_mem_alloc_deferred [ 305.657606][ T38] Call Trace: [ 305.657613][ T38] [ 305.657626][ T38] __schedule+0x16f3/0x4c20 [ 305.657662][ T38] ? validate_chain+0x897/0x2140 [ 305.657696][ T38] ? __lock_acquire+0xab9/0xd20 [ 305.657718][ T38] ? __pfx___schedule+0x10/0x10 [ 305.657757][ T38] ? schedule+0x91/0x360 [ 305.657791][ T38] schedule+0x165/0x360 [ 305.657817][ T38] schedule_timeout+0x9a/0x270 [ 305.657839][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 305.657874][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.657898][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.657919][ T38] ? wait_for_completion+0x267/0x5d0 [ 305.657945][ T38] wait_for_completion+0x2bf/0x5d0 [ 305.657982][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 305.658007][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 305.658030][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.658057][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 305.658082][ T38] rcu_barrier+0x463/0x570 [ 305.658112][ T38] free_mem_alloc_deferred+0x16/0x30 [ 305.658131][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 305.658151][ T38] process_scheduled_works+0xade/0x17b0 [ 305.658203][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.658242][ T38] worker_thread+0x8a0/0xda0 [ 305.658291][ [ 305.658291][ T38] kthread+0x70e/0x8a0 [ 305.658318][ T38] ? __pfx_worker_thread+0x10/0x10 [ 305.658338][ T38] ? __pfx_kthread+0x10/0x10 [ 305.658366][ T38] ? __pfx_kthread+0x10/0x10 [ 305.658389][ T38] ret_from_fork+0x436/0x7d0 [ 305.658414][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 305.658441][ T38] ? __switch_to_asm+0x39/0x70 [ 305.658458][ T38] ? __switch_to_asm+0x33/0x70 [ 305.658473][ T38] ? __pfx_kthread+0x10/0x10 [ 305.658498][ T38] ret_from_fork_asm+0x1a/0x30 [ 305.658532][ T38] [ 305.658703][ T38] [ 305.658703][ T38] Showing all locks held in the system: [ 305.658714][ T38] 2 locks held by rcuc/1/28: [ 305.658724][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.658771][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.658822][ T38] 6 locks held by ktimers/1/29: [ 305.658832][ T38] 2 locks held by ksoftirqd/1/30: [ 305.658842][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.658885][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.658929][ T38] 4 locks held by kworker/1:0/31: [ 305.658939][ T38] #0: ffff8880323f5938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.658984][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.659039][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.659082][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.659127][ T38] 1 lock held by khungtaskd/38: [ 305.659136][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 305.659178][ T38] 3 locks held by kworker/u8:2/43: [ 305.659188][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.659232][ T38] #1: ffffc90000b47bc0 ((work_completion)(©->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.659276][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 305.659319][ T38] 2 locks held by kworker/u8:3/57: [ 305.659328][ T38] 4 locks held by kworker/u9:0/59: [ 305.659337][ T38] #0: ffff888033b4b938 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.659381][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.659422][ T38] #2: ffff888023d580a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 305.659467][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 305.659519][ T38] 3 locks held by kworker/u8:9/1470: [ 305.659529][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.659572][ T38] #1: ffffc9000590fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.659609][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 305.659653][ T38] 3 locks held by kworker/u8:13/3617: [ 305.659660][ T38] #0: ffff88814d161138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.659691][ T38] #1: ffffc9000dd77bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.659725][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 305.659756][ T38] 4 locks held by kworker/u9:1/5156: [ 305.659763][ T38] #0: ffff88805ee6f938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.659806][ T38] #1: ffffc9000fcd7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.659838][ T38] #2: ffff8880515cc0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 305.659871][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 305.659905][ T38] 2 locks held by getty/5593: [ 305.659912][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 305.659948][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 305.659981][ T38] 4 locks held by kworker/u9:2/5842: [ 305.659988][ T38] #0: