last executing test programs: 6m23.302338776s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0040}, 0x408c4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3ff}}}}}}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) syz_emit_ethernet(0x56, &(0x7f0000000380)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x2}]}}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x48810) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f0000002180)=""/4089, 0xff9}, {&(0x7f00000003c0)=""/63, 0x3f}, {0x0}], 0x3}, 0x40000020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000002040)=[{{&(0x7f0000000280)={0xa, 0x4e22, 0xe, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@rthdr={{0x18, 0x29, 0x39, {0x99, 0x0, 0x1, 0x2}}}], 0x18}}], 0x1, 0x40000000) 6m22.807449688s ago: executing program 0 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) socket$inet6(0xa, 0x80002, 0x0) r1 = getpid() add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r1, &(0x7f0000000380)=&(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)}, &(0x7f0000000500)=0x18) sendmmsg$unix(r3, &(0x7f0000000540), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x2) recvmmsg(r2, &(0x7f00000005c0), 0x10106, 0x2, 0x0) r4 = dup2(r3, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000640)={0x0, 0x500, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000700)={0x0, 0x31000000, &(0x7f0000000740)={&(0x7f0000000780)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), r7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 6m21.380350746s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000580)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() socket$inet6(0x2d, 0x2, 0x0) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r4, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019640)=0x7) socket(0x2, 0x805, 0x0) process_vm_writev(r3, &(0x7f0000019680)=[{&(0x7f00000196c0)=""/20, 0x14}], 0x1, &(0x7f0000019700)=[{&(0x7f0000019740)=""/153, 0x99}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in=@multicast2, 0x0, 0xfffd, 0xfffe}, {@in6=@local, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x400000000000, 0x2, 0x0, 0x1000080000}, {0x0, 0x0, 0x0, 0x80000001}, {0x0, 0x0, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x60}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x0, 0x0, 0x70bf26}}, @algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x1a0}}, 0x20004000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) sendfile(r8, r8, 0x0, 0x2) 6m17.14346236s ago: executing program 0 (id=10): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x8084) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x2c020400) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) listen(r0, 0x1) 6m0.124043649s ago: executing program 32 (id=10): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}}, 0x8084) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000810) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x2c020400) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) listen(r0, 0x1) 1m59.047914274s ago: executing program 4 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/mem_sleep\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='shallow', 0x7) close(r0) 1m58.911423806s ago: executing program 4 (id=987): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r1, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) 1m57.226182412s ago: executing program 5 (id=992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008000000000000000600000018110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m57.109297809s ago: executing program 4 (id=993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x200}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x3f, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, 'CL.'}]}]}}, {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xd}}}}}}, 0x0) 1m56.633559445s ago: executing program 5 (id=995): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x21) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x0, r1}) read$eventfd(r1, &(0x7f0000000000), 0x8) 1m56.563053923s ago: executing program 4 (id=996): openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracing/uprobe_events\x00', 0x1, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008084}, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f00000001c0)=@ublk_get_queue_affinity_sqe={0x2e, 0x2, 0x0, r0, 0x80207501, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x8, &(0x7f0000000680)}}) io_uring_enter(r1, 0x1, 0x349c, 0x8b, 0x0, 0x0) 1m55.975960857s ago: executing program 4 (id=998): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000180)={0x0, [[0xffffffff, 0xffbfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x719e, 0xfffffff7, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0xfffffffe}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000440)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 1m55.971810133s ago: executing program 5 (id=999): futex(0xffffffffffffffff, 0x5, 0xfffffffe, 0x0, 0x0, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) unshare(0x22020600) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1m54.205731172s ago: executing program 4 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) close(0x3) 1m52.578777876s ago: executing program 5 (id=1006): r0 = socket$tipc(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7', 0x1) bind$tipc(r0, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1m50.931235139s ago: executing program 5 (id=1008): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x4, 0x4, 0xfffb}, 'syz0\x00', 0x4b}) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x35) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1m48.636484172s ago: executing program 3 (id=1011): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @multicast1}, @address_request}}}}, 0x0) 1m47.133294125s ago: executing program 5 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 1m46.417776148s ago: executing program 3 (id=1015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) unshare(0x64020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0xa2, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x1, 0x80}) 1m45.163846652s ago: executing program 3 (id=1017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) 1m43.672827998s ago: executing program 3 (id=1019): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="000102030405060708090a0b0c0d0e0f", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000005192976edd10eb5b00"/128, 0x80}], 0x1, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r1, &(0x7f00000006c0)=""/144, 0x90) 1m43.178543993s ago: executing program 3 (id=1020): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) fdatasync(r0) 1m42.376338426s ago: executing program 3 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac140001"], 0x4a) 1m38.326480209s ago: executing program 33 (id=1002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) close(0x3) 1m33.225312069s ago: executing program 1 (id=1031): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') dup(0xffffffffffffffff) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f0000019040)='./file0\x00', 0x0, 0x2021861, 0x0) 1m32.018421241s ago: executing program 1 (id=1032): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0xfffe, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}}, 0xb8}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_1\x00', 0x10) sendmmsg(r1, &(0x7f0000000500), 0x800001d, 0x810) 1m31.821031947s ago: executing program 34 (id=1013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, 0x0) 1m30.767288205s ago: executing program 1 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000002030300000000005cfdb121c13c375b0800010001"], 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f0000000400), 0x1000) read(r1, &(0x7f0000000400), 0x1000) 1m30.736281203s ago: executing program 1 (id=1036): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_io_uring_setup(0xf00, &(0x7f0000002780)={0x0, 0x0, 0x10000, 0x3, 0x40055}, &(0x7f0000002800)=0x0, &(0x7f0000002840)=0x0, &(0x7f0000002880)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000028c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1m28.560004751s ago: executing program 1 (id=1037): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000580)=ANY=[@ANYBLOB="400a04000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x40, 0x16, 0x4, "ada53fae"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201023"], 0x0, 0x0, 0x0, 0x0}) 1m28.375318904s ago: executing program 2 (id=1038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000900)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000980)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000009c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 1m28.095735779s ago: executing program 2 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x12ba, 0x74b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x60, 0x0, "", [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x3, 0x1, 0x0, 0xb, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0xc75}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x7, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7a, 0x0, 0xe}}]}}}]}}]}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0x994, 0x800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m26.872203995s ago: executing program 35 (id=1023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac140001"], 0x4a) 1m26.612747734s ago: executing program 2 (id=1041): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r1, 0x1, {}, 0x1f9}, 0x18) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0x2}, 0x18) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x3, {0x2, 0xf0, 0x3}, 0x2}, 0x18) 1m25.582068387s ago: executing program 2 (id=1042): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='3', 0x4e) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x25, &(0x7f0000000680)=[{0x0}], 0x1) 1m25.115459403s ago: executing program 1 (id=1043): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1m24.997142328s ago: executing program 2 (id=1044): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 1m21.443590415s ago: executing program 2 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m9.612056181s ago: executing program 36 (id=1043): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 1m5.452355274s ago: executing program 37 (id=1045): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x101, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0x1, 0x1, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x8080000, 0xdd1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 41.041683143s ago: executing program 6 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 29.780153218s ago: executing program 8 (id=1058): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000240)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a4000000002b0000000060a010400000000000000000500000a0900010073797a30000000000900020073797a30000000008400048024000180090001006d"], 0x154}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001e40)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x20000000) bind$can_raw(r0, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 29.29303436s ago: executing program 9 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1b3}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xe9361000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 27.530813022s ago: executing program 8 (id=1063): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./proc\x00', &(0x7f0000000880)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) write(r0, &(0x7f0000000900)='27', 0x2) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000540)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$futex(&(0x7f0000000580)=0x1) futex(r1, 0xb, 0x1, 0x0, 0x0, 0x403) 26.608378928s ago: executing program 8 (id=1066): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x1000000000000}) 26.033719051s ago: executing program 8 (id=1069): ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$sndpcmc(0x0, 0x1, 0x2) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, &(0x7f00000007c0)={0x14, 0x0, 0x0}, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x40, 0x10, 0x4f, "84a4c90bfffc8c64ed3bccd9d9e984bad2bb94745fcc464de85e92c7ed9d23ed56007c59d1731fd86862a4409871c0aa3e82afbc41fa4a45ad5cb914f89799621f219d66ab1d70b049641f21e1baca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) 25.988257197s ago: executing program 38 (id=1026): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 24.338477685s ago: executing program 7 (id=1071): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x2008800, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000001100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004000)="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", 0x2000, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000060c0)={0x20, 0x0, 0x8f31, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000006100)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x30404004, 0x0, 0xfffe, 0x6, 0xffffffff, 0x0, 0x0, 0x1, 0x100}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000006180)='./file0\x00', 0x101081, 0x30) pipe2$9p(&(0x7f00000061c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000006200)={0x7, 0x1b, 0x2}, 0x7) splice(r3, 0x0, r2, 0x0, 0x20000000000002, 0xa) 22.787205017s ago: executing program 8 (id=1072): inotify_init() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000004b00), 0x0, 0x2f, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000011c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x24, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@fragment={0x87, 0x0, 0xb, 0x0, 0x0, 0x1, 0x65}, @srh={0x33, 0x0, 0x4, 0x0, 0x7f, 0x40, 0x401}], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 21.042281375s ago: executing program 7 (id=1073): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x0, 0x0, 0x1}, 0xfe}, 0x18) writev(r2, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)="815e8699c6ec04252c3c299f2e0d575d100dd469c3088567", 0x18}], 0x2) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000800)="3874517c2edc", 0xfdef}, {0x0, 0xc7}], 0x2) 20.607722732s ago: executing program 8 (id=1074): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 17.267666761s ago: executing program 7 (id=1075): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) writev(r1, 0x0, 0x0) 16.996996574s ago: executing program 7 (id=1076): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc/thread-self/fail-nth\x00', 0x42, 0x0) write(r2, &(0x7f0000000600)='3', 0x4e) close(0x3) 16.620913881s ago: executing program 7 (id=1077): prlimit64(0x0, 0xe, &(0x7f0000000800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000009c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000a00), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x15, 0x1c, &(0x7f0000000c40)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.549085138s ago: executing program 7 (id=1078): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000080)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000180)={@loopback={0x200000000000000}}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14.070375366s ago: executing program 39 (id=1046): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1b3}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xe9361000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.987306238s ago: executing program 40 (id=1074): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r1) r4 = fcntl$dupfd(r0, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 0s ago: executing program 41 (id=1078): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000080)=0x8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000180)={@loopback={0x200000000000000}}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): or 0 read error: -22 [ 302.199256][ T4922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.265881][ T4922] option 3-1:16.253: GSM modem (1-port) converter detected [ 302.497848][ T4922] usb 3-1: USB disconnect, device number 11 [ 302.549124][ T4922] option 3-1:16.253: device disconnected [ 303.160616][ T9] usb 4-1: USB disconnect, device number 8 [ 303.352817][ T9] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 303.405320][ T9] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 303.426541][ T9] keyspan_4 ttyUSB4: Keyspan 4 port adapter converter now disconnected from ttyUSB4 [ 303.447540][ T9] keyspan_4 ttyUSB5: Keyspan 4 port adapter converter now disconnected from ttyUSB5 [ 303.459448][ T9] keyspan 4-1:1.0: device disconnected [ 303.806288][ T5955] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 303.903287][ T4922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 303.960728][ T4922] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.996592][ T5955] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 304.000566][ T5955] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 