last executing test programs: 12m20.932127971s ago: executing program 1 (id=4223): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r0, 0x0, 0x400c000) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'ip6gre0\x00', 0xe03}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="08003200050000000500330021"], 0x2c}, 0x1, 0x0, 0x0, 0x4048850}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00'}) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f0000000440)={@mcast2, r8}, 0x14) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r10, &(0x7f0000003cc0)=[{{&(0x7f0000000740)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000780)="897acaab434e36c96d9a02b58182b12aa70ca629c470ab70df463ff0d17b1dfc68bcc9c027f6d427a06b562c632cef6a4e1b45b66e37f59d1d2b51ed8d5ee51cc5c1780bd7f09c9b3c59ddf9302e8ae4fd229afb1e97eb622e15c6b62b731e7f6b5842023708bdb5dea9c51c97", 0x6d}, {&(0x7f0000000800)="2174e3996118656bf86cf2ad802b4b9589a12e75b202dea808133204ea027a777ad446f076474f0d73b178fff2bf608ffc10fb5aabcc211f0208f4c06a5f251b68c16079e14f4ce0b82721e2bc89c2d7ac671f1288704ccfb0ae10ec3ca0f1b979e922e739f096cb5caa49babe75e3", 0x6f}, {&(0x7f0000000880)="1de77b55ff013115142a54417bc12bc2aa0529de64854449f2725c32f3f0f0f0cb417e65cd6f341f77b1d9a9d3edb44b97678631ef78406c847c0288838d0559f2e70f3a7b075007355b6bbda311233826b16870ebabd90febe316ab84417af6fc361cacf132692bbf7e94dd6b857afffa5c56a985bd3104948d45e5bf2e8bdee76c15a7219806f92b9bb4817d4c048c54fbbb739dbe9b64d77ce1ad9ebe9467efaee0ad11e606f184850d6591b6f1c16d6b80d51f9b5983111b2837f3f39023ce65a8b944167d5c120149fd31bc39100a0941bc84988aa5e5a2719590c57395255cdcb9b21d3fd365e6", 0xea}, {&(0x7f0000000980)="bd8ebb77b7ad25860e83c82dda7698842fcb6db3abd873870ad4a2329c97d9c707563375756ff904c8fd5989849bf79d0d8fa30d7eb9a9dce85bbaf8401776c12f61d9109566f46ccf9272e140f0ef7c41677591bdaea101d13ed2dd82864804e31eee855b5398eb97c4b08704d23413054eb6b5acefe9929685b93d2cebfef1efc18dc714a4c97814f2614d0e73104af4ff44ab3eaa8d73f35733b9160ff70f673b3208acddc01800de46e9fc17d27ee509cd4d7bf2909a3d2af2903ba9d018ecdada1e5de6d54a2f1157de12e3f38157776acd455b1c715bf4377d414ab31cf0162a1eed", 0xe5}, {&(0x7f0000000a80)="722b44123d75677d9c157b134111fe7163414fc17c762f05b23a56", 0x1b}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="8a3281e612d8726f5ebc302aba8bce8f21b6cd18dcf010ff03125e29f32781fabb4da1255bf869c417518e2141911906d1f119f3e3c01306cff01defcd068a95107c9cb4cad94e6d9681eb9905b3c31d7ea25f1de0e1a8f62b8a5ccaad446c5e7b878d9bf76a517cce3cd501b0539a1dacd9dadc464df53ec8f9bbde8b536fd6df772b995edeeee2e08dce46797139ad33691226b747feff4097ac32709906b45fdcb0bc9f938515c02d1a", 0xab}, {&(0x7f0000000bc0)="c8690814a154b9bae3a21e2f7fb5ebdd3c744d15d6a7e62e1193e3d6103a09d808b45ad1d672f04f78fc5772c623eee1daa36089c5c2260ae1a8cffe9734941e2b216b56dfc6bff2b481296a77cfb5aebd0dc719cca2", 0x56}, {&(0x7f0000000c40)="29040f3487282b9c0fb78e4ba38e6430cc27b1ffda27281333d2", 0x1a}, {&(0x7f0000000c80)="e4a023d17707e3373efe56cd4eea228db5a2d4215acfddc629a3acb6948b887486869cf44cfaa88024ca6876632991af97dc290e3898be8cc146e6ac7cd5b564117363de35353d354f4100ae242574bf71a8b044b144fbb51b9776355e75d4e45b85e2d5777588683cca91d7b842101f0e50bbf022353ae641cb1f15a9031634896574d2545bd3716b44873c5e3605a377a40346896eb1d2ef8d1990187489cdc03259d3db6e9f7d73c12d8a41c1a5d81dd320aaeab50481edfa16a8e04a833b43784102b071b062d432d6199fd5ba36", 0xd0}], 0xa, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x2, 0xc, "7eb63a827a219b81cdfb"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0xdd, 0x1, 0x5, [{@broadcast, 0x2}, {@multicast2, 0x7}, {@multicast2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x78}}, {{&(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000f00)="f3248d1be3fdb3c459c6c6641486c208285dbf300a8ea2d4801edd8388fa3f65f3d614bcec889029", 0x28}, {&(0x7f0000000f40)="a5d1a78a27e8fd03c06d7f328ae5be2ab4efd19c02a040d0e7cc14d756a0562046e0d94839c14bef9c67f46c5ec27f0c882c14b267c20e5453395824a09f93bbfe61eef064263d2e216328ce9791813a830fed35210bb616340e87d53f68404b324af4f090ccbd17281e09aa0db17ce0f7ecce2bd2469bc439fdd5ff3ba385d5e59e84738fc4ed33110c59ed12", 0x8d}, {&(0x7f0000001000)="527995210065a81496a524539a268b1490f963765393c61f16c0222fcab60621533595b6181b8b5df084be105d20a82741e9e1dbaf4964f7c7beb377a81890684fc2c10b38ce4bb52e16cfa91429aa6687e6fdc9eb609bbd87d8dd8df70dd38058aa550e43baffb768a31d1bb1b6bc6d871fc2fa6dc5a0dc65c3aa571e32b43bb6b30a4049b4aa44e96cea54e8eff6328e922406da37ef81d096f03a4c1612ffd08a921e43efdde366d2c56a40421e04ee5ea48a3bcfffd9e52bf29b34c0aee376ef83232a4a68084e", 0xc9}, {&(0x7f0000001100)="e5cc1ae7af556348089376fb9d706dbddae2e0e44f78d362a262bc4a31b8377d33da71af39cac83dcb4fba5d", 0x2c}, {&(0x7f0000001140)="96a414c159f58f88397711b1e749b9eca3704d2d720a552a06d26239daebb045f90dd197a7ef68a4d76b01b2d1876b", 0x2f}, {&(0x7f0000001180)="84a022709b7a70cdc02e009e7a42e04ef9751496364dd344d9aa046714bf8aeb5281eaa532c9a57164e90a0600f0e3a1df97379e", 0x34}, {&(0x7f00000011c0)="c1dc93e36baad6d628d640dd7c", 0xd}, {&(0x7f0000001200)="84373af14fd94f201f582251aad411edfd64d6cf8d419d30431bae530bb9509a4d649968fa0f736a70582a9a9af910ef85f458acca6cf6fb07a0282d497aee22e9064ecc4c2113b775b8934d53b41d79ab0c274e2875ce699711a4f6ced680f266e848635dc7b248c45e310226c529c10d24ed5258b12525963fb3e7f9db4e7d3000d9a40d974be7df3637cfbfbae47fed60b540d24b72888434f2", 0x9b}], 0x8, &(0x7f0000001340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}}, {{&(0x7f0000001380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003540)=[{&(0x7f00000013c0)="f5ed45b12c4070324814d70975070f1fee0091ad6211abd32ff239f23f6610cc6fd3aa82be9b0d39122511dd957a9f953ff9052b0921c72320ae58e6b98ad4", 0x3f}, {&(0x7f0000001400)="dc68f0d4f069e734487f671f652b2d4bce9b32b80e8cc7c838e88ba16c951c25ccb08bfea3", 0x25}, {&(0x7f0000001440)="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", 0xfe0}, {&(0x7f0000002440)="0b97f0244a93730a9c9b31789b584e5e56169b3bc10013bfefd29501c63d668bc846c76441897fe8c3840efda31c298653cffdd99c7be0cf88d5c08b680595341e818dd32a1b5cf19cd044e5ad512d41bdd7d041f95477c5deb6e360090c1c32043a89d873728fe86a9859f1380d82435251fb436098d8e7f626818d10d5386ddacd8222c963c54af481547892212b26373617e8c4c40574da7b22162396c5b9a032dbf0069985c01bac8beb651c317757e6ec20b2b3722ccf8e5a8692bdfa77551395b5d1017c666b9c37d4f0fa704aaa236cac482c59736317c6671f0b97625cac9ad2b5f511d073ec8f1c0fec6c86af8f40b77162b8bfd6c4385a59af9e0a9a8584926b2cd34afa0848bae438182cc135d3272fbbfc519791806725acbc0f1a5470678a749b9d4df66653439271a06e93f5f62e21e30143756c83123e77a68fa54b07bda682da8240aa1b0168c91fbfda801f9004734375d1dc6a25ab6573ac52dcf21bd19a8e7c04b32ab70e0b28e4b6f01f21dd4521b577eeba1d5845fe8e63f4328aace1c9047725d9e56e00bba66f46bda72c389eae28097620555afedf4fa9a50d7808494867190ed7d6f56a28061bb34d4373b1f6b05fdc65c3603c46b4ea35c430b477947c43fd54f86802da1795dbd2885824bc4530bb776713fb059b8587df6d7361189e82c46a435a04863040ef16dd8aa0d46a698fee7405bcbc9761d4804e1dacd8008c0d6bc68ab168011d6fe2ee9c12244d9cb7aa73ea7e6ae87e8511ea602065337c3f761e6a7ce30493bee0be9e19be3580ddab697fa05308a826ea5d04bf32ffaa718f479979be0921c53fcb13c1997f1ec8b9de78d5b7b0fecab3030e0fdfa64a78c27309bc8a478e9df22f908a61110679671e99d46fac1b31a9a1c508a6c37591d747df98ce8b3d91ae6b7c6a9fc4028edf7ba21f3c344270d8031dd46ef30db6c84d9617d5b091a3fa853de7002bc8231af309f9a4b1df8f26dd2bdd4950a297e9e706b38d41f74acd9d18aa9d150954d28d6642d05d3a5e3f98d24da610bec3dda38d4a311d84494be5e24ddc3bb4a55a30fdfa36622047889b9ea54c5f56ceac1fec5da3a9b81487f37bed3b32871fca653de0c5fdb7ee705e5407ae5b228db21abe94a2d795c6b26b5dc3372b9a9b4b0d81c6297ed648b3f28e11064d518fc917ef2e2f94c01989a31cda846a5a03212d5233ff439c8cf113160dcae2390201d20a390a8ad72e85b054a6a15f0e6f257f822311fbae18128dccde80c765490cd9be076865a24a528ca2097d124788cf4eed6e3d1a92fa383145feaa49e004f7a89b62f9bd54d3744c4792a64b5d32612dc1436ab2a2ac749514b9ecb4567f31261cedb095d1016c6bffe155380bc0ef2fe69416817482f6af661c22c3efefc2d3480db2161ae28a77368175af87de1938a26c9adbc391c1542f2ab4f54a8b7b509a250152166e8afb4d9456ab3cbb910d5b32128dde7d443b6a0f697e2fdc18326818f85ad98977c983104ddf179af4c516c42f275e743425cc7662baef05dfa51107f7696dec263e92627c6fdc3f04cfd4acc590684068a750f5db1177c5c9abdfba351db27e7b8e263a5b669ae476eb5174228910e918e6d0bad91e9e848e8ffc6628a4ba8fd6b0a78a1300a510b28b791210108b8ca7564cd4092784d7cf69c7ac785fdfd2c64bf2df7dc81299e2707d5212f88708d7835c2639f1c420a66bea4c8af84f94dc041f75cbf22ebe9ecbfa8c9acbc67ba23273a5a4cacae207cec7b41f531222ee721905e12451ce6a64f28442f487f3e5a84ca57483664f2baf4f771d2b7ebd17ff3c2f567c18647f844a3fd7e0e23c4cb6d996e5f84325a298c1e8740ad8ac1a5de6082572d202697e75397532b81822491729210ba2f53d821048e1b371aa5a1673a8b1165f4a35dc9f486a17b0f688c4e3dfc2d23e895ff02c78557da4f033e4948b276331412b078ca4b8ec0c22ddd095d5967df44dff357ff44cb750c35576aa08e674b9e9920f5525e5feed6d8165c1add865906f28a2b9a8a6d02a1530c431d03e632ba504229dc7ef14ecd1e6dc58bcc1b7cb136beca988dcea270db82c29fe854761e99f298ffb4839116222a8e29f3d303c3a985cd263f23c161908453cf1b7ec529a30f43d05ceb24e4a533371c34fc128497705c6ec4196c8fb3f2c3af3f0d1b5c87dedf2ba29bfd8f2522bb828e4acfc4a8b9c72fad4a8e14ea74b972ecff0b83354882cd76ae88cce5b807a08cb146294d5b18b27509015438f58ca8cd9a8e9bb2ddfefab23a54533fe8941279dfca2da9acf01a09b80863bf1d5593a8afe8dd096ba233e0534fae92b9df4fd0a573f4974942084ff917583ec60e1e2b4ae17e81216f9af1cab2c85e821ed0cc2d679988fa3164c8e53eb13ab14c83d1cb4a5953efc4e7f390f1093bc80b90de2b629f451e4ddd2e4a192675f0c17b3235c9c42febc61cc12edd440f489e6021c24cbef799b90b7a002c8e712c933f6a0e340eec5116fe3737ec9bd6f541945193cc32203f8a0b564ae8414964613ef8c615a0bb9f557d9e5c99f9f7f9c5274e4b4f15c3367397db37954b4f772a0831b126b9a1586290cc69b2484811bf13cf899d2c0021c3d4c2b7d0b7b4174865b2d1de2ccf9c736cd1cd783faebdcfd3e0f3ff7146b7d570cd6a2635c323ab997a4b661225ee40fd9817dbcd2f1cb6c3e32ce24306857a39748dde0154712a51970dd59a8c7e9cd96b7b8a997cc038a02ed57a3556b235edb638d55869c5bc99f232120ae752eec81643f4973d78ff38b105b3e04866b75a4fddeff4477500ce17013f754fcdd8895bef0c47037f5e1ad3117a99b777db0ae8463b029b69e92cc77d50e5dfecfc075b68d704a4dd4760b5b315268907fba16b39e93f982a12558a844e1c845a1bf8fc9507f6bf1ee03d4a65874c6f7637e34c40cd757cba89ad8bb459d9185c26382b7c4dc765dd911deb3574d03f7e8e91b48dcb42cc9bd0da8284b3403b53f210cfe79c85fafb237d51c55665ad2c0b37864e4d3c32626cfed10c50774025e3781cbaf95b588ea639d44a000ecbfd1dfe38162cc641e89f93b2eeb0179b9952f0e80d5ac3b96c11b712ed2722e5953101e26ccfb39f0969063aad613d1355ace8280a9c05310dd83679bc6fcbb7e77cf8701eb7a3b4930c97e8a9d2bd5bfa9a97ad8f8c72be16b4e1639af5c6be91c6187263473b0d118d8965c4800bcb1702ccc59b0e8994ba4ab54a2f06e9d01151c4fc8a1a11c5e151293c001c69165dffff325c4314f7a3cae070ed13932ac2273a4315cb8de7708a22631439a7283592f9022994ccbe1b1abb6fc8734162d1579048480abee3f90d0b2c1f445131566cb5d99129a2380e30226e4eb6d38fb55f486ba838e5ea5c2a2c4377761204f2a9a98410383525f799ab3a201223bdc3bdcebfb20648c28296e7eb0af3a1572e8dda67fa6e74d7f0fc5f2d501ab0396f7e15b8b8c51edb01c1d488e119f6bf690212cf5a9c6e715eed59fa2a2eb7f4e8d66a524e306f28dc974271efce85ba08e505004bebe6c06b56ffc4cafce942c6341f258b80d0f3d8785bef392582355b6b2183fd0cb40b35b1bc5eeff9e6bdf104c905aae3784f51443cf76c39fe3ccee96808f121579ab52a022eefe064cfcda83fcd12408a9a0861e1f1a0626350f35b73195f5ccf0d359b6d33edade12f03407b3f3d2c2036a737e228b0be533e5ed8b3091f4caf9c3b69c2ce4145cd693cf7c7ffb2d0b1dc5a63baa6ac6b4b3d9bbe5bed639ee804da997481cab3e5883cd5f5ea5195b4efaf95256f94093a7fe40bd93afd796c1653a0722d6fdb332fd5c04268233d2b00a8cb8ed3d09046142b803e0d554ec00a0e8f23a9ef56b712caa088510c96ded0de5dce565aa17eddd860f3255b9998eddf067b9c81ee8a82c7f72d2b3d022dcf5fff09de84d2888295c71c2c804f4a3d058f8b39166c1b27765d5d8e43b0abcd643bec69c01d1d3c5ae92cc391b024762787cde95737e1d5a9c75986b0a4d5eaa75d02bc01ad3c6f6a5555bf4994fea14ee9c57cf76720f5271bdde6508a59d09abf0121c3e9690831d016164db6c0da715c82112faa8e749013d53d13310290ed5495c2daaa5c2b592c3a2442c7c855974ad4a7ca4f860d54c5f171a8f186689efcfc88bb61ec1b2b35e81f7f2e43d00a6b04fdd2e57c0bd784442135bc6d55236ecc9161b11c898c9b99d381d5753930db39dd9ab41ffb7373ebd6363b292c242ac2ab1ff16ba9bc6424989941bcc67a8987ee787e5f329b9710a52b946c1b74c6f176903345b900a25f1789a1ea2ecbaf2c59f9450bf7f0ab7fd4f19f2a4c0eda187c430d1b7429892ca82ab2320aaace36168888020612c54b7b03f0e8f11d6a09ada7ece1eacaaec7a562976531419721cda8eae002a3798ad1402a88d719aad90e9279ac7c60589fdae314858f92471de12baa976a1cfad5b0f9b606122ebe53fe5b1dd75d5df82cd65e7acbc7baff8385b34f7a19c398e95c64dd61d0c7793c850a2da08968d7df40ce77fecbf3fc20da26ac90ef5ba675154baf54eb07fc83c5ac2613dae48a8d636de548a8bee62d0dd73f2a4981548b5ca443a1cf9ceb71e638e5e1bba9cf515f651e3003b5a8bc8d5f0589a87fb24e862e5e216c6b9fe92be7a2fe334e74d21e2e97aacfbbe6e45151c3531b89431a8244a4a282fa4a82fcfa3f5937782ea8c513b19928cb3283f7d2fa1fd624a1ea393ef9931058691490b80765ea6705fa9714acdeb80789068b9c326fb9e1e7c9f4b79066c5304b75b690216d85d9bfa61b108a679e56a4d3ef6abd9122d9bde6e39b9ed1f9cb7ea0edfe38e6f24349ce67611e3c2da9fc97ab363cf38114a77eed7b34656324cdab8532efaed47f194832f1637ea0ca9cf623fc2b22c79536be3fdb2858898b052de4b39fb4c2cf61bcb2dc0c89d6479a0db3603a9aa3feb9c790947076260d54b8f7b8235a8365cb78ce247ca9490a71834c25cee33671ab410a40eb86cef0a22177ff4b10a4de57c1cda4722e3bc7608dcc0153aec5b7829607ca9becde2e888846126e5cefa72326ac57b9dde35e34282da10a2accab53f4ef004cddcd538ddda3e93ea3dc4a594a837afbc00d99e0578d0f1749f18187bb262b70c8438f090f96ced1fb706c30ff43a691bf22645ca56efbac295e21499497aa3ac666787f2116ec8631cabbf66611a5cd998cb7f1853966003ef9c78eb4d2684a1f5997a3aa4f981827be2fdc5ce184d075a6fa468b447012f2425e09fa985d7a3a984ba3ab88ada8a783203511a14460b7eac098e6498f5af9c1cd9522b678e22eb8949b8868d14787e8ac1b80261b5038312580ea6c37323d2e1c5f17ed9b865d60c246f69d79c6585c0e50ec0f823fb78acb118c5824803a7c5b537d1d7d096d36284b3639e2252e934044e5f3ed0334abc44b965f853ca7ee34327fdae009897aced01a610392b5d49c0ca36a0d40408376101b3ca962d7238e88df78d1ac583bad830c3f300d5a886653a5e9bdd640843a635a616a11ed74c376c333f84924b97cf7599f9e54d3918cda1eb85943639198fc66f4110c6c566c962fa51b38dde1e5dc824d30dbeaa60fb215d97f370226d29e3f368207d21995f9d10471eba5b5f26ffd2b75ed98cc0204150b12b518914d2f8316464ecb71410728ad30265a73697186e482765d3d0b8c0c93c4b50fc8b52c46cea5d4c8ac902b090b5a70c35cfec1061d5be616b", 0xffc}, {&(0x7f0000003440)="717fdb86ae2c89c9dfd92cc80b727dac9328fe9064fe7d952f9de08165929f6efa4c035fe96748cd91d5d17d57a64633932008d434e72dfc01da9bd009447894293ec522c403ff6d9377fdd06e455841f4135a7881a77ba17b58b505673eaffd81fac3b4f0d92eec3120afc5b6075aaa46f0cb2b97ccfb6f19497ea131afdd62c82eda5150aa9c9117ee571c92f052710c72f66904032b4e8a6afb729aa90db3677c24", 0xa3}, {&(0x7f0000003500)="48acd6c3dbad8415a378a812fe234fe087d884e5a9", 0x15}], 0x6, &(0x7f0000003680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffc}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x95de}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x64, 0x0, 0x7, {[@end, @rr={0x7, 0x23, 0xe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010100, @multicast2, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101]}, @timestamp={0x44, 0x1c, 0xa1, 0x0, 0x8, [0xef26, 0x8000, 0x40, 0x3, 0x9, 0x3]}, @end, @end, @generic={0x82, 0x8, "8f87dc38d582"}, @ssrr={0x89, 0x7, 0xab, [@local]}]}}}], 0x130}}, {{&(0x7f00000037c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000003900)=[{&(0x7f0000003800)="dbd7b98ebc66f55ba86d73a9349b319d8673f7f2ffb46f916d3face7c99aebf0323bfd39486179abbc4f48a439f1ff5f24bb51dc935c0caea9b016c376d4dab20c8a4245ef502a97ac48d6762678c08ce661da75c33f748bb98ef073bebc8df676fc6d1a9ddbbe00ae135bb95fde6b8e728e269f18e7981761a2da0a58b63c90a3a78cb3d1fa49c1cffa24eaf875766e160c55b51ae0b72532f0b525ab50bf81eb6acab9483343b1164a0971734a496a905a031e898619e09932fc8f84560976c5540fedaebb651bcf7cd45d5b822a485d5a419131463ed3f8ec35901e785fdac147b1f41a7ca6cfcf6466968d9be0bdecf2b3c7b64abbcfc5", 0xf9}], 0x1, &(0x7f0000003940)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfff}}], 0x18}}, {{&(0x7f0000003980)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003c40)=[{&(0x7f0000003a80)="2378f21f2bccfc458895bbd1d354f288398fc12873dde5e6768d478810e5e61184262b88a11fe3af429870af505eeacc9211e3b1539ae8cf089d14d5ed53936d6238117ac692d4611401bbf31ef7862451c55f2109d73d6a1866bd6104d155ece524e3f79770ba13e4968e9b22e0bffbd3a4dd85c45598063212f7385747b0ed0ea85280f2053b7d47744a46ba9dcb09afb476191faeb4d2e5cf8b0d0463f0450c42ca5af1623c2a9d6aa37e4ce677abef4dbeeed4d3288e62611bb5c52d2474f79b9fb78bf353a8ec11b75c51709c9a46dbabc4f8775a2629a329cf4e959e72", 0xe0}, {&(0x7f0000003b80)="75430098d2c7384aa84c0504a54cdc6fbf074221115334773cf49a2080efddbd3bc10c8cc62722418495a1a6cb6e960718bf43b3945de93795dc2c0b2f19dd374edc45d82fa745886c73085a5c7f9b33803ebbff9ad4758825d4fcafaa4e7d7bae6a9cce2b801ee81d46619dddd7f39315984f18ee41ad33b883a24d8f9a17196f", 0x81}], 0x2, &(0x7f0000003c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xeb0}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}}], 0x5, 0x4000000) 12m20.461699786s ago: executing program 1 (id=4227): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup3(r0, r1, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25310000", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) 12m20.182980209s ago: executing program 1 (id=4230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0x1, 0xa00}]}, 0x1}, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) setuid(0xee01) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000001300)) 12m19.546211757s ago: executing program 1 (id=4234): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x67) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m19.24398407s ago: executing program 1 (id=4237): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 12m18.193998193s ago: executing program 1 (id=4243): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12m3.054716358s ago: executing program 32 (id=4243): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 23.754522913s ago: executing program 0 (id=6884): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x8000) 23.496599606s ago: executing program 0 (id=6887): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 23.061070133s ago: executing program 0 (id=6892): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 22.842147146s ago: executing program 0 (id=6895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 18.350282108s ago: executing program 0 (id=6900): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) sendto$inet6(r0, &(0x7f0000000800)="4103082c", 0x4, 0x880, 0x0, 0x0) 18.16463511s ago: executing program 0 (id=6901): unshare(0x20000400) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 3.64482851s ago: executing program 2 (id=6930): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$l2tp6(0xa, 0x2, 0x73) r10 = accept4$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800) ppoll(&(0x7f0000000180)=[{r8, 0x8400}, {r9, 0x80}, {r2, 0x8000}, {r10, 0x1050}, {r4, 0x260}, {r5, 0x1}, {r0, 0x100}], 0x7, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffffb]}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000080)={r7, 0x3}, &(0x7f00000000c0)=0x8) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r2, r3, 0x0, 0xffffffff004) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4040811}, 0x0) 2.91705351s ago: executing program 4 (id=6935): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0x1000000, 