ffff8880249af938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660023][ T38] #1: ffffc90004527bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.660056][ T38] #2: ffff88804f3b00a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 305.660088][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 305.660121][ T38] 4 locks held by kworker/u9:3/5846: [ 305.660128][ T38] #0: ffff888060554138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660162][ T38] #1: ffffc90004557bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.660194][ T38] #2: ffff88804af9c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 305.660227][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 305.660260][ T38] 4 locks held by kworker/u9:4/5847: [ 305.660267][ T38] #0: ffff88803a6ea938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660302][ T38] #1: ffffc90004567bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.660333][ T38] #2: ffff88807c9380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 305.660365][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 305.660400][ T38] 4 locks held by kworker/1:4/5889: [ 305.660408][ T38] #0: ffff88805b7e7538 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660443][ T38] #1: ffffc900048a7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.660484][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.660515][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.660549][ T38] 2 locks held by kworker/0:5/5924: [ 305.660556][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660589][ T38] #1: ffffc90004effbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.660621][ T38] 2 locks held by kworker/1:7/7333: [ 305.660629][ T38] 1 lock held by syz.4.627/7340: [ 305.660636][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 305.660672][ T38] 1 lock held by syz.1.632/7351: [ 305.660679][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 305.660714][ T38] 4 locks held by kworker/1:10/7379: [ 305.660721][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660754][ T38] #1: ffffc9001d857bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.660795][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.660827][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.660866][ T38] 2 locks held by syz.0.647/7388: [ 305.660873][ T38] #0: ffff8880337b0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 305.660906][ T38] #1: ffff8880337b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 305.660942][ T38] 4 locks held by kworker/1:11/7389: [ 305.660950][ T38] #0: ffff8880323f6938 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.660986][ T38] #1: ffffc9001d867bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.661030][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.661063][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.661095][ T38] 1 lock held by syz.3.656/7406: [ 305.661103][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 305.661135][ T38] 4 locks held by syz-executor/7411: [ 305.661143][ T38] #0: ffff88805cc28e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 305.661178][ T38] #1: ffff88805cc280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 305.661215][ T38] #2: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 305.661248][ T38] #3: ffff88803740b358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 305.661283][ T38] 1 lock held by syz.2.665/7437: [ 305.661291][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 305.661330][ T38] 4 locks held by kworker/1:15/7444: [ 305.661338][ T38] #0: ffff88805b7e5d38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.661377][ T38] #1: ffffc90022a67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.661425][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.661462][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.775470][ T38] 4 locks held by kworker/1:16/7445: [ 305.775488][ T38] #0: ffff88805b38a138 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.775547][ T38] #1: ffffc90022a77bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.775592][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.775637][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.775682][ T38] 2 locks held by syz-executor/7450: [ 305.775692][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 305.775753][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 305.775795][ T38] 2 locks held by syz-executor/7460: [ 305.775805][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 305.775849][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 305.775889][ T38] 2 locks held by syz-executor/7466: [ 305.775900][ T38] #0: ffffffff8ecc6980 