304.000588][ T5955] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 304.000606][ T5955] usb 2-1: config 0 has no interface number 0 [ 304.000655][ T5955] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 304.000677][ T5955] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 304.000699][ T5955] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 304.000735][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.019521][ T5955] usb 2-1: config 0 descriptor?? [ 304.046375][ T8189] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.222174][ T12] IPVS: starting estimator thread 0... [ 304.312018][ T8206] IPVS: using max 14 ests per chain, 33600 per kthread [ 304.633852][ T6118] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 304.787216][ T5955] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input11 [ 304.819781][ T6118] usb 4-1: Using ep0 maxpacket: 16 [ 304.840282][ T6118] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 304.841860][ T6118] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.841888][ T6118] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.841908][ T6118] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 304.841932][ T6118] usb 4-1: config 0 interface 0 has no altsetting 0 [ 304.841964][ T6118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.916373][ T6118] usb 4-1: config 0 descriptor?? [ 305.350657][ T5955] usb 2-1: USB disconnect, device number 7 [ 305.350763][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 305.608746][ T6118] usb 4-1: USB disconnect, device number 9 [ 305.663903][ T5747] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 305.815188][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 305.815995][ T5747] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 305.817331][ T5747] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 305.817356][ T5747] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 305.817379][ T5747] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 305.817399][ T5747] usb 6-1: config 0 interface 0 has no altsetting 0 [ 305.821867][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.821889][ T5747] usb 6-1: Product: syz [ 305.821902][ T5747] usb 6-1: Manufacturer: syz [ 305.821916][ T5747] usb 6-1: SerialNumber: syz [ 305.842156][ T5747] usb 6-1: config 0 descriptor?? [ 306.077494][ T5747] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input12 [ 306.109216][ T4945] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 306.184222][ T4945] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 306.270098][ T4945] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 306.344258][ T4945] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 306.366337][ T5747] usb 6-1: USB disconnect, device number 4 [ 306.503729][ T4922] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 306.684164][ T4922] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 306.688132][ T4922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.688197][ T4922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.688222][ T4922] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.688247][ T4922] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.688286][ T4922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.355675][ T4922] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 307.448822][ T4922] lg-g15 0003:046D:C222.0005: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 307.509957][ T4922] usb 4-1: USB disconnect, device number 10 [ 307.557223][ T8257] fido_id[8257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 311.603118][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 311.753871][ T31] usb 4-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 311.758428][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.843670][ T31] usb-storage 4-1:1.0: USB Mass Storage device detected [ 312.444103][ T8315] option changes via remount are deprecated (pid=8314 comm=syz.2.789) [ 312.473133][ T31] scsi host1: usb-storage 4-1:1.0 [ 312.624879][ T31] usb 4-1: USB disconnect, device number 11 [ 314.152840][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 314.310453][ T31] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.311993][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.312015][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.313617][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 314.313647][ T31] usb 2-1: SerialNumber: syz [ 314.338682][ T8375] netlink: 'syz.5.807': attribute type 10 has an invalid length. [ 314.339286][ T8375] netlink: 128 bytes leftover after parsing attributes in process `syz.5.807'. [ 314.661327][ T31] usb 2-1: 0:2 : does not exist [ 315.232760][ T31] usb 2-1: USB disconnect, device number 8 [ 315.756443][ T8282] udevd[8282]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.106786][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.106856][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.911024][ T8494] jffs2: notice: (8494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 323.126058][ T5612] Bluetooth: hci4: command 0x1003 tx timeout [ 323.126248][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 325.552369][ T4922] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 325.734660][ T4922] usb 3-1: Using ep0 maxpacket: 8 [ 325.740074][ T4922] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.748709][ T4922] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 325.748761][ T4922] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.748782][ T4922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.748802][ T4922] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 325.748823][ T4922] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.748861][ T4922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.583762][ T4922] usb 3-1: GET_CAPABILITIES returned 0 [ 326.583811][ T4922] usbtmc 3-1:16.0: can't read capabilities [ 326.840926][ T31] usb 3-1: USB disconnect, device number 12 [ 327.599917][ T8566] ipvlan2: entered allmulticast mode [ 327.599939][ T8566] ip6gretap0: entered allmulticast mode [ 327.647041][ T8566] batman_adv: batadv0: Adding interface: ipvlan2 [ 327.647057][ T8566] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.647088][ T8566] batman_adv: batadv0: Interface activated: ipvlan2 [ 328.687529][ T8596] syz.2.870 uses obsolete (PF_INET,SOCK_PACKET) [ 331.098938][ T8621] warning: `syz.3.878' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 331.190835][ T8626] FAULT_INJECTION: forcing a failure. [ 331.190835][ T8626] name fail_futex, interval 1, probability 0, space 0, times 1 [ 331.190868][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.3.880 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.190889][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.190919][ T8626] Call Trace: [ 331.190926][ T8626] [ 331.190934][ T8626] dump_stack_lvl+0xe8/0x150 [ 331.190967][ T8626] should_fail_ex+0x46b/0x600 [ 331.191001][ T8626] get_futex_key+0x1b4/0x1580 [ 331.191054][ T8626] ? __pfx_get_futex_key+0x10/0x10 [ 331.191083][ T8626] ? perf_event_namespaces+0x191/0x9e0 [ 331.191110][ T8626] ? __pfx_perf_event_namespaces+0x10/0x10 [ 331.191146][ T8626] futex_wake+0x119/0x600 [ 331.191169][ T8626] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 331.191199][ T8626] ? __pfx_futex_wake+0x10/0x10 [ 331.191219][ T8626] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 331.191243][ T8626] ? reacquire_held_locks+0x117/0x1a0 [ 331.191283][ T8626] do_futex+0x458/0x4e0 [ 331.191310][ T8626] ? __pfx_do_futex+0x10/0x10 [ 331.191329][ T8626] ? fput+0xa0/0xd0 [ 331.191354][ T8626] __se_sys_futex+0x3a8/0x450 [ 331.191379][ T8626] ? __pfx___se_sys_futex+0x10/0x10 [ 331.191407][ T8626] ? __x64_sys_futex+0x21/0xf0 [ 331.191430][ T8626] do_syscall_64+0x166/0x520 [ 331.191456][ T8626] ? trace_irq_disable+0x3b/0x140 [ 331.191481][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.191499][ T8626] ? clear_bhb_loop+0x70/0xc0 [ 331.191522][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.191540][ T8626] RIP: 0033:0x7fd80d2be559 [ 331.191557][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.191573][ T8626] RSP: 002b:00007fd80b5160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 331.191592][ T8626] RAX: ffffffffffffffda RBX: 00007fd80d545fa8 RCX: 00007fd80d2be559 [ 331.191605][ T8626] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd80d545fac [ 331.191617][ T8626] RBP: 00007fd80d545fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 331.191630][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.191641][ T8626] R13: 00007fd80d546038 R14: 00007ffd2f57bf90 R15: 00007ffd2f57c078 [ 331.191673][ T8626] [ 332.269342][ T8638] binder: 8637:8638 ioctl 4018620d 0 returned -22 [ 332.298859][ T8638] binder: 8637:8638 ioctl c0306201 200000000080 returned -14 [ 332.340827][ T8642] FAULT_INJECTION: forcing a failure. [ 332.340827][ T8642] name fail_futex, interval 1, probability 0, space 0, times 0 [ 332.340859][ T8642] CPU: 1 UID: 0 PID: 8642 Comm: syz.3.886 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 332.340881][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.340891][ T8642] Call Trace: [ 332.340898][ T8642] [ 332.340906][ T8642] dump_stack_lvl+0xe8/0x150 [ 332.340940][ T8642] should_fail_ex+0x46b/0x600 [ 332.340975][ T8642] get_futex_key+0x8e2/0x1580 [ 332.341001][ T8642] ? lock_acquire+0x115/0x350 [ 332.341036][ T8642] ? __pfx_get_futex_key+0x10/0x10 [ 332.341065][ T8642] ? futex_private_hash+0x319/0x330 [ 332.341098][ T8642] futex_wait_multiple_setup+0x167/0x6c0 [ 332.341140][ T8642] futex_wait_multiple+0xb2/0x3c0 [ 332.341174][ T8642] __se_sys_futex_waitv+0x20d/0x2c0 [ 332.341197][ T8642] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 332.341224][ T8642] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 332.341261][ T8642] ? __x64_sys_futex_waitv+0x20/0xc0 [ 332.341284][ T8642] do_syscall_64+0x166/0x520 [ 332.341312][ T8642] ? trace_irq_disable+0x3b/0x140 [ 332.341336][ T8642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.341355][ T8642] ? clear_bhb_loop+0x70/0xc0 [ 332.341378][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.341397][ T8642] RIP: 0033:0x7fd80d2be559 [ 332.341422][ T8642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.341437][ T8642] RSP: 002b:00007fd80b516028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 332.341457][ T8642] RAX: ffffffffffffffda RBX: 00007fd80d545fa0 RCX: 00007fd80d2be559 [ 332.341471][ T8642] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000001400 [ 332.341483][ T8642] RBP: 00007fd80d355ab8 R08: 0000000000000000 R09: 0000000000000000 [ 332.341496][ T8642] R10: 0000200000001a40 R11: 0000000000000246 R12: 0000000000000000 [ 332.341508][ T8642] R13: 00007fd80d546038 R14: 00007fd80d545fa0 R15: 00007ffd2f57c078 [ 332.341539][ T8642] [ 332.919144][ T8647] netlink: 76 bytes leftover after parsing attributes in process `syz.3.887'. [ 333.139927][ T8651] FAULT_INJECTION: forcing a failure. [ 333.139927][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 333.139961][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.5.890 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 333.139985][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.139997][ T8651] Call Trace: [ 333.140004][ T8651] [ 333.140013][ T8651] dump_stack_lvl+0xe8/0x150 [ 333.140046][ T8651] should_fail_ex+0x46b/0x600 [ 333.140081][ T8651] should_failslab+0xa8/0x100 [ 333.140102][ T8651] ? dst_alloc+0x105/0x170 [ 333.140128][ T8651] kmem_cache_alloc_noprof+0x9e/0x690 [ 333.140152][ T8651] ? dst_alloc+0x105/0x170 [ 333.140177][ T8651] ? fib_lookup+0x76/0x440 [ 333.140207][ T8651] dst_alloc+0x105/0x170 [ 333.140240][ T8651] ip_route_input_rcu+0x20ca/0x3190 [ 333.140280][ T8651] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 333.140341][ T8651] ? ip_route_input_noref+0xad/0x270 [ 333.140373][ T8651] ip_route_input_noref+0x17c/0x270 [ 333.140406][ T8651] ? __pfx_ip_route_input_noref+0x10/0x10 [ 333.140445][ T8651] ? __netif_receive_skb_core+0x2a10/0x30c0 [ 333.140466][ T8651] ? __pfx___skb_flow_dissect+0x10/0x10 [ 333.140495][ T8651] ip_rcv_finish_core+0x593/0x1c00 [ 333.140532][ T8651] ip_rcv_finish+0x14c/0x2a0 [ 333.140559][ T8651] NF_HOOK+0x336/0x3c0 [ 333.140584][ T8651] ? __pfx_ip_rcv_finish+0x10/0x10 [ 333.140607][ T8651] ? NF_HOOK+0x9e/0x3c0 [ 333.140629][ T8651] ? __pfx_NF_HOOK+0x10/0x10 [ 333.140655][ T8651] ? __pfx_ip_rcv_finish+0x10/0x10 [ 333.140685][ T8651] ? netif_receive_skb+0x102/0xbf0 [ 333.140706][ T8651] ? __pfx_ip_rcv+0x10/0x10 [ 333.140729][ T8651] netif_receive_skb+0x45b/0xbf0 [ 333.140757][ T8651] ? __pfx_netif_receive_skb+0x10/0x10 [ 333.140777][ T8651] ? rcu_is_watching+0x16/0xb0 [ 333.140792][ T8651] ? __local_bh_disable_ip+0x3d/0x420 [ 333.140818][ T8651] ? tun_rx_batched+0x194/0x760 [ 333.140847][ T8651] ? tun_rx_batched+0x194/0x760 [ 333.140870][ T8651] tun_rx_batched+0x1f1/0x760 [ 333.140893][ T8651] ? rcu_is_watching+0x16/0xb0 [ 333.140913][ T8651] ? __pfx_tun_rx_batched+0x10/0x10 [ 333.140945][ T8651] ? lock_acquire+0x115/0x350 [ 333.140975][ T8651] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 333.140998][ T8651] ? lockdep_hardirqs_on+0x7b/0x110 [ 333.141030][ T8651] tun_get_user+0x2bc0/0x4470 [ 333.141060][ T8651] ? tun_get_user+0x27a6/0x4470 [ 333.141089][ T8651] ? futex_unqueue+0x22/0x240 [ 333.141120][ T8651] ? __pfx_tun_get_user+0x10/0x10 [ 333.141142][ T8651] ? __lock_acquire+0x747/0x2de0 [ 333.141182][ T8651] ? ref_tracker_alloc+0x353/0x4c0 [ 333.141206][ T8651] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 333.141230][ T8651] ? lock_acquire+0x115/0x350 [ 333.141254][ T8651] ? tun_get+0x1c/0x2f0 [ 333.141281][ T8651] ? tun_get+0x1c/0x2f0 [ 333.141300][ T8651] ? tun_get+0x1c/0x2f0 [ 333.141325][ T8651] tun_chr_write_iter+0x119/0x200 [ 333.141348][ T8651] vfs_write+0x61e/0xbb0 [ 333.141383][ T8651] ? __pfx_vfs_write+0x10/0x10 [ 333.141420][ T8651] ? __fget_files+0x2a/0x420 [ 333.141453][ T8651] ksys_write+0x156/0x270 [ 333.141480][ T8651] ? __pfx_ksys_write+0x10/0x10 [ 333.141518][ T8651] do_syscall_64+0x166/0x520 [ 333.141543][ T8651] ? trace_irq_disable+0x3b/0x140 [ 333.141566][ T8651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.141586][ T8651] ? clear_bhb_loop+0x70/0xc0 [ 333.141607][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.141626][ T8651] RIP: 0033:0x7f595cfeed8e [ 333.141643][ T8651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.141658][ T8651] RSP: 002b:00007f595b285fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 333.141677][ T8651] RAX: ffffffffffffffda RBX: 00007f595b2866c0 RCX: 00007f595cfeed8e [ 333.141691][ T8651] RDX: 000000000000002a RSI: 00002000000000c0 RDI: 00000000000000c8 [ 333.141702][ T8651] RBP: 00007f595d0c5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 333.141713][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.141725][ T8651] R13: 00007f595d2b6038 R14: 00007f595d2b5fa0 R15: 00007ffd316befe8 [ 333.141759][ T8651] [ 334.350596][ T5955] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 334.452165][ T5747] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 334.513852][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.515575][ T5955] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.560456][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.560480][ T5955] usb 5-1: Product: syz [ 334.560494][ T5955] usb 5-1: Manufacturer: syz [ 334.560508][ T5955] usb 5-1: SerialNumber: syz [ 334.602454][ T5747] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 334.603985][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.604012][ T5747] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 334.641956][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 334.641981][ T5747] usb 4-1: Product: syz [ 334.641995][ T5747] usb 4-1: Manufacturer: syz [ 334.703100][ T8667] FAULT_INJECTION: forcing a failure. [ 334.703100][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 334.703138][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.1.895 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 334.703161][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.703173][ T8667] Call Trace: [ 334.703180][ T8667] [ 334.703189][ T8667] dump_stack_lvl+0xe8/0x150 [ 334.703228][ T8667] should_fail_ex+0x46b/0x600 [ 334.703263][ T8667] should_failslab+0xa8/0x100 [ 334.703287][ T8667] __kmalloc_cache_noprof+0xa1/0x680 [ 334.703315][ T8667] ? __alloc_workqueue+0x169/0x1fe0 [ 334.703335][ T8667] ? __alloc_workqueue+0x169/0x1fe0 [ 334.703361][ T8667] __alloc_workqueue+0x169/0x1fe0 [ 334.703381][ T8667] ? __asan_memcpy+0x40/0x70 [ 334.703409][ T8667] ? vsnprintf+0xe42/0xef0 [ 334.703443][ T8667] alloc_workqueue_noprof+0xe3/0x210 [ 334.703469][ T8667] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 334.703496][ T8667] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 334.703524][ T8667] nci_register_device+0x3fe/0x9a0 [ 334.703548][ T8667] ? __pfx_nci_register_device+0x10/0x10 [ 334.703570][ T8667] ? __rt_spin_lock_init+0x3e/0x50 [ 334.703592][ T8667] ? __init_waitqueue_head+0xad/0x160 [ 334.703619][ T8667] virtual_ncidev_open+0x129/0x190 [ 334.703649][ T8667] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 334.703673][ T8667] misc_open+0x2de/0x350 [ 334.703711][ T8667] chrdev_open+0x4dc/0x600 [ 334.703733][ T8667] ? __pfx_chrdev_open+0x10/0x10 [ 334.703761][ T8667] ? __pfx_chrdev_open+0x10/0x10 [ 334.703780][ T8667] do_dentry_open+0x849/0x1420 [ 334.703814][ T8667] vfs_open+0x3b/0x350 [ 334.703832][ T8667] ? path_openat+0x16a9/0x20a0 [ 334.703860][ T8667] path_openat+0x16c4/0x20a0 [ 334.703904][ T8667] do_file_open+0x23e/0x4a0 [ 334.703935][ T8667] ? __pfx_do_file_open+0x10/0x10 [ 334.703982][ T8667] ? alloc_fd+0x654/0x6d0 [ 334.704012][ T8667] do_sys_openat2+0x115/0x200 [ 334.704033][ T8667] ? __se_sys_futex+0x3a8/0x450 [ 334.704055][ T8667] ? __pfx_do_sys_openat2+0x10/0x10 [ 334.704081][ T8667] ? rcu_is_watching+0x16/0xb0 [ 334.704106][ T8667] __x64_sys_openat+0x138/0x170 [ 334.704133][ T8667] do_syscall_64+0x166/0x520 [ 334.704161][ T8667] ? trace_irq_disable+0x3b/0x140 [ 334.704185][ T8667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.704205][ T8667] ? clear_bhb_loop+0x70/0xc0 [ 334.704227][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.704245][ T8667] RIP: 0033:0x7fb26c08e559 [ 334.704264][ T8667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.704282][ T8667] RSP: 002b:00007fb26a2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 334.704304][ T8667] RAX: ffffffffffffffda RBX: 00007fb26c315fa0 RCX: 00007fb26c08e559 [ 334.704320][ T8667] RDX: 0000000000000002 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 334.704334][ T8667] RBP: 00007fb26c125ab8 R08: 0000000000000000 R09: 0000000000000000 [ 334.704348][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.704359][ T8667] R13: 00007fb26c316038 R14: 00007fb26c315fa0 R15: 00007fff0dcb33e8 [ 334.704390][ T8667] [ 334.773873][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 335.126877][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 335.128211][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 335.128260][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.128286][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.128309][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.128332][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.129338][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 335.129386][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.129413][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.129435][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.129458][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.131565][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 335.131681][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 335.131706][ T10] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.131729][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 335.131752][ T10] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 335.429116][ T5747] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 335.545093][ T10] usb 3-1: string descriptor 0 read error: -22 [ 335.545238][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.575840][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 335.809485][ T31] usb 3-1: USB disconnect, device number 13 [ 336.265075][ T5955] cdc_ncm 5-1:1.0: failed to get mac address [ 336.298806][ T5747] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 336.333926][ T5955] cdc_ncm 5-1:1.0: bind() failure [ 336.391934][ T5955] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 336.393618][ T5955] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 336.396164][ T5747] usb 4-1: USB disconnect, device number 12 [ 336.428078][ T5955] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 336.534709][ T5955] usb 5-1: USB disconnect, device number 11 [ 336.538457][ T5747] mos7840 4-1:1.0: device disconnected [ 337.375907][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 337.647861][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.647918][ T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 337.649209][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.649232][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 337.649278][ T10] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 337.649316][ T10] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 337.649355][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 337.649379][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 337.695077][ T10] usb 5-1: string descriptor 0 read error: -22 [ 337.695233][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.917888][ T8695] FAULT_INJECTION: forcing a failure. [ 337.917888][ T8695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.917922][ T8695] CPU: 1 UID: 0 PID: 8695 Comm: syz.3.904 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.917943][ T8695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.917954][ T8695] Call Trace: [ 337.917961][ T8695] [ 337.917969][ T8695] dump_stack_lvl+0xe8/0x150 [ 337.918003][ T8695] should_fail_ex+0x46b/0x600 [ 337.918038][ T8695] _copy_from_user+0x2d/0xb0 [ 337.918060][ T8695] __x64_sys_sched_setaffinity+0xea/0x170 [ 337.918086][ T8695] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 337.918120][ T8695] do_syscall_64+0x166/0x520 [ 337.918146][ T8695] ? trace_irq_disable+0x3b/0x140 [ 337.918170][ T8695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.918188][ T8695] ? clear_bhb_loop+0x70/0xc0 [ 337.918211][ T8695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.918229][ T8695] RIP: 0033:0x7fd80d2be559 [ 337.918246][ T8695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.918261][ T8695] RSP: 002b:00007fd80b516028 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 337.918283][ T8695] RAX: ffffffffffffffda RBX: 00007fd80d545fa0 RCX: 00007fd80d2be559 [ 337.918296][ T8695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 337.918308][ T8695] RBP: 00007fd80d355ab8 R08: 0000000000000000 R09: 0000000000000000 [ 337.918320][ T8695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.918331][ T8695] R13: 00007fd80d546038 R14: 00007fd80d545fa0 R15: 00007ffd2f57c078 [ 337.918361][ T8695] [ 338.002006][ T5955] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 338.222604][ T5955] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 338.224415][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.224442][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 338.224466][ T5955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.224504][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.241837][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 338.241871][ T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 338.241887][ T10] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 338.316515][ T5955] usb 3-1: config 0 descriptor?? [ 338.319771][ T8691] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.014015][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014051][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014079][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014105][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014130][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014157][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014182][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014726][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014754][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.014780][ T5955] hid-multitouch 0003:0457:07DA.0006: unknown main item tag 0x0 [ 339.282111][ T4922] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 339.282292][ T5955] hid-multitouch 0003:0457:07DA.0006: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 339.314587][ T5955] usb 3-1: USB disconnect, device number 14 [ 339.614806][ T10] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 339.862645][ T4922] usb 6-1: unable to get BOS descriptor or descriptor too short [ 339.862708][ T4922] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 339.934058][ T4922] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 339.934075][ T4922] usb 6-1: config 142 has no interface number 0 [ 339.934101][ T4922] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 339.934114][ T4922] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 339.934126][ T4922] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 339.934137][ T4922] usb 6-1: config 142 interface 251 has no altsetting 0 [ 340.008117][ T5747] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 340.111791][ T4922] usb 6-1: string descriptor 0 read error: -22 [ 340.111900][ T4922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.165127][ T8700] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 340.165260][ T8700] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 340.179480][ T4922] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 340.203907][ T5747] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 340.271232][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.333630][ T5747] usb 3-1: config 0 descriptor?? [ 340.355394][ T4922] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 340.570605][ T10] usb 5-1: USB disconnect, device number 12 [ 340.884109][ T8711] fido_id[8711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/report_descriptor': No such file or directory [ 340.910379][ T5747] hackrf 3-1:0.0: Board ID: 00 [ 340.910399][ T5747] hackrf 3-1:0.0: Firmware version: [ 341.088480][ T5747] hackrf 3-1:0.0: Registered as swradio24 [ 341.088506][ T5747] videodev: could not get a free minor [ 341.088516][ T5747] hackrf 3-1:0.0: Failed to register as video device (-23) [ 341.642943][ T8700] cyphidcom ttyUSB0: cypress_serial_control - failed to retrieve serial line settings - -32 [ 341.642975][ T8700] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 341.646295][ C0] usb 6-1: cypress_read_int_callback - unexpected nonzero read status received: -71 [ 341.733576][ T5747] hackrf 3-1:0.0: probe with driver hackrf failed with error -23 [ 341.749799][ T5747] usb 3-1: USB disconnect, device number 15 [ 341.922474][ T4922] usb 6-1: USB disconnect, device number 5 [ 341.948758][ T4922] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 341.961470][ T4922] cypress_m8 6-1:142.251: device disconnected [ 342.155771][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 342.372315][ T10] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 342.375715][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 342.375759][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.912178][ T5612] Bluetooth: hci5: unexpected event for opcode 0x2064 [ 343.247114][ T10] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 343.826188][ T10] wwan wwan0: port wwan0qmi0 attached [ 344.064175][ T8749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.925'. [ 344.538476][ T10] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 5e:1d:39:b4:9f:55 [ 344.590824][ T10] usb 5-1: USB disconnect, device number 13 [ 344.674888][ T10] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 344.763735][ T5747] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 344.981722][ T5747] usb 2-1: Using ep0 maxpacket: 32 [ 344.982635][ T5747] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 345.074164][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 345.074213][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.113650][ T5747] usb 2-1: config 0 descriptor?? [ 345.430190][ T5747] usb 2-1: string descriptor 0 read error: -71 [ 345.451068][ T5747] usbhid 2-1:0.0: can't add hid device: -71 [ 345.454088][ T5747] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 345.506456][ T5747] usb 2-1: USB disconnect, device number 9 [ 346.178284][ T8771] FAULT_INJECTION: forcing a failure. [ 346.178284][ T8771] name fail_futex, interval 1, probability 0, space 0, times 0 [ 346.178320][ T8771] CPU: 1 UID: 0 PID: 8771 Comm: syz.3.931 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 346.178347][ T8771] Tainted: [L]=SOFTLOCKUP [ 346.178353][ T8771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.178364][ T8771] Call Trace: [ 346.178372][ T8771] [ 346.178380][ T8771] dump_stack_lvl+0xe8/0x150 [ 346.178414][ T8771] should_fail_ex+0x46b/0x600 [ 346.178448][ T8771] get_futex_key+0x1b4/0x1580 [ 346.178489][ T8771] ? __pfx_get_futex_key+0x10/0x10 [ 346.178530][ T8771] futex_wake+0x119/0x600 [ 346.178559][ T8771] ? __pfx_futex_wake+0x10/0x10 [ 346.178598][ T8771] ? security_file_alloc+0x34/0x310 [ 346.178625][ T8771] ? security_file_alloc+0x34/0x310 [ 346.178657][ T8771] do_futex+0x458/0x4e0 [ 346.178675][ T8771] ? file_init_path+0x3b/0x5d0 [ 346.178701][ T8771] ? __pfx_do_futex+0x10/0x10 [ 346.178730][ T8771] __se_sys_futex+0x3a8/0x450 [ 346.178754][ T8771] ? fd_install+0x30f/0x3e0 [ 346.178775][ T8771] ? __pfx___se_sys_futex+0x10/0x10 [ 346.178796][ T8771] ? anon_inode_getfd+0x135/0x200 [ 346.178825][ T8771] ? __x64_sys_futex+0x21/0xf0 [ 346.178848][ T8771] do_syscall_64+0x166/0x520 [ 346.178873][ T8771] ? trace_irq_disable+0x3b/0x140 [ 346.178898][ T8771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.178917][ T8771] ? clear_bhb_loop+0x70/0xc0 [ 346.178940][ T8771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.178959][ T8771] RIP: 0033:0x7fd80d2be559 [ 346.178977][ T8771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.178993][ T8771] RSP: 002b:00007fd80b5160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 346.179014][ T8771] RAX: ffffffffffffffda RBX: 00007fd80d545fa8 RCX: 00007fd80d2be559 [ 346.179028][ T8771] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd80d545fac [ 346.179041][ T8771] RBP: 00007fd80d545fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 346.179054][ T8771] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 346.179066][ T8771] R13: 00007fd80d546038 R14: 00007ffd2f57bf90 R15: 00007ffd2f57c078 [ 346.179095][ T8771] [ 346.467968][ T10] wwan wwan0: port wwan0qmi0 disconnected [ 346.493258][ T5747] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 346.642631][ T5747] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 346.644496][ T5747] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 346.644521][ T5747] usb 2-1: config 0 has no interface number 0 [ 346.644565][ T5747] usb 2-1: config 0 interface 41 has no altsetting 0 [ 346.686577][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.686602][ T5747] usb 2-1: Product: syz [ 346.686616][ T5747] usb 2-1: Manufacturer: syz [ 346.686628][ T5747] usb 2-1: SerialNumber: syz [ 346.735159][ T5747] usb 2-1: config 0 descriptor?? [ 347.934350][ T5747] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 347.992499][ T8784] FAULT_INJECTION: forcing a failure. [ 347.992499][ T8784] name failslab, interval 1, probability 0, space 0, times 0 [ 347.992535][ T8784] CPU: 0 UID: 0 PID: 8784 Comm: syz.4.938 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 347.992561][ T8784] Tainted: [L]=SOFTLOCKUP [ 347.992568][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.992579][ T8784] Call Trace: [ 347.992587][ T8784] [ 347.992596][ T8784] dump_stack_lvl+0xe8/0x150 [ 347.992628][ T8784] should_fail_ex+0x46b/0x600 [ 347.992664][ T8784] should_failslab+0xa8/0x100 [ 347.992686][ T8784] __kmalloc_cache_noprof+0xa1/0x680 [ 347.992712][ T8784] ? cap_capable+0x123/0x460 [ 347.992738][ T8784] ? fsnotify_alloc_group+0x73/0x2e0 [ 347.992755][ T8784] ? fsnotify_alloc_group+0x73/0x2e0 [ 347.992779][ T8784] fsnotify_alloc_group+0x73/0x2e0 [ 347.992800][ T8784] __se_sys_fanotify_init+0x347/0xb20 [ 347.992831][ T8784] ? __pfx___se_sys_fanotify_init+0x10/0x10 [ 347.992867][ T8784] do_syscall_64+0x166/0x520 [ 347.992893][ T8784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.992912][ T8784] ? clear_bhb_loop+0x70/0xc0 [ 347.992935][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.992952][ T8784] RIP: 0033:0x7f1c5f4de559 [ 347.992970][ T8784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.992985][ T8784] RSP: 002b:00007f1c5d736028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 347.993006][ T8784] RAX: ffffffffffffffda RBX: 00007f1c5f765fa0 RCX: 00007f1c5f4de559 [ 347.993020][ T8784] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000040 [ 347.993032][ T8784] RBP: 00007f1c5f575ab8 R08: 0000000000000000 R09: 0000000000000000 [ 347.993044][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.993056][ T8784] R13: 00007f1c5f766038 R14: 00007f1c5f765fa0 R15: 00007ffd69531ae8 [ 347.993088][ T8784] [ 348.304045][ T5747] usb 2-1: USB disconnect, device number 10 [ 349.974724][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.955'. [ 350.751984][ T5747] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 350.901803][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 350.981959][ T5747] usb 5-1: unable to get BOS descriptor or descriptor too short [ 350.982016][ T5747] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 350.983806][ T5747] usb 5-1: config 9 has an invalid interface number: 57 but max is 0 [ 350.983830][ T5747] usb 5-1: config 9 has no interface number 0 [ 350.983860][ T5747] usb 5-1: config 9 interface 57 has no altsetting 0 [ 350.991084][ T5747] usb 5-1: string descriptor 0 read error: -22 [ 350.991241][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.132676][ T6799] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 352.221916][ T5747] video4linux radio48: keene_cmd_set failed (-71) [ 352.221943][ T5747] radio-keene 5-1:9.57: V4L2 device registered as radio48 [ 352.266934][ T5747] usb 5-1: USB disconnect, device number 14 [ 352.314651][ T6799] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.314709][ T6799] usb 4-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 352.321464][ T6799] usb 4-1: config 142 has an invalid interface number: 251 but max is 0 [ 352.321494][ T6799] usb 4-1: config 142 has no interface number 0 [ 352.321543][ T6799] usb 4-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 352.324599][ T6799] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 352.324734][ T6799] usb 4-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 352.324757][ T6799] usb 4-1: config 142 interface 251 has no altsetting 0 [ 352.512451][ T6799] usb 4-1: string descriptor 0 read error: -22 [ 352.512601][ T6799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.557538][ T8861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 352.557645][ T8861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 352.580913][ T6799] cypress_m8 4-1:142.251: HID->COM RS232 Adapter converter detected [ 352.601239][ T6799] usb 4-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 353.000617][ T6799] usb 4-1: USB disconnect, device number 13 [ 353.008338][ T8861] cyphidcom ttyUSB0: cypress_serial_control - failed sending serial line settings - -19 [ 353.008363][ T8861] cyphidcom ttyUSB0: cypress_m8 suspending failing port 0 - interval might be too short [ 353.008403][ T8861] cyphidcom ttyUSB0: cypress_open - failed submitting read urb, error -19 [ 353.100295][ T6799] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 353.102452][ T6799] cypress_m8 4-1:142.251: device disconnected [ 354.381788][ T5747] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 354.547234][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'. [ 354.557386][ T5747] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 354.573251][ T5747] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 354.573277][ T5747] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 354.603783][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.603807][ T5747] usb 2-1: Product: syz [ 354.603820][ T5747] usb 2-1: Manufacturer: syz [ 354.603833][ T5747] usb 2-1: SerialNumber: syz [ 354.922295][ T5747] usb 2-1: Limiting number of CPorts to U8_MAX [ 355.376433][ C1] usb 2-1: invalid arpc response id received: 1280 [ 355.574976][ T5747] usb 2-1: failed to send ARPC request 1: -71 [ 355.575794][ T5747] usb 2-1: failed to execute ARPC: -71 [ 355.575983][ T5747] usb 2-1: failed to set connected state for cport 0: -71 [ 355.576001][ T5747] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 356.042453][ T8896] hsr_slave_1 (unregistering): left promiscuous mode [ 357.111344][ T5747] usb 2-1: failed to send ARPC request 3: -71 [ 357.118989][ T5747] usb 2-1: failed to execute ARPC: -71 [ 357.119178][ T5747] usb 2-1: failed to clear cport 0: -71 [ 357.119196][ T5747] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 357.698679][ C1] usb 2-1: failed to resubmit arpc in-urb: -1 [ 357.751444][ T5747] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 357.780726][ T5747] usb 2-1: USB disconnect, device number 11 [ 357.831738][ T4922] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 358.302624][ T4922] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 358.303931][ T4922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.310606][ T4922] usb 3-1: config 0 descriptor?? [ 358.767289][ T4922] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 360.876226][ T4922] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 360.876252][ T4922] [drm] Initialized udl on minor 1 [ 361.485108][ T4922] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 361.734894][ T4922] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 362.228541][ T4922] usb 3-1: USB disconnect, device number 16 [ 362.442126][ T6799] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 362.809165][ T8967] FAULT_INJECTION: forcing a failure. [ 362.809165][ T8967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.809217][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.1.1005 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 362.809244][ T8967] Tainted: [L]=SOFTLOCKUP [ 362.809252][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.809266][ T8967] Call Trace: [ 362.809274][ T8967] [ 362.809283][ T8967] dump_stack_lvl+0xe8/0x150 [ 362.809317][ T8967] should_fail_ex+0x46b/0x600 [ 362.809353][ T8967] _copy_from_user+0x2d/0xb0 [ 362.809375][ T8967] prctl_set_mm+0x6ed/0x13d0 [ 362.809400][ T8967] ? finish_task_switch+0x40e/0xc60 [ 362.809424][ T8967] ? lockdep_hardirqs_on+0x7b/0x110 [ 362.809452][ T8967] ? rcu_is_watching+0x16/0xb0 [ 362.809472][ T8967] ? trace_sched_exit_tp+0x3a/0x130 [ 362.809498][ T8967] ? __lock_acquire+0x747/0x2de0 [ 362.809549][ T8967] ? __pfx_prctl_set_mm+0x10/0x10 [ 362.809577][ T8967] ? lock_acquire+0x115/0x350 [ 362.809601][ T8967] ? futex_unqueue+0x22/0x240 [ 362.809637][ T8967] ? futex_unqueue+0x22/0x240 [ 362.809663][ T8967] ? futex_unqueue+0x22/0x240 [ 362.809689][ T8967] ? futex_unqueue+0x22/0x240 [ 362.809716][ T8967] ? futex_unqueue+0x211/0x240 [ 362.809742][ T8967] ? __futex_wait+0x1e3/0x410 [ 362.809766][ T8967] ? __futex_wait+0x35a/0x410 [ 362.809794][ T8967] ? __pfx___futex_wait+0x10/0x10 [ 362.809821][ T8967] ? __pfx_futex_wake_mark+0x10/0x10 [ 362.809902][ T8967] ? cap_task_prctl+0x1dd/0xaa0 [ 362.809924][ T8967] ? static_key_count+0x41/0x70 [ 362.809949][ T8967] ? security_task_prctl+0x163/0x190 [ 362.809981][ T8967] __se_sys_prctl+0x206/0x1900 [ 362.810005][ T8967] ? __pfx___se_sys_prctl+0x10/0x10 [ 362.810030][ T8967] ? __x64_sys_prctl+0x20/0xc0 [ 362.810053][ T8967] do_syscall_64+0x166/0x520 [ 362.810077][ T8967] ? trace_irq_disable+0x3b/0x140 [ 362.810098][ T8967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.810118][ T8967] ? clear_bhb_loop+0x70/0xc0 [ 362.810140][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.810164][ T8967] RIP: 0033:0x7fb26c08e559 [ 362.810182][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.810198][ T8967] RSP: 002b:00007fb26a2e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 362.810219][ T8967] RAX: ffffffffffffffda RBX: 00007fb26c315fa0 RCX: 00007fb26c08e559 [ 362.810234][ T8967] RDX: 0000200000000280 RSI: 000000000000000e RDI: 0000000000000023 [ 362.810246][ T8967] RBP: 00007fb26c125ab8 R08: 0000000000000000 R09: 0000000000000000 [ 362.810258][ T8967] R10: 0000000000000068 R11: 0000000000000246 R12: 0000000000000000 [ 362.810270][ T8967] R13: 00007fb26c316038 R14: 00007fb26c315fa0 R15: 00007fff0dcb33e8 [ 362.810300][ T8967] [ 362.821789][ T6799] usb 4-1: Using ep0 maxpacket: 8 [ 362.822584][ T6799] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 362.826432][ T6799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.826473][ T6799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.849842][ T6799] usb 4-1: config 0 descriptor?? [ 363.037794][ T8969] FAULT_INJECTION: forcing a failure. [ 363.037794][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 363.037830][ T8969] CPU: 1 UID: 0 PID: 8969 Comm: syz.5.1006 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 363.037856][ T8969] Tainted: [L]=SOFTLOCKUP [ 363.037862][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.037873][ T8969] Call Trace: [ 363.037884][ T8969] [ 363.037892][ T8969] dump_stack_lvl+0xe8/0x150 [ 363.037925][ T8969] should_fail_ex+0x46b/0x600 [ 363.037960][ T8969] should_failslab+0xa8/0x100 [ 363.037989][ T8969] kmem_cache_alloc_node_noprof+0xac/0x660 [ 363.038017][ T8969] ? __alloc_skb+0x1db/0x7a0 [ 363.038040][ T8969] ? __alloc_skb+0x1db/0x7a0 [ 363.038068][ T8969] __alloc_skb+0x1db/0x7a0 [ 363.038094][ T8969] tipc_buf_acquire+0x2b/0xe0 [ 363.038118][ T8969] tipc_named_publish+0x2aa/0x820 [ 363.038141][ T8969] ? tipc_named_publish+0x179/0x820 [ 363.038164][ T8969] ? tipc_nametbl_publish+0x9d/0x2c0 [ 363.038192][ T8969] tipc_nametbl_publish+0x17b/0x2c0 [ 363.038219][ T8969] ? tipc_nametbl_publish+0x9d/0x2c0 [ 363.038250][ T8969] tipc_sk_publish+0x1cd/0x430 [ 363.038273][ T8969] ? __pfx_tipc_sk_publish+0x10/0x10 [ 363.038293][ T8969] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 363.038318][ T8969] ? lockdep_hardirqs_on+0x7b/0x110 [ 363.038350][ T8969] tipc_sk_bind+0x1ee/0x300 [ 363.038382][ T8969] __sys_bind+0x2e9/0x410 [ 363.038406][ T8969] ? __pfx___sys_bind+0x10/0x10 [ 363.038439][ T8969] ? rcu_is_watching+0x16/0xb0 [ 363.038467][ T8969] __x64_sys_bind+0x7a/0x90 [ 363.038488][ T8969] do_syscall_64+0x166/0x520 [ 363.038511][ T8969] ? trace_irq_disable+0x3b/0x140 [ 363.038535][ T8969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.038553][ T8969] ? clear_bhb_loop+0x70/0xc0 [ 363.038576][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.038594][ T8969] RIP: 0033:0x7f595d02e559 [ 363.038611][ T8969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.038627][ T8969] RSP: 002b:00007f595b286028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 363.038647][ T8969] RAX: ffffffffffffffda RBX: 00007f595d2b5fa0 RCX: 00007f595d02e559 [ 363.038661][ T8969] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 363.038673][ T8969] RBP: 00007f595d0c5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 363.038684][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.038695][ T8969] R13: 00007f595d2b6038 R14: 00007f595d2b5fa0 R15: 00007ffd316befe8 [ 363.038729][ T8969] [ 363.091174][ T8969] tipc: Publication distribution failure [ 364.045883][ T6799] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 364.442465][ T10] usb 4-1: USB disconnect, device number 14 [ 365.070681][ T8974] input: syz0 as /devices/virtual/input/input14 [ 365.905334][ T37] audit: type=1326 audit(1792218030.376:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8978 comm="syz.1.1010" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb26c08e559 code=0x0 [ 369.091134][ T8992] rxe_eth0 speed is unknown, defaulting to 1000 [ 369.670711][ T8993] netlink: 'syz.1.1014': attribute type 22 has an invalid length. [ 369.670732][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 370.209561][ T8993] netlink: 'syz.1.1014': attribute type 22 has an invalid length. [ 370.209584][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 372.564618][ T9004] netlink: 'syz.2.1018': attribute type 12 has an invalid length. [ 372.564642][ T9004] netlink: 'syz.2.1018': attribute type 29 has an invalid length. [ 372.564655][ T9004] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1018'. [ 372.574485][ T3724] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.582741][ T3724] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.582783][ T3724] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.582817][ T3724] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.753215][ T5955] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 374.081903][ T5955] usb 3-1: Using ep0 maxpacket: 16 [ 374.089293][ T5955] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 374.113754][ T5955] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.113784][ T5955] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.113805][ T5955] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 374.113828][ T5955] usb 3-1: config 0 interface 0 has no altsetting 0 [ 374.113858][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.184673][ T5955] usb 3-1: config 0 descriptor?? [ 375.617609][ T9022] binder: 9021:9022 ioctl c0306201 2000000003c0 returned -14 [ 376.805806][ T5955] hid (null): unknown global tag 0xc [ 376.805849][ T5955] hid (null): report_id 3323596431 is invalid [ 376.805864][ T5955] hid (null): unknown global tag 0xe [ 376.805910][ T5955] hid (null): unknown global tag 0xe [ 376.805934][ T5955] hid (null): unknown global tag 0xe [ 376.806057][ T5955] hid (null): unknown global tag 0x63 [ 376.806080][ T5955] hid (null): unknown global tag 0xe [ 376.806094][ T5955] hid (null): global environment stack underflow [ 376.806150][ T5955] hid (null): unknown global tag 0xc [ 376.807136][ T5955] hid (null): unknown global tag 0xe4 [ 377.255923][ T5955] usb 3-1: USB disconnect, device number 17 [ 378.380912][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.503383][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.519042][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.520350][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.527202][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.527265][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.544532][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.287618][ T5762] hid_parser_main: 24 callbacks suppressed [ 379.287644][ T5762] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 379.325170][ T9036] netlink: 'syz.1.1028': attribute type 3 has an invalid length. [ 379.370220][ T5762] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.767784][ T5611] Bluetooth: hci4: command tx timeout [ 382.638862][ T9052] fuse: Bad value for 'fd' [ 382.842130][ T5611] Bluetooth: hci4: command tx timeout [ 384.234886][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.280029][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.299334][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 384.300663][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 384.337267][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 384.925504][ T5611] Bluetooth: hci4: command tx timeout [ 386.561664][ T5611] Bluetooth: hci0: command tx timeout [ 386.879841][ T9030] rxe_eth0 speed is unknown, defaulting to 1000 [ 387.001861][ T5611] Bluetooth: hci4: command tx timeout [ 387.341795][ T6118] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 387.369908][ T9079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 387.528011][ T6118] usb 2-1: Using ep0 maxpacket: 32 [ 387.530496][ T6118] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 387.606456][ T6118] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 387.606484][ T6118] usb 2-1: config 0 has no interface number 0 [ 387.606531][ T6118] usb 2-1: config 0 interface 184 has no altsetting 0 [ 387.609341][ T6118] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.609364][ T6118] usb 2-1: Product: syz [ 387.609377][ T6118] usb 2-1: Manufacturer: syz [ 387.609391][ T6118] usb 2-1: SerialNumber: syz [ 387.722495][ T6118] usb 2-1: config 0 descriptor?? [ 388.614015][ T5611] Bluetooth: hci0: command tx timeout [ 388.950168][ T6118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 389.369369][ T6118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 389.369401][ T6118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 389.369419][ T6118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 389.369435][ T6118] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 389.369753][ T6118] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 389.524046][ T6118] usb 2-1: USB disconnect, device number 12 [ 389.668639][ T9059] rxe_eth0 speed is unknown, defaulting to 1000 [ 389.740617][ T9093] FAULT_INJECTION: forcing a failure. [ 389.740617][ T9093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.740653][ T9093] CPU: 0 UID: 0 PID: 9093 Comm: syz.2.1042 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.740679][ T9093] Tainted: [L]=SOFTLOCKUP [ 389.740686][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.740697][ T9093] Call Trace: [ 389.740705][ T9093] [ 389.740713][ T9093] dump_stack_lvl+0xe8/0x150 [ 389.740746][ T9093] should_fail_ex+0x46b/0x600 [ 389.740780][ T9093] _copy_from_user+0x2d/0xb0 [ 389.740802][ T9093] io_register_bpf_filter+0x100/0x1210 [ 389.740829][ T9093] ? __pfx_io_register_bpf_filter+0x10/0x10 [ 389.740857][ T9093] ? __kasan_kmalloc+0x93/0xb0 [ 389.740879][ T9093] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 389.740907][ T9093] ? __se_sys_io_uring_register+0xac4/0x1ae0 [ 389.740924][ T9093] ? __se_sys_io_uring_register+0xac4/0x1ae0 [ 389.740949][ T9093] __se_sys_io_uring_register+0xae2/0x1ae0 [ 389.740971][ T9093] ? __se_sys_futex+0x3a8/0x450 [ 389.740992][ T9093] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 389.741017][ T9093] ? rcu_is_watching+0x16/0xb0 [ 389.741048][ T9093] do_syscall_64+0x166/0x520 [ 389.741075][ T9093] ? trace_irq_disable+0x3b/0x140 [ 389.741098][ T9093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.741118][ T9093] ? clear_bhb_loop+0x70/0xc0 [ 389.741142][ T9093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.741164][ T9093] RIP: 0033:0x7f1405a4e559 [ 