0xc7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet6(r1, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x80) 2.864503781s ago: executing program 3 (id=6936): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, 0x0, &(0x7f0000001c80)) 2.592578094s ago: executing program 2 (id=6937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 2.476626736s ago: executing program 4 (id=6938): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000800)="4103082c", 0x4, 0x880, 0x0, 0x0) 2.361434238s ago: executing program 4 (id=6939): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) 2.243906649s ago: executing program 3 (id=6940): setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 2.084585781s ago: executing program 3 (id=6941): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001340)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0xfff6, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xa92c}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}}, 0x4000010) 2.081545112s ago: executing program 2 (id=6942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000780)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.963894013s ago: executing program 3 (id=6943): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40789440, &(0x7f0000000640)={0x0, 0x0, 0x80, 0x0, 0x58, 0x8001, 0xa7d, 0x2, 0x5}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x4008000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x3c, r8, 0x1, 0x70bd2c, 0x1200, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x3c}}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 749.52085ms ago: executing program 4 (id=6944): syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xba922ce0ca21f0e2) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r0) 672.731911ms ago: executing program 2 (id=6945): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca6", 0x80}, {&(0x7f0000000600)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb555c80dbd2bc9694e862a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae91", 0x71}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c71", 0x20}, {&(0x7f00000000c0)}], 0x4}}], 0x1, 0x20000044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 643.151721ms ago: executing program 3 (id=6946): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000800)="4103082c", 0x4, 0x880, 0x0, 0x0) 572.611282ms ago: executing program 3 (id=6947): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="710509"], 0x11) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) 533.540333ms ago: executing program 4 (id=6948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000d640)={0x0, 0x0, &(0x7f000000d600)={&(0x7f00000005c0)=@newtaction={0x8d8, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x8c0, 0x1, [@m_ipt={0x1bc, 0x10, 0x0, 0x0, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x61, 0x6, {0xa, 'filter\x00', 0x3, 0xfff8, "949ec298184175de8a1e95208bef2ef794a87535d14bb3652ca7220928c1ad67e8a23993770ebef3da299dac295f1a0bc30fe22fe588e4"}}]}, {0xdd, 0x6, "03ac80cfd1249ed89da4b4e064a88cf7888759ce3312d67bbeea01f7f6c9f491935443f306d713a8fb7047a5159129297f7f8246cb8a74f94a6549059e3355756d6a3c9c08443c0c8eb49f72da898b3e59e137ba1d39ee10f5852964dcc1ae09f1d79ea65067e3beb0581a644fa59e12b2067de4a4887357334fb4a634cd5ab42abcbd529744bfa42595e567d534650556ea0f7f71b5eef650e2e8cdf4b1c668d2fd7e7dc16cc6f733b8af68288997aaefbf7899a0ca19983cb564fa5be768a31ab822d6c98aeef1a5fc9d6bcf7b9a1b88a94365931608d06f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x284, 0x10, 0x0, 0x0, {{0x8}, {0x218, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_TARG={0x115, 0x6, {0x5, 'mangle\x00', 0x9, 0x1, "df40ef633d7fced138f5c05243813154eb9224b7d5a879ba47f4028b9724e2b60c112dcd91ea539f0e3a16b2e5954251ab980ce67f154c0b80200c58cdc14f75a70c11cc414052ea9459cf769637ed068ff882ac2d0e22126b60eb4d7a9cb0d3f36a6d30c0ab19297cf9c07a89b323a4a1201ab4a49a94b154a08c5be2d1f3391293a93bd401285fe709aff41fd049f1e803792de03e2f1b279b3026314b09299a7c683f73fef9d127b0df60cf2a903597038b49f197c9001c02f0bd5f4461086c6e2cf499a7942ba43fca26f05fd1199e2adff158342408f86f38d442a5f16537093caee1d5f07717032d"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0x51, 0x6, {0x0, 'mangle\x00', 0x2, 0x3, "4c62fdb6c1d9e9751b85131383111291d855fa8a1919a06334c9969770bab9c51972ad6e414dec"}}, @TCA_IPT_TARG={0x59, 0x6, {0x1, 'security\x00', 0x8, 0x9, "971abd9e3af5c1bfd53060e4436fe09d360b2e2cd7229a795eaf74a4275a09505046cef4f96f198c51e39933af8a7f"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x45, 0x6, "8c92234b521ffe981dd0d4e10afaec6dbee0efcb56e1ef9170b1cd45cae808519866ce57200c79038bb552b2c395487ede6fb7b593fc117195f7c49f88670cc444"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x104, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0xd9, 0x6, "316808d11baf2e7a87a1719cff1202295b3859aff61acafde2041d664c580c5a8c7b2ad459ffa172795ff364021113ef817bc4ad9a1d4059ec4674e9e80a395288a9cc0fa41ad0cbc5c7e84f16743929b5081efd398e27f286c48e14e20fe72b72cf113c0b3946f9d4c33ca5e4bc0ce96097ce357172e6ccf80818c0306fab9626b178a968b1c6b2de0b517302a9cc12fda509a7d256a4ff54a10e7946726678b31c6e99991735b21d31e8ef19e018e2c901e8d267cac71a9d3597b71e9b60fdb165fe02e8f3eaeb5739f4dfd19be90f69d368cd4f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x4c, 0x1c, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ipt={0x32c, 0x11, 0x0, 0x0, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x71, 0x6, {0x0, 'mangle\x00', 0x9, 0xfff7, "324c5880937062dd44953edc94d7272b4c88b39babcd9c65304f8a683018823a5e26ad479677a86742f2ae2ebc984490fe68940b5658702910f2b9d1b952c7318ce607b082e9db"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TARG={0xa2, 0x6, {0x3, 'mangle\x00', 0x4, 0x3, "f0f8f66d602b6783655db39e1cc948a0421e5d1393f4cd635a25e30c1719f35655ebc220059a6505e7e8de74849c425e9217e4cc351477cb2a445b66dd468c00d32929d5f3c2ea9992c262f0d79d8d361d1556aa1b2e21c4f045af07d8fce62f3493ce450ef47273cf7908ed5026fd1b3a1cab1153f7eb09"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xe1, 0x6, {0x7ff, 'security\x00', 0x2, 0x8, "fed0e0dacc4fc91d4e674122609e0a6162b34895637129fc809755c2b8d7d77e2e9bd17541036e25155b436d08daa8f6d6c96ee00292d32de94a5923b4762bed536f8d1b5634ea3ad83c7aa89e9a796237166ce1d5ce33a899c82ff0563bcc2c8e4abff8f2c8062ab102025a307c9c376b51089b89c2676f13aa867fc2c454cd141b4713532c3780d291e19348fea90fbfc1fe5d0d52c7ef25d06ebd7ca66eb9f552a3c5d6a9dcd88011be9ee1bd641a022baf2be1d2fb"}}]}, {0xb9, 0x6, "5de6ccedd6ab8060663a7ac5c9ad021c362c7981b166af53b704aec6d76d313d14822b2107088a89b23b5d63a0c635c17fb34c2036b49f31fea2bdc79cb41fef7dfd6683a7307848c9275e08e06c018a8c4dce0e1f509600cfc2deb018c8cedc9a9d619d63faf53492c28f9fd99c2952312d7437c45dc56b17dc63d3e5e97ab2a16ee79c81478e10ba888305e6817945a0b68306a971c4a2382bd9577b679196987065bd27745023d7a979e0bde20eb6328afee98a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, {0x4}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x8004}, 0x880) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x6, 0xfffffffffffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 371.770155ms ago: executing program 2 (id=6949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 117.234779ms ago: executing program 4 (id=6950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7001fbdbdd251900000008000300", @ANYRES32=r3, @ANYBLOB="0500600081000000a6211d8391742a64316aa42ca75292cf0bd6fa27c1ea87f081b55e86a00f0983d4e267e4b81d182584df278c52ff1533a99574c951cd28b55cf8ad6ac161ea2d79ecd13aa727164e6ca353a50b"], 0x24}}, 0x800) 0s ago: executing program 2 (id=6951): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvfrom$llc(r0, &(0x7f0000000340)=""/203, 0xcb, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) sendfile(r0, r1, 0x0, 0xffffffff000) kernel console output (not intermixed with test programs): x81 has invalid maxpacket 24936, setting to 1024 [ 1589.160958][T18048] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1589.170353][T18048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.191391][T18048] hub 5-1:1.0: bad descriptor, ignoring hub [ 1589.206897][T18048] hub: probe of 5-1:1.0 failed with error -5 [ 1589.222639][T18048] cdc_wdm 5-1:1.0: skipping garbage [ 1589.231240][T18048] cdc_wdm 5-1:1.0: skipping garbage [ 1589.240022][T18048] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1589.246436][T18048] cdc_wdm 5-1:1.0: Unknown control protocol [ 1589.873972][T23825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5250'. [ 1591.702354][T23824] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1591.708949][T23824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1591.715351][T23824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1591.721658][T23824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1591.806669][T12703] usb 5-1: USB disconnect, device number 35 [ 1592.005080][T19361] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1592.051458][T23854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1592.204813][T19361] usb 4-1: Using ep0 maxpacket: 16 [ 1592.216239][T19361] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1592.237964][T19361] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1592.249960][T19361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.258637][T19361] usb 4-1: Product: syz [ 1592.263189][T19361] usb 4-1: Manufacturer: syz [ 1592.271275][T19361] usb 4-1: SerialNumber: syz [ 1592.281034][T19361] usb 4-1: config 0 descriptor?? [ 1592.299067][T19361] hub 4-1:0.0: bad descriptor, ignoring hub [ 1592.313795][T19361] hub: probe of 4-1:0.0 failed with error -5 [ 1592.323647][T19361] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1592.811101][T23849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1593.082864][T23862] ip6t_srh: unknown srh match flags 4000 [ 1593.363838][T23864] fuse: Bad value for 'fd' [ 1593.745396][T20765] Bluetooth: hci1: command 0x0c1a tx timeout [ 1593.751866][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1593.758364][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1593.991422][T12703] usb 4-1: USB disconnect, device number 8 [ 1594.204974][ T5850] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1594.422444][ T5850] usb 3-1: Using ep0 maxpacket: 8 [ 1594.441508][ T5850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.464817][ T5850] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1594.473989][ T5850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1594.487097][ T5850] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1594.499556][ T5850] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1594.508944][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.532023][ T5850] hub 3-1:1.0: bad descriptor, ignoring hub [ 1594.548604][ T5850] hub: probe of 3-1:1.0 failed with error -5 [ 1594.562877][ T5850] cdc_wdm 3-1:1.0: skipping garbage [ 1594.568498][ T5850] cdc_wdm 3-1:1.0: skipping garbage [ 1594.578698][ T5850] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1594.590771][ T5850] cdc_wdm 3-1:1.0: Unknown control protocol [ 1594.735020][T23889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.008369][T23892] fuse: Bad value for 'fd' [ 1595.058517][T23890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.083935][T23890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.499764][T23886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.884854][ T5850] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1596.086784][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 1596.106231][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1596.128626][ T5850] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1596.140862][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.152213][ T5850] usb 5-1: Product: syz [ 1596.243304][ T5850] usb 5-1: Manufacturer: syz [ 1596.248681][ T5850] usb 5-1: SerialNumber: syz [ 1596.261475][ T5850] usb 5-1: config 0 descriptor?? [ 1596.271336][ T5850] hub 5-1:0.0: bad descriptor, ignoring hub [ 1596.277564][ T5850] hub: probe of 5-1:0.0 failed with error -5 [ 1596.286347][ T5850] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1596.765336][T18048] usb 3-1: USB disconnect, device number 62 [ 1597.079039][T23912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5279'. [ 1597.167126][T23916] fuse: Invalid rootmode [ 1598.586102][T12703] usb 5-1: USB disconnect, device number 36 [ 1598.685907][T12629] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1598.904851][T12629] usb 3-1: Using ep0 maxpacket: 8 [ 1598.912685][T12629] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.923284][T12629] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1598.932458][T12629] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1598.943891][T12629] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1598.955628][T12629] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1598.964936][T12629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.982629][T12629] hub 3-1:1.0: bad descriptor, ignoring hub [ 1598.992456][T12629] hub: probe of 3-1:1.0 failed with error -5 [ 1599.008367][T12629] cdc_wdm 3-1:1.0: skipping garbage [ 1599.013851][T12629] cdc_wdm 3-1:1.0: skipping garbage [ 1599.024128][T12629] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1599.035312][T12629] cdc_wdm 3-1:1.0: Unknown control protocol [ 1599.480596][T23929] usb 3-1: reset high-speed USB device number 63 using dummy_hcd [ 1599.563389][T23946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1599.619223][T23948] fuse: Invalid rootmode [ 1600.068638][ T5764] usb 3-1: USB disconnect, device number 63 [ 1601.096493][ T5850] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1601.307113][T23979] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5300'. [ 1601.372393][T23981] fuse: Invalid rootmode [ 1601.384933][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 1601.392601][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1601.408297][ T5850] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1601.419916][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.436055][ T5850] usb 3-1: Product: syz [ 1601.442242][ T5850] usb 3-1: Manufacturer: syz [ 1601.448580][ T5850] usb 3-1: SerialNumber: syz [ 1601.456938][ T5850] usb 3-1: config 0 descriptor?? [ 1601.468648][ T5850] hub 3-1:0.0: bad descriptor, ignoring hub [ 1601.479852][ T5850] hub: probe of 3-1:0.0 failed with error -5 [ 1601.491781][ T5850] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1601.864794][ T5850] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1602.065400][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 1602.091921][ T5850] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1602.104557][ T5850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1602.114769][ T5850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1602.125135][ T5850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1602.135368][ T5850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1602.148889][ T5850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1602.159804][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.384603][ T5850] usb 5-1: usb_control_msg returned -32 [ 1602.393659][ T5850] usbtmc 5-1:16.0: can't read capabilities [ 1602.601526][ T5850] usb 5-1: USB disconnect, device number 37 [ 1603.342914][T24013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5310'. [ 1603.449379][T24017] fuse: Bad value for 'rootmode' [ 1603.940319][T12629] usb 3-1: USB disconnect, device number 64 [ 1604.247620][T24034] ip6t_srh: unknown srh match flags 4000 [ 1604.440893][T24043] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5319'. [ 1604.532364][T24046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1604.582789][T24051] fuse: Bad value for 'rootmode' [ 1604.597434][T24046] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1605.664473][T24075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5328'. [ 1605.724423][T24075] syz_tun (unregistering): left allmulticast mode [ 1605.812092][T24079] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5329'. [ 1606.250957][T24087] fuse: Bad value for 'rootmode' [ 1606.458282][T24099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5330'. [ 1606.544375][T24099] futex_wake_op: syz.2.5330 tries to shift op by 32; fix this program [ 1607.182124][T24112] ip6t_srh: unknown srh match flags 4000 [ 1607.321226][T24117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5340'. [ 1607.597225][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.603655][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.788516][T24131] fuse: Unknown parameter 'use00000000000000000000' [ 1608.949427][T24160] fuse: Unknown parameter 'use00000000000000000000' [ 1609.462326][T24181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5359'. [ 1610.078947][T24196] fuse: Unknown parameter 'use00000000000000000000' [ 1610.184855][T12629] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1610.345096][T12629] usb 3-1: device descriptor read/64, error -71 [ 1610.625391][T12629] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1610.785527][T12629] usb 3-1: device descriptor read/64, error -71 [ 1610.965653][T12629] usb usb3-port1: attempt power cycle [ 1611.385163][T12629] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1611.486283][T12629] usb 3-1: device descriptor read/8, error -71 [ 1611.648739][T24223] random: crng reseeded on system resumption [ 1611.754793][T12629] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1611.803714][T12629] usb 3-1: device descriptor read/8, error -71 [ 1611.935956][T12629] usb usb3-port1: unable to enumerate USB device [ 1611.944987][T13560] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1612.160035][T13560] usb 4-1: Using ep0 maxpacket: 16 [ 1612.167910][T13560] usb 4-1: config 0 has no interfaces? [ 1612.176052][T13560] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1612.185928][T13560] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1612.194112][T13560] usb 4-1: Manufacturer: syz [ 1612.202963][T13560] usb 4-1: config 0 descriptor?? [ 1612.233164][T24233] fuse: Unknown parameter 'user_i00000000000000000000' [ 1613.657572][T24259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5382'. [ 1613.711973][T24258] lo: entered allmulticast mode [ 1613.813888][T24265] fuse: Unknown parameter 'user_i00000000000000000000' [ 1614.796959][T13560] usb 4-1: USB disconnect, device number 9 [ 1615.854027][T24288] fuse: Unknown parameter 'user_i00000000000000000000' [ 1615.874935][T13560] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1616.044793][T13560] usb 4-1: device descriptor read/64, error -71 [ 1616.334978][T13560] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1616.494877][T13560] usb 4-1: device descriptor read/64, error -71 [ 1616.616609][T13560] usb usb4-port1: attempt power cycle [ 1616.644980][T12703] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1616.836064][T12703] usb 3-1: Using ep0 maxpacket: 16 [ 1616.852588][T12703] usb 3-1: config 0 has no interfaces? [ 1616.867839][T12703] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1616.886561][T12703] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1616.895761][T12703] usb 3-1: Manufacturer: syz [ 1616.905644][T12703] usb 3-1: config 