last executing test programs: 4m11.79711223s ago: executing program 4 (id=648): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x3, 0x67) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a0000000300000000000000", @ANYBLOB="000200"/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/50}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r1, &(0x7f0000000080)='\x00', 0x2800, &(0x7f00000000c0)={@align=0x1, {0x7, 0x1, 0x4, 0x6}}, 0x2, &(0x7f0000000100), 0x0}) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f00000002c0)={0x2, 0x978}) sendmmsg$inet_sctp(r0, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@sndrcv={0x30, 0x84, 0x1, {0xb, 0xc2, 0x5, 0x5, 0x83, 0x0, 0x467b7286, 0x200}}], 0x30, 0x4001}], 0x1, 0x11) 4m10.427112117s ago: executing program 4 (id=654): getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000b80), 0x103042, 0x0) write$sequencer(r0, &(0x7f0000000bc0)=[@t={0x81, 0x5, 0x6, 0x2, @generic=0x8b6c}], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 4m8.796097627s ago: executing program 4 (id=656): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) 4m8.411961627s ago: executing program 4 (id=660): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x4183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x3c}}, 0x8000) 4m7.000920561s ago: executing program 4 (id=665): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@nop]}}}}}}}, 0x0) 4m5.364372455s ago: executing program 4 (id=671): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 3m48.606175902s ago: executing program 32 (id=671): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000a00), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 2m3.961783523s ago: executing program 2 (id=956): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m1.448569888s ago: executing program 2 (id=962): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m56.618368793s ago: executing program 2 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key(&(0x7f0000000100)='syzkaller\x00', 0x0, &(0x7f0000000200)="c077d927819ff9a7cd890fc9dfcb71284b63d072afebecb7323c46d00e0dc6020e9dfaa5d1b8949ea9480a253c06886c27855cd3d133244e", 0x38, 0xfffffffffffffff9) keyctl$setperm(0x5, r1, 0x20600) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) ioctl$BLKFLSBUF(r2, 0x1261, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) 1m55.059346073s ago: executing program 2 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 1m54.721763017s ago: executing program 2 (id=977): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m54.376815266s ago: executing program 2 (id=978): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x181c82) 1m38.154118173s ago: executing program 33 (id=978): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x181c82) 22.606901972s ago: executing program 3 (id=1165): pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 20.587179922s ago: executing program 3 (id=1172): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x8004) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r1, &(0x7f0000004b80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socket$inet_mptcp(0x2, 0x1, 0x106) 16.759223359s ago: executing program 1 (id=1182): pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, 0x0) mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 16.59149338s ago: executing program 6 (id=1183): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 15.30373002s ago: executing program 6 (id=1186): syz_emit_ethernet(0x22, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaa"], 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) r0 = syz_open_dev$sg(0x0, 0x6f5e, 0x88901) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 15.220304942s ago: executing program 1 (id=1187): timerfd_create(0x0, 0x0) timerfd_create(0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 14.923359071s ago: executing program 6 (id=1189): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x25, 0x0, 0x0) 13.658324974s ago: executing program 6 (id=1192): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) prctl$PR_SET_IO_FLUSHER(0x39, 0xffffffffffa00000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000001010000ff7f00004c00000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000d5f93e80cf05769a00000000000000000000000000000d0000ebe7366ec9b11e7b3e5b5a9299e5474e8193156fae7333450000000000c19149540000000000"], 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xd4, 0x35, 0x701, 0x0, 0x0, {0xa}, [@nested={0xbf, 0xda, 0x0, 0x1, [@generic="8b2d70966ab39fbc5ed61d498385e93343d46aeeabb141d4d6226f7d81aa87130959dff8317fc6cbbabe5c5b1dc1556543462da56043a388b5a0126a0c287217c1e429de3aa7263c03192282f7bae4aa05a343bcb363002e2aff055472b3ffeef3642c2a77a3aa818f4cf2fec1d376328d438535bccfc64c56c0e1e21fbe0a3c9434559e64b03a73252b958c3d2f13532407b8b2b40c5e19e92d703b06aa9a8ccf89174125e2d6b02dab674156f1df7d58dc46f45d145363dfa133"]}]}, 0xd4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d80080003"], 0x24}], 0x1}, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) 13.581114318s ago: executing program 1 (id=1193): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x12, 0x3, 0x100, 0x2, 0x8028, 0xffffffffffffffff, 0xd45, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) 11.213459231s ago: executing program 1 (id=1196): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f0200000000000905", @ANYRES64], 0x0) 10.132910934s ago: executing program 6 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x148) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8008, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES64=0x0, @ANYRES64, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x33, 0x0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 9.773018712s ago: executing program 3 (id=1199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a0000000300000000000000", @ANYBLOB="000200"/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/50}, 0x20) 9.470045255s ago: executing program 0 (id=1200): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x440, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2a0, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) io_destroy(0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x2, @private=0xa010102}}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)}], 0x2, 0x0, 0x700}, 0x40000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r1, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) 9.423550152s ago: executing program 5 (id=1201): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)}, {&(0x7f0000001400)="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", 0xdf3}], 0x3, &(0x7f0000002400)=[{0xc50, 0x1, 0x8, "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"}], 0xc50}, 0x40000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.67458197s ago: executing program 0 (id=1202): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x25, 0x0, 0x0) 8.566147049s ago: executing program 5 (id=1203): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 8.422279976s ago: executing program 0 (id=1204): getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x6}}, 0x3, 0x81}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047bc, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xc0, 0x5) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000fc0)=[@release={0x40046306, 0x5}], 0x0, 0x0, 0x0}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x100}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01030000000000000000010020052c000000030a01020000000000000000010000040900030073797a32000000000900010073797a300000000054000000060a010400000000000000000100000008000b40fffffffe0900010073797a30000000002c0004801400"], 0xbc}}, 0x4000) 7.49137537s ago: executing program 1 (id=1205): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 7.369119518s ago: executing program 5 (id=1206): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) read$msr(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x12, 0x3, 0x100, 0x2, 0x8028, 0xffffffffffffffff, 0xd45, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) 6.41955754s ago: executing program 3 (id=1207): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 6.329492706s ago: executing program 0 (id=1208): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c8, 0x0, 0x3b8, 0x0, 0x230, 0x230, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x1, 'unconfined\x00'}}}, {{@ip={@private=0xa010100, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x4, 0x8, [0x3b, 0x21, 0x20, 0x15, 0xf, 0x31, 0x39, 0x25, 0x17, 0x16, 0x14, 0x29, 0x15, 0x7, 0x1b, 0x2f], 0x0, 0x1, 0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'dummy0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x6) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 6.228039128s ago: executing program 5 (id=1209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x40, 0x0, @fd=r4, 0x2, 0x0, 0x10000, 0x2}) io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0) 5.125098963s ago: executing program 0 (id=1210): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x2}]}, 0x24}}, 0x4000014) r4 = memfd_create(0x0, 0x1) r5 = socket(0x1e, 0x805, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000ac0)={{r5}, 0x0, 0x0, @unused=[0x3a2a, 0x800, 0x6, 0x7], @name="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"}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r7, 0x1, 0x70bd2b, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) socket$rds(0x15, 0x5, 0x0) 4.135975533s ago: executing program 5 (id=1211): socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xe20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x7, &(0x7f0000000000)) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x3) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xa8c1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) close(0x3) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xe0, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xe0}], 0x1}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 4.102254521s ago: executing program 1 (id=1212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0xd13, 0x7, 0xffffffff, 0xadeb, 0x7, "ea710000000000f9000000024200", 0x4000000, 0x6}) r1 = semget$private(0x0, 0x1, 0x641) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000080)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) rseq(0x0, 0x0, 0x20000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) dup(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x40000) 2.48919703s ago: executing program 5 (id=1213): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)}, {&(0x7f0000001400)="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", 0xdf3}], 0x3, &(0x7f0000002400)=[{0xc50, 0x1, 0x8, "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"}], 0xc50}, 0x40000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.477863422s ago: executing program 3 (id=1214): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x25, 0x0, 0x0) 263.340024ms ago: executing program 0 (id=1215): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f0200000000000905", @ANYRES64], 0x0) 117.625654ms ago: executing program 6 (id=1216): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) 0s ago: executing program 3 (id=1217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a0000000300000000000000", @ANYBLOB="000200"/15, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/50}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 103.129336][ T32] cfg80211: failed to load regulatory.db [ 106.782009][ T5780] cgroup: Unknown subsys name 'net' [ 107.033731][ T5780] cgroup: Unknown subsys name 'cpuset' [ 107.088129][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 109.333612][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 112.072793][ T5112] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.075172][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.076974][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.088758][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.095083][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.160864][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.184180][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.185246][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.189524][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.191977][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.196421][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.233095][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.233450][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.250596][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.250664][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 