389.741181][ T9093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.741197][ T9093] RSP: 002b:00007f1403ca6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 389.741219][ T9093] RAX: ffffffffffffffda RBX: 00007f1405cd5fa0 RCX: 00007f1405a4e559 [ 389.741234][ T9093] RDX: 0000200000000680 RSI: 0000000000000025 RDI: ffffffffffffffff [ 389.741247][ T9093] RBP: 00007f1405ae5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 389.741259][ T9093] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 389.741271][ T9093] R13: 00007f1405cd6038 R14: 00007f1405cd5fa0 R15: 00007ffc3f35d5d8 [ 389.741304][ T9093] [ 390.172382][ T9096] FAULT_INJECTION: forcing a failure. [ 390.172382][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 390.172418][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.1.1043 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 390.172445][ T9096] Tainted: [L]=SOFTLOCKUP [ 390.172452][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.172464][ T9096] Call Trace: [ 390.172472][ T9096] [ 390.172480][ T9096] dump_stack_lvl+0xe8/0x150 [ 390.172515][ T9096] should_fail_ex+0x46b/0x600 [ 390.172549][ T9096] should_failslab+0xa8/0x100 [ 390.172572][ T9096] __kmalloc_cache_noprof+0xa1/0x680 [ 390.172600][ T9096] ? kvm_create_vm_debugfs+0x325/0x8f0 [ 390.172619][ T9096] ? kvm_create_vm_debugfs+0x325/0x8f0 [ 390.172646][ T9096] kvm_create_vm_debugfs+0x325/0x8f0 [ 390.172670][ T9096] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 390.172694][ T9096] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 390.172713][ T9096] ? alloc_pages_mpol+0x11b/0x280 [ 390.172738][ T9096] ? __rt_spin_lock_init+0x3e/0x50 [ 390.172765][ T9096] kvm_dev_ioctl+0x13ca/0x17e0 [ 390.172794][ T9096] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 390.172811][ T9096] ? __fget_files+0x2a/0x420 [ 390.172837][ T9096] ? bpf_lsm_file_ioctl+0x9/0x20 [ 390.172861][ T9096] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 390.172880][ T9096] __se_sys_ioctl+0xff/0x170 [ 390.172918][ T9096] do_syscall_64+0x166/0x520 [ 390.172944][ T9096] ? trace_irq_disable+0x3b/0x140 [ 390.172968][ T9096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.172987][ T9096] ? clear_bhb_loop+0x70/0xc0 [ 390.173010][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.173029][ T9096] RIP: 0033:0x7fb26c08e559 [ 390.173051][ T9096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.173067][ T9096] RSP: 002b:00007fb26a2e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.173089][ T9096] RAX: ffffffffffffffda RBX: 00007fb26c315fa0 RCX: 00007fb26c08e559 [ 390.173103][ T9096] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 390.173115][ T9096] RBP: 00007fb26c125ab8 R08: 0000000000000000 R09: 0000000000000000 [ 390.173128][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.173140][ T9096] R13: 00007fb26c316038 R14: 00007fb26c315fa0 R15: 00007fff0dcb33e8 [ 390.173173][ T9096] [ 390.538032][ T5612] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.603413][ T5612] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.604856][ T5612] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.633727][ T5612] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.641303][ T5612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 390.769695][ T5612] Bluetooth: hci0: command tx timeout [ 391.273230][ T6118] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 391.423215][ T6118] usb 3-1: Using ep0 maxpacket: 16 [ 391.424504][ T6118] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 391.447983][ T6118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.448008][ T6118] usb 3-1: Product: syz [ 391.448021][ T6118] usb 3-1: Manufacturer: syz [ 391.448034][ T6118] usb 3-1: SerialNumber: syz [ 392.681818][ T5612] Bluetooth: hci6: command tx timeout [ 392.852678][ T5612] Bluetooth: hci0: command tx timeout [ 393.204297][ T6118] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 393.268097][ T6118] usb 3-1: USB disconnect, device number 18 [ 393.551316][ T9097] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.978832][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.979394][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.979558][ T9030] bridge_slave_0: entered allmulticast mode [ 394.005201][ T9030] bridge_slave_0: entered promiscuous mode [ 394.030831][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.031011][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.031169][ T9030] bridge_slave_1: entered allmulticast mode [ 394.127299][ T9030] bridge_slave_1: entered promiscuous mode [ 394.292385][ T9117] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 394.517514][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.771718][ T5612] Bluetooth: hci6: command tx timeout [ 394.945318][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.121187][ T9030] team0: Port device team_slave_0 added [ 395.210115][ T9030] team0: Port device team_slave_1 added [ 395.333185][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.333202][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.333226][ T9030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.362243][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.362259][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.362284][ T9030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.841955][ T5612] Bluetooth: hci6: command tx timeout [ 397.548358][ T9030] hsr_slave_0: entered promiscuous mode [ 397.549718][ T9030] hsr_slave_1: entered promiscuous mode [ 398.293493][ T9059] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.293927][ T9059] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.294095][ T9059] bridge_slave_0: entered allmulticast mode [ 398.296862][ T9059] bridge_slave_0: entered promiscuous mode [ 398.366235][ T9059] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.366609][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.366787][ T9059] bridge_slave_1: entered allmulticast mode [ 398.369556][ T9059] bridge_slave_1: entered promiscuous mode [ 398.585327][ T9059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.681272][ T9059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.922050][ T5612] Bluetooth: hci6: command tx timeout [ 401.126281][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.126492][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.126658][ T9097] bridge_slave_0: entered allmulticast mode [ 401.129418][ T9097] bridge_slave_0: entered promiscuous mode [ 401.135352][ T9059] team0: Port device team_slave_0 added [ 401.207167][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.207307][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.207475][ T9097] bridge_slave_1: entered allmulticast mode [ 401.213948][ T9097] bridge_slave_1: entered promiscuous mode [ 401.224088][ T9059] team0: Port device team_slave_1 added [ 401.405456][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.407527][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.407542][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.407565][ T9059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.425445][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.426292][ T9059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.426303][ T9059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.426335][ T9059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.579876][ T9097] team0: Port device team_slave_0 added [ 401.615533][ T9097] team0: Port device team_slave_1 added [ 401.647310][ T9059] hsr_slave_0: entered promiscuous mode [ 401.648737][ T9059] hsr_slave_1: entered promiscuous mode [ 401.649714][ T9059] debugfs: 'hsr0' already exists in 'hsr' [ 401.649753][ T9059] Cannot create hsr debugfs directory [ 401.784145][ T9030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 402.127508][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.154486][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.154502][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.154527][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.155361][ T9030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.225178][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.242359][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.242374][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.242400][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.187717][ T9030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 403.393054][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.428013][ T9030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.103480][ T9030] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.308430][ T9097] hsr_slave_0: entered promiscuous mode [ 404.309853][ T9097] hsr_slave_1: entered promiscuous mode [ 404.315788][ T9097] debugfs: 'hsr0' already exists in 'hsr' [ 404.315813][ T9097] Cannot create hsr debugfs directory [ 406.275839][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.377986][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.418078][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.419552][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.421726][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.548885][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.769706][ T9059] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 407.076908][ T9059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 407.119712][ T9059] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 407.215122][ T9059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 407.223205][ T9059] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 407.471127][ T9059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 407.479456][ T9030] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.578574][ T9059] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 407.797187][ T9059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 407.840478][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.840613][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.008532][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.008683][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.489028][ T9097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 408.602492][ T5612] Bluetooth: hci5: command tx timeout [ 408.669265][ T9097] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.669581][ T9143] rxe_eth0 speed is unknown, defaulting to 1000 [ 408.701043][ T9097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 408.751278][ T9097] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.779695][ T9097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 408.809538][ T9097] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.827079][ T9097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 408.920154][ T9097] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.350334][ T9059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.644848][ T9059] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.681671][ T5611] Bluetooth: hci5: command tx timeout [ 411.053709][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 411.118161][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 411.211329][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 411.283618][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 411.352640][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 411.547753][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.548138][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.752202][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.752338][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.242370][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.698587][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.761782][ T5611] Bluetooth: hci5: command tx timeout [ 412.853303][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.853475][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.007491][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.007728][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.215171][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.218431][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.218630][ T9143] bridge_slave_0: entered allmulticast mode [ 413.253674][ T9143] bridge_slave_0: entered promiscuous mode [ 413.304131][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.304254][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.304434][ T9143] bridge_slave_1: entered allmulticast mode [ 413.337726][ T9143] bridge_slave_1: entered promiscuous mode [ 413.481824][ T5611] Bluetooth: hci7: command tx timeout [ 413.578249][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.777611][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.834901][ T9171] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.114662][ T9143] team0: Port device team_slave_0 added [ 414.132610][ T9030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.164622][ T9143] team0: Port device team_slave_1 added [ 414.494607][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.494625][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.494651][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.569762][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.569778][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.569804][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.841843][ T5611] Bluetooth: hci5: command tx timeout [ 415.285918][ T9143] hsr_slave_0: entered promiscuous mode [ 415.287246][ T9143] hsr_slave_1: entered promiscuous mode [ 415.288183][ T9143] debugfs: 'hsr0' already exists in 'hsr' [ 415.288208][ T9143] Cannot create hsr debugfs directory [ 415.561675][ T5611] Bluetooth: hci7: command tx timeout [ 415.787337][ T9059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.156167][ T9030] veth0_vlan: entered promiscuous mode [ 417.460407][ T9030] veth1_vlan: entered promiscuous mode [ 417.647651][ T5611] Bluetooth: hci7: command tx timeout [ 417.900140][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.095538][ T9059] veth0_vlan: entered promiscuous mode [ 418.229986][ T9171] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.230179][ T9171] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.230403][ T9171] bridge_slave_0: entered allmulticast mode [ 418.269027][ T9171] bridge_slave_0: entered promiscuous mode [ 418.617466][ T9171] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.617686][ T9171] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.617860][ T9171] bridge_slave_1: entered allmulticast mode [ 418.651673][ T9171] bridge_slave_1: entered promiscuous mode [ 418.761476][ T9143] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 419.165219][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.215100][ T9059] veth1_vlan: entered promiscuous mode [ 419.312712][ T9143] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 419.693339][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.725332][ T5611] Bluetooth: hci7: command tx timeout [ 419.741126][ T9171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.764205][ T9143] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 420.374337][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.414570][ T9171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.479426][ T9143] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 420.698295][ T9143] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 421.106641][ T9030] veth0_macvtap: entered promiscuous mode [ 421.954291][ T9171] team0: Port device team_slave_0 added [ 422.953457][ T9171] team0: Port device team_slave_1 added [ 425.049876][ T9030] veth1_macvtap: entered promiscuous mode [ 425.375966][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.375981][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.376003][ T9171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.595017][ T9171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.595035][ T9171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.595060][ T9171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.988851][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.061425][ T9059] veth0_macvtap: entered promiscuous mode [ 426.204101][ T9171] hsr_slave_0: entered promiscuous mode [ 426.205460][ T9171] hsr_slave_1: entered promiscuous mode [ 426.206550][ T9171] debugfs: 'hsr0' already exists in 'hsr' [ 426.206574][ T9171] Cannot create hsr debugfs directory [ 426.253551][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.688077][ T9059] veth1_macvtap: entered promiscuous mode [ 426.911334][ T9097] veth0_vlan: entered promiscuous mode [ 427.308253][ T9097] veth1_vlan: entered promiscuous mode [ 427.360445][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.446693][ T9059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.656161][ T3725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.656182][ T3725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.778556][ T9097] veth0_macvtap: entered promiscuous mode [ 