0 descriptor?? [ 1617.036863][T13560] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1617.904791][T13560] usb 4-1: device descriptor read/8, error -71 [ 1618.160820][T24320] fuse: Unknown parameter 'user_id00000000000000000000' [ 1619.601007][T12629] usb 3-1: USB disconnect, device number 69 [ 1619.992921][T24349] fuse: Unknown parameter 'user_id00000000000000000000' [ 1620.129646][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5416'. [ 1620.195391][T24353] syz_tun (unregistering): left allmulticast mode [ 1620.817379][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5420'. [ 1622.755210][T24379] fuse: Bad value for 'fd' [ 1623.265632][T24367] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1623.503675][T24367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1623.510632][T24367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1623.517307][T24367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1623.618220][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1623.951770][T24387] overlayfs: missing 'lowerdir' [ 1625.344947][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1625.503428][T24404] fuse: Bad value for 'fd' [ 1625.525024][T13560] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1625.542101][T24406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1625.585608][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1625.591822][T20765] Bluetooth: hci3: command 0x0c1a tx timeout [ 1625.685196][T13560] usb 5-1: device descriptor read/64, error -71 [ 1625.986782][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5436'. [ 1626.235286][T24414] overlayfs: missing 'workdir' [ 1626.304976][T13560] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1626.464991][T13560] usb 5-1: device descriptor read/64, error -71 [ 1626.585265][T13560] usb usb5-port1: attempt power cycle [ 1626.994855][T13560] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1627.028156][T13560] usb 5-1: device descriptor read/8, error -71 [ 1627.199088][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1627.295536][T13560] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1627.336270][T13560] usb 5-1: device descriptor read/8, error -71 [ 1627.455124][T13560] usb usb5-port1: unable to enumerate USB device [ 1628.230125][T24410] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1628.359972][T24429] fuse: Bad value for 'fd' [ 1628.614073][T24410] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1628.622292][T24410] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1628.630043][T24410] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1628.689192][T24431] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5445'. [ 1628.977816][T24437] overlayfs: missing 'workdir' [ 1629.207466][T24450] fuse: Bad value for 'fd' [ 1629.439546][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5456'. [ 1629.455238][ T5850] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1629.644931][ T5850] usb 5-1: device descriptor read/64, error -71 [ 1629.914873][ T5850] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1630.074807][ T5850] usb 5-1: device descriptor read/64, error -71 [ 1630.102568][T24461] syzkaller0: entered promiscuous mode [ 1630.108272][T24461] syzkaller0: entered allmulticast mode [ 1630.195006][ T5850] usb usb5-port1: attempt power cycle [ 1630.335974][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1630.635095][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1630.654870][ T5850] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1630.712424][ T5850] usb 5-1: device descriptor read/8, error -71 [ 1630.719171][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1631.039902][ T5850] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1631.086199][ T5850] usb 5-1: device descriptor read/8, error -71 [ 1631.208573][ T5850] usb usb5-port1: unable to enumerate USB device [ 1632.445450][T24484] fuse: Unknown parameter '0x0000000000000004' [ 1635.354862][T12629] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1635.474355][T24525] fuse: Unknown parameter '0x0000000000000004' [ 1635.524947][T12629] usb 5-1: device descriptor read/64, error -71 [ 1635.804783][T12629] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1635.954911][T12629] usb 5-1: device descriptor read/64, error -71 [ 1636.075055][T12629] usb usb5-port1: attempt power cycle [ 1636.216747][T24539] lo: entered allmulticast mode [ 1636.490860][T24546] syzkaller0: entered promiscuous mode [ 1636.497094][T24546] syzkaller0: entered allmulticast mode [ 1636.515035][T12629] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1636.556028][T12629] usb 5-1: device descriptor read/8, error -71 [ 1636.836431][T12629] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1636.879833][T12629] usb 5-1: device descriptor read/8, error -71 [ 1637.010664][T12629] usb usb5-port1: unable to enumerate USB device [ 1639.252518][T24561] fuse: Unknown parameter '0x0000000000000004' [ 1641.832442][T24549] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1642.415197][T12629] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1642.636498][T12629] usb 3-1: Using ep0 maxpacket: 8 [ 1642.697325][T12629] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1642.724483][T12629] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.763879][T12629] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1642.791066][T12629] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.339812][T24606] fuse: Unknown parameter '0x0000000000000004' [ 1643.510378][T24611] siw: device registration error -23 [ 1644.173155][T24628] syzkaller0: entered promiscuous mode [ 1644.180112][T24628] syzkaller0: entered allmulticast mode [ 1645.117670][ T5781] usb 3-1: USB disconnect, device number 70 [ 1647.546611][T24660] fuse: Unknown parameter '0x0000000000000004' [ 1649.844448][T24665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5501'. [ 1649.853722][T24665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1649.861810][T24665] IPv6: NLM_F_CREATE should be set when creating new route [ 1650.066227][T24671] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 1650.305260][T13560] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1650.494808][T13560] usb 3-1: Using ep0 maxpacket: 8 [ 1651.854029][T13560] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1651.864884][T13560] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1651.891058][T13560] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1651.914207][T13560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.052710][T24696] fuse: Unknown parameter '0x0000000000000004' [ 1653.766005][T24733] fuse: Unknown parameter 'fd0x0000000000000004' [ 1653.773910][ T5781] usb 3-1: USB disconnect, device number 71 [ 1654.749278][T24757] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1654.770567][T24757] bond3: (slave lo): Enslaving as an active interface with an up link [ 1654.819776][T24757] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1655.216546][T24761] fuse: Unknown parameter 'fd0x0000000000000004' [ 1656.042667][T24792] fuse: Unknown parameter 'fd0x0000000000000003' [ 1657.994875][T13560] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1658.185204][T13560] usb 5-1: Using ep0 maxpacket: 16 [ 1658.273388][T13560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1658.401828][T13560] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1658.476447][T13560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.552838][T13560] usb 5-1: Product: syz [ 1658.585896][T13560] usb 5-1: Manufacturer: syz [ 1658.624224][T13560] usb 5-1: SerialNumber: syz [ 1658.804188][T13560] usb 5-1: config 0 descriptor?? [ 1658.940433][T13560] hub 5-1:0.0: bad descriptor, ignoring hub [ 1658.951130][T13560] hub: probe of 5-1:0.0 failed with error -5 [ 1658.970462][T13560] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1659.243862][T12629] usb 5-1: USB disconnect, device number 50 [ 1659.773342][T24880] siw: device registration error -23 [ 1664.084941][T12629] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1664.264779][T12629] usb 5-1: Using ep0 maxpacket: 16 [ 1664.274778][T12629] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1664.290981][T12629] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1664.303206][T12629] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.314594][T12629] usb 5-1: Product: syz [ 1664.320346][T12629] usb 5-1: Manufacturer: syz [ 1664.325511][T12629] usb 5-1: SerialNumber: syz [ 1664.346781][T12629] usb 5-1: config 0 descriptor?? [ 1664.357094][T12629] hub 5-1:0.0: bad descriptor, ignoring hub [ 1664.363254][T12629] hub: probe of 5-1:0.0 failed with error -5 [ 1664.373763][T12629] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1664.654530][T18048] usb 5-1: USB disconnect, device number 51 [ 1665.059488][T24956] syzkaller0: entered promiscuous mode [ 1665.065396][T24956] syzkaller0: entered allmulticast mode [ 1666.597647][T12703] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1669.040316][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.048177][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.804899][T12629] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1671.015071][T12629] usb 3-1: Using ep0 maxpacket: 16 [ 1671.048200][T12629] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1671.121568][T12629] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1671.152846][T12629] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.161122][T12629] usb 3-1: Product: syz [ 1671.165389][T12629] usb 3-1: Manufacturer: syz [ 1671.170223][T12629] usb 3-1: SerialNumber: syz [ 1671.186070][T12629] usb 3-1: config 0 descriptor?? [ 1671.193752][T12629] hub 3-1:0.0: bad descriptor, ignoring hub [ 1671.204890][T12629] hub: probe of 3-1:0.0 failed with error -5 [ 1671.234388][T12629] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1671.572918][ T8] usb 3-1: USB disconnect, device number 72 [ 1671.613762][T25032] udevd[25032]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1671.740214][T25025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1673.812613][T25023] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1673.819219][T25023] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1673.825450][T25023] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1673.831567][T25023] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1674.645790][T25084] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1675.405311][T25097] block nbd0: server does not support multiple connections per device. [ 1675.415289][T25097] block nbd0: shutting down sockets [ 1675.904767][T15905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1675.914778][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1675.921009][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1676.670245][T25101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1677.081148][T25115] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5631'. [ 1678.704822][T25102] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1679.047880][T25102] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1679.054071][T25102] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1679.062171][T25102] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1679.323170][T25142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5639'. [ 1679.350291][T25142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5639'. [ 1679.359555][T12629] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1679.554834][T12629] usb 5-1: Using ep0 maxpacket: 8 [ 1679.564520][T12629] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.584589][T12629] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1679.602274][T12629] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.615837][T12629] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1679.628162][T12629] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1679.642792][T12629] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.664424][T12629] hub 5-1:1.0: bad descriptor, ignoring hub [ 1679.673724][T12629] hub: probe of 5-1:1.0 failed with error -5 [ 1679.681315][T12629] cdc_wdm 5-1:1.0: skipping garbage [ 1679.691258][T12629] cdc_wdm 5-1:1.0: skipping garbage [ 1679.697190][T12629] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1680.406183][T12629] usb 5-1: reset high-speed USB device number 53 using dummy_hcd [ 1680.784947][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1680.977319][T19361] usb 5-1: USB disconnect, device number 53 [ 1681.104920][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1681.111191][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1681.190575][T25177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1681.753507][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5650'. [ 1683.264737][T25176] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1683.963439][T25176] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1683.970349][T25176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1683.978863][T25176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1684.734792][T19361] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1684.924814][T19361] usb 3-1: Using ep0 maxpacket: 16 [ 1684.937957][T19361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1684.955547][T19361] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1684.966514][T19361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1684.975088][T19361] usb 3-1: Product: syz [ 1684.979415][T19361] usb 3-1: Manufacturer: syz [ 1684.984064][T19361] usb 3-1: SerialNumber: syz [ 1684.994844][T19361] usb 3-1: config 0 descriptor?? [ 1685.002538][T19361] hub 3-1:0.0: bad descriptor, ignoring hub [ 1685.010557][T19361] hub: probe of 3-1:0.0 failed with error -5 [ 1685.018906][T19361] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1685.355210][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1685.467497][T25250] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1685.479388][T25250] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5665'. [ 1685.984906][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1685.984920][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1686.877853][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1687.525290][T12629] usb 3-1: USB disconnect, device number 73 [ 1687.602620][T25271] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1687.651136][T25271] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1688.540550][T25271] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1688.585845][T25271] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1688.603402][T25279] block nbd0: shutting down sockets [ 1688.969560][T25285] Bluetooth: MGMT ver 1.22 [ 1689.665670][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1689.874885][T18048] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1690.065185][T18048] usb 4-1: Using ep0 maxpacket: 8 [ 1690.078546][T18048] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.141686][T18048] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1690.176566][T18048] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.216105][T18048] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1690.258540][T18048] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1690.297969][T18048] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.358733][T25334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5683'. [ 1690.377784][T18048] hub 4-1:1.0: bad descriptor, ignoring hub [ 1690.398789][T18048] hub: probe of 4-1:1.0 failed with error -5 [ 1690.406047][T18048] cdc_wdm 4-1:1.0: skipping garbage [ 1690.411448][T18048] cdc_wdm 4-1:1.0: skipping garbage [ 1690.420034][T18048] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 1690.705117][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1690.705818][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1690.932897][T18048] usb 4-1: USB disconnect, device number 14 [ 1692.474946][T25329] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1692.662768][T25329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1692.669411][T25329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1692.675945][T25329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1693.022789][T25366] syzkaller0: entered promiscuous mode [ 1693.034839][T25366] syzkaller0: entered allmulticast mode [ 1693.758835][T25400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5701'. [ 1694.545555][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1694.705122][T15905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1694.711332][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1695.825109][T25397] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1696.537437][T25397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1696.543851][T25397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1696.550922][T25397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1696.844876][T19361] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1697.014750][T19361] usb 3-1: device descriptor read/64, error -71 [ 1697.083953][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5718'. [ 1697.170479][T12629] IPVS: starting estimator thread 0... [ 1697.180023][T25457] IPVS: ip_vs_add_dest(): server weight less than zero [ 1697.202573][T25457] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1697.284870][T19361] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1697.294795][T25459] IPVS: using max 17 ests per chain, 40800 per kthread [ 1697.454739][T19361] usb 3-1: device descriptor read/64, error -71 [ 1697.575361][T19361] usb usb3-port1: attempt power cycle [ 1697.856389][T25473] syzkaller0: entered promiscuous mode [ 1697.862715][T25473] syzkaller0: entered allmulticast mode [ 1697.907061][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1698.501958][T25495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5726'. [ 1698.544910][T15905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1698.568548][T25498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5730'. [ 1698.624934][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1699.215482][T25503] block nbd0: server does not support multiple connections per device. [ 1699.225056][T25503] block nbd0: shutting down sockets [ 1700.630290][T25485] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1701.125159][T25485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1701.131900][T25485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1701.140656][T25485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1701.152926][T25512] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1702.370369][T25558] syzkaller0: entered promiscuous mode [ 1702.385415][T25558] syzkaller0: entered allmulticast mode [ 1702.704975][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1703.185146][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1703.191401][T15905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1704.557331][T25593] syzkaller0: entered promiscuous mode [ 1704.595202][T25593] syzkaller0: entered allmulticast mode [ 1704.987444][T25617] syzkaller0: entered promiscuous mode [ 