112.253726][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.268876][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.273414][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.277620][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.285997][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.287293][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.295602][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.299930][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.345638][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.371756][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.322550][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 113.555926][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 113.632719][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 113.718060][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 113.737613][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 113.876507][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.878066][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.879718][ T5794] bridge_slave_0: entered allmulticast mode [ 113.887308][ T5794] bridge_slave_0: entered promiscuous mode [ 113.953075][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.953171][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.953544][ T5794] bridge_slave_1: entered allmulticast mode [ 113.955357][ T5794] bridge_slave_1: entered promiscuous mode [ 114.129950][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.130135][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.130280][ T5797] bridge_slave_0: entered allmulticast mode [ 114.132280][ T5797] bridge_slave_0: entered promiscuous mode [ 114.161199][ T5810] Bluetooth: hci0: command tx timeout [ 114.188111][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.216074][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.216301][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.216912][ T5797] bridge_slave_1: entered allmulticast mode [ 114.228152][ T5797] bridge_slave_1: entered promiscuous mode [ 114.320457][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.324946][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.325078][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.325723][ T5796] bridge_slave_0: entered allmulticast mode [ 114.360201][ T5796] bridge_slave_0: entered promiscuous mode [ 114.440260][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.440396][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.440533][ T5796] bridge_slave_1: entered allmulticast mode [ 114.442661][ T5796] bridge_slave_1: entered promiscuous mode [ 114.487878][ T5810] Bluetooth: hci4: command tx timeout [ 114.487900][ T5808] Bluetooth: hci3: command tx timeout [ 114.488031][ T5810] Bluetooth: hci1: command tx timeout [ 114.488041][ T5808] Bluetooth: hci2: command tx timeout [ 114.492148][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.492279][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.493315][ T5795] bridge_slave_0: entered allmulticast mode [ 114.495273][ T5795] bridge_slave_0: entered promiscuous mode [ 114.511573][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.512005][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.512698][ T5798] bridge_slave_0: entered allmulticast mode [ 114.529065][ T5798] bridge_slave_0: entered promiscuous mode [ 114.613463][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.615575][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.615700][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.615874][ T5795] bridge_slave_1: entered allmulticast mode [ 114.641066][ T5795] bridge_slave_1: entered promiscuous mode [ 114.644993][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.645128][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.645318][ T5798] bridge_slave_1: entered allmulticast mode [ 114.650142][ T5798] bridge_slave_1: entered promiscuous mode [ 114.678637][ T5794] team0: Port device team_slave_0 added [ 114.723474][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.781405][ T5794] team0: Port device team_slave_1 added [ 114.785642][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.863141][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.891615][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.895481][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.947941][ T5797] team0: Port device team_slave_0 added [ 114.951414][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.954340][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.956736][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.956750][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.956772][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.036200][ T5797] team0: Port device team_slave_1 added [ 115.074718][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.074732][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.074755][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.081757][ T5796] team0: Port device team_slave_0 added [ 115.186489][ T5796] team0: Port device team_slave_1 added [ 115.212995][ T5795] team0: Port device team_slave_0 added [ 115.215511][ T5798] team0: Port device team_slave_0 added [ 115.253959][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.253976][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.253999][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.257014][ T5795] team0: Port device team_slave_1 added [ 115.277168][ T5798] team0: Port device team_slave_1 added [ 115.335178][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.335198][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.335229][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.076888][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.076902][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.076921][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.186302][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.186316][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.186336][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.198102][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.198122][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.198154][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.212318][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.212379][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.212458][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.237669][ T60] Bluetooth: hci0: command tx timeout [ 116.289323][ T5794] hsr_slave_0: entered promiscuous mode [ 116.295977][ T5794] hsr_slave_1: entered promiscuous mode [ 116.315530][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.315598][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.315675][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.324678][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.324729][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.324806][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.557687][ T60] Bluetooth: hci1: command tx timeout [ 116.557722][ T60] Bluetooth: hci2: command tx timeout [ 116.557744][ T60] Bluetooth: hci3: command tx timeout [ 116.557766][ T60] Bluetooth: hci4: command tx timeout [ 116.564951][ T5797] hsr_slave_0: entered promiscuous mode [ 116.566087][ T5797] hsr_slave_1: entered promiscuous mode [ 116.569244][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 116.569572][ T5797] Cannot create hsr debugfs directory [ 116.739446][ T5796] hsr_slave_0: entered promiscuous mode [ 116.740467][ T5796] hsr_slave_1: entered promiscuous mode [ 116.741140][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 116.741158][ T5796] Cannot create hsr debugfs directory [ 116.797213][ T5795] hsr_slave_0: entered promiscuous mode [ 116.819322][ T5795] hsr_slave_1: entered promiscuous mode [ 116.820357][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 116.820387][ T5795] Cannot create hsr debugfs directory [ 116.849005][ T5798] hsr_slave_0: entered promiscuous mode [ 116.850457][ T5798] hsr_slave_1: entered promiscuous mode [ 116.851332][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 116.851352][ T5798] Cannot create hsr debugfs directory [ 117.870711][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 117.913947][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 117.947640][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.006873][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.124236][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 118.166429][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 118.204260][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 118.260928][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 118.327595][ T5810] Bluetooth: hci0: command tx timeout [ 118.421100][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.458753][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.512129][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.558110][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.638742][ T5810] Bluetooth: hci4: command tx timeout [ 118.638777][ T5810] Bluetooth: hci3: command tx timeout [ 118.638797][ T5810] Bluetooth: hci2: command tx timeout [ 118.638831][ T5810] Bluetooth: hci1: command tx timeout [ 118.709227][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 118.749031][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 118.811685][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 118.878017][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 119.064091][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.066404][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.110902][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.161531][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.205127][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.295211][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.339129][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.366200][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.367211][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.426640][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.426802][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.514295][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.579890][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.580021][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.586282][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.655055][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.655311][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.743811][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.755260][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.795627][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.795941][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.855925][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.867890][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.902660][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.955588][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.956232][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.986218][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.038126][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.038282][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.164433][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.235882][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.236887][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.305056][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.305820][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.407723][ T60] Bluetooth: hci0: command tx timeout [ 120.451412][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.676662][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.722155][ T60] Bluetooth: hci1: command tx timeout [ 120.722210][ T60] Bluetooth: hci2: command tx timeout [ 120.722234][ T60] Bluetooth: hci3: command tx timeout [ 120.722257][ T60] Bluetooth: hci4: command tx timeout [ 120.982146][ T5797] veth0_vlan: entered promiscuous mode [ 121.044322][ T5797] veth1_vlan: entered promiscuous mode [ 121.191232][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.303270][ T5797] veth0_macvtap: entered promiscuous mode [ 121.326201][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.359607][ T5797] veth1_macvtap: entered promiscuous mode [ 121.450032][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.476985][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.490929][ T5796] veth0_vlan: entered promiscuous mode [ 121.494994][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.549515][ T145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.573765][ T145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.602487][ T145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.603729][ T5796] veth1_vlan: entered promiscuous mode [ 121.614504][ T145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.715079][ T5794] veth0_vlan: entered promiscuous mode [ 121.724162][ T5795] veth0_vlan: entered promiscuous mode [ 121.875166][ T5794] veth1_vlan: entered promiscuous mode [ 121.906302][ T5795] veth1_vlan: entered promiscuous mode [ 121.991184][ T5798] veth0_vlan: entered promiscuous mode [ 122.010094][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.010117][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.056638][ T5796] veth0_macvtap: entered promiscuous mode [ 122.083775][ T5798] veth1_vlan: entered promiscuous mode [ 122.114317][ T5796] veth1_macvtap: entered promiscuous mode [ 122.164296][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.164319][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.191217][ T5794] veth0_macvtap: entered promiscuous mode [ 122.229623][ T5795] veth0_macvtap: entered promiscuous mode [ 122.232879][ T5794] veth1_macvtap: entered promiscuous mode [ 122.283900][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.313370][ T5795] veth1_macvtap: entered promiscuous mode [ 122.341902][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.383522][ T5798] veth0_macvtap: entered promiscuous mode [ 122.411642][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.411778][ T1017] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.440737][ T1017] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.443267][ T5798] veth1_macvtap: entered promiscuous mode [ 122.446843][ T1017] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.490384][ T1017] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.494224][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.524158][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.609384][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.616207][ T24] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.641598][ T24] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.681305][ T24] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.728716][ T24] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.732688][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.796555][ T24] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.855768][ T24] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.914061][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.915527][ T24] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.936798][ T24] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.136000][ T24] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.170009][ T24] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.173133][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.173170][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.215933][ T5915] capability: warning: `syz.3.7' uses 32-bit capabilities (legacy support in use) [ 123.258476][ T24] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.344876][ T24] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.492803][ T5918] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 123.768483][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.768507][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.993893][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.993919][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.104391][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.104417][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.252955][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.252976][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.367322][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 124.399724][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.399743][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.578985][ T5927] team0: Port device team_slave_0 removed [ 124.721385][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.721418][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.068418][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.068443][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.460934][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.107520][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 126.117230][ T32] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 126.117262][ T32] usb 4-1: config 0 has no interface number 0 [ 126.132530][ T32] usb 4-1: config 0 interface 189 altsetting 0 bulk endpoint 0xF has invalid maxpacket 32 [ 126.132571][ T32] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.132599][ T32] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 126.132630][ T32] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.132656][ T32] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 126.132686][ T32] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.132707][ T32] usb 4-1: config 0 interface 189 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 126.132732][ T32] usb 4-1: config 0 interface 189 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 126.132764][ T32] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x7 has an invalid bInterval 127, changing to 7 [ 126.132793][ T32] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 126.306652][ T32] usb 4-1: New USB device found, idVendor=0413, idProduct=60f6, bcdDevice=df.46 [ 126.306686][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.306708][ T32] usb 4-1: Product: syz [ 126.306723][ T32] usb 4-1: Manufacturer: syz [ 126.306739][ T32] usb 4-1: SerialNumber: syz [ 126.390742][ T32] usb 4-1: config 0 descriptor?? [ 126.409094][ T5938] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.444884][ T809] kernel write not supported for file /vcs (pid: 809 comm: kworker/1:2) [ 126.621051][ T5950] warning: `syz.4.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.691151][ T5953] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 127.691173][ T5953] UDF-fs: Scanning with blocksize 512 failed [ 127.824272][ T5953] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 127.824295][ T5953] UDF-fs: Scanning with blocksize 1024 failed [ 127.889429][ T5953] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 127.889820][ T5953] UDF-fs: Scanning with blocksize 2048 failed [ 128.525202][ T5953] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 128.525228][ T5953] UDF-fs: Scanning with blocksize 4096 failed [ 128.620444][ T32] dvb-usb: found a 'Leadtek WinFast DTV Dongle H' in cold state, will try to load a firmware [ 128.676476][ T32] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 128.676545][ T32] dib0700: firmware download failed at 7 with -22 [ 128.964067][ T5967] No control pipe specified [ 129.111337][ T32] usb 4-1: USB disconnect, device number 2 [ 130.195085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 131.017420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.017473][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.775585][ T5997] No control pipe specified [ 132.965781][ T6001] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 132.965856][ T6001] netlink: 224 bytes leftover after parsing attributes in process `syz.3.32'. [ 134.687911][ T5955] Bluetooth: hci5: Frame reassembly failed (-84) [ 135.577883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.307444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.307977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.308073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.472237][ T6014] syz.2.35 (6014) used greatest stack depth: 17600 bytes left [ 136.557634][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 136.817483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.819946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.820047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.989835][ T6035] autofs: Bad value for 'fd' [ 137.290103][ T809] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 137.460268][ T809] usb 1-1: string descriptor 0 read error: -22 [ 137.460399][ T809] usb 1-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 137.460424][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.466197][ T809] usb 1-1: config 0 descriptor?? [ 137.513048][ T809] usbtest 1-1:0.0: FX2 device [ 137.513071][ T809] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 137.709607][ T5802] usb 1-1: USB disconnect, device number 2 [ 138.963910][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.824830][ T6070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.180466][ T6108] autofs: Bad value for 'fd' [ 144.359249][ T6120] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 144.359323][ T6120] netlink: 224 bytes leftover after parsing attributes in process `syz.0.74'. [ 144.832671][ T6126] fuse: Bad value for 'group_id' [ 144.832855][ T6126] fuse: Bad value for 'group_id' [ 145.469015][ T6143] autofs: Unknown parameter '0x0000000000000000' [ 147.520396][ T6163] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 147.520468][ T6163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.87'. [ 150.338289][ T6191] autofs: Unknown parameter '0x0000000000000000' [ 151.167205][ T6200] Zero length message leads to an empty skb [ 151.467473][ T6203] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 151.467498][ T6203] netlink: 224 bytes leftover after parsing attributes in process `syz.3.101'. [ 153.358039][ T6228] autofs: Unknown parameter '0x0000000000000000' [ 154.901493][ T6252] autofs: Unknown parameter '0x0000000000000000' [ 155.123734][ T5965] IPVS: starting estimator thread 0... [ 155.209973][ T6257] IPVS: using max 7 ests per chain, 16800 per kthread [ 156.830405][ T6284] autofs: Unknown parameter '0x0000000000000000' [ 162.708490][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 169.053643][ T6458] syz.3.205 uses obsolete (PF_INET,SOCK_PACKET) [ 171.810298][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 172.331748][ T6497] team0: Port device team_slave_0 removed [ 175.559535][ T6542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 176.091049][ T6546] overlayfs: failed to resolve './file0': -2 [ 177.107984][ T5810] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 178.652508][ T32] IPVS: starting estimator thread 0... [ 178.827672][ T6583] IPVS: using max 8 ests per chain, 19200 per kthread [ 179.901127][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.262'. [ 182.634836][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 183.402513][ T6651] team0: Port device team_slave_0 removed [ 185.638916][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 188.101205][ T6713] team0: Port device team_slave_0 removed [ 189.783944][ T6755] sg_write: data in/out 428508/136 bytes for SCSI command 0x0-- guessing data in; [ 189.783944][ T6755] program syz.1.315 not setting count and/or reply_len properly [ 191.714809][ T6786] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 191.752129][ T6787] sg_write: data in/out 428508/136 bytes for SCSI command 0x0-- guessing data in; [ 191.752129][ T6787] program syz.0.329 not setting count and/or reply_len properly [ 193.649068][ T6815] sg_write: data in/out 432604/152 bytes for SCSI command 0x0-- guessing data in; [ 193.649068][ T6815] program syz.3.342 not