433.035762][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.106539][ T9097] veth1_macvtap: entered promiscuous mode [ 433.153287][ T3725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.153318][ T3725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.413932][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.438949][ T9143] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.499062][ T3724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.499082][ T3724] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.549385][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.549460][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.582488][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.930812][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.933879][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.074841][ T1556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.074861][ T1556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.888598][ T1556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.888619][ T1556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.200315][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.200336][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.310876][ T3666] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.374466][ T3666] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.375092][ T1022] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.375480][ T1022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.446126][ T6799] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 437.505615][ T1019] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.506433][ T1019] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.506698][ T1019] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.711508][ T6799] usb 8-1: Using ep0 maxpacket: 16 [ 437.887643][ T6799] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 437.922704][ T6799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.922730][ T6799] usb 8-1: Product: syz [ 437.922744][ T6799] usb 8-1: Manufacturer: syz [ 437.922757][ T6799] usb 8-1: SerialNumber: syz [ 438.003630][ T6799] usb 8-1: config 0 descriptor?? [ 438.069693][ T6799] gspca_main: spca508-2.14.0 probing 041e:4018 [ 438.077053][ T3725] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.085895][ T1019] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.089447][ T1022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.089749][ T1022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.090108][ T1022] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.294214][ T6799] gspca_spca508: reg_read err -32 [ 438.302003][ T6799] gspca_spca508: reg_read err -32 [ 438.325312][ T6799] gspca_spca508: reg_read err -32 [ 438.329946][ T6799] gspca_spca508: reg_read err -32 [ 438.351016][ T6799] gspca_spca508: reg_read err -32 [ 438.631717][ T6799] gspca_spca508: reg write: error -71 [ 438.631835][ T6799] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 438.667650][ T6799] usb 8-1: USB disconnect, device number 2 [ 438.790203][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.847596][ T9318] Invalid logical block size (8192) [ 439.978719][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.978776][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.111695][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.272666][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 440.275336][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 440.275363][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 440.275385][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 440.287311][ T10] usb 8-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 440.287335][ T10] usb 8-1: Manufacturer: syz [ 440.367320][ T10] usb 8-1: config 0 descriptor?? [ 440.405912][ T10] smsusb:smsusb_probe: board id=9, interface number 0 [ 440.411015][ T10] smsusb:smsusb_probe: Device initialized with return code -19 [ 440.670916][ T10] usb 8-1: USB disconnect, device number 3 [ 440.688577][ T9143] veth0_vlan: entered promiscuous mode [ 440.747237][ T9143] veth1_vlan: entered promiscuous mode [ 440.896377][ T9143] veth0_macvtap: entered promiscuous mode [ 440.920756][ T9143] veth1_macvtap: entered promiscuous mode [ 440.967195][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.985984][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.263222][ T1556] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.471892][ T5607] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 443.762681][ T5607] usb 8-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 443.766271][ T5607] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.766324][ T5607] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 443.766346][ T5607] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.766385][ T5607] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.063577][ T3724] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.361460][ T5607] rtsx_usb 8-1:1.0: probe with driver rtsx_usb failed with error -8 [ 444.497161][ T9351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.663679][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.690231][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.690250][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.132688][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.132708][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.202919][ T1022] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.208626][ T4922] usb 8-1: USB disconnect, device number 4 [ 445.496719][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1058'. [ 445.496785][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1058'. [ 445.573597][ T247] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.024609][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1058'. [ 446.024671][ T9355] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1058'. [ 449.057069][ T9383] binder: 9381:9383 ioctl c0306201 2000000000c0 returned -14 [ 449.060286][ T9383] binder: 9381:9383 ioctl c0306201 200000000340 returned -14 [ 449.138796][ T9387] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 449.512532][ T4922] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 449.557852][ T5612] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.635147][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.681039][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.711501][ T4922] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 449.715000][ T4922] usb 8-1: too many configurations: 248, using maximum allowed: 8 [ 449.821805][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.828910][ T4922] usb 8-1: config 0 has no interfaces? [ 449.829658][ T4922] usb 8-1: config 0 has no interfaces? [ 449.848089][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 449.911997][ T4922] usb 8-1: config 0 has no interfaces? [ 449.912606][ T4922] usb 8-1: config 0 has no interfaces? [ 449.913167][ T4922] usb 8-1: config 0 has no interfaces? [ 449.913754][ T4922] usb 8-1: config 0 has no interfaces? [ 449.914335][ T4922] usb 8-1: config 0 has no interfaces? [ 449.914928][ T4922] usb 8-1: config 0 has no interfaces? [ 449.914960][ T4922] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.940749][ T4922] usb 8-1: config 0 descriptor?? [ 450.314744][ T5607] usb 8-1: USB disconnect, device number 5 [ 450.932897][ T9393] rxe_eth0 speed is unknown, defaulting to 1000 [ 452.201888][ T5612] Bluetooth: hci2: command tx timeout [ 452.343744][ T9393] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.343986][ T9393] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.344172][ T9393] bridge_slave_0: entered allmulticast mode [ 452.350641][ T9393] bridge_slave_0: entered promiscuous mode [ 452.471066][ T9393] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.471308][ T9393] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.502011][ T9393] bridge_slave_1: entered allmulticast mode [ 452.528754][ T9393] bridge_slave_1: entered promiscuous mode [ 452.595700][ T9393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.626922][ T9393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.790129][ T9393] team0: Port device team_slave_0 added [ 452.802569][ T9393] team0: Port device team_slave_1 added [ 452.879759][ T9393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.879776][ T9393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.879801][ T9393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.933374][ T9393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.933390][ T9393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.933415][ T9393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.040735][ T9393] hsr_slave_0: entered promiscuous mode [ 454.057880][ T9393] hsr_slave_1: entered promiscuous mode [ 454.058962][ T9393] debugfs: 'hsr0' already exists in 'hsr' [ 454.058988][ T9393] Cannot create hsr debugfs directory [ 454.281870][ T5612] Bluetooth: hci2: command tx timeout [ 456.157357][ C0] vcan0: j1939_tp_rxtimer: 0xffff888070afe800: rx timeout, send abort [ 456.202824][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888070afe800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 456.384195][ T5612] Bluetooth: hci2: command tx timeout [ 458.370505][ C0] vcan0: j1939_tp_rxtimer: 0xffff888070afe000: rx timeout, send abort [ 458.441764][ T5612] Bluetooth: hci2: command tx timeout [ 459.297909][ C0] vcan0: j1939_tp_rxtimer: 0xffff888070afe000: abort rx timeout. Force session deactivation [ 461.533284][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.554591][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.586438][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.604822][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.605678][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.711182][ T9443] rxe_eth0 speed is unknown, defaulting to 1000 [ 463.806744][ T5612] Bluetooth: hci3: command tx timeout [ 465.543893][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.553839][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.553982][ T9443] bridge_slave_0: entered allmulticast mode [ 465.555442][ T9443] bridge_slave_0: entered promiscuous mode [ 465.576359][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.579853][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.580057][ T9443] bridge_slave_1: entered allmulticast mode [ 465.592610][ T9443] bridge_slave_1: entered promiscuous mode [ 465.727955][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.730280][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.881986][ T5612] Bluetooth: hci3: command tx timeout [ 465.950995][ T9443] team0: Port device team_slave_0 added [ 465.962513][ T9443] team0: Port device team_slave_1 added [ 466.224645][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.224663][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.224688][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.227195][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.227208][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.227240][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.431202][ T9443] hsr_slave_0: entered promiscuous mode [ 466.452351][ T9443] hsr_slave_1: entered promiscuous mode [ 466.453371][ T9443] debugfs: 'hsr0' already exists in 'hsr' [ 466.453397][ T9443] Cannot create hsr debugfs directory [ 467.962091][ T5612] Bluetooth: hci3: command tx timeout [ 470.067717][ T5612] Bluetooth: hci3: command tx timeout [ 470.571010][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.622793][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.627636][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.630135][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.661998][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.272746][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 471.351241][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 471.369750][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 471.373700][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 471.374483][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 472.239390][ T9468] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.744412][ T9463] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.842116][ T5611] Bluetooth: hci1: command tx timeout [ 473.571904][ T5611] Bluetooth: hci8: command tx timeout [ 474.159346][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.159470][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.160034][ T9468] bridge_slave_0: entered allmulticast mode [ 474.186915][ T9468] bridge_slave_0: entered promiscuous mode [ 474.283961][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.284088][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.284279][ T9468] bridge_slave_1: entered allmulticast mode [ 474.287631][ T9468] bridge_slave_1: entered promiscuous mode [ 474.466348][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.539465][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.689447][ T9468] team0: Port device team_slave_0 added [ 474.704582][ T9468] team0: Port device team_slave_1 added [ 474.827326][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.827344][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.827368][ T9468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.915041][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.915058][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.915084][ T9468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.932395][ T5611] Bluetooth: hci1: command tx timeout [ 475.303792][ T9468] hsr_slave_0: entered promiscuous mode [ 475.309738][ T9468] hsr_slave_1: entered promiscuous mode [ 475.325044][ T9468] debugfs: 'hsr0' already exists in 'hsr' [ 475.325070][ T9468] Cannot create hsr debugfs directory [ 475.641996][ T5611] Bluetooth: hci8: command tx timeout [ 476.082352][ T5612] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 476.085632][ T5612] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 476.087857][ T5612] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 476.124418][ T5612] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 476.129230][ T5612] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 477.001821][ T5611] Bluetooth: hci1: command tx timeout [ 477.727589][ T5611] Bluetooth: hci8: command tx timeout [ 478.282027][ T5611] Bluetooth: hci9: command tx timeout [ 478.655259][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.655386][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.655579][ T9463] bridge_slave_0: entered allmulticast mode [ 478.699084][ T9463] bridge_slave_0: entered promiscuous mode [ 478.756216][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.756482][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.756668][ T9463] bridge_slave_1: entered allmulticast mode [ 478.790910][ T9463] bridge_slave_1: entered promiscuous mode [ 479.093725][ T5611] Bluetooth: hci1: command tx timeout [ 479.122881][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.204304][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.344928][ T9463] team0: Port device team_slave_0 added [ 479.348578][ T9463] team0: Port device team_slave_1 added [ 479.801913][ T5611] Bluetooth: hci8: command tx timeout [ 479.949864][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.949881][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.949907][ T9463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.026219][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.026236][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.026261][ T9463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.320308][ T9463] hsr_slave_0: entered promiscuous mode [ 480.321146][ T9463] hsr_slave_1: entered promiscuous mode [ 480.338687][ T9463] debugfs: 'hsr0' already exists in 'hsr' [ 480.338709][ T9463] Cannot create hsr debugfs directory [ 480.338879][ T9498] rxe_eth0 speed is unknown, defaulting to 1000 [ 480.361682][ T5611] Bluetooth: hci9: command tx timeout [ 481.600758][ T9498] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.600940][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.621783][ T9498] bridge_slave_0: entered allmulticast mode [ 481.624562][ T9498] bridge_slave_0: entered promiscuous mode [ 481.627852][ T9498] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.628079][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.628261][ T9498] bridge_slave_1: entered allmulticast mode [ 481.630896][ T9498] bridge_slave_1: entered promiscuous mode [ 482.076020][ T9498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.095824][ T9498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.180697][ T9498] team0: Port device team_slave_0 added [ 482.193348][ T9498] team0: Port device team_slave_1 added [ 482.247770][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.247785][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.247810][ T9498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.250185][ T9498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.250198][ T9498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.250223][ T9498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.411769][ T9498] hsr_slave_0: entered promiscuous mode [ 482.428063][ T9498] hsr_slave_1: entered promiscuous mode [ 482.429137][ T9498] debugfs: 'hsr0' already exists in 'hsr' [ 482.429162][ T9498] Cannot create hsr debugfs directory [ 482.441897][ T5611] Bluetooth: hci9: command tx timeout [ 484.551691][ T5611] Bluetooth: hci9: command tx timeout [ 501.404582][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.404652][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.500005][ T5611] Bluetooth: hci4: command 0x0406 tx timeout [ 508.611690][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 510.046443][ T5612] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 510.110982][ T5612] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 510.119400][ T5612] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 510.152894][ T5612] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 510.155784][ T5612] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 511.083576][ T9522] rxe_eth0 speed is unknown, defaulting to 1000 [ 512.127755][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.127973][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.128535][ T9522] bridge_slave_0: entered allmulticast mode [ 512.131328][ T9522] bridge_slave_0: entered promiscuous mode [ 512.183239][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.183461][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.183667][ T9522] bridge_slave_1: entered allmulticast mode [ 512.190049][ T9522] bridge_slave_1: entered promiscuous mode [ 512.304444][ T9522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.329680][ T9522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.361964][ T5612] Bluetooth: hci10: command tx timeout [ 512.428207][ T9522] team0: Port device team_slave_0 added [ 512.438504][ T9522] team0: Port device team_slave_1 added [ 512.510240][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.510256][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.510281][ T9522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.716021][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.716040][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.716066][ T9522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.369743][ T9522] hsr_slave_0: entered promiscuous mode [ 513.371173][ T9522] hsr_slave_1: entered promiscuous mode [ 513.384828][ T9522] debugfs: 'hsr0' already exists in 'hsr' [ 513.384855][ T9522] Cannot create hsr debugfs directory [ 513.725568][ T5612] Bluetooth: hci6: command 0x0406 tx timeout [ 514.442043][ T5612] Bluetooth: hci10: command tx timeout [ 516.521865][ T5611] Bluetooth: hci10: command tx timeout [ 518.601876][ T5611] Bluetooth: hci10: command tx timeout [ 522.237665][ T5612] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 522.331910][ T5612] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 522.338189][ T5612] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 522.354009][ T5612] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 522.371501][ T5612] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 523.051137][ T9546] rxe_eth0 speed is unknown, defaulting to 1000 [ 524.316493][ T9546] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.316712][ T9546] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.316919][ T9546] bridge_slave_0: entered allmulticast mode [ 524.319723][ T9546] bridge_slave_0: entered promiscuous mode [ 524.370979][ T9546] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.371103][ T9546] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.374822][ T9546] bridge_slave_1: entered allmulticast mode [ 524.409123][ T9546] bridge_slave_1: entered promiscuous mode [ 524.521962][ T5612] Bluetooth: hci11: command tx timeout [ 524.727860][ T9546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.742715][ T9546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.837259][ T9546] team0: Port device team_slave_0 added [ 524.853719][ T9546] team0: Port device team_slave_1 added [ 525.884898][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.884917][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.884947][ T9546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.890984][ T9546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.890997][ T9546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.891023][ T9546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.090742][ T9546] hsr_slave_0: entered promiscuous mode [ 526.109896][ T9546] hsr_slave_1: entered promiscuous mode [ 526.122952][ T9546] debugfs: 'hsr0' already exists in 'hsr' [ 526.122980][ T9546] Cannot create hsr debugfs directory [ 526.601776][ T5612] Bluetooth: hci11: command tx timeout [ 528.681920][ T5612] Bluetooth: hci11: command tx timeout [ 529.087918][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 530.775309][ T5612] Bluetooth: hci11: command tx timeout [ 531.377147][ T5612] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 531.439000][ T5612] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 531.443710][ T5612] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 531.446189][ T5612] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 531.449749][ T5612] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 531.781361][ T5612] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 531.833871][ T5612] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 531.838893][ T5612] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 531.841135][ T5612] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 531.866336][ T5612] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 532.725033][ T9567] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.404416][ T9572] rxe_eth0 speed is unknown, defaulting to 1000 [ 533.481994][ T5612] Bluetooth: hci12: command tx timeout [ 533.961984][ T5612] Bluetooth: hci13: command tx timeout [ 534.202316][ T5612] Bluetooth: hci7: command 0x0406 tx timeout [ 534.881765][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.881893][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.882469][ T9567] bridge_slave_0: entered allmulticast mode [ 534.885944][ T9567] bridge_slave_0: entered promiscuous mode [ 535.562889][ T5611] Bluetooth: hci12: command tx timeout [ 535.678249][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.678375][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.679348][ T9567] bridge_slave_1: entered allmulticast mode [ 535.706168][ T9567] bridge_slave_1: entered promiscuous mode [ 535.984148][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.011028][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.051931][ T5611] Bluetooth: hci13: command tx timeout [ 536.108430][ T9567] team0: Port device team_slave_0 added [ 536.117912][ T9567] team0: Port device team_slave_1 added [ 536.341502][ T5612] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 536.401804][ T5612] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 536.403411][ T5612] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 536.406724][ T5612] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 536.407569][ T5612] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 536.639897][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.639913][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.639938][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.691350][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.691364][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.691390][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.811228][ T9567] hsr_slave_0: entered promiscuous mode [ 536.818769][ T9567] hsr_slave_1: entered promiscuous mode [ 536.819780][ T9567] debugfs: 'hsr0' already exists in 'hsr' [ 536.819803][ T9567] Cannot create hsr debugfs directory [ 537.642324][ T5612] Bluetooth: hci12: command tx timeout [ 538.122676][ T5612] Bluetooth: hci13: command tx timeout [ 538.602061][ T5612] Bluetooth: hci14: command tx timeout [ 539.723214][ T5612] Bluetooth: hci12: command tx timeout [ 540.124065][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.124286][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.124488][ T9572] bridge_slave_0: entered allmulticast mode [ 540.127216][ T9572] bridge_slave_0: entered promiscuous mode [ 540.130649][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.130873][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.131065][ T9572] bridge_slave_1: entered allmulticast mode [ 540.186758][ T9572] bridge_slave_1: entered promiscuous mode [ 540.201817][ T5612] Bluetooth: hci13: command tx timeout [ 540.248709][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.262672][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.323771][ T9572] team0: Port device team_slave_0 added [ 540.327542][ T9572] team0: Port device team_slave_1 added [ 540.683282][ T5612] Bluetooth: hci14: command tx timeout [ 541.831322][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.831340][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.831365][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.879831][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.879846][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.879871][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.025388][ T9599] rxe_eth0 speed is unknown, defaulting to 1000 [ 542.055217][ T9572] hsr_slave_0: entered promiscuous mode [ 542.058291][ T9572] hsr_slave_1: entered promiscuous mode [ 542.060885][ T9572] debugfs: 'hsr0' already exists in 'hsr' [ 542.060909][ T9572] Cannot create hsr debugfs directory [ 542.765177][ T5612] Bluetooth: hci14: command tx timeout [ 544.238762][ T9599] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.238979][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.239176][ T9599] bridge_slave_0: entered allmulticast mode [ 544.278229][ T9599] bridge_slave_0: entered promiscuous mode [ 544.288151][ T9599] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.288357][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.288924][ T9599] bridge_slave_1: entered allmulticast mode [ 544.320452][ T9599] bridge_slave_1: entered promiscuous mode [ 544.419762][ T9599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.446460][ T9599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.508475][ T9599] team0: Port device team_slave_0 added [ 544.527808][ T9599] team0: Port device team_slave_1 added [ 544.596040][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.596056][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.596081][ T9599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.598849][ T9599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.598862][ T9599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.598886][ T9599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.816460][ T9599] hsr_slave_0: entered promiscuous mode [ 544.817917][ T9599] hsr_slave_1: entered promiscuous mode [ 544.819508][ T9599] debugfs: 'hsr0' already exists in 'hsr' [ 544.819533][ T9599] Cannot create hsr debugfs directory [ 544.844686][ T5612] Bluetooth: hci14: command tx timeout [ 562.907710][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.907783][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.236902][ T5611] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 571.278193][ T5611] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 571.311826][ T5611] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 571.486236][ T5611] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 571.487036][ T5611] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 572.370833][ T9622] rxe_eth0 speed is unknown, defaulting to 1000 [ 573.506648][ T9622] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.506865][ T9622] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.507442][ T9622] bridge_slave_0: entered allmulticast mode [ 573.510255][ T9622] bridge_slave_0: entered promiscuous mode [ 573.546739][ T9622] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.546989][ T9622] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.547196][ T9622] bridge_slave_1: entered allmulticast mode [ 573.580669][ T9622] bridge_slave_1: entered promiscuous mode [ 573.659849][ T5612] Bluetooth: hci15: command tx timeout [ 573.667277][ T9622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.695526][ T9622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.769625][ T9622] team0: Port device team_slave_0 added [ 573.786474][ T9622] team0: Port device team_slave_1 added [ 573.841045][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.841060][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.841085][ T9622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.890273][ T9622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.890287][ T9622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.890312][ T9622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.162063][ T5612] Bluetooth: hci2: command 0x0406 tx timeout [ 575.722466][ T5612] Bluetooth: hci15: command tx timeout [ 576.899323][ T9622] hsr_slave_0: entered promiscuous mode [ 576.900881][ T9622] hsr_slave_1: entered promiscuous mode [ 576.913954][ T9622] debugfs: 'hsr0' already exists in 'hsr' [ 576.913981][ T9622] Cannot create hsr debugfs directory [ 577.814089][ T5611] Bluetooth: hci15: command tx timeout [ 579.884080][ T5611] Bluetooth: hci15: command tx timeout [ 583.603168][ T5602] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 583.669349][ T5602] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 583.703210][ T5602] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 583.704390][ T5602] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 583.705486][ T5602] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 585.435067][ T5611] Bluetooth: hci3: command 0x0406 tx timeout [ 585.802067][ T5612] Bluetooth: hci16: command tx timeout [ 587.881791][ T5612] Bluetooth: hci16: command tx timeout [ 589.962306][ T5612] Bluetooth: hci16: command tx timeout [ 592.042421][ T5612] Bluetooth: hci16: command tx timeout [ 592.416390][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.467017][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 593.111592][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 593.120006][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 593.165877][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.220173][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.269627][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.289563][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.348632][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.368132][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 594.493301][ T9654] rxe_eth0 speed is unknown, defaulting to 1000 [ 595.651619][ T5602] Bluetooth: hci0: command tx timeout [ 595.722046][ T5602] Bluetooth: hci1: command 0x0406 tx timeout [ 595.732718][ T9655] Bluetooth: hci8: command 0x0406 tx timeout [ 596.376519][ T9679] rxe_eth0 speed is unknown, defaulting to 1000 [ 596.682502][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 596.721394][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 596.738211][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 596.743415][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 596.744381][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 596.762075][ T5612] Bluetooth: hci4: command tx timeout [ 597.731579][ T5612] Bluetooth: hci0: command tx timeout [ 598.804870][ T9700] rxe_eth0 speed is unknown, defaulting to 1000 [ 598.845686][ T5612] Bluetooth: hci4: command tx timeout [ 599.068231][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.068358][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.068580][ T9654] bridge_slave_0: entered allmulticast mode [ 599.113950][ T9654] bridge_slave_0: entered promiscuous mode [ 599.375263][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.375466][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.375700][ T9654] bridge_slave_1: entered allmulticast mode [ 599.562670][ T5612] Bluetooth: hci5: command tx timeout [ 599.625531][ T9654] bridge_slave_1: entered promiscuous mode [ 599.802180][ T5612] Bluetooth: hci0: command tx timeout [ 600.002638][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.128588][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.642408][ T9654] team0: Port device team_slave_0 added [ 600.650299][ T9654] team0: Port device team_slave_1 added [ 600.730258][ T9732] rxe_eth0 speed is unknown, defaulting to 1000 [ 600.772667][ T5612] Bluetooth: hci9: command 0x0406 tx timeout [ 600.922247][ T5612] Bluetooth: hci4: command tx timeout [ 601.726165][ T5611] Bluetooth: hci5: command tx timeout [ 601.882066][ T5611] Bluetooth: hci0: command tx timeout [ 