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 305.775943][ T38] #1: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 305.775996][ T38] 4 locks held by kworker/1:19/7475: [ 305.776007][ T38] 1 lock held by syz-executor/7482: [ 305.776017][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 305.776063][ T38] 1 lock held by syz-executor/7486: [ 305.776073][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 305.776118][ T38] 3 locks held by kworker/1:21/7488: [ 305.776128][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.776173][ T38] #1: ffffc90004f3fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.776215][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 305.776263][ T38] 4 locks held by kworker/1:22/7489: [ 305.776273][ T38] #0: ffff88805bab2138 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.776321][ T38] #1: ffffc90004d9fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.776378][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.776422][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.776467][ T38] 4 locks held by kworker/1:24/7491: [ 305.776477][ T38] #0: ffff88805bb01138 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.776525][ T38] #1: ffffc90004427bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.776569][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.776613][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.776657][ T38] 4 locks held by kworker/1:25/7494: [ 305.776667][ T38] #0: ffff8880398fd138 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.776711][ T38] #1: ffffc900043d7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.776755][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.776797][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.776842][ T38] 3 locks held by kworker/1:26/7496: [ 305.776852][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.776900][ T38] #1: ffffc900043c7bc0 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.776944][ T38] #2: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x8c0 [ 305.776988][ T38] 1 lock held by syz-executor/7497: [ 305.776998][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 305.777043][ T38] 4 locks held by syz-executor/7506: [ 305.777054][ T38] 1 lock held by syz-executor/7508: [ 305.777064][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 305.777109][ T38] 4 locks held by kworker/u9:5/7509: [ 305.777119][ T38] #0: ffff888028db1938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.777166][ T38] #1: ffffc90004277bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.777210][ T38] #2: ffff888072f080a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 305.777257][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 305.777302][ T38] 4 locks held by kworker/1:28/7514: [ 305.777313][ T38] #0: ffff88805bab1d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.777361][ T38] #1: ffffc90004237bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.777417][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 305.777460][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 305.777505][ T38] 1 lock held by syz-executor/7516: [ 305.777515][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 305.777560][ T38] 4 locks held by kworker/u9:6/7517: [ 305.777570][ T38] #0: ffff888036c58138 ((wq_completion)hci2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.777618][ T38] #1: ffffc900041d7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.777663][ T38] #2: ffff8880641d80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 305.777706][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 305.777750][ T38] 1 lock held by syz-executor/7527: [ 305.777760][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 305.777803][ T38] 4 locks held by kworker/u9:7/7529: [ 305.777812][ T38] #0: ffff88803b636938 ((wq_completion)hci1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.777860][ T38] #1: ffffc90004147bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.777903][ T38] #2: ffff88803d7f80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 305.777946][ T38] #3: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 305.777994][ T38] 1 lock held by syz-executor/7530: [ 305.778004][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 305.778046][ T38] 5 locks held by kworker/u9:8/7532: [ 305.778056][ T38] #0: ffff88802889f938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.778099][ T38] #1: ffffc90004127bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.778142][ T38] #2: ffff88805d168e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 305.778183][ T38] #3: ffff88805d1680a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 