setting count and/or reply_len properly [ 194.464110][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 195.081354][ T6848] sg_write: data in/out 432604/152 bytes for SCSI command 0x0-- guessing data in; [ 195.081354][ T6848] program syz.4.354 not setting count and/or reply_len properly [ 195.298674][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.329780][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.287406][ T5965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.437446][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 196.445013][ T5965] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.447285][ T5965] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 196.472815][ T5965] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 196.472847][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.472870][ T5965] usb 1-1: Product: syz [ 196.472885][ T5965] usb 1-1: Manufacturer: syz [ 196.472900][ T5965] usb 1-1: SerialNumber: syz [ 196.611584][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.619655][ T6840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.827378][ T5965] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 196.846429][ T5965] usb 1-1: unit 2 not found! [ 197.562447][ T5965] usb 1-1: USB disconnect, device number 3 [ 197.796641][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.922376][ T6726] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.922603][ T6726] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.922704][ T6726] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.922744][ T6726] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.826545][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 200.689093][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.970685][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.373'. [ 200.970722][ T6907] netlink: 'syz.4.373': attribute type 7 has an invalid length. [ 200.970738][ T6907] netlink: 'syz.4.373': attribute type 8 has an invalid length. [ 200.970751][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 201.292448][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 203.028254][ T6945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.388'. [ 203.028292][ T6945] netlink: 'syz.2.388': attribute type 7 has an invalid length. [ 203.028312][ T6945] netlink: 'syz.2.388': attribute type 8 has an invalid length. [ 203.028326][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'. [ 204.956060][ T809] IPVS: starting estimator thread 0... [ 205.068632][ T6958] IPVS: using max 7 ests per chain, 16800 per kthread [ 205.271704][ T6959] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 205.271720][ T6959] netlink: 224 bytes leftover after parsing attributes in process `syz.3.392'. [ 205.479360][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 206.192544][ T6978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.399'. [ 206.192583][ T6978] netlink: 'syz.2.399': attribute type 7 has an invalid length. [ 206.192598][ T6978] netlink: 'syz.2.399': attribute type 8 has an invalid length. [ 206.192611][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 206.628960][ T6987] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 207.403724][ T7006] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 207.403747][ T7006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.407'. [ 207.704842][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.0.411'. [ 207.704881][ T7014] netlink: 'syz.0.411': attribute type 6 has an invalid length. [ 207.713841][ T7015] fuse: Bad value for 'user_id' [ 207.713894][ T7015] fuse: Bad value for 'user_id' [ 209.557925][ T7046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'. [ 209.557964][ T7046] netlink: 'syz.2.423': attribute type 6 has an invalid length. [ 210.599947][ T7055] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 210.599969][ T7055] netlink: 224 bytes leftover after parsing attributes in process `syz.0.424'. [ 211.673324][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 211.894310][ T7080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'. [ 211.894348][ T7080] netlink: 'syz.0.436': attribute type 6 has an invalid length. [ 213.084820][ T7091] sg_write: data in/out 424412/120 bytes for SCSI command 0x0-- guessing data in; [ 213.084820][ T7091] program syz.2.439 not setting count and/or reply_len properly [ 213.987775][ T7114] netlink: 108 bytes leftover after parsing attributes in process `syz.2.448'. [ 215.138169][ T7129] sg_write: data in/out 424412/120 bytes for SCSI command 0x0-- guessing data in; [ 215.138169][ T7129] program syz.1.452 not setting count and/or reply_len properly [ 215.892935][ T5799] IPVS: starting estimator thread 0... [ 215.977572][ T7132] IPVS: using max 11 ests per chain, 26400 per kthread [ 218.127933][ T7161] tmpfs: Unsupported parameter 'huge' [ 218.182183][ T7165] netlink: 108 bytes leftover after parsing attributes in process `syz.3.463'. [ 222.105647][ T7200] netlink: 108 bytes leftover after parsing attributes in process `syz.2.475'. [ 223.533397][ T7217] sg_write: data in/out 426460/128 bytes for SCSI command 0x0-- guessing data in; [ 223.533397][ T7217] program syz.4.482 not setting count and/or reply_len properly [ 232.744428][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 232.791550][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 232.915399][ T7310] ceph: No mds server is up or the cluster is laggy [ 233.294259][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 233.317904][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 234.371356][ T7337] random: crng reseeded on system resumption [ 235.055391][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.528'. [ 238.468682][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 239.180212][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 239.180256][ T5805] Bluetooth: hci1: command 0x0406 tx timeout [ 239.180287][ T5805] Bluetooth: hci4: command 0x0406 tx timeout [ 239.180313][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 239.625692][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.539'. [ 243.898917][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.552'. [ 244.116063][ T7426] overlayfs: failed to resolve './bus': -2 [ 252.039333][ T7484] sg_write: process 283 (syz.1.572) changed security contexts after opening file descriptor, this is not allowed. [ 254.843270][ T7507] overlayfs: failed to resolve './bus': -2 [ 258.217629][ T7554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 259.034689][ T5784] kernel write not supported for file /input/event0 (pid: 5784 comm: kworker/1:3) [ 260.832270][ T7594] program syz.2.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.884820][ T7595] program syz.2.614 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.346502][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 261.841217][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.052225][ T7613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.621'. [ 264.870291][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.633'. [ 265.433873][ T7647] ======================================================= [ 265.433873][ T7647] WARNING: The mand mount option has been deprecated and [ 265.433873][ T7647] and is ignored by this kernel. Remove the mand [ 265.433873][ T7647] option from the mount to silence this warning. [ 265.433873][ T7647] ======================================================= [ 265.434002][ T7647] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 266.481132][ T7661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 267.745736][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 269.717994][ T7708] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 270.806932][ T7711] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 271.327063][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.660'. [ 274.262838][ T7750] ubi31: attaching mtd0 [ 274.306120][ T7750] ubi31: scanning is finished [ 274.306160][ T7750] ubi31: empty MTD device detected [ 275.547743][ T7760] sg_write: data in/out 434652/160 bytes for SCSI command 0x0-- guessing data in; [ 275.547743][ T7760] program syz.3.672 not setting count and/or reply_len properly [ 280.696131][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888036808c00: rx timeout, send abort [ 280.704318][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888036808c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.848533][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 293.051567][ T7865] bridge3: entered promiscuous mode [ 293.051824][ T7865] macsec1: entered promiscuous mode [ 293.494433][ T5112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.513228][ T5112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.515784][ T5112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.545646][ T5112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.546458][ T5112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.677458][ T5808] Bluetooth: hci5: command tx timeout [ 295.737235][ T7890] sg_write: data in/out 438492/175 bytes for SCSI command 0x0-- guessing data in; [ 295.737235][ T7890] program syz.1.713 not setting count and/or reply_len properly [ 297.202920][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 297.757423][ T5808] Bluetooth: hci5: command tx timeout [ 297.960187][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.960899][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.961097][ T7870] bridge_slave_0: entered allmulticast mode [ 298.000889][ T7870] bridge_slave_0: entered promiscuous mode [ 298.019258][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.019475][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.019689][ T7870] bridge_slave_1: entered allmulticast mode [ 298.022527][ T7870] bridge_slave_1: entered promiscuous mode [ 298.341401][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.479680][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.877426][ T5808] Bluetooth: hci5: command tx timeout [ 300.402853][ T7923] sg_write: data in/out 438492/175 bytes for SCSI command 0x0-- guessing data in; [ 300.402853][ T7923] program syz.0.723 not setting count and/or reply_len properly [ 300.497772][ T7870] team0: Port device team_slave_0 added [ 300.501307][ T7870] team0: Port device team_slave_1 added [ 300.578544][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.578571][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.578601][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.581126][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.581141][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.581170][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.917657][ T5808] Bluetooth: hci5: command tx timeout [ 302.014672][ T5808] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 302.631191][ T7870] hsr_slave_0: entered promiscuous mode [ 302.632606][ T7870] hsr_slave_1: entered promiscuous mode [ 302.633637][ T7870] debugfs: 'hsr0' already exists in 'hsr' [ 302.633663][ T7870] Cannot create hsr debugfs directory [ 303.614849][ T37] audit: type=1326 audit(1773120761.333:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7942 comm="syz.0.733" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe53cb0c799 code=0x0 [ 306.083771][ T5808] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 306.083920][ T5808] Bluetooth: hci2: Injecting HCI hardware error event [ 306.085730][ T5808] Bluetooth: hci2: hardware error 0x00 [ 306.872179][ T7870] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.819795][ T7976] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 307.891603][ T7870] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 309.005728][ T5808] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 309.147202][ T7870] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 309.394394][ T7870] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 312.356527][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.527192][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.674128][ T6726] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.674392][ T6726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.797006][ T6726] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.797453][ T6726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.364281][ T5965] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 313.547428][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 313.556426][ T5965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 313.556457][ T5965] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 313.556489][ T5965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 313.556518][ T5965] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59391, setting to 1024 [ 313.624673][ T5965] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 313.624704][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.624728][ T5965] usb 3-1: Product: syz [ 313.624739][ T5965] usb 3-1: Manufacturer: syz [ 313.624749][ T5965] usb 3-1: SerialNumber: syz [ 313.692306][ T8015] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 313.722513][ T5965] ti_usb_3410_5052 3-1:1.0: TI USB 3410 1 port adapter converter detected [ 314.373849][ T5965] usb 3-1: USB disconnect, device number 2 [ 316.822157][ T8046] netlink: 'syz.1.767': attribute type 6 has an invalid length. [ 316.822180][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 318.039819][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.050164][ T8076] netlink: 112 bytes leftover after parsing attributes in process `syz.1.777'. [ 323.209877][ T7870] veth0_vlan: entered promiscuous mode [ 323.305057][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.358812][ T7870] veth1_vlan: entered promiscuous mode [ 324.009282][ T7870] veth0_macvtap: entered promiscuous mode [ 324.030749][ T7870] veth1_macvtap: entered promiscuous mode [ 324.265067][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.325738][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.469996][ T1381] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.470257][ T1381] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.470300][ T1381] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.470338][ T1381] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.767412][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.767435][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.044972][ T8105] netlink: 112 bytes leftover after parsing attributes in process `syz.3.789'. [ 326.068526][ T5799] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 326.203273][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.203298][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.217566][ T5799] usb 2-1: Using ep0 maxpacket: 8 [ 326.231165][ T5799] usb 2-1: config 64 has an invalid interface number: 19 but max is 0 [ 326.231195][ T5799] usb 2-1: config 64 has no interface number 0 [ 326.231242][ T5799] usb 2-1: config 64 interface 19 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 326.231270][ T5799] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 326.231298][ T5799] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x8F has invalid maxpacket 8522, setting to 1024 [ 326.231342][ T5799] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 326.231366][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.461965][ T5799] usb 2-1: probing VID:PID(2201:012C) [ 326.531956][ T5799] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 8F [ 326.532001][ T5799] usb 2-1: vub300 ignoring EndPoint(0) 8F [ 326.532019][ T5799] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 326.532114][ T5799] vub300 2-1:64.19: probe with driver vub300 failed with error -22 [ 326.745785][ T1231] usb 2-1: USB disconnect, device number 2 [ 334.033865][ T8157] pim6reg: entered allmulticast mode [ 335.739386][ T5799] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 335.897795][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 336.058273][ T5799] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 336.058307][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.058328][ T5799] usb 3-1: Product: syz [ 336.058343][ T5799] usb 3-1: Manufacturer: syz [ 336.058358][ T5799] usb 3-1: SerialNumber: syz [ 336.123060][ T5799] usb 3-1: config 0 descriptor?? [ 336.755462][ T5799] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 336.755492][ T5799] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 336.828303][ T5799] usb 3-1: USB disconnect, device number 3 [ 339.370078][ T8207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 341.352654][ T8224] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 342.055637][ T8229] fuse: Unknown parameter 'fd0x0000000000000007' [ 344.126422][ T8239] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 349.156977][ T8259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.847'. [ 350.178609][ T8273] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 350.919707][ T8276] sctp: [Deprecated]: syz.2.851 (pid 8276) Use of int in max_burst socket option. [ 350.919707][ T8276] Use struct sctp_assoc_value instead [ 352.227740][ T5965] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 352.448364][ T5965] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 352.448463][ T5965] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 352.448485][ T5965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 352.448543][ T5965] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 352.448598][ T5965] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 352.451117][ T5965] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 352.451146][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 352.451167][ T5965] usb 1-1: Product: syz [ 352.451182][ T5965] usb 1-1: Manufacturer: syz [ 352.696271][ T5965] cdc_wdm 1-1:1.0: skipping garbage [ 352.696294][ T5965] cdc_wdm 1-1:1.0: skipping garbage [ 352.866128][ T5965] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 352.866235][ T5965] cdc_wdm 1-1:1.0: Unknown control protocol [ 353.095020][ T1231] usb 1-1: USB disconnect, device number 4 [ 356.110652][ T1231] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 356.294669][ T1231] usb 1-1: Using ep0 maxpacket: 8 [ 356.539817][ T1231] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 356.539851][ T1231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 356.539877][ T1231] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 356.539901][ T1231] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.539944][ T1231] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 356.540909][ T1231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.933251][ T1231] usb 1-1: GET_CAPABILITIES returned 0 [ 356.933306][ T1231] usbtmc 1-1:16.0: can't read capabilities [ 357.154885][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 357.169991][ T1231] usb 1-1: USB disconnect, device number 5 [ 358.344497][ T8329] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 359.603214][ T809] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 361.767423][ T809] usb 6-1: Using ep0 maxpacket: 16 [ 361.781376][ T809] usb 6-1: device descriptor read/all, error -71 [ 363.867441][ T1231] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 363.870536][ T8370] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 364.027697][ T1231] usb 4-1: Using ep0 maxpacket: 8 [ 364.034928][ T1231] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 364.034961][ T1231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.299435][ T1231] pvrusb2: Hardware description: Terratec Grabster AV400 [ 364.299503][ T1231] pvrusb2: ********** [ 364.299511][ T1231] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 364.299547][ T1231] pvrusb2: Important functionality might not be entirely working. [ 364.299556][ T1231] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 364.299569][ T1231] pvrusb2: ********** [ 364.398748][ T2371] pvrusb2: Invalid write control endpoint [ 364.798145][ T5802] usb 4-1: USB disconnect, device number 3 [ 366.350570][ T2371] pvrusb2: Invalid write control endpoint [ 366.350589][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 366.350599][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 366.350634][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 366.350645][ T2371] pvrusb2: Device being rendered inoperable [ 366.468477][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 366.469164][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 366.627856][ T2371] pvrusb2: Attached sub-driver cx25840 [ 366.627903][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 366.627944][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 367.822730][ T8396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.898'. [ 368.158762][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.897'. [ 368.158813][ T8401] bond0: Unable to set down delay as MII monitoring is disabled [ 369.549764][ T8420] overlayfs: failed to resolve './bus': -2 [ 369.711140][ T8423] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 371.777627][ T5799] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 372.412563][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short [ 372.414157][ T5799] usb 1-1: config 1 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.414181][ T5799] usb 1-1: config 1 interface 0 has no altsetting 0 [ 372.439872][ T5799] usb 1-1: string descriptor 0 read error: -22 [ 372.439994][ T5799] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40 [ 372.440012][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.748358][ T5799] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 373.003515][ T5147] bcm5974 1-1:1.0: could not read from device [ 373.028214][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 373.629366][ T5799] usb 1-1: USB disconnect, device number 6 [ 373.639386][ T5147] bcm5974 1-1:1.0: could not read from device [ 373.665910][ T8439] bridge2: entered promiscuous mode [ 373.665999][ T8439] macsec1: entered promiscuous mode [ 382.268023][ T8497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.926'. [ 382.576177][ T8503] overlayfs: failed to resolve './bus': -2 [ 382.606024][ T1231] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 383.025725][ T1231] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.025757][ T1231] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.025778][ T1231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.025829][ T1231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 383.025856][ T1231] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 383.133122][ T1231] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.133154][ T1231] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.133175][ T1231] usb 1-1: Product: syz [ 383.133190][ T1231] usb 1-1: Manufacturer: syz [ 383.243116][ T1231] cdc_wdm 1-1:1.0: skipping garbage [ 383.243132][ T1231] cdc_wdm 1-1:1.0: skipping garbage [ 383.268162][ T1231] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 383.268179][ T1231] cdc_wdm 1-1:1.0: Unknown control protocol [ 383.343054][ T5112] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 384.741960][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.223240][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 386.240142][ T809] usb 1-1: USB disconnect, device number 7 [ 392.120175][ T809] kernel read not supported for file /cpu/0/msr (pid: 809 comm: kworker/1:2) [ 392.344197][ T5112] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 399.427451][ T5799] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 399.603865][ T5799] usb 3-1: Using ep0 maxpacket: 32 [ 399.606976][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.607010][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.607050][ T5799] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 399.607074][ T5799] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.706230][ T5799] usb 3-1: config 0 descriptor?? [ 399.730391][ T5799] hub 3-1:0.0: USB hub found [ 400.429725][ T5799] hub 3-1:0.0: 1 port detected [ 401.702625][ T10] hub 3-1:0.0: activate --> -90 [ 401.906024][ T5799] usb 3-1: USB disconnect, device number 4 [ 401.913322][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 406.215464][ T8646] capability: warning: `syz.0.981' uses deprecated v2 capabilities in a way that may be insecure [ 407.540260][ T5112] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 409.885266][ T10] IPVS: starting estimator thread 0... [ 409.987843][ T8671] IPVS: using max 7 ests per chain, 16800 per kthread [ 410.107494][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 418.340519][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 418.340550][ T10] usb 4-1: can't read configurations, error -71 [ 418.746431][ T5808] Bluetooth: hci4: unexpected event 0x30 length: 4 > 3 [ 419.918141][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 421.672207][ T5965] IPVS: starting estimator thread 0... [ 421.777851][ T8702] IPVS: using max 7 ests per chain, 16800 per kthread [ 423.835653][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 424.041618][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 424.060339][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 424.064522][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 424.065836][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 424.832824][ T8715] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1005'. [ 426.024189][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 426.024229][ T8725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 426.168649][ T5808] Bluetooth: hci6: command tx timeout [ 426.259301][ T5808] Bluetooth: hci4: unexpected event 0x30 length: 4 > 3 [ 428.166428][ T8741] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 428.166455][ T8741] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1015'. [ 428.247975][ T5808] Bluetooth: hci6: command tx timeout [ 429.277875][ T8733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1013'. [ 429.338248][ T8709] chnl_net:caif_netlink_parms(): no params data found [ 430.318082][ T5808] Bluetooth: hci6: command tx timeout [ 430.437653][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.437798][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.438066][ T8709] bridge_slave_0: entered allmulticast mode [ 430.440857][ T8709] bridge_slave_0: entered promiscuous mode [ 430.568964][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.569106][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.569441][ T8709] bridge_slave_1: entered allmulticast mode [ 430.610435][ T8709] bridge_slave_1: entered promiscuous mode [ 431.267423][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1021'. [ 431.599844][ T8709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.635524][ T8709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.239065][ T8709] team0: Port device team_slave_0 added [ 432.258199][ T8709] team0: Port device team_slave_1 added [ 432.369845][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.369864][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.369892][ T8709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.372717][ T8709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.372734][ T8709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.372769][ T8709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.411345][ T5808] Bluetooth: hci6: command tx timeout [ 433.439811][ T8709] hsr_slave_0: entered promiscuous mode [ 433.441833][ T8709] hsr_slave_1: entered promiscuous mode [ 433.448183][ T8709] debugfs: 'hsr0' already exists in 'hsr' [ 433.448215][ T8709] Cannot create hsr debugfs directory [ 433.570544][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'. [ 434.171272][ T8779] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 434.171304][ T8779] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1028'. [ 435.031756][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1031'. [ 435.966192][ T8789] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 435.966267][ T8789] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1032'. [ 437.117524][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 437.309918][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.309950][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.309969][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.310021][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 437.310049][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 437.312374][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 437.312404][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 437.312425][ T10] usb 6-1: Product: syz [ 437.312440][ T10] usb 6-1: Manufacturer: syz [ 437.455666][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 437.455688][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 437.560401][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 437.560426][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 437.735652][ T10] usb 6-1: USB disconnect, device number 4 [ 438.364020][ T8814] netlink: 'syz.0.1041': attribute type 10 has an invalid length. [ 438.364163][ T8814] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1041'. [ 443.022654][ T8832] netlink: 'syz.5.1045': attribute type 1 has an invalid length. [ 443.022729][ T8832] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1045'. [ 443.755960][ T8709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 444.332718][ T8709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 444.421931][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1048'. [ 444.767709][ T8709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 444.938141][ T8709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 445.838974][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1049'. [ 446.178335][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.657694][ T5799] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 447.782051][ T32] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 447.899812][ T5799] usb 4-1: Using ep0 maxpacket: 32 [ 447.910588][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.910623][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.910665][ T5799] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.910689][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.970393][ T5799] usb 4-1: config 0 descriptor?? [ 448.024149][ T5799] hub 4-1:0.0: USB hub found [ 448.118129][ T8709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.242131][ T5799] hub 4-1:0.0: 1 port detected [ 448.555479][ T32] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.555510][ T32] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 448.555530][ T32] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.555583][ T32] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 448.555613][ T32] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 448.575725][ T32] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.575768][ T32] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.575822][ T32] usb 6-1: Product: syz [ 448.575863][ T32] usb 6-1: Manufacturer: syz [ 448.626413][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 448.738944][ T32] cdc_wdm 6-1:1.0: skipping garbage [ 448.738967][ T32] cdc_wdm 6-1:1.0: skipping garbage [ 448.794523][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.794555][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 448.794575][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.839500][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 448.839539][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 448.884501][ T5965] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 448.906325][ T5965] usb 4-1: USB disconnect, device number 6 [ 449.014535][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 449.014568][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 449.014589][ T10] usb 1-1: Product: syz [ 449.014604][ T10] usb 1-1: Manufacturer: syz [ 449.147496][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 449.147516][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 449.206537][ T32] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 449.206563][ T32] cdc_wdm 6-1:1.0: Unknown control protocol [ 449.251632][ T8709] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.275559][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.276995][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.342429][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.342533][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.426360][ T10] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 449.426383][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 449.453072][ T32] usb 6-1: USB disconnect, device number 5 [ 449.546851][ T10] usb 1-1: USB disconnect, device number 8 [ 450.279138][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 454.616220][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1072'. [ 454.728000][ T5965] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 454.889341][ T5965] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.889382][ T5965] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 454.889403][ T5965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.889456][ T5965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 454.889483][ T5965] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 455.263316][ T5965] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 455.263350][ T5965] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 455.263371][ T5965] usb 6-1: Product: syz [ 455.263396][ T5965] usb 6-1: Manufacturer: syz [ 455.375490][ T5965] cdc_wdm 6-1:1.0: skipping garbage [ 455.375513][ T5965] cdc_wdm 6-1:1.0: skipping garbage [ 455.447686][ T5965] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 455.447709][ T5965] cdc_wdm 6-1:1.0: Unknown control protocol [ 455.603531][ T8709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.098331][ C0] cdc_wdm 6-1:1.0: Unexpected error -71 [ 457.103803][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.104345][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.109684][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.109707][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.109943][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.111888][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.121531][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.121558][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.125724][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.126660][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.136951][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.136977][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.143208][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.143233][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.143475][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.143493][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.143720][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.143735][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.144001][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 457.144347][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 457.569627][ T5807] usb 6-1: USB disconnect, device number 6 [ 457.569723][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 457.942054][ T8925] program syz.3.1077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 458.173169][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1078'. [ 458.457575][ T5807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 458.617963][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 458.627832][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.627866][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.627908][ T5807] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 458.627998][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.722936][ T5807] usb 4-1: config 0 descriptor?? [ 458.731420][ T5807] hub 4-1:0.0: USB hub found [ 459.027416][ T5807] hub 4-1:0.0: 1 port detected [ 459.644482][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1083'. [ 460.283715][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 460.527837][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 460.572213][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 460.595283][ T5807] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 460.967528][ T48] usb 4-1: USB disconnect, device number 7 [ 461.929917][ T8958] program syz.5.