1704.992976][T25617] syzkaller0: entered allmulticast mode [ 1705.104813][T19361] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1705.314874][T19361] usb 4-1: Using ep0 maxpacket: 8 [ 1705.327110][T19361] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1705.377841][T25623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.384556][T19361] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1705.404830][T19361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1705.493359][T19361] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1705.504273][T19361] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1705.520309][T25621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1705.530553][T19361] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1705.539888][T19361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.559131][T19361] usbtmc 4-1:16.0: bulk endpoints not found [ 1705.706820][T25631] syzkaller0: entered promiscuous mode [ 1705.712421][T25631] syzkaller0: entered allmulticast mode [ 1706.392663][T25660] syzkaller0: entered promiscuous mode [ 1706.402096][T25660] syzkaller0: entered allmulticast mode [ 1707.683316][T25699] syzkaller0: entered promiscuous mode [ 1707.702561][T25699] syzkaller0: entered allmulticast mode [ 1707.858841][T12703] usb 4-1: USB disconnect, device number 15 [ 1709.009264][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1709.297587][T25740] syzkaller0: entered promiscuous mode [ 1709.303308][T25740] syzkaller0: entered allmulticast mode [ 1709.568853][T18048] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1711.793843][T18048] usb 3-1: Using ep0 maxpacket: 8 [ 1711.801393][T18048] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1711.809898][T18048] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1711.819922][T18048] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1711.831074][T18048] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1711.842041][T18048] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1711.855682][T18048] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1711.865104][T18048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.921037][T25753] block nbd0: shutting down sockets [ 1711.948034][T18048] usbtmc 3-1:16.0: bulk endpoints not found [ 1712.216494][T25759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1712.904881][ T5850] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1713.064818][ T5850] usb 4-1: device descriptor read/64, error -71 [ 1713.334891][ T5850] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1713.560626][ T5850] usb 4-1: device descriptor read/64, error -71 [ 1714.251417][T18048] usb 3-1: USB disconnect, device number 77 [ 1714.375257][ T5850] usb usb4-port1: attempt power cycle [ 1714.389729][T25790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 1714.991547][ T5850] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1715.158300][ T5850] usb 4-1: device descriptor read/8, error -71 [ 1715.457839][T25796] syzkaller0: entered promiscuous mode [ 1715.463358][T25796] syzkaller0: entered allmulticast mode [ 1715.538252][ T5850] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1715.608271][ T5850] usb 4-1: device descriptor read/8, error -71 [ 1715.725014][ T5850] usb usb4-port1: unable to enumerate USB device [ 1715.743327][T25805] syzkaller0: entered promiscuous mode [ 1715.749332][T25805] syzkaller0: entered allmulticast mode [ 1716.059457][T25817] syzkaller0: entered promiscuous mode [ 1716.068408][T25817] syzkaller0: entered allmulticast mode [ 1720.581154][T25856] syzkaller0: entered promiscuous mode [ 1720.587263][T25856] syzkaller0: entered allmulticast mode [ 1720.847822][T25869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5842'. [ 1720.890352][T25869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1720.924094][T25869] team0: Device bond4 is up. Set it down before adding it as a team port [ 1722.284153][T25896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5846'. [ 1723.942203][T25927] block nbd0: server does not support multiple connections per device. [ 1723.961046][T25927] block nbd0: shutting down sockets [ 1724.544834][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1724.756979][T25950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5862'. [ 1726.175244][T25973] block nbd0: server does not support multiple connections per device. [ 1726.185405][T25973] block nbd0: shutting down sockets [ 1727.582256][T26010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5884'. [ 1727.933025][T26021] syzkaller0: entered promiscuous mode [ 1727.938928][T26021] syzkaller0: entered allmulticast mode [ 1728.529108][T26050] 8021q: VLANs not supported on gre0 [ 1730.470866][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.477592][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.994681][T26152] syzkaller0: entered promiscuous mode [ 1731.000377][T26152] syzkaller0: entered allmulticast mode [ 1731.384981][T26168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5941'. [ 1731.579422][T26179] syzkaller0: entered promiscuous mode [ 1731.592820][T26179] syzkaller0: entered allmulticast mode [ 1732.394722][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1733.619300][T26219] syzkaller0: entered promiscuous mode [ 1733.625823][T26219] syzkaller0: entered allmulticast mode [ 1733.939485][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5959'. [ 1735.995048][T26227] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1736.759907][T26227] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1736.766492][T26227] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1736.772574][T26227] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1738.065616][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1738.910537][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1738.917078][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1740.687125][T26313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5982'. [ 1740.855812][T26312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1740.861990][T26312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1740.872636][T26312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1740.879282][T26312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1742.089423][T26338] veth1: entered promiscuous mode [ 1742.094565][T26338] veth1: entered allmulticast mode [ 1742.578230][ T5850] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1742.833086][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 1742.901794][ T5850] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.002780][ T5850] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1743.031908][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1743.038931][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1743.047976][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1743.101183][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.149148][ T5850] usb 3-1: Product: syz [ 1743.191219][ T5850] usb 3-1: Manufacturer: syz [ 1743.239355][ T5850] usb 3-1: SerialNumber: syz [ 1743.461632][ T5850] usb 3-1: config 0 descriptor?? [ 1743.559642][ T5850] hub 3-1:0.0: bad descriptor, ignoring hub [ 1743.565851][ T5850] hub: probe of 3-1:0.0 failed with error -5 [ 1743.582255][ T5850] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1743.648983][ T5850] snd-usb-audio: probe of 3-1:0.0 failed with error -2 [ 1743.791707][T26280] udevd[26280]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1743.982157][T26367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5994'. [ 1746.064882][T26363] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1746.966661][T26363] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1746.972813][T26363] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1746.979187][T26363] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1747.315152][T26382] usb 3-1: USB disconnect, device number 78 [ 1748.154858][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1749.025949][T15905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1749.032103][T15905] Bluetooth: hci1: command 0x0c1a tx timeout [ 1749.968209][T26429] bridge_slave_0: left allmulticast mode [ 1749.974070][T26429] bridge_slave_0: left promiscuous mode [ 1749.982284][T26429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1750.008045][T26429] bridge_slave_1: left allmulticast mode [ 1750.027070][T26429] bridge_slave_1: left promiscuous mode [ 1750.050262][T26429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1750.073404][T26429] bond0: (slave bond_slave_0): Releasing backup interface [ 1750.102279][T26429] bond0: (slave bond_slave_1): Releasing backup interface [ 1750.181064][T26429] team0: Port device team_slave_0 removed [ 1750.219313][T26429] team0: Port device team_slave_1 removed [ 1750.298717][T26429] bond1: (slave bridge1): Releasing backup interface [ 1750.307124][T26429] bridge1: left promiscuous mode [ 1750.355206][T26429] bond2: (slave bridge2): Releasing backup interface [ 1750.362047][T26429] bridge2: left promiscuous mode [ 1750.409718][T26429] bond3: (slave bridge3): Releasing backup interface [ 1750.424257][T26429] bridge3: left promiscuous mode [ 1754.609519][T26468] sctp: [Deprecated]: syz.3.6023 (pid 26468) Use of int in maxseg socket option. [ 1754.609519][T26468] Use struct sctp_assoc_value instead [ 1754.707176][T26472] syzkaller0: entered promiscuous mode [ 1754.712878][T26472] syzkaller0: entered allmulticast mode [ 1754.932328][T26482] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1754.942308][T26482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6028'. [ 1754.956693][T26482] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1757.104084][T26507] syzkaller0: entered promiscuous mode [ 1757.114894][T26507] syzkaller0: entered allmulticast mode [ 1758.709831][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6045'. [ 1760.153242][T26567] ieee802154 phy0 wpan0: encryption failed: -22 [ 1760.466985][T26576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6061'. [ 1761.669268][T26623] syzkaller0: entered promiscuous mode [ 1761.676371][T26623] syzkaller0: entered allmulticast mode [ 1762.331296][T26641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6086'. [ 1762.478464][T26643] syzkaller0: entered promiscuous mode [ 1762.484087][T26643] syzkaller0: entered allmulticast mode [ 1762.798430][ T8] IPVS: starting estimator thread 0... [ 1762.808436][T26654] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1762.895012][T26655] IPVS: using max 18 ests per chain, 43200 per kthread [ 1767.346682][T26675] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1767.471623][T26679] syzkaller0: entered promiscuous mode [ 1767.486612][T26679] syzkaller0: entered allmulticast mode [ 1767.733661][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'. [ 1768.707917][T26714] fuse: Bad value for 'fd' [ 1768.841466][T26718] syzkaller0: entered promiscuous mode [ 1768.849590][T26718] syzkaller0: entered allmulticast mode [ 1769.843725][T26747] fuse: Bad value for 'fd' [ 1771.205668][T26778] fuse: Bad value for 'fd' [ 1771.313253][T26782] syzkaller0: entered promiscuous mode [ 1771.357495][T26782] syzkaller0: entered allmulticast mode [ 1771.371987][T26784] netlink: 'syz.4.6136': attribute type 1 has an invalid length. [ 1771.442572][T26784] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1771.705544][T26787] bond4: (slave ip6gretap1): making interface the new active one [ 1771.727515][T26787] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1772.440868][T26815] fuse: Bad value for 'fd' [ 1772.636672][T26821] nbd2: detected capacity change from 0 to 63 [ 1772.656110][T15905] block nbd2: Receive control failed (result -104) [ 1773.535302][T26825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1773.833686][T26851] fuse: Bad value for 'fd' [ 1773.898304][T26852] nbd4: detected capacity change from 0 to 63 [ 1773.918832][T15905] block nbd4: Receive control failed (result -104) [ 1775.594886][T26824] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1775.745764][T26824] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1775.752212][T26824] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1775.758508][T26824] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1776.049067][T26872] sctp: [Deprecated]: syz.0.6161 (pid 26872) Use of int in maxseg socket option. [ 1776.049067][T26872] Use struct sctp_assoc_value instead [ 1776.257801][T26880] nbd0: detected capacity change from 0 to 63 [ 1776.268147][T22910] block nbd0: Receive control failed (result -104) [ 1776.282626][T23674] block nbd0: Dead connection, failed to find a fallback [ 1776.291726][T23674] block nbd0: shutting down sockets [ 1776.293219][T26884] fuse: Bad value for 'fd' [ 1776.297772][T23674] blk_print_req_error: 93 callbacks suppressed [ 1776.297788][T23674] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1776.297820][T23674] buffer_io_error: 138 callbacks suppressed [ 1776.297829][T23674] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1776.344715][T20574] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1776.356194][T20574] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1776.364250][T20574] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1777.664817][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1777.683279][T26915] syzkaller0: entered promiscuous mode [ 1777.692857][T26915] syzkaller0: entered allmulticast mode [ 1777.731163][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1777.773575][T26917] nbd3: detected capacity change from 0 to 63 [ 1777.796191][T22910] block nbd3: Receive control failed (result -104) [ 1777.825141][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1777.834827][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1778.023061][T26928] fuse: Bad value for 'fd' [ 1779.754807][T26907] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1779.966229][T26907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1779.972483][T26907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1779.978678][T26907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1780.171698][T26951] nbd: nbd0 already in use [ 1780.185643][T26951] nbd: must specify an index to disconnect [ 1780.283978][T26952] syzkaller0: entered promiscuous mode [ 1780.314941][T26952] syzkaller0: entered allmulticast mode [ 1780.351825][ T5850] IPVS: starting estimator thread 0... [ 1780.454716][T26961] IPVS: using max 20 ests per chain, 48000 per kthread [ 1781.829818][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1782.065405][T15905] Bluetooth: hci3: command 0x0c1a tx timeout [ 1782.079180][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1785.572837][T26992] netlink: 'syz.2.6195': attribute type 21 has an invalid length. [ 1785.780023][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6194'. [ 1787.818569][T26982] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1787.825545][T26982] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1787.831637][T26982] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1787.837755][T26982] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1788.790614][T27059] syzkaller0: entered promiscuous mode [ 1788.825132][T27059] syzkaller0: entered allmulticast mode [ 1789.905725][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1789.911849][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1789.918152][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1791.914100][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.920601][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.790154][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1795.215871][T27102] fuse: Bad value for 'fd' [ 1795.670908][T27105] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6226'. [ 1796.670316][T27074] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1796.678124][T27074] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1796.684322][T27074] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1796.690600][T27074] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1796.880348][T27129] syzkaller0: entered promiscuous mode [ 1796.888528][T27129] syzkaller0: entered allmulticast mode [ 1798.202387][T27147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6236'. [ 1798.686437][T27159] fuse: Bad value for 'fd' [ 1798.705086][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1798.711304][T15905] Bluetooth: hci2: command 0x0c1a tx timeout [ 1798.717656][T20765] Bluetooth: hci3: command 0x0c1a tx timeout [ 1799.403828][T27169] syzkaller0: entered promiscuous mode [ 1799.412290][T27169] syzkaller0: entered allmulticast mode [ 1799.422796][T27171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6245'. [ 1799.514211][T27166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6243'. [ 1799.941056][T27163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1799.947279][T27163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1799.953326][T27163] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1799.959680][T27163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1800.041227][T27183] fuse: Bad value for 'fd' [ 1800.275831][T27197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6256'. [ 1800.300841][T27194] syzkaller0: entered promiscuous mode [ 1800.308214][T27194] syzkaller0: entered allmulticast mode [ 1800.465193][T27201] netlink: 'syz.3.6258': attribute type 1 has an invalid length. [ 1800.504940][T27201] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1801.576938][T27215] kvm: kvm [27214]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1801.737830][T27222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1801.863950][T27226] syzkaller0: entered promiscuous mode [ 1801.870355][T27226] syzkaller0: entered allmulticast mode [ 1801.984926][T20765] Bluetooth: hci1: command 0x0c1a tx timeout [ 1801.991075][T20765] Bluetooth: hci3: command 0x0c1a tx timeout [ 1801.997256][T22910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1802.042128][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6268'. [ 1802.064174][T27228] bond0: entered promiscuous mode [ 1802.069663][T27228] bond_slave_0: entered promiscuous mode [ 1802.075792][T27228] bond_slave_1: entered promiscuous mode [ 1802.089625][T27228] bridge1: port 1(bond0) entered blocking state [ 1802.104908][T27228] bridge1: port 1(bond0) entered disabled state [ 1802.111947][T27228] bond0: entered allmulticast mode [ 1802.117504][T27228] bond_slave_0: entered allmulticast mode [ 1802.123429][T27228] bond_slave_1: entered allmulticast mode [ 1802.757575][T27240] kvm: kvm [27239]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1802.789107][T20574] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 30 seconds [ 1802.800750][T20574] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 30 seconds [ 1802.817777][T20574] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 30 seconds [ 1802.830189][T20574] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 30 seconds [ 1803.066326][T27249] syzkaller0: entered promiscuous mode [ 1803.072118][T27249] syzkaller0: entered allmulticast mode [ 1803.426790][T27262] kvm: kvm [27261]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1803.525312][T27266] fuse: Bad value for 'fd' [ 1803.872413][T27277] syzkaller0: entered promiscuous mode [ 1803.879581][T27277] syzkaller0: entered allmulticast mode [ 1804.078765][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 30 seconds [ 1804.105209][T27285] fuse: Bad value for 'fd' [ 1805.474062][T27318] syzkaller0: entered promiscuous mode [ 1805.479843][T27318] syzkaller0: entered allmulticast mode [ 1805.590819][T27324] fuse: Bad value for 'fd' [ 1805.661864][T27326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6305'. [ 1806.625329][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 30 seconds [ 1807.162919][T27356] syzkaller0: entered promiscuous mode [ 1807.175477][T27356] syzkaller0: entered allmulticast mode [ 1807.380587][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1807.924941][T20574] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 30 seconds [ 1807.936134][T20574] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 30 seconds [ 1807.947227][T20574] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 30 seconds [ 1810.148025][T27407] netlink: 'syz.4.6328': attribute type 1 has an invalid length. [ 1810.201137][T27407] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1811.735583][T27456] netlink: 'syz.4.6341': attribute type 1 has an invalid length. [ 1811.811653][T27456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1813.099801][T27481] netlink: 'syz.2.6350': attribute type 1 has an invalid length. [ 1813.265556][T27481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1814.793636][T27516] syzkaller0: entered promiscuous mode [ 1814.801864][T27516] syzkaller0: entered allmulticast mode [ 1816.557079][T27551] kvm: kvm [27550]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1816.615099][T27556] syzkaller0: entered promiscuous mode [ 1816.624907][T27556] syzkaller0: entered allmulticast mode [ 1816.752028][T27560] input: syz1 as /devices/virtual/input/input116 [ 1817.814532][T27586] kvm: kvm [27584]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1819.097160][T27599] input: syz1 as /devices/virtual/input/input117 [ 1820.066109][T27620] kvm: kvm [27619]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1820.189319][T27627] input: syz1 as /devices/virtual/input/input118 [ 1822.528606][T27664] input: syz1 as /devices/virtual/input/input119 [ 1824.175227][T27686] block nbd1: server does not support multiple connections per device. [ 1824.185073][T27686] block nbd1: shutting down sockets [ 1825.124101][T27694] input: syz1 as /devices/virtual/input/input120 [ 1826.573200][T27697] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.713154][T27697] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.114168][T27697] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.281324][T27697] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.567786][T27697] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.611952][T27697] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.643865][T27697] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.657724][T27726] input: syz1 as /devices/virtual/input/input121 [ 1827.721975][T27697] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.783048][T27753] input: syz1 as /devices/virtual/input/input122 [ 1829.324876][T13560] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1829.624889][T13560] usb 4-1: Using ep0 maxpacket: 16 [ 1829.642416][T13560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1829.686231][T13560] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1829.708617][T13560] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.721746][T27759] fuse: Bad value for 'group_id' [ 1829.730841][T13560] usb 4-1: Product: syz [ 1829.748517][T13560] usb 4-1: Manufacturer: syz [ 1829.753237][T13560] usb 4-1: SerialNumber: syz [ 1829.787733][T13560] usb 4-1: config 0 descriptor?? [ 1829.805802][T13560] hub 4-1:0.0: bad descriptor, ignoring hub [ 1829.811959][T13560] hub: probe of 4-1:0.0 failed with error -5 [ 1829.824487][T13560] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1830.022893][T13560] usb 4-1: USB disconnect, device number 20 [ 1830.109832][T27767] udevd[27767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1830.351846][T27779] input: syz1 as /devices/virtual/input/input123 [ 1831.230002][T27786] fuse: Bad value for 'group_id' [ 1832.225784][T27810] block nbd1: server does not support multiple connections per device. [ 1832.236118][T27810] block nbd1: shutting down sockets [ 1832.990747][T13762] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 60 seconds [ 1833.001818][T13762] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 60 seconds [ 1833.012882][T13762] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 60 seconds [ 1833.023882][T13762] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 60 seconds [ 1833.154901][T27818] input: syz1 as /devices/virtual/input/input124 [ 1833.175223][T27817] fuse: Bad value for 'group_id' [ 1834.145002][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 60 seconds [ 1834.279206][T27825] fuse: Bad value for 'fd' [ 1835.116767][T27848] syzkaller0: entered promiscuous mode [ 1835.122857][T27848] syzkaller0: entered allmulticast mode [ 1835.538142][T27855] netlink: 'syz.4.6475': attribute type 39 has an invalid length. [ 1835.990791][T27858] input: syz1 as /devices/virtual/input/input125 [ 1836.715183][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 60 seconds [ 1836.850291][T27861] fuse: Bad value for 'fd' [ 1837.516624][T27882] kvm: kvm [27881]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1837.578055][T27885] syzkaller0: entered promiscuous mode [ 1837.595021][T27885] syzkaller0: entered allmulticast mode [ 1837.738545][T27889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6485'. [ 1838.005809][T13762] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 60 seconds [ 1838.016798][T13762] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 60 seconds [ 1838.028755][T13762] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 60 seconds [ 1838.574765][T26236] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1838.774918][T26236] usb 4-1: Using ep0 maxpacket: 16 [ 1838.802928][T26236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1838.879229][T26236] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1838.898793][T26236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.937964][T26236] usb 4-1: Product: syz [ 1838.943269][T26236] usb 4-1: Manufacturer: syz [ 1838.957055][T26236] usb 4-1: SerialNumber: syz [ 1838.991613][T26236] usb 4-1: config 0 descriptor?? [ 1839.020475][T26236] hub 4-1:0.0: bad descriptor, ignoring hub [ 1839.050518][T26236] hub: probe of 4-1:0.0 failed with error -5 [ 1839.079128][T26236] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1839.253589][T27919] kvm: kvm [27917]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1839.732797][T27931] syzkaller0: entered promiscuous mode [ 1839.750281][T27931] syzkaller0: entered allmulticast mode [ 1840.623967][T27956] kvm: kvm [27955]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1841.803852][ T5764] usb 4-1: USB disconnect, device number 21 [ 1841.849086][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6507'. [ 1843.984785][T27969] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1844.175529][T27969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1844.184060][T27969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1844.192080][T27969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1845.561202][T28032] syzkaller0: entered promiscuous mode [ 1845.573729][T28032] syzkaller0: entered allmulticast mode [ 1846.064947][T20765] Bluetooth: hci2: command 0x0c1a tx timeout [ 1846.227654][T20765] Bluetooth: hci1: command 0x0c1a tx timeout [ 1846.234295][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1846.989766][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6528'. [ 1849.094912][T28050] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1849.101279][T28050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1849.107506][T28050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1849.113712][T28050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1849.188986][T22910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1849.203515][T22910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1849.214332][T22910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1849.227181][T22910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1849.237206][T22910] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1849.285937][T19888] syz_tun (unregistering): left allmulticast mode [ 1849.292641][T22910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1850.013513][T28114] kvm: kvm [28113]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1850.076259][T28087] chnl_net:caif_netlink_parms(): no params data found [ 1850.183168][T28122] syzkaller0: entered promiscuous mode [ 1850.192875][T28122] syzkaller0: entered allmulticast mode [ 1850.935755][T28087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.942948][T28087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.975030][T28087] bridge_slave_0: entered allmulticast mode [ 1851.003143][T28087] bridge_slave_0: entered promiscuous mode [ 1851.017129][T28087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.029791][T28087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.037707][T28087] bridge_slave_1: entered allmulticast mode [ 1851.049468][T28087] bridge_slave_1: entered promiscuous mode [ 1851.115175][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6549'. [ 1851.132767][T28087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1851.149886][T28087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1851.184852][T20765] Bluetooth: hci1: command 0x0c1a tx timeout [ 1851.191066][T20765] Bluetooth: hci3: command 0x0c1a tx timeout [ 1851.229959][T28087] team0: Port device team_slave_0 added [ 1851.248406][T28087] team0: Port device team_slave_1 added [ 1851.308814][T28087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.323350][T28087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.349529][T20765] Bluetooth: hci4: command tx timeout [ 1851.376464][T28087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1851.400030][T28087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1851.414703][T28087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.467114][T28087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.576877][T28087] hsr_slave_0: entered promiscuous mode [ 1851.594139][T28087] hsr_slave_1: entered promiscuous mode [ 1851.601507][T28087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1851.610295][T28087] Cannot create hsr debugfs directory [ 1852.103300][T28087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.224426][T28087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.331992][T28087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.432903][T28087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1852.644913][T28087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1852.659158][T28087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1852.680744][T28087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1852.706420][T28087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1852.868655][T28087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1852.904184][T28087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.924276][T17055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1852.931629][T17055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1852.956375][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1852.963641][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1853.105066][T28130] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1853.114756][T20765] Bluetooth: hci2: command 0x0c1a tx timeout [ 1853.210311][T28087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1853.281993][T28130] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1853.288667][T28130] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1853.295089][T28130] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1853.301277][T28130] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1853.312187][T28130] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1853.351540][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.484179][T28173] syzkaller0: entered promiscuous mode [ 1853.497647][T28173] syzkaller0: entered allmulticast mode [ 1853.697316][T28087] veth0_vlan: entered promiscuous mode [ 1853.717309][T28087] veth1_vlan: entered promiscuous mode [ 1853.818365][T28087] veth0_macvtap: entered promiscuous mode [ 1853.849044][T28087] veth1_macvtap: entered promiscuous mode [ 1853.858659][T28183] syzkaller0: entered promiscuous mode [ 1853.864220][T28183] syzkaller0: entered allmulticast mode [ 1853.897448][T28087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1853.925639][T28087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.944662][T28087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1853.964612][T28087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1853.992183][T28087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1854.137030][T28191] netlink: 'syz.3.6564': attribute type 16 has an invalid length. [ 1854.165609][T28191] netlink: 'syz.3.6564': attribute type 17 has an invalid length. [ 1854.203167][T28191] ip6gre0: left allmulticast mode [ 1854.223025][T28191] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1854.246133][T28087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1854.257859][T28087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.278086][T28087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1854.299636][T28087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1854.336494][T28087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1854.411051][T28087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.459126][T28087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.488767][T28087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.504752][T28087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.749818][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.781201][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1854.857012][T28213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6570'. [ 1854.864676][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1854.877216][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.012209][T28218] syzkaller0: entered promiscuous mode [ 1855.018186][T28218] syzkaller0: entered allmulticast mode [ 1855.187255][T20765] Bluetooth: hci3: command 0x0c1a tx timeout [ 1855.344867][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1855.344876][T22910] Bluetooth: hci1: command 0x0c1a tx timeout [ 1855.395756][T28232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6576'. [ 1855.673151][T28235] fuse: Bad value for 'fd' [ 1856.682290][T28283] fuse: Bad value for 'fd' [ 1856.967766][T28289] macvlan2: entered promiscuous mode [ 1856.987416][T28289] macvlan2: entered allmulticast mode [ 1857.220973][T28300] syz_tun: entered allmulticast mode [ 1857.295983][T28300] ip6gre0: entered allmulticast mode [ 1857.449529][T22910] Bluetooth: hci4: command 0x040f tx timeout [ 1857.799337][T28308] block nbd1: server does not support multiple connections per device. [ 1857.813641][T28308] block nbd1: shutting down sockets [ 1858.672800][T28310] sctp: [Deprecated]: syz.4.6598 (pid 28310) Use of int in max_burst socket option. [ 1858.672800][T28310] Use struct sctp_assoc_value instead [ 1859.274825][T28345] input: syz1 as /devices/virtual/input/input126 [ 1859.506288][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1859.708737][T28354] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6610'. [ 1859.926944][T28371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6614'. [ 1860.308150][T28385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6617'. [ 1860.625741][T28396] input: syz1 as /devices/virtual/input/input127 [ 1860.889131][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6625'. [ 1861.300927][T28427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6628'. [ 1861.585439][T22910] Bluetooth: hci4: command 0x040f tx timeout [ 1861.717659][T28444] input: syz1 as /devices/virtual/input/input128 [ 1862.022074][T28448] ip6gre0: entered allmulticast mode [ 1862.382053][T28467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6639'. [ 1862.987711][T28485] kvm: kvm [28484]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1863.539320][T28491] input: syz1 as /devices/virtual/input/input129 [ 1863.633693][T13762] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 90 seconds [ 1863.652532][T13762] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 90 seconds [ 1863.664262][T13762] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 90 seconds [ 1863.676298][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1863.682636][T13762] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 90 seconds [ 1864.225124][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 90 seconds [ 1865.174750][T28502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6649'. [ 1865.753379][T22910] Bluetooth: hci4: command 0x040f tx timeout [ 1866.762959][ T5141] udevd[5141]: worker [26875] /devices/virtual/block/nbd0 is taking a long time [ 1866.774424][ T5141] udevd[5141]: worker [26829] /devices/virtual/block/nbd4 is taking a long time [ 1866.788137][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 90 seconds [ 1866.799903][ T5141] udevd[5141]: worker [26898] /devices/virtual/block/nbd3 is taking a long time [ 1866.816715][ T5141] udevd[5141]: worker [26727] /devices/virtual/block/nbd2 is taking a long time [ 1867.681752][T28480] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1867.828356][T22910] Bluetooth: hci4: command 0x040f tx timeout [ 1867.870595][T28514] input: syz1 as /devices/virtual/input/input130 [ 1868.076724][T20574] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 90 seconds [ 1868.121571][T20574] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 90 seconds [ 1868.173499][T20574] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 90 seconds [ 1868.567305][T28528] kvm: kvm [28519]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1869.605364][T28549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6662'. [ 1869.909001][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1870.144074][T28564] sctp: [Deprecated]: syz.0.6666 (pid 28564) Use of int in max_burst socket option. [ 1870.144074][T28564] Use struct sctp_assoc_value instead [ 1870.301343][T28569] input: syz1 as /devices/virtual/input/input131 [ 1871.985639][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1872.879969][T28630] input: syz1 as /devices/virtual/input/input132 [ 1873.124865][T18048] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1873.314741][T18048] usb 5-1: Using ep0 maxpacket: 16 [ 