305.778229][ T38] #4: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 305.778275][ T38] 5 locks held by kworker/u9:9/7533: [ 305.778285][ T38] #0: ffff888038657938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 305.778328][ T38] #1: ffffc90004137bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 305.778372][ T38] #2: ffff888032aece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 305.778413][ T38] #3: ffff888032aec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 305.778459][ T38] #4: ffffffff8ee3b2d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 305.778506][ T38] 1 lock held by syz-executor/7539: [ 305.778516][ T38] #0: ffffffff8ecd3878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 305.778561][ T38] [ 305.778566][ T38] ============================================= [ 305.778566][ T38] [ 305.778588][ T38] NMI backtrace for cpu 0 [ 305.778611][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.778631][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.778641][ T38] Call Trace: [ 305.778649][ T38] [ 305.778657][ T38] dump_stack_lvl+0x189/0x250 [ 305.778686][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.778709][ T38] ? __pfx__printk+0x10/0x10 [ 305.778739][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 305.778763][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 305.778787][ T38] ? __pfx__printk+0x10/0x10 [ 305.778811][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 305.778833][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 305.778857][ T38] watchdog+0xf93/0xfe0 [ 305.778884][ T38] ? watchdog+0x1de/0xfe0 [ 305.778910][ T38] kthread+0x70e/0x8a0 [ 305.778937][ T38] ? __pfx_watchdog+0x10/0x10 [ 305.778957][ T38] ? __pfx_kthread+0x10/0x10 [ 305.778992][ T38] ? __pfx_kthread+0x10/0x10 [ 305.779016][ T38] ret_from_fork+0x436/0x7d0 [ 305.779040][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 305.779067][ T38] ? __switch_to_asm+0x39/0x70 [ 305.779082][ T38] ? __switch_to_asm+0x33/0x70 [ 305.779097][ T38] ? __pfx_kthread+0x10/0x10 [ 305.779121][ T38] ret_from_fork_asm+0x1a/0x30 [ 305.779153][ T38] [ 305.779160][ T38] Sending NMI from CPU 0 to CPUs 1: [ 305.779184][ C1] NMI backtrace for cpu 1 [ 305.779197][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.779214][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.779222][ C1] RIP: 0010:unwind_next_frame+0x214/0x2390 [ 305.779244][ C1] Code: ef 08 8b 15 4e 6f b2 0b 8d 42 ff 44 39 f8 0f 86 65 18 00 00 44 89 f8 4c 8d 2c 85 38 ff 4a 90 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 48 89 eb 0f 85 1c 1c 00 00 45 8b 6d 00 44 89 f8 ff c0 48 8d [ 305.779256][ C1] RSP: 0018:ffffc90000a3e998 EFLAGS: 00000a06 [ 305.779269][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 6a3f33620c483000 [ 305.779280][ C1] RDX: 000000000009fba8 RSI: ffffffff8b621660 RDI: ffffffff8b621620 [ 305.779291][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 305.779302][ C1] R10: ffffc90000a3eab8 R11: ffffffff81aaf310 R12: ffffffff89342678 [ 305.779313][ C1] R13: ffffffff906bcfd0 R14: ffffc90000a3ea68 R15: 0000000000083426 [ 305.779324][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 305.779336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.779347][ C1] CR2: 000055b9dafb88d0 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 305.779361][ C1] Call Trace: [ 305.779366][ C1] [ 305.779376][ C1] ? unwind_next_frame+0xa5/0x2390 [ 305.779397][ C1] ? nft_do_chain+0x409/0x1920 [ 305.779414][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.779430][ C1] arch_stack_walk+0x11c/0x150 [ 305.779452][ C1] ? nft_do_chain+0x409/0x1920 [ 305.779468][ C1] stack_trace_save+0x9c/0xe0 [ 305.779483][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 305.779498][ C1] ? __asan_memset+0x22/0x50 [ 305.779517][ C1] kasan_save_stack+0x3e/0x60 [ 305.779532][ C1] ? kasan_save_stack+0x3e/0x60 [ 305.779546][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 305.779558][ C1] ? call_rcu+0x157/0x9c0 [ 305.779571][ C1] ? skb_release_head_state+0x71/0x250 [ 305.779590][ C1] ? consume_skb+0x60/0xf0 [ 305.779606][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 305.779621][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 305.779635][ C1] ? nft_do_chain+0x409/0x1920 [ 305.779672][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 305.779686][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 305.779700][ C1] call_rcu+0x157/0x9c0 [ 305.779725][ C1] ? rcuref_put+0x1b7/0x210 [ 305.779739][ C1] ? __pfx_call_rcu+0x10/0x10 [ 305.779753][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 305.779781][ C1] ? dst_release+0x126/0x1b0 [ 305.779797][ C1] skb_release_head_state+0x71/0x250 [ 305.779817][ C1] consume_skb+0x60/0xf0 [ 305.779836][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 305.779854][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 305.779870][ C1] ? nf_ip_checksum+0x13c/0x510 [ 305.779887][ C1] nft_synproxy_do_eval+0x345/0x570 [ 305.779905][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 305.779925][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 305.779948][ C1] nft_do_chain+0x409/0x1920 [ 305.779970][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 305.779987][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 305.780013][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 305.780030][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 305.780049][ C1] nft_do_chain_inet+0x25d/0x340 [ 305.780064][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 305.780085][ C1] ? NF_HOOK+0x9a/0x3a0 [ 305.780103][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 305.780118][ C1] nf_hook_slow+0xc2/0x220 [ 305.780138][ C1] NF_HOOK+0x206/0x3a0 [ 305.780156][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 305.780173][ C1] ? NF_HOOK+0x9a/0x3a0 [ 305.780190][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 305.780205][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 305.780224][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 305.780242][ C1] ? skb_dst+0x4f/0xd0 [ 305.780259][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 305.780279][ C1] NF_HOOK+0x30c/0x3a0 [ 305.780296][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 305.780313][ C1] ? NF_HOOK+0x9a/0x3a0 [ 305.780329][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 305.780347][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 305.780370][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 305.780386][ C1] __netif_receive_skb+0x143/0x380 [ 305.780403][ C1] ? rt_spin_unlock+0x65/0x80 [ 305.780422][ C1] ? process_backlog+0x27b/0x900 [ 305.780438][ C1] process_backlog+0x31e/0x900 [ 305.780461][ C1] __napi_poll+0xb6/0x540 [ 305.780480][ C1] net_rx_action+0x707/0xe00 [ 305.780496][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.780523][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 305.780557][ C1] handle_softirqs+0x22f/0x710 [ 305.780578][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 305.780600][ C1] run_ktimerd+0xcf/0x190 [ 305.780617][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 305.780638][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 305.780654][ C1] smpboot_thread_fn+0x53f/0xa60 [ 305.780671][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 305.780691][ C1] kthread+0x70e/0x8a0 [ 305.780711][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 305.780732][ C1] ? __pfx_kthread+0x10/0x10 [ 305.780753][ C1] ? __pfx_kthread+0x10/0x10 [ 305.780771][ C1] ret_from_fork+0x436/0x7d0 [ 305.780789][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 305.780808][ C1] ? __switch_to_asm+0x39/0x70 [ 305.780821][ C1] ? __switch_to_asm+0x33/0x70 [ 305.780834][ C1] ? __pfx_kthread+0x10/0x10 [ 305.780852][ C1] ret_from_fork_asm+0x1a/0x30 [ 305.780873][ C1] [ 305.884440][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 305.884460][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 305.884481][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.884492][ T38] Call Trace: [ 305.884500][ T38] [ 305.884508][ T38] dump_stack_lvl+0x99/0x250 [ 305.884536][ T38] ? __asan_memcpy+0x40/0x70 [ 305.884556][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.884579][ T38] ? __pfx__printk+0x10/0x10 [ 305.884610][ T38] vpanic+0x281/0x750 [ 305.884635][ T38] ? __pfx_vpanic+0x10/0x10 [ 305.884657][ T38] ? preempt_schedule+0xae/0xc0 [ 305.884682][ T38] ? preempt_schedule_common+0x83/0xd0 [ 305.884711][ T38] panic+0xb9/0xc0 [ 305.884733][ T38] ? __pfx_panic+0x10/0x10 [ 305.884756][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 305.884781][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 305.884805][ T38] watchdog+0xfd2/0xfe0 [ 305.884832][ T38] ? watchdog+0x1de/0xfe0 [ 305.884858][ T38] kthread+0x70e/0x8a0 [ 305.884885][ T38] ? __pfx_watchdog+0x10/0x10 [ 305.884905][ T38] ? __pfx_kthread+0x10/0x10 [ 305.884933][ T38] ? __pfx_kthread+0x10/0x10 [ 305.884957][ T38] ret_from_fork+0x436/0x7d0 [ 305.884981][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 305.885008][ T38] ? __switch_to_asm+0x39/0x70 [ 305.885029][ T38] ? __switch_to_asm+0x33/0x70 [ 305.885044][ T38] ? __pfx_kthread+0x10/0x10 [ 305.885068][ T38] ret_from_fork_asm+0x1a/0x30 [ 305.885100][ T38] [ 305.885412][ T38] Kernel Offset: disabled