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.526041][ T8709] veth0_vlan: entered promiscuous mode [ 462.584318][ T8709] veth1_vlan: entered promiscuous mode [ 462.648699][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 463.592754][ T8709] veth0_macvtap: entered promiscuous mode [ 463.635649][ T8709] veth1_macvtap: entered promiscuous mode [ 464.023885][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.053210][ T8709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.173639][ T175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.190429][ T175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.206197][ T1115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.208432][ T1115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.014102][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1095'. [ 466.789778][ T8996] program syz.5.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.215252][ T9007] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 469.227500][ T5955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.227523][ T5955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.463052][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1104'. [ 470.704887][ T9021] netlink: 'syz.5.1105': attribute type 1 has an invalid length. [ 470.704914][ T9021] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1105'. [ 471.179745][ T8484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.179770][ T8484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.162688][ T9036] program syz.3.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.825513][ T5965] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 475.038345][ T5965] usb 2-1: Using ep0 maxpacket: 8 [ 475.108582][ T5965] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 475.108737][ T5965] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 475.108802][ T5965] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 475.108868][ T5965] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.140153][ T9050] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 475.496204][ T5965] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 475.496279][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.496341][ T5965] usb 2-1: Product: syz [ 475.496397][ T5965] usb 2-1: Manufacturer: syz [ 475.496415][ T5965] usb 2-1: SerialNumber: syz [ 475.684780][ T5965] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 475.720186][ T5965] usb 2-1: Direct firmware load for moxa/moxa-1110.fw failed with error -2 [ 475.720217][ T5965] usb 2-1: Falling back to sysfs fallback for: moxa/moxa-1110.fw [ 477.126867][ T9062] netlink: 'syz.6.1116': attribute type 1 has an invalid length. [ 477.126919][ T9062] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1116'. [ 477.761815][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 478.696908][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1118'. [ 479.299333][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 479.299356][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 479.299371][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 479.299414][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 479.299434][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 479.301347][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 479.301368][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 479.301389][ T10] usb 4-1: Product: syz [ 479.301400][ T10] usb 4-1: Manufacturer: syz [ 479.413867][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 479.413891][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 479.431258][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 479.431275][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 479.496075][ T10] usb 4-1: USB disconnect, device number 8 [ 480.918653][ T9087] program syz.3.1124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 481.380549][ T9095] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 482.557362][ T5807] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 482.717650][ T5807] usb 6-1: Using ep0 maxpacket: 8 [ 482.720415][ T5807] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 482.720475][ T5807] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 482.720499][ T5807] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 482.720626][ T5807] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.724343][ T5807] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 482.724373][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.724396][ T5807] usb 6-1: Product: syz [ 482.724411][ T5807] usb 6-1: Manufacturer: syz [ 482.724427][ T5807] usb 6-1: SerialNumber: syz [ 483.018568][ T9106] netlink: 'syz.6.1131': attribute type 1 has an invalid length. [ 483.018592][ T9106] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1131'. [ 483.893984][ T5807] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 485.825181][ T9127] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1138'. [ 487.828122][ T9148] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 489.089595][ T9159] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 489.887735][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 490.292398][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 491.309064][ T10] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 491.309127][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 491.309151][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 491.309175][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.873851][ T10] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 491.873884][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.047987][ T10] usb 7-1: can't set config #1, error -71 [ 492.056780][ T10] usb 7-1: USB disconnect, device number 2 [ 493.859524][ T9189] program syz.1.1157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.076182][ T9191] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 499.167983][ T9223] program syz.1.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.169165][ T9241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'. [ 504.490840][ T9269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'. [ 505.828701][ T9277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1190'. [ 507.633249][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.749651][ T9308] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1204'. [ 513.558212][ T5802] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 515.338273][ T5802] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 515.338304][ T5802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.338324][ T5802] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 515.338375][ T5802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.338401][ T5802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.340672][ T5802] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 515.340701][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 515.340721][ T5802] usb 4-1: Product: syz [ 515.340736][ T5802] usb 4-1: Manufacturer: syz [ 515.439992][ T5802] cdc_wdm 4-1:1.0: skipping garbage [ 515.440014][ T5802] cdc_wdm 4-1:1.0: skipping garbage [ 515.468059][ T5802] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 515.468083][ T5802] cdc_wdm 4-1:1.0: Unknown control protocol [ 515.646719][ T5802] usb 4-1: USB disconnect, device number 9 [ 519.835416][ T38] INFO: task kworker/u8:15:6330 blocked for more than 147 seconds. [ 519.835490][ T38] Tainted: G L syzkaller #0 [ 519.835505][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.835543][ T38] task:kworker/u8:15 state:D stack:21216 pid:6330 tgid:6330 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 519.835816][ T38] Workqueue: events_unbound bpf_map_free_deferred [ 519.836068][ T38] Call Trace: [ 519.836131][ T38] [ 519.836224][ T38] __schedule+0x1553/0x5240 [ 519.836568][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 519.836811][ T38] ? __pfx___schedule+0x10/0x10 [ 519.836962][ T38] ? schedule+0x90/0x360 [ 519.837047][ T38] schedule+0x164/0x360 [ 519.837106][ T38] schedule_timeout+0xc3/0x2c0 [ 519.837260][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 519.837294][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.837440][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.837596][ T38] ? wait_for_completion+0x274/0x5e0 [ 519.837658][ T38] wait_for_completion+0x2cc/0x5e0 [ 519.837828][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 519.837964][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.838055][ T38] rcu_barrier+0x463/0x580 [ 519.838133][ T38] dev_map_free+0x11f/0x6a0 [ 519.838243][ T38] ? kfree+0x4d/0x6c0 [ 519.838379][ T38] bpf_map_free_deferred+0x217/0x460 [ 519.839119][ T38] ? process_scheduled_works+0xa25/0x1830 [ 519.839220][ T38] process_scheduled_works+0xb02/0x1830 [ 519.839463][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.839582][ T38] ? assign_work+0x3d5/0x5e0 [ 520.067564][ T38] worker_thread+0xa50/0xfc0 [ 520.067913][ T38] kthread+0x388/0x470 [ 520.068032][ T38] ? __pfx_worker_thread+0x10/0x10 [ 520.068065][ T38] ? __pfx_kthread+0x10/0x10 [ 520.068176][ T38] ret_from_fork+0x51e/0xb90 [ 520.068341][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 520.068400][ T38] ? __switch_to+0xc7d/0x1450 [ 520.068538][ T38] ? __pfx_kthread+0x10/0x10 [ 520.068645][ T38] ret_from_fork_asm+0x1a/0x30 [ 520.068838][ T38] [ 520.069002][ T38] INFO: task syz.4.671:7750 blocked for more than 147 seconds. [ 520.069426][ T38] Tainted: G L syzkaller #0 [ 520.069476][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 520.069514][ T38] task:syz.4.671 state:D stack:26848 pid:7750 tgid:7749 ppid:5794 task_flags:0x400140 flags:0x00080002 [ 520.069992][ T38] Call Trace: [ 520.070006][ T38] [ 520.070074][ T38] __schedule+0x1553/0x5240 [ 520.070304][ T38] ? trace_irq_disable+0x3b/0x150 [ 520.070419][ T38] ? __pfx___schedule+0x10/0x10 [ 520.070590][ T38] rt_mutex_schedule+0x76/0xf0 [ 520.070663][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 520.070827][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 520.070905][ T38] rt_mutex_slowlock+0x2dc/0x7b0 [ 520.070960][ T38] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 520.071032][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 520.071104][ T38] ? rcu_barrier+0x4c/0x580 [ 520.071283][ T38] ? rcu_barrier+0x4c/0x580 [ 520.071336][ T38] mutex_lock_nested+0x168/0x1d0 [ 520.071416][ T38] ? destroy_ai+0xbc7/0xbe0 [ 520.071582][ T38] rcu_barrier+0x4c/0x580 [ 520.071700][ T38] ? __kmem_cache_shutdown+0x27/0x270 [ 520.071783][ T38] ? destroy_ai+0xbc7/0xbe0 [ 520.071818][ T38] __kmem_cache_shutdown+0x32/0x270 [ 520.071872][ T38] ? synchronize_srcu+0x25e/0x280 [ 520.071964][ T38] ? destroy_ai+0xbc7/0xbe0 [ 520.072024][ T38] kmem_cache_destroy+0x8e/0x170 [ 520.072119][ T38] destroy_ai+0xbc7/0xbe0 [ 520.072330][ T38] ubi_attach+0x40b5/0x5030 [ 520.072636][ T38] ? __pfx_ubi_attach+0x10/0x10 [ 520.072704][ T38] ? ubi_attach_mtd_dev+0x1a72/0x38e0 [ 520.072804][ T38] ? vmalloc_noprof+0xb2/0xe0 [ 520.072915][ T38] ubi_attach_mtd_dev+0x1ab7/0x38e0 [ 520.073181][ T38] ctrl_cdev_ioctl+0x2fc/0x480 [ 520.073262][ T38] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 520.073375][ T38] ? __fget_files+0x2a/0x420 [ 520.073493][ T38] ? __fget_files+0x2a/0x420 [ 520.073553][ T38] ? bpf_lsm_file_ioctl+0x9/0x20 [ 520.216035][ T38] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 520.216076][ T38] __se_sys_ioctl+0xff/0x170 [ 520.216229][ T38] do_syscall_64+0x14d/0xf80 [ 520.216481][ T38] ? trace_irq_disable+0x3b/0x150 [ 520.216527][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.216574][ T38] ? clear_bhb_loop+0x40/0x90 [ 520.216664][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.216741][ T38] RIP: 0033:0x7fc6c383c799 [ 520.216789][ T38] RSP: 002b:00007fc6c1a96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.216896][ T38] RAX: ffffffffffffffda RBX: 00007fc6c3ab5fa0 RCX: 00007fc6c383c799 [ 520.216938][ T38] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003 [ 520.216979][ T38] RBP: 00007fc6c38d2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 520.217012][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.217057][ T38] R13: 00007fc6c3ab6038 R14: 00007fc6c3ab5fa0 R15: 00007ffc0a00a868 [ 520.217142][ T38] [ 520.667238][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 520.882419][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 520.885269][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 