1873.326126][T18048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1873.346052][T18048] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1873.360628][T18048] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.370747][T18048] usb 5-1: Product: syz [ 1873.380793][T18048] usb 5-1: Manufacturer: syz [ 1873.387349][T18048] usb 5-1: SerialNumber: syz [ 1873.402222][T18048] usb 5-1: config 0 descriptor?? [ 1873.420675][T18048] hub 5-1:0.0: bad descriptor, ignoring hub [ 1873.435155][T18048] hub: probe of 5-1:0.0 failed with error -5 [ 1873.459769][T18048] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 1874.074993][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1874.918013][T28680] input: syz1 as /devices/virtual/input/input133 [ 1875.867231][T26382] usb 5-1: USB disconnect, device number 54 [ 1876.064013][T28683] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6696'. [ 1876.144975][T22910] Bluetooth: hci4: command 0x040f tx timeout [ 1876.215970][T28703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6702'. [ 1876.757763][T28730] input: syz1 as /devices/virtual/input/input134 [ 1877.794337][T28743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6712'. [ 1878.231907][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1878.656606][T28780] input: syz1 as /devices/virtual/input/input135 [ 1880.304889][T22910] Bluetooth: hci4: command 0x040f tx timeout [ 1880.439172][T28833] input: syz1 as /devices/virtual/input/input136 [ 1881.387962][T28846] overlayfs: missing 'lowerdir' [ 1882.222084][T28885] input: syz1 as /devices/virtual/input/input137 [ 1882.395021][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1882.631870][T28886] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1883.170157][T28899] overlayfs: missing 'lowerdir' [ 1883.251582][T28886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1883.552178][T28919] syzkaller0: entered promiscuous mode [ 1883.570084][T28919] syzkaller0: entered allmulticast mode [ 1883.793986][T28927] input: syz1 as /devices/virtual/input/input138 [ 1884.464642][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1884.663828][T28932] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1886.078495][T28955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1886.086209][T28955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1886.095283][T28955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1886.109712][T28955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1886.299700][T28963] syzkaller0: entered promiscuous mode [ 1886.306291][T28963] syzkaller0: entered allmulticast mode [ 1886.546020][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1886.621143][T28971] input: syz1 as /devices/virtual/input/input139 [ 1887.717279][T28984] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6770'. [ 1887.829712][T28996] syzkaller0: entered promiscuous mode [ 1887.843511][T28996] syzkaller0: entered allmulticast mode [ 1888.405211][T29013] input: syz1 as /devices/virtual/input/input140 [ 1888.506649][T29012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6779'. [ 1888.634676][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1889.417699][T29025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6786'. [ 1889.441541][T29025] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1889.451026][T29025] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1889.460074][T29025] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1890.170347][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6787'. [ 1890.310003][T29033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1890.321488][T29033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1890.337446][T29033] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1890.352891][T29033] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1890.552298][T29051] input: syz1 as /devices/virtual/input/input141 [ 1891.430697][T29046] syzkaller0: entered promiscuous mode [ 1891.437489][T29046] syzkaller0: entered allmulticast mode [ 1891.495732][T29062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6793'. [ 1891.984651][T20765] Bluetooth: hci2: command 0x0c1a tx timeout [ 1892.398414][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1892.404646][T22910] Bluetooth: hci3: command 0x0c1a tx timeout [ 1892.410915][T20765] Bluetooth: hci1: command 0x0c1a tx timeout [ 1893.098289][T29090] input: syz1 as /devices/virtual/input/input142 [ 1893.853606][T13762] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 120 seconds [ 1893.888200][T13762] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 120 seconds [ 1893.899954][T13762] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 120 seconds [ 1893.911554][T13762] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 120 seconds [ 1894.326589][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 120 seconds [ 1896.866666][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 120 seconds [ 1897.734802][T29110] block nbd1: server does not support multiple connections per device. [ 1897.743529][T29110] block nbd1: shutting down sockets [ 1898.039584][T29122] input: syz1 as /devices/virtual/input/input143 [ 1898.836697][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 120 seconds [ 1898.880513][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 120 seconds [ 1898.892094][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 120 seconds [ 1899.112756][T29130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6815'. [ 1899.231555][T29132] syzkaller0: entered promiscuous mode [ 1899.237870][T29132] syzkaller0: entered allmulticast mode [ 1899.302267][T29137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1904.325042][T29147] netlink: 'syz.3.6819': attribute type 16 has an invalid length. [ 1904.333153][T29147] netlink: 'syz.3.6819': attribute type 17 has an invalid length. [ 1904.367889][T29147] ip6gre0: left allmulticast mode [ 1904.392270][T29147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1904.639419][T29161] input: syz1 as /devices/virtual/input/input144 [ 1905.643076][T29165] netlink: 'syz.2.6826': attribute type 72 has an invalid length. [ 1905.653202][T29165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6826'. [ 1905.685924][T29171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6828'. [ 1905.913495][T29176] syzkaller0: entered promiscuous mode [ 1905.931968][T29176] syzkaller0: entered allmulticast mode [ 1906.847740][T29191] input: syz1 as /devices/virtual/input/input145 [ 1911.413024][T29181] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1911.612053][T29199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6838'. [ 1911.663890][T29201] netlink: 'syz.2.6837': attribute type 72 has an invalid length. [ 1911.676263][T29201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6837'. [ 1911.955217][T29215] input: syz1 as /devices/virtual/input/input146 [ 1913.396942][T29224] syzkaller0: entered promiscuous mode [ 1913.402515][T29224] syzkaller0: entered allmulticast mode [ 1913.670069][T20765] Bluetooth: hci4: command 0x040f tx timeout [ 1913.775180][T29233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6848'. [ 1913.918222][T29241] netlink: 'syz.3.6849': attribute type 72 has an invalid length. [ 1913.927661][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6849'. [ 1914.800620][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.046000][T29228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1918.052168][T29228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1918.058502][T29228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1918.064762][T29228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1918.282599][T29250] input: syz1 as /devices/virtual/input/input147 [ 1918.364738][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1918.634699][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1918.697844][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1918.799500][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1918.910458][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1919.042087][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1919.065226][ T8] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1919.086061][T29253] syzkaller0: entered promiscuous mode [ 1919.091683][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.114120][T29253] syzkaller0: entered allmulticast mode [ 1919.143255][ T8] hub 4-1:1.0: bad descriptor, ignoring hub [ 1919.168027][ T8] hub: probe of 4-1:1.0 failed with error -5 [ 1919.175753][T29253] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 1919.206768][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 1919.222392][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 1919.238303][T29251] gretap0: entered promiscuous mode [ 1919.243543][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1919.258677][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 1919.280975][T29251] vlan2: entered promiscuous mode [ 1919.808380][T29269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1919.919378][T29271] syzkaller0: entered promiscuous mode [ 1919.925295][T29271] syzkaller0: entered allmulticast mode [ 1920.161968][T29082] Bluetooth: hci4: command 0x040f tx timeout [ 1920.168209][T29082] Bluetooth: hci1: command 0x0c1a tx timeout [ 1920.174279][T29082] Bluetooth: hci3: command 0x0c1a tx timeout [ 1920.180501][T20765] Bluetooth: hci2: command 0x0c1a tx timeout [ 1924.309981][ T8] usb 4-1: USB disconnect, device number 22 [ 1924.385051][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 150 seconds [ 1924.391718][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 150 seconds [ 1924.407420][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 150 seconds [ 1924.418974][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 150 seconds [ 1924.431647][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 150 seconds [ 1924.460038][T29288] kvm: kvm [29286]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1924.635898][T29297] netlink: 'syz.3.6865': attribute type 16 has an invalid length. [ 1924.643899][T29297] netlink: 'syz.3.6865': attribute type 17 has an invalid length. [ 1924.755745][T29297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1924.867644][T29301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6867'. [ 1925.077162][T29307] syzkaller0: entered promiscuous mode [ 1925.082734][T29307] syzkaller0: entered allmulticast mode [ 1925.596949][ T8] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1925.797678][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1925.805026][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.818748][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1925.851500][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1925.865442][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1925.877266][ T8] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1925.907058][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1925.923353][ T8] hub 5-1:1.0: bad descriptor, ignoring hub [ 1925.930290][ T8] hub: probe of 5-1:1.0 failed with error -5 [ 1925.937147][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1925.942420][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 1925.973330][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1925.979618][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 1926.953678][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 150 seconds [ 1928.878257][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 150 seconds [ 1928.953722][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 150 seconds [ 1928.982566][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 150 seconds [ 1930.091372][T29320] netlink: 'syz.0.6873': attribute type 1 has an invalid length. [ 1930.099751][T29320] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1930.168978][T29330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.225051][T29330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.277684][T29331] netlink: 'syz.2.6876': attribute type 16 has an invalid length. [ 1930.289062][T29331] netlink: 'syz.2.6876': attribute type 17 has an invalid length. [ 1930.317750][T29331] ip6gre0: left allmulticast mode [ 1930.333315][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6877'. [ 1930.345988][T29331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1930.692883][T29345] kvm: kvm [29344]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1930.783327][T29352] bond0: (slave vlan2): Opening slave failed [ 1930.925126][T29354] syzkaller0: entered promiscuous mode [ 1930.945311][T29354] syzkaller0: entered allmulticast mode [ 1930.956660][ T8] usb 5-1: USB disconnect, device number 55 [ 1931.065424][T29356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1931.074380][T29356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1931.212282][T29363] netlink: 'syz.0.6887': attribute type 16 has an invalid length. [ 1931.220675][T29363] netlink: 'syz.0.6887': attribute type 17 has an invalid length. [ 1931.248551][T29363] ip6gre0: left allmulticast mode [ 1931.265554][T29363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1931.273914][T29363] bridge1: port 1(bond0) entered blocking state [ 1931.280439][T29363] bridge1: port 1(bond0) entered forwarding state [ 1931.301923][T29363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1931.448977][T29366] syzkaller0: entered promiscuous mode [ 1931.459769][T29366] syzkaller0: entered allmulticast mode [ 1931.575856][T29374] raw_sendmsg: syz.0.6892 forgot to set AF_INET. Fix it! [ 1932.154711][ T5850] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1932.344695][ T5850] usb 5-1: Using ep0 maxpacket: 8 [ 1932.352645][ T5850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.363861][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1932.392014][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1932.419409][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1932.431196][ T5850] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1932.440466][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.467479][ T5850] hub 5-1:1.0: bad descriptor, ignoring hub [ 1932.473648][ T5850] hub: probe of 5-1:1.0 failed with error -5 [ 1932.481042][ T5850] cdc_wdm 5-1:1.0: skipping garbage [ 1932.486519][ T5850] cdc_wdm 5-1:1.0: skipping garbage [ 1932.500419][ T5850] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1932.510920][ T5850] cdc_wdm 5-1:1.0: Unknown control protocol [ 1937.327827][T29082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1937.344043][T29082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1937.371623][T29082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1937.382524][T29082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1937.390987][T29082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1937.400715][T29082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1937.462182][T18048] usb 5-1: USB disconnect, device number 56 [ 1937.769742][T29435] syzkaller0: entered promiscuous mode [ 1937.815074][T29435] syzkaller0: entered allmulticast mode [ 1939.516259][T20765] Bluetooth: hci0: command tx timeout [ 1941.584697][T20765] Bluetooth: hci0: command tx timeout [ 1943.216668][T29451] gretap0: entered promiscuous mode [ 1943.222085][T29451] vlan2: entered promiscuous mode [ 1943.643971][T29430] chnl_net:caif_netlink_parms(): no params data found [ 1943.664859][T20765] Bluetooth: hci0: command tx timeout [ 1944.802680][T29430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.810367][T29430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.817997][T29430] bridge_slave_0: entered allmulticast mode [ 1944.827883][T29430] bridge_slave_0: entered promiscuous mode [ 1945.747195][T20765] Bluetooth: hci0: command tx timeout [ 1949.327110][T29430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1949.335099][T29430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1949.342906][T29430] bridge_slave_1: entered allmulticast mode [ 1949.353033][T29430] bridge_slave_1: entered promiscuous mode [ 1949.379791][T29511] gretap0: entered promiscuous mode [ 1949.387652][T29511] vlan0: entered promiscuous mode [ 1949.493479][T29430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1949.510814][T29430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.630903][T29430] team0: Port device team_slave_0 added [ 1949.658256][T29430] team0: Port device team_slave_1 added [ 1949.705780][T29520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6924'. [ 1949.732980][T29430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.739248][T29520] trusted_key: syz.2.6924 sent an empty control message without MSG_MORE. [ 1949.744860][T29430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.782717][T29430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.825787][T29430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.836051][T29430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.863236][T29430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.985845][T29430] hsr_slave_0: entered promiscuous mode [ 1950.003586][T29430] hsr_slave_1: entered promiscuous mode [ 1950.018047][T29430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1950.034893][T29430] Cannot create hsr debugfs directory [ 1950.046695][T29522] syzkaller0: entered promiscuous mode [ 1950.052265][T29522] syzkaller0: entered allmulticast mode [ 1950.387661][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.443422][T29430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.483071][T29532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6927'. [ 1950.498404][T29532] veth1_macvtap: left promiscuous mode [ 1950.658111][T29430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1950.816629][T29430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.025501][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.044795][T29430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1951.124031][T29549] gretap0: entered promiscuous mode [ 1951.155066][T29552] Bluetooth: MGMT ver 1.22 [ 1951.166740][T29549] vlan2: entered promiscuous mode [ 1951.425520][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.630463][T29430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1951.662058][T29430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1951.692493][T29430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1951.708747][T29430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1951.905645][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1952.016589][T29430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1952.069124][T29430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1952.137229][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.144602][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1952.191200][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.198519][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.468031][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1952.885823][T29594] block nbd1: server does not support multiple connections per device. [ 1952.896005][T29594] block nbd1: shutting down sockets [ 1953.184976][T20765] Bluetooth: hci0: command tx timeout [ 