602.028087][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.028104][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.028129][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.109762][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.109778][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.109804][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.627759][ T9654] hsr_slave_0: entered promiscuous mode [ 602.649266][ T9654] hsr_slave_1: entered promiscuous mode [ 602.659421][ T9654] debugfs: 'hsr0' already exists in 'hsr' [ 602.659447][ T9654] Cannot create hsr debugfs directory [ 603.012273][ T5611] Bluetooth: hci4: command tx timeout [ 603.803342][ T5611] Bluetooth: hci5: command tx timeout [ 604.870295][ T9679] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.870421][ T9679] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.870634][ T9679] bridge_slave_0: entered allmulticast mode [ 604.891042][ T9679] bridge_slave_0: entered promiscuous mode [ 604.940951][ T9679] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.941073][ T9679] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.941286][ T9679] bridge_slave_1: entered allmulticast mode [ 604.956397][ T9679] bridge_slave_1: entered promiscuous mode [ 605.549501][ T9679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.687763][ T9679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.881872][ T5611] Bluetooth: hci5: command tx timeout [ 606.274168][ T9679] team0: Port device team_slave_0 added [ 606.882425][ T9679] team0: Port device team_slave_1 added [ 607.002714][ T38] INFO: task syz-executor:9393 blocked for more than 143 seconds. [ 607.002741][ T38] Tainted: G L syzkaller #0 [ 607.002752][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 607.002761][ T38] task:syz-executor state:D stack:21544 pid:9393 tgid:9393 ppid:1 task_flags:0x400140 flags:0x00080002 [ 607.002823][ T38] Call Trace: [ 607.002902][ T38] [ 607.002950][ T38] __schedule+0x16d9/0x5700 [ 607.003185][ T38] ? __pfx___schedule+0x10/0x10 [ 607.003263][ T38] rt_mutex_schedule+0x76/0xf0 [ 607.003323][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 607.003354][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 607.003379][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 607.003403][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 607.003425][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 607.003465][ T38] ? del_device_store+0xd6/0x370 [ 607.003554][ T38] ? del_device_store+0xd6/0x370 [ 607.003573][ T38] mutex_lock_nested+0x168/0x1d0 [ 607.003592][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 607.003641][ T38] del_device_store+0xd6/0x370 [ 607.003662][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 607.003683][ T38] ? __pfx_del_device_store+0x10/0x10 [ 607.003705][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 607.003727][ T38] ? sysfs_kf_write+0x166/0x260 [ 607.003753][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 607.003773][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 607.003800][ T38] vfs_write+0x61e/0xbb0 [ 607.003852][ T38] ? __pfx_vfs_write+0x10/0x10 [ 607.003878][ T38] ? do_sys_openat2+0x14e/0x200 [ 607.003896][ T38] ? kmem_cache_free+0x187/0x6d0 [ 607.003941][ T38] ksys_write+0x156/0x270 [ 607.003967][ T38] ? __pfx_ksys_write+0x10/0x10 [ 607.004032][ T38] do_syscall_64+0x166/0x520 [ 607.004085][ T38] ? trace_irq_disable+0x3b/0x140 [ 607.004126][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.004168][ T38] ? clear_bhb_loop+0x70/0xc0 [ 607.004191][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.004210][ T38] RIP: 0033:0x7f133db2ed8e [ 607.004240][ T38] RSP: 002b:00007fffdbafa6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 607.004292][ T38] RAX: ffffffffffffffda RBX: 000055555c938500 RCX: 00007f133db2ed8e [ 607.004305][ T38] RDX: 0000000000000001 RSI: 00007fffdbafa750 RDI: 0000000000000005 [ 607.004318][ T38] RBP: 00007f133dc0637c R08: 0000000000000000 R09: 0000000000000000 [ 607.004330][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.004341][ T38] R13: 00007fffdbafa750 R14: 00007fffdbafaf90 R15: 0000000000000003 [ 607.004372][ T38] [ 607.004431][ T38] [ 607.004431][ T38] Showing all locks held in the system: [ 607.004468][ T38] locks held by rcuc/1/28: 4, last CPU#1: [ 607.004514][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 607.004609][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 607.004717][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 607.004816][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: ip_route_output_key_hash+0xd8/0x2a0 [ 607.004896][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 607.004909][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 607.004972][ T38] locks held by kworker/u8:3/57: 3, on CPU#0: [ 607.004985][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.005041][ T38] #1: ffffc9000123fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.005090][ T38] #2: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.005148][ T38] locks held by kworker/u8:5/139: 3, on CPU#0: [ 607.005162][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.005212][ T38] #1: ffffc9000426fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.005267][ T38] #2: ffffffff905d69b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 607.005385][ T38] locks held by getty/5348: 2, on CPU#0: [ 607.005399][ T38] #0: ffff8880375f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 607.005496][ T38] #1: ffffc900044f32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 607.005559][ T38] locks held by kworker/0:7/6118: 3, on CPU#0: [ 607.005572][ T38] #0: ffff88813ff2b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.005622][ T38] #1: ffffc90006c87c40 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 607.005672][ T38] #2: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.005719][ T38] locks held by syz.2.1045/9115: 1, on CPU#0: [ 607.005732][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.005779][ T38] locks held by syz-executor/9171: 7, on CPU#0: [ 607.005792][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.005872][ T38] #1: ffff8880778ec078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.005918][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.005967][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.006013][ T38] #4: ffff888037631160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 607.006125][ T38] #5: ffff88802643c310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 607.006201][ T38] #6: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.006255][ T38] locks held by syz.6.1026/9269: 1, on CPU#0: [ 607.006267][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.006311][ T38] locks held by syz.9.1046/9367: 1, on CPU#0: [ 607.006325][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.006369][ T38] locks held by syz-executor/9393: 4, on CPU#0: [ 607.006382][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.006434][ T38] #1: ffff88803eebf078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.006480][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.006530][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.006576][ T38] locks held by syz.8.1074/9421: 1, on CPU#0: [ 607.006589][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.006634][ T38] locks held by syz.7.1078/9438: 1, on CPU#0: [ 607.006646][ T38] #0: ffffffff8f1c9f70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 607.006691][ T38] locks held by syz-executor/9443: 4, on CPU#1: [ 607.006704][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.006754][ T38] #1: ffff88802c1d4078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.006798][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.006848][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.006894][ T38] locks held by syz-executor/9463: 4, on CPU#0: [ 607.006906][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.006958][ T38] #1: ffff888084c2a878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.007003][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.007052][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.007098][ T38] locks held by syz-executor/9468: 4, on CPU#0: [ 607.007111][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.007163][ T38] #1: ffff8880636fdc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.007207][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.007263][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.007309][ T38] locks held by syz-executor/9498: 4, on CPU#0: [ 607.007322][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.007373][ T38] #1: ffff88802b018078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.007418][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.007466][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.007513][ T38] locks held by syz-executor/9522: 4, on CPU#0: [ 607.007526][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.007578][ T38] #1: ffff88807f4c8478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.007623][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.007672][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.007718][ T38] locks held by syz-executor/9546: 4, on CPU#0: [ 607.007731][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.007780][ T38] #1: ffff888031742878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.007824][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.007874][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.007920][ T38] locks held by syz-executor/9567: 4, on CPU#0: [ 607.007933][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.007984][ T38] #1: ffff88804e658878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.008029][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.008078][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.008124][ T38] locks held by syz-executor/9572: 4, on CPU#0: [ 607.008136][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.008187][ T38] #1: ffff888033666c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.008238][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.008287][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.008334][ T38] locks held by syz-executor/9599: 4, on CPU#0: [ 607.008346][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.008398][ T38] #1: ffff888037c20878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.008442][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.008492][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.008537][ T38] locks held by syz-executor/9622: 4, on CPU#0: [ 607.008550][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.008601][ T38] #1: ffff88809ac9f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.008646][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.008695][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.008740][ T38] locks held by syz-executor/9654: 4, on CPU#0: [ 607.008753][ T38] #0: ffff88803655c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 607.008802][ T38] #1: ffff88805cf79478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 607.008845][ T38] #2: ffff88802a5ab2d8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 607.008894][ T38] #3: ffffffff8fe46cf8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 607.008940][ T38] locks held by syz-executor/9679: 2, on CPU#0: [ 607.008953][ T38] #0: ffffffff8fd36088 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 607.009005][ T38] #1: ffffffff905d69b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 607.009052][ T38] locks held by syz-executor/9700: 1, on CPU#1: [ 607.009066][ T38] #0: ffffffff905d69b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 607.009113][ T38] locks held by syz-executor/9732: 2, on CPU#0: [ 607.009125][ T38] #0: ffffffff90b255e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 607.009178][ T38] #1: ffffffff905d69b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 607.009225][ T38] [ 607.009236][ T38] ============================================= [ 607.009236][ T38] [ 607.009251][ T38] NMI backtrace for cpu 0 [ 607.009268][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.009292][ T38] Tainted: [L]=SOFTLOCKUP [ 607.009298][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.009308][ T38] Call Trace: [ 607.009315][ T38] [ 607.009323][ T38] dump_stack_lvl+0xe8/0x150 [ 607.009363][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 607.009439][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 607.009472][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 607.009496][ T38] sys_info+0x135/0x170 [ 607.009515][ T38] watchdog+0xfd7/0x1030 [ 607.009546][ T38] ? watchdog+0x1c7/0x1030 [ 607.009582][ T38] kthread+0x38b/0x470 [ 607.009601][ T38] ? __pfx_watchdog+0x10/0x10 [ 607.009622][ T38] ? __pfx_kthread+0x10/0x10 [ 607.009643][ T38] ret_from_fork+0x514/0xb70 [ 607.009665][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 607.009683][ T38] ? __switch_to+0xc89/0x1420 [ 607.009727][ T38] ? __pfx_kthread+0x10/0x10 [ 607.009746][ T38] ret_from_fork_asm+0x1a/0x30 [ 607.009780][ T38] [ 607.009787][ T38] Sending NMI from CPU 0 to CPUs 1: [ 607.009816][ C1] NMI backtrace for cpu 1 [ 607.009832][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.009855][ C1] Tainted: [L]=SOFTLOCKUP [ 607.009862][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.009871][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x80 [ 607.009895][ C1] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d f8 75 df 11 65 48 8b 15 f8 75 df 11 <89> d7 81 e7 00 00 00 ff be 00 01 00 00 23 b1 fc 0b 00 00 09 f7 74 [ 607.009910][ C1] RSP: 0018:ffffc90000a2f7f8 EFLAGS: 00000297 [ 607.009926][ C1] RAX: ffffffff892ccbc0 RBX: 000000000000003f RCX: ffff88801e2cddc0 [ 607.009938][ C1] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 607.009950][ C1] RBP: dffffc0000000000 R08: 0000000000000100 R09: 0000000000000100 [ 607.009962][ C1] R10: 0000000000000100 R11: 0000000000000003 R12: ffffffff89bc7f20 [ 607.009974][ C1] R13: ffff8880b853db50 R14: 0000000000000001 R15: 0000000000000001 [ 607.009985][ C1] FS: 0000000000000000(0000) GS:ffff888124abb000(0000) knlGS:0000000000000000 [ 607.010000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.010012][ C1] CR2: 00007f5d64be5e9c CR3: 000000003c710000 CR4: 00000000003526f0 [ 607.010027][ C1] Call Trace: [ 607.010033][ C1] [ 607.010039][ C1] process_backlog+0x4a0/0xc50 [ 607.010059][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 607.010088][ C1] __napi_poll+0xae/0x550 [ 607.010107][ C1] net_rx_action+0x621/0xd70 [ 607.010133][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 607.010150][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 607.010177][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 607.010221][ C1] handle_softirqs+0x1da/0x6d0 [ 607.010249][ C1] __local_bh_enable_ip+0x16f/0x2b0 [ 607.010270][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 607.010286][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 607.010308][ C1] ? rcu_cpu_kthread+0x217/0x1740 [ 607.010331][ C1] rcu_cpu_kthread+0xb6c/0x1740 [ 607.010365][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 607.010397][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 607.010420][ C1] smpboot_thread_fn+0x565/0xa70 [ 607.010445][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 607.010473][ C1] kthread+0x38b/0x470 [ 607.010490][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 607.010513][ C1] ? __pfx_kthread+0x10/0x10 [ 607.010530][ C1] ret_from_fork+0x514/0xb70 [ 607.010548][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 607.010564][ C1] ? __switch_to+0xc89/0x1420 [ 607.010589][ C1] ? __pfx_kthread+0x10/0x10 [ 607.010606][ C1] ret_from_fork_asm+0x1a/0x30 [ 607.010630][ C1] [ 607.010818][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 608.608015][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 608.619217][ T38] Tainted: [L]=SOFTLOCKUP [ 608.623540][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.633590][ T38] Call Trace: [ 608.636870][ T38] [ 608.639801][ T38] vpanic+0x56d/0xa60 [ 608.643792][ T38] ? __pfx_vpanic+0x10/0x10 [ 608.648301][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 608.653860][ T38] panic+0xc5/0xd0 [ 608.657586][ T38] ? __pfx_panic+0x10/0x10 [ 608.662005][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 608.667027][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 608.673188][ T38] watchdog+0x1030/0x1030 [ 608.677538][ T38] ? watchdog+0x1c7/0x1030 [ 608.681973][ T38] kthread+0x38b/0x470 [ 608.686048][ T38] ? __pfx_watchdog+0x10/0x10 [ 608.690729][ T38] ? __pfx_kthread+0x10/0x10 [ 608.695323][ T38] ret_from_fork+0x514/0xb70 [ 608.699919][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 608.705034][ T38] ? __switch_to+0xc89/0x1420 [ 608.709721][ T38] ? __pfx_kthread+0x10/0x10 [ 608.714311][ T38] ret_from_fork_asm+0x1a/0x30 [ 608.719100][ T38] [ 608.722391][ T38] Kernel Offset: disabled [ 608.726703][ T38] Rebooting in 86400 seconds..