520.885299][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 520.885324][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 520.885350][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 520.885378][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 520.991997][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 520.992040][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.992062][ T9] usb 1-1: Product: syz [ 520.992077][ T9] usb 1-1: Manufacturer: syz [ 520.992092][ T9] usb 1-1: SerialNumber: syz [ 521.090626][ T9343] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 521.133957][ T9] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 521.288059][ T38] [ 521.288059][ T38] Showing all locks held in the system: [ 521.288077][ T38] 2 locks held by kworker/u8:0/12: [ 521.288162][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.288248][ T38] #1: ffffc90000117c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.288312][ T38] 2 locks held by kworker/u8:1/13: [ 521.288335][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.288398][ T38] #1: ffffc90000127c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.288461][ T38] 2 locks held by kworker/u8:2/24: [ 521.288473][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.288543][ T38] #1: ffffc900001d7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.288607][ T38] 2 locks held by rcuc/1/29: [ 521.288620][ T38] 5 locks h[ 521.288620][ T38] 5 locks held by ksoftirqd/1/31: [ 521.288633][ T38] 1 lock held by khungtaskd/38: [ 521.288646][ T38] #0: ffffffff8ddcb840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 521.288711][ T38] 2 locks held by kworker/u8:3/56: [ 521.288724][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.288784][ T38] #1: ffffc9000122fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.288846][ T38] 3 locks held by kworker/u8:4/68: [ 521.288859][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.288918][ T38] #1: ffffc9000153fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.288980][ T38] #2: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 521.289038][ T38] 2 locks held by kworker/u8:5/69: [ 521.289050][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.289110][ T38] #1: ffffc9000155fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.289173][ T38] 2 locks held by kworker/u8:6/145: [ 521.289186][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.289247][ T38] #1: ffffc90003a87c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.289310][ T38] 2 locks held by kworker/1:2/809: [ 521.289327][ T38] 3 locks held by kworker/u8:9/1115: [ 521.289339][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.289400][ T38] #1: ffffc9000573fc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.289461][ T38] #2: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 521.289528][ T38] 2 locks held by kworker/u8:11/1381: [ 521.289541][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.289602][ T38] #1: ffffc90005e1fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.289675][ T38] 2 locks held by kworker/u8:12/1390: [ 521.289692][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.289755][ T38] #1: ffffc90005eafc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.289829][ T38] 3 locks held by udevd/5162: [ 521.289843][ T38] 2 locks held by getty/5550: [ 521.289855][ T38] #0: ffff88823bf0c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 521.290001][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 521.290095][ T38] 5 locks held by kworker/0:5/5807: [ 521.290107][ T38] #0: ffff8880216a6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.290167][ T38] #1: ffffc90004727c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.290229][ T38] #2: ffff888029ca6188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 521.290337][ T38] #3: ffff88805f452188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 521.290438][ T38] #4: ffff88805db8f150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 521.290497][ T38] 2 locks held by kworker/u8:13/5955: [ 521.290517][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.290577][ T38] #1: ffffc90004fd7c40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.290640][ T38] 6 locks held by kworker/0:8/5965: [ 521.290652][ T38] #0: ffff8880216a6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.407572][ T38] #1: ffffc900050a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.407638][ T38] #2: ffff888029b82188 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 521.407699][ T38] #3: ffff88805dbc7188 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 521.407754][ T38] #4: ffff88805e5cc150 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 521.407803][ T38] #5: ffffffff8dc6a560 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 521.407909][ T38] 3 locks held by kworker/u8:15/6330: [ 521.407922][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.407981][ T38] #1: ffffc900058bfc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.408135][ T38] #2: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 521.408341][ T38] 3 locks held by kworker/u8:16/6726: [ 521.408373][ T38] #0: ffff888019c44138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.408532][ T38] #1: ffffc900067ffc40 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.408707][ T38] #2: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 521.408856][ T38] 1 lock held by syz.2.627/7632: [ 521.408886][ T38] #0: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 521.409025][ T38] 4 locks held by syz.4.671/7750: [ 521.409050][ T38] #0: ffffffff8e861dd8 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x298/0x480 [ 521.409187][ T38] #1: ffffffff8dc5b9d0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x56/0x170 [ 521.409331][ T38] #2: ffffffff8ded2120 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x64/0x170 [ 521.409410][ T38] #3: ffffffff8ddd1ab0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 521.409556][ T38] 2 locks held by kworker/u8:17/8463: [ 521.409567][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.409739][ T38] #1: ffffc900055dfc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.409895][ T38] 2 locks held by kworker/u8:19/8517: [ 521.409926][ T38] #0: ffff88801db7e138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 521.410076][ T38] #1: ffffc9000526fc40 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 521.410245][ T38] 1 lock held by udevd/8676: [ 521.410279][ T38] 3 locks held by udevd/8681: [ 521.410310][ T38] 4 locks held by udevd/8694: [ 521.410341][ T38] #0: ffff88803fc74608 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 521.410548][ T38] #1: ffff888028f45c78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 521.410812][ T38] #2: ffff88803074b3c8 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 521.411014][ T38] #3: ffff88805dbc7188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 521.411251][ T38] 2 locks held by udevd/8799: [ 521.411293][ T38] 4 locks held by udevd/9080: [ 521.411327][ T38] #0: ffff88805c50e090 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 521.411458][ T38] #1: ffff88805faa4478 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 521.411633][ T38] #2: ffff88806c4efd28 (kn->active#19){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 521.411802][ T38] #3: ffff88805f452188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 521.411969][ T38] 4 locks held by syz.0.1215/9342: [ 521.412003][ T38] 2 locks held by syz.3.1217/9351: [ 521.412038][ T38] [ 521.412057][ T38] ============================================= [ 521.412057][ T38] [ 521.412090][ T38] NMI backtrace for cpu 1 [ 521.412146][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.412231][ T38] Tainted: [L]=SOFTLOCKUP [ 521.412261][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.412307][ T38] Call Trace: [ 521.412340][ T38] [ 521.412377][ T38] dump_stack_lvl+0xe8/0x150 [ 521.412478][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 521.412579][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.412668][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 521.412739][ T38] sys_info+0x135/0x170 [ 521.412854][ T38] watchdog+0xfd9/0x1030 [ 521.412941][ T38] ? watchdog+0x21a/0x1030 [ 521.413030][ T38] kthread+0x388/0x470 [ 521.413093][ T38] ? __pfx_watchdog+0x10/0x10 [ 521.413160][ T38] ? __pfx_kthread+0x10/0x10 [ 521.413226][ T38] ret_from_fork+0x51e/0xb90 [ 521.413332][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 521.413403][ T38] ? __switch_to+0xc7d/0x1450 [ 521.413490][ T38] ? __pfx_kthread+0x10/0x10 [ 521.413556][ T38] ret_from_fork_asm+0x1a/0x30 [ 521.413662][ T38] [ 521.413684][ T38] Sending NMI from CPU 1 to CPUs 0: [ 521.413744][ C0] NMI backtrace for cpu 0 [ 521.413762][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.413788][ C0] Tainted: [L]=SOFTLOCKUP [ 521.413795][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.413806][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 521.413912][ C0] Code: e8 ce e3 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 8f ff fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 521.413928][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 521.413945][ C0] RAX: 1ffffffff332a000 RBX: 00000000000003fd RCX: 0000000000000000 [ 521.413958][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 521.413969][ C0] RBP: ffffffff99950730 R08: 0000000000000000 R09: 0000000000000000 [ 521.413981][ C0] R10: dffffc0000000000 R11: ffffffff852f6fb0 R12: dffffc0000000000 [ 521.413996][ C0] R13: 0000000000000000 R14: ffffffff999504a0 R15: 0000000000000000 [ 521.414008][ C0] FS: 0000000000000000(0000) GS:ffff88812633f000(0000) knlGS:0000000000000000 [ 521.414023][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.414036][ C0] CR2: 00007fe53cd78478 CR3: 000000002adc0000 CR4: 00000000003526f0 [ 521.414053][ C0] Call Trace: [ 521.414059][ C0] [ 521.414068][ C0] wait_for_lsr+0x1aa/0x2f0 [ 521.414113][ C0] serial8250_console_write+0x1391/0x1b90 [ 521.414147][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 521.414175][ C0] ? console_flush_one_record+0x48f/0xb90 [ 521.414208][ C0] console_flush_one_record+0x68b/0xb90 [ 521.414239][ C0] ? console_flush_one_record+0xfa/0xb90 [ 521.414270][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 521.414299][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 521.414328][ C0] legacy_kthread_func+0x1b6/0x250 [ 521.414357][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 521.414384][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 521.414412][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 521.414456][ C0] kthread+0x388/0x470 [ 521.414475][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 521.414501][ C0] ? __pfx_kthread+0x10/0x10 [ 521.414519][ C0] ret_from_fork+0x51e/0xb90 [ 521.414546][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 521.414570][ C0] ? __switch_to+0xc7d/0x1450 [ 521.414593][ C0] ? __pfx_kthread+0x10/0x10 [ 521.414612][ C0] ret_from_fork_asm+0x1a/0x30 [ 521.414638][ C0] [ 521.414774][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 521.414838][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 521.414920][ T38] Tainted: [L]=SOFTLOCKUP [ 521.414941][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.414973][ T38] Call Trace: [ 521.414995][ T38] [ 521.415016][ T38] vpanic+0x56c/0xa60 [ 521.415112][ T38] ? __pfx_vpanic+0x10/0x10 [ 521.415229][ T38] panic+0xc5/0xd0 [ 521.415305][ T38] ? __pfx_panic+0x10/0x10 [ 521.415379][ T38] ? printk_trigger_flush+0x117/0x180 [ 521.415461][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 521.415555][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 521.415627][ T38] watchdog+0x1023/0x1030 [ 521.415708][ T38] ? watchdog+0x21a/0x1030 [ 521.415793][ T38] kthread+0x388/0x470 [ 521.415855][ T38] ? __pfx_watchdog+0x10/0x10 [ 521.415918][ T38] ? __pfx_kthread+0x10/0x10 [ 521.415981][ T38] ret_from_fork+0x51e/0xb90 [ 521.416068][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 521.416143][ T38] ? __switch_to+0xc7d/0x1450 [ 521.416241][ T38] ? __pfx_kthread+0x10/0x10 [ 521.416315][ T38] ret_from_fork_asm+0x1a/0x30 [ 521.416419][ T38] [ 521.417058][ T38] Kernel Offset: disabled