1953.708995][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.827268][T29430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1953.988446][T29430] veth0_vlan: entered promiscuous mode [ 1954.019248][T29430] veth1_vlan: entered promiscuous mode [ 1954.075660][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1954.103576][T29607] kvm: kvm [29605]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1954.139226][T29430] veth0_macvtap: entered promiscuous mode [ 1954.168188][T29430] veth1_macvtap: entered promiscuous mode [ 1954.192404][T29430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1954.206593][T29430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.220942][T29430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1954.233061][T29430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.247486][T29430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1954.272015][T29430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.284081][T29430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.295910][T29430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1954.327195][T29430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1954.341071][T29430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1954.354825][T29430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.366049][T29430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.386939][T29430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.407901][T29430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1954.487453][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 180 seconds [ 1954.488970][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 180 seconds [ 1954.499117][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 180 seconds [ 1954.499158][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 180 seconds [ 1954.499189][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 180 seconds [ 1954.785843][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1955.827386][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.865338][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.959961][T29604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1957.025163][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 180 seconds [ 1957.087329][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.123859][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.155704][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.200949][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.210596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.227279][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.238270][T13197] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.260019][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.272691][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.284853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.298079][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.307562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.402768][T29655] kvm: kvm [29654]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 1958.945536][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 180 seconds [ 1958.975008][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 180 seconds [ 1959.006285][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 180 seconds [ 1960.436786][ T5141] udevd[5141]: worker [26875] /devices/virtual/block/nbd0 timeout; kill it [ 1960.447365][ T5141] udevd[5141]: seq 31263 '/devices/virtual/block/nbd0' killed [ 1960.455831][ T5141] udevd[5141]: worker [26829] /devices/virtual/block/nbd4 timeout; kill it [ 1960.466137][ T5141] udevd[5141]: seq 31261 '/devices/virtual/block/nbd4' killed [ 1960.473930][ T5141] udevd[5141]: worker [26898] /devices/virtual/block/nbd3 timeout; kill it [ 1960.483047][ T5141] udevd[5141]: seq 31281 '/devices/virtual/block/nbd3' killed [ 1960.490856][ T5141] udevd[5141]: worker [26727] /devices/virtual/block/nbd2 timeout; kill it [ 1960.499863][ T5141] udevd[5141]: seq 31259 '/devices/virtual/block/nbd2' killed [ 1961.025207][ T8] net_ratelimit: 4 callbacks suppressed [ 1961.025228][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1961.505977][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.065428][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.105325][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.186265][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1964.145479][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.188482][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.988849][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.225197][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.233751][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.267308][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.306203][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.266207][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.345120][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.385593][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.428442][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.315023][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.465320][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.505265][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1974.547171][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.345319][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.586259][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.596535][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.228208][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.625323][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.666458][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.387765][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.707055][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.745494][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.786949][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1981.427860][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1981.830149][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1982.865441][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1983.909451][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.465086][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.546345][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 210 seconds [ 1984.557779][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 210 seconds [ 1984.568922][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 210 seconds [ 1984.581748][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 210 seconds [ 1984.945374][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.185642][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 210 seconds [ 1985.188013][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1985.985541][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.025476][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.115601][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 210 seconds [ 1987.505518][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1988.067239][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.029819][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 210 seconds [ 1989.040845][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 210 seconds [ 1989.052152][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 210 seconds [ 1989.106673][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.148378][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.547290][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.189759][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1991.609475][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1992.227173][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1993.265471][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.308266][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.625131][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.785095][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.345167][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.395790][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.425699][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1997.667451][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.468061][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1999.505739][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.546651][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.704972][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.585419][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.826176][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2002.627290][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.667104][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.385095][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.705645][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.865036][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2005.748566][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.785813][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.825196][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.905518][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.869071][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.907633][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.946878][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.955175][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.985618][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.028252][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.987580][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2013.996344][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.065330][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2014.629884][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 240 seconds [ 2014.640810][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 240 seconds [ 2014.652087][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 240 seconds [ 2014.663286][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 240 seconds [ 2015.105620][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2015.265024][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 240 seconds [ 2016.146712][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.027216][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.186850][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2017.195999][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 240 seconds [ 2018.225639][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2019.105427][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 240 seconds [ 2019.116746][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 240 seconds [ 2019.128299][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 240 seconds [ 2019.265299][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2020.068964][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2020.317334][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2021.346865][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.385802][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.105831][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.426398][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.585314][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2024.468423][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2025.506017][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.158533][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2026.547960][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2027.585228][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.625662][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.197525][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2029.665124][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2030.705523][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2031.746412][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2032.230134][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2032.785559][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.189513][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.825786][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2034.867610][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.266007][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.905254][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2036.948118][T26236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2037.668804][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.987244][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2038.308121][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.025245][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.037943][ T2941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.051372][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2039.063135][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2040.068732][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.105109][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.344867][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.357819][ T2941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.367118][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2041.376810][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.228180][ T8] net_ratelimit: 3 callbacks suppressed [ 2044.228195][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.387249][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2044.706848][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 270 seconds [ 2044.718172][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 270 seconds [ 2044.729788][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 270 seconds [ 2044.741079][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 270 seconds [ 2045.267794][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2045.346519][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 270 seconds [ 2046.305116][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.264986][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 270 seconds [ 2047.348728][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.425610][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2048.385039][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2049.189327][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 270 seconds [ 2049.200612][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 270 seconds [ 2049.212024][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 270 seconds [ 2049.425015][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.464978][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2050.473269][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2051.505879][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.385093][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.397726][ T2941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.408711][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.419862][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.544968][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2053.025427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2054.625060][T12703] net_ratelimit: 2 callbacks suppressed [ 2054.625076][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2055.665409][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.545020][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2056.704853][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2057.747987][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.785172][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.585032][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2059.826159][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2060.234995][T29082] Bluetooth: hci0: command 0x0406 tx timeout [ 2060.866135][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.908011][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2061.986286][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.625151][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2062.947993][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2063.987976][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.024855][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.664929][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2066.065141][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2067.108302][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.144952][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2068.704877][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2069.188089][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2070.228166][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.264998][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.584996][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.745001][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2072.315362][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2073.348142][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.394979][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.793829][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2074.802358][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 300 seconds [ 2074.813619][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 300 seconds [ 2074.825479][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 300 seconds [ 2074.836849][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 300 seconds [ 2075.426119][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 300 seconds [ 2075.437949][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2076.464883][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.345011][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 300 seconds [ 2077.505043][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2077.825032][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.544966][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2079.271259][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 300 seconds [ 2079.282644][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 300 seconds [ 2079.293987][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 300 seconds [ 2079.585521][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.627923][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.864820][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.195357][T12629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2081.668240][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.705820][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.747763][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.759525][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2083.904793][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2084.785035][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2085.826806][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.865196][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2086.944956][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2087.905944][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2088.946867][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.984947][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2089.994331][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2091.025220][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2092.068155][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.028917][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.107996][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.348201][T26382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2093.988459][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2094.148114][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2095.187799][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.064888][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2096.225795][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2097.264935][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2098.307852][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.108291][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.115089][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2099.346288][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2100.386187][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2101.425136][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.153559][ T5850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2102.466434][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2103.504973][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2103.585159][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.547737][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2104.867562][T28729] block nbd2: Possible stuck request ffff888021fbc400: control (read@0,1024B). Runtime 330 seconds [ 2104.878563][T28729] block nbd2: Possible stuck request ffff888021fbc600: control (read@1024,1024B). Runtime 330 seconds [ 2104.889700][T28729] block nbd2: Possible stuck request ffff888021fbc800: control (read@2048,1024B). Runtime 330 seconds [ 2104.900864][T28729] block nbd2: Possible stuck request ffff888021fbca00: control (read@3072,1024B). Runtime 330 seconds [ 2105.184890][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2105.506922][T23674] block nbd4: Possible stuck request ffff888022090000: control (read@0,4096B). Runtime 330 seconds [ 2105.586022][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2106.625846][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2107.425013][T23674] block nbd0: Possible stuck request ffff888021f10600: control (read@0,1024B). Runtime 330 seconds [ 2107.666100][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2108.226512][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2108.705036][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.346732][T28729] block nbd3: Possible stuck request ffff888022020400: control (read@0,1024B). Runtime 330 seconds [ 2109.348762][ T29] INFO: task udevd:26727 blocked for more than 143 seconds. [ 2109.365297][T28729] block nbd3: Possible stuck request ffff888022020600: control (read@1024,2048B). Runtime 330 seconds [ 2109.365338][T28729] block nbd3: Possible stuck request ffff888022020800: control (read@3072,1024B). Runtime 330 seconds [ 2109.390301][ T29] Not tainted syzkaller #0 [ 2109.395681][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2109.405289][ T29] task:udevd state:D stack:25832 pid:26727 ppid:5141 flags:0x00004006 [ 2109.414685][ T29] Call Trace: [ 2109.418012][ T29] [ 2109.421027][ T29] __schedule+0x1553/0x45a0 [ 2109.428126][ T29] ? asan.module_dtor+0x20/0x20 [ 2109.433083][ T29] ? mark_lock+0x94/0x320 [ 2109.438998][ T29] ? lock_chain_count+0x20/0x20 [ 2109.444056][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2109.449404][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2109.455152][ T29] schedule+0xbd/0x170 [ 2109.459295][ T29] io_schedule+0x80/0xd0 [ 2109.464064][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2109.469590][ T29] ? folio_wait_bit+0x30/0x30 [ 2109.474775][ T29] ? _compound_head+0x120/0x120 [ 2109.479797][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2109.485099][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 2109.490441][ T29] ? blkdev_writepage+0x30/0x30 [ 2109.495878][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 2109.501240][ T29] ? blkdev_writepage+0x30/0x30 [ 2109.506202][ T29] read_part_sector+0xd2/0x340 [ 2109.511123][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2109.517093][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2109.522460][ T29] ? put_partition+0x370/0x370 [ 2109.527645][ T29] ? alloc_pages+0x4dc/0x740 [ 2109.532302][ T29] bdev_disk_changed+0x740/0x1420 [ 2109.537520][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2109.542865][ T29] ? iput+0x343/0x920 [ 2109.547078][ T29] blkdev_get_whole+0x30d/0x390 [ 2109.552103][ T29] blkdev_get_by_dev+0x279/0x600 [ 2109.557375][ T29] blkdev_open+0x152/0x360 [ 2109.562215][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2109.567013][ T29] do_dentry_open+0x8c6/0x1500 [ 2109.571842][ T29] path_openat+0x27f1/0x3230 [ 2109.576657][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2109.581499][ T29] ? verify_lock_unused+0x140/0x140 [ 2109.586960][ T29] ? do_filp_open+0x430/0x430 [ 2109.591697][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2109.597013][ T29] do_filp_open+0x1f5/0x430 [ 2109.601587][ T29] ? vfs_tmpfile+0x490/0x490 [ 2109.606369][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2109.611305][ T29] ? alloc_fd+0x58f/0x630 [ 2109.615888][ T29] do_sys_openat2+0x134/0x1d0 [ 2109.620647][ T29] ? do_sys_open+0xe0/0xe0 [ 2109.625671][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2109.631987][ T29] ? lock_chain_count+0x20/0x20 [ 2109.637259][ T29] __x64_sys_openat+0x139/0x160 [ 2109.642483][ T29] do_syscall_64+0x55/0xa0 [ 2109.647326][ T29] ? clear_bhb_loop+0x40/0x90 [ 2109.652080][ T29] ? clear_bhb_loop+0x40/0x90 [ 2109.657342][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2109.663571][ T29] RIP: 0033:0x7f589d0a7407 [ 2109.668540][ T29] RSP: 002b:00007ffdd0db7e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2109.677313][ T29] RAX: ffffffffffffffda RBX: 00007f589d773880 RCX: 00007f589d0a7407 [ 2109.685607][ T29] RDX: 00000000000a0800 RSI: 000055e5113e31f0 RDI: ffffffffffffff9c [ 2109.693634][ T29] RBP: 000055e5113c8910 R08: 0000000000000000 R09: 0000000000000000 [ 2109.701812][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e5113dcba0 [ 2109.710105][ T29] R13: 000055e5113e0410 R14: 0000000000000000 R15: 000055e5113dcba0 [ 2109.718345][ T29] [ 2109.721474][ T29] INFO: task udevd:26829 blocked for more than 143 seconds. [ 2109.729523][ T29] Not tainted syzkaller #0 [ 2109.735481][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2109.744224][ T29] task:udevd state:D stack:25832 pid:26829 ppid:5141 flags:0x00004006 [ 2109.753938][T12703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2109.762203][ T29] Call Trace: [ 2109.767059][ T29] [ 2109.770059][ T29] __schedule+0x1553/0x45a0 [ 2109.774795][ T29] ? asan.module_dtor+0x20/0x20 [ 2109.779708][ T29] ? mark_lock+0x94/0x320 [ 2109.784066][ T29] ? lock_chain_count+0x20/0x20 [ 2109.789167][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2109.794253][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2109.800055][ T29] schedule+0xbd/0x170 [ 2109.804191][ T29] io_schedule+0x80/0xd0 [ 2109.808612][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2109.814085][ T29] ? folio_wait_bit+0x30/0x30 [ 2109.818926][ T29] ? _compound_head+0x120/0x120 [ 2109.823999][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2109.829522][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 2109.835555][ T29] ? blkdev_writepage+0x30/0x30 [ 2109.840490][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 2109.845916][ T29] ? blkdev_writepage+0x30/0x30 [ 2109.850842][ T29] read_part_sector+0xd2/0x340 [ 2109.855719][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2109.861143][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2109.866596][ T29] ? put_partition+0x370/0x370 [ 2109.871432][ T29] ? alloc_pages+0x4dc/0x740 [ 2109.876369][ T29] bdev_disk_changed+0x740/0x1420 [ 2109.881483][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2109.887007][ T29] ? iput+0x343/0x920 [ 2109.891062][ T29] blkdev_get_whole+0x30d/0x390 [ 2109.896016][ T29] blkdev_get_by_dev+0x279/0x600 [ 2109.901023][ T29] blkdev_open+0x152/0x360 [ 2109.905595][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2109.910252][ T29] do_dentry_open+0x8c6/0x1500 [ 2109.915586][ T29] path_openat+0x27f1/0x3230 [ 2109.920248][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2109.925638][ T29] ? verify_lock_unused+0x140/0x140 [ 2109.930983][ T29] ? do_filp_open+0x430/0x430 [ 2109.935790][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2109.941226][ T29] do_filp_open+0x1f5/0x430 [ 2109.946479][ T29] ? vfs_tmpfile+0x490/0x490 [ 2109.951154][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2109.956506][ T29] ? alloc_fd+0x58f/0x630 [ 2109.960921][ T29] do_sys_openat2+0x134/0x1d0 [ 2109.966207][ T29] ? do_sys_open+0xe0/0xe0 [ 2109.970693][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2109.977385][ T29] ? lock_chain_count+0x20/0x20 [ 2109.982379][ T29] ? lock_chain_count+0x20/0x20 [ 2109.988727][ T29] __x64_sys_openat+0x139/0x160 [ 2109.993681][ T29] do_syscall_64+0x55/0xa0 [ 2109.998927][ T29] ? clear_bhb_loop+0x40/0x90 [ 2110.003869][ T29] ? clear_bhb_loop+0x40/0x90 [ 2110.008901][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.015293][ T29] RIP: 0033:0x7f589d0a7407 [ 2110.019806][ T29] RSP: 002b:00007ffdd0db7e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2110.028394][ T29] RAX: ffffffffffffffda RBX: 00007f589d773880 RCX: 00007f589d0a7407 [ 2110.036698][ T29] RDX: 00000000000a0800 RSI: 000055e5113c9430 RDI: ffffffffffffff9c [ 2110.045142][ T29] RBP: 000055e5113c8910 R08: 0000000000000000 R09: 0000000000000000 [ 2110.053378][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e5113dd830 [ 2110.061535][ T29] R13: 000055e5113e0410 R14: 0000000000000000 R15: 000055e5113dd830 [ 2110.070087][ T29] [ 2110.073201][ T29] INFO: task udevd:26875 blocked for more than 144 seconds. [ 2110.080844][ T29] Not tainted syzkaller #0 [ 2110.086034][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2110.095178][ T29] task:udevd state:D stack:25832 pid:26875 ppid:5141 flags:0x00004006 [ 2110.104680][ T29] Call Trace: [ 2110.108014][ T29] [ 2110.110992][ T29] __schedule+0x1553/0x45a0 [ 2110.115780][ T29] ? asan.module_dtor+0x20/0x20 [ 2110.120705][ T29] ? mark_lock+0x94/0x320 [ 2110.125246][ T29] ? lock_chain_count+0x20/0x20 [ 2110.130174][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2110.135368][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2110.141151][ T29] schedule+0xbd/0x170 [ 2110.146093][ T29] io_schedule+0x80/0xd0 [ 2110.150481][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2110.156225][ T29] ? folio_wait_bit+0x30/0x30 [ 2110.160965][ T29] ? _compound_head+0x120/0x120 [ 2110.166340][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2110.171508][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 2110.176994][ T29] ? blkdev_writepage+0x30/0x30 [ 2110.182022][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 2110.187239][ T29] ? blkdev_writepage+0x30/0x30 [ 2110.192145][ T29] read_part_sector+0xd2/0x340 [ 2110.197098][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2110.202553][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2110.208064][ T29] ? put_partition+0x370/0x370 [ 2110.213318][ T29] ? alloc_pages+0x4dc/0x740 [ 2110.218080][ T29] bdev_disk_changed+0x740/0x1420 [ 2110.223220][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2110.228711][ T29] ? iput+0x343/0x920 [ 2110.232757][ T29] blkdev_get_whole+0x30d/0x390 [ 2110.237823][ T29] blkdev_get_by_dev+0x279/0x600 [ 2110.242874][ T29] blkdev_open+0x152/0x360 [ 2110.249113][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2110.253861][ T29] do_dentry_open+0x8c6/0x1500 [ 2110.258784][ T29] path_openat+0x27f1/0x3230 [ 2110.263445][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2110.268371][ T29] ? verify_lock_unused+0x140/0x140 [ 2110.273629][ T29] ? do_filp_open+0x430/0x430 [ 2110.278836][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2110.284014][ T29] do_filp_open+0x1f5/0x430 [ 2110.288693][ T29] ? vfs_tmpfile+0x490/0x490 [ 2110.293343][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2110.299373][ T29] ? alloc_fd+0x58f/0x630 [ 2110.303782][ T29] do_sys_openat2+0x134/0x1d0 [ 2110.309035][ T29] ? do_sys_open+0xe0/0xe0 [ 2110.313519][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2110.319731][ T29] ? lock_chain_count+0x20/0x20 [ 2110.324711][ T29] ? lock_chain_count+0x20/0x20 [ 2110.329704][ T29] __x64_sys_openat+0x139/0x160 [ 2110.334824][ T29] do_syscall_64+0x55/0xa0 [ 2110.339308][ T29] ? clear_bhb_loop+0x40/0x90 [ 2110.344020][ T29] ? clear_bhb_loop+0x40/0x90 [ 2110.349548][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.355765][ T29] RIP: 0033:0x7f589d0a7407 [ 2110.360246][ T29] RSP: 002b:00007ffdd0db7e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2110.368878][ T29] RAX: ffffffffffffffda RBX: 00007f589d773880 RCX: 00007f589d0a7407 [ 2110.377207][ T29] RDX: 00000000000a0800 RSI: 000055e5113ec1b0 RDI: ffffffffffffff9c [ 2110.385620][ T29] RBP: 000055e5113c8910 R08: 0000000000000000 R09: 0000000000000000 [ 2110.393733][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e51140cb90 [ 2110.402365][ T29] R13: 000055e5113e0410 R14: 0000000000000000 R15: 000055e51140cb90 [ 2110.410664][ T29] [ 2110.413788][ T29] INFO: task udevd:26898 blocked for more than 144 seconds. [ 2110.421295][ T29] Not tainted syzkaller #0 [ 2110.426345][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2110.435250][ T29] task:udevd state:D stack:25448 pid:26898 ppid:5141 flags:0x00004006 [ 2110.444613][ T29] Call Trace: [ 2110.447955][ T29] [ 2110.451545][ T29] __schedule+0x1553/0x45a0 [ 2110.456278][ T29] ? asan.module_dtor+0x20/0x20 [ 2110.461197][ T29] ? mark_lock+0x94/0x320 [ 2110.471376][ T29] ? lock_chain_count+0x20/0x20 [ 2110.476504][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2110.481607][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2110.487302][ T29] schedule+0xbd/0x170 [ 2110.491527][ T29] io_schedule+0x80/0xd0 [ 2110.496405][ T29] folio_wait_bit_common+0x714/0xfa0 [ 2110.501773][ T29] ? folio_wait_bit+0x30/0x30 [ 2110.506642][ T29] ? _compound_head+0x120/0x120 [ 2110.511557][ T29] ? filemap_add_folio+0x192/0x3c0 [ 2110.516915][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 2110.522313][ T29] ? blkdev_writepage+0x30/0x30 [ 2110.527541][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 2110.532714][ T29] ? blkdev_writepage+0x30/0x30 [ 2110.537772][ T29] read_part_sector+0xd2/0x340 [ 2110.542631][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 2110.548663][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 2110.554699][ T29] ? put_partition+0x370/0x370 [ 2110.560988][ T29] ? alloc_pages+0x4dc/0x740 [ 2110.565828][ T29] bdev_disk_changed+0x740/0x1420 [ 2110.571081][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 2110.576716][ T29] ? iput+0x343/0x920 [ 2110.580769][ T29] blkdev_get_whole+0x30d/0x390 [ 2110.586013][ T29] blkdev_get_by_dev+0x279/0x600 [ 2110.591388][ T29] blkdev_open+0x152/0x360 [ 2110.596058][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 2110.600976][ T29] do_dentry_open+0x8c6/0x1500 [ 2110.606068][ T29] path_openat+0x27f1/0x3230 [ 2110.610772][ T29] ? do_sys_openat2+0xda/0x1d0 [ 2110.616038][ T29] ? verify_lock_unused+0x140/0x140 [ 2110.621326][ T29] ? do_filp_open+0x430/0x430 [ 2110.626833][ T29] ? __virt_addr_valid+0x18c/0x540 [ 2110.632054][ T29] do_filp_open+0x1f5/0x430 [ 2110.637812][ T29] ? vfs_tmpfile+0x490/0x490 [ 2110.642493][ T29] ? _raw_spin_unlock+0x28/0x40 [ 2110.647585][ T29] ? alloc_fd+0x58f/0x630 [ 2110.652314][ T29] do_sys_openat2+0x134/0x1d0 [ 2110.657915][ T29] ? do_sys_open+0xe0/0xe0 [ 2110.662423][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2110.669217][ T29] ? lock_chain_count+0x20/0x20 [ 2110.674317][ T29] __x64_sys_openat+0x139/0x160 [ 2110.679489][ T29] do_syscall_64+0x55/0xa0 [ 2110.684176][ T29] ? clear_bhb_loop+0x40/0x90 [ 2110.689050][ T29] ? clear_bhb_loop+0x40/0x90 [ 2110.693969][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.700184][ T29] RIP: 0033:0x7f589d0a7407 [ 2110.706792][ T29] RSP: 002b:00007ffdd0db7e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2110.716392][ T29] RAX: ffffffffffffffda RBX: 00007f589d773880 RCX: 00007f589d0a7407 [ 2110.727266][ T29] RDX: 00000000000a0800 RSI: 000055e5113c9570 RDI: ffffffffffffff9c [ 2110.735723][ T29] RBP: 000055e5113c8910 R08: 0000000000000000 R09: 0000000000000000 [ 2110.743785][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e5113dbe20 [ 2110.752009][ T29] R13: 000055e5113e0410 R14: 0000000000000000 R15: 000055e5113dbe20 [ 2110.760703][ T29] [ 2110.764029][ T29] [ 2110.764029][ T29] Showing all locks held in the system: [ 2110.772398][ T29] 1 lock held by khungtaskd/29: [ 2110.777641][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2110.790823][T29618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2110.798935][ T29] 2 locks held by getty/5530: [ 2110.798957][ T29] #0: ffff88814c8630a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2110.814066][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2110.824506][ T29] 1 lock held by udevd/26727: [ 2110.830796][ T29] #0: ffff888021ef84c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2110.841193][ T29] 1 lock held by udevd/26829: [ 2110.846265][ T29] #0: ffff888021fe24c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2110.856485][ T29] 1 lock held by udevd/26875: [ 2110.861447][ T29] #0: ffff888021e914c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2110.873847][ T29] 1 lock held by udevd/26898: [ 2110.879011][ T29] #0: ffff888021efd4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 2110.889279][ T29] [ 2110.891785][ T29] ============================================= [ 2110.891785][ T29] [ 2110.900355][ T29] NMI backtrace for cpu 1 [ 2110.904729][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2110.911962][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2110.922144][ T29] Call Trace: [ 2110.925466][ T29] [ 2110.928433][ T29] dump_stack_lvl+0x18c/0x250 [ 2110.933131][ T29] ? preempt_count_add+0x91/0x1a0 [ 2110.938723][ T29] ? show_regs_print_info+0x20/0x20 [ 2110.944065][ T29] ? load_image+0x420/0x420 [ 2110.948711][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2110.953707][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2110.959896][ T29] ? _printk+0xde/0x130 [ 2110.964118][ T29] ? load_image+0x420/0x420 [ 2110.968653][ T29] ? load_image+0x420/0x420 [ 2110.973525][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2110.979634][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2110.985853][ T29] watchdog+0xf3d/0xf80 [ 2110.990066][ T29] ? watchdog+0x1e1/0xf80 [ 2110.994446][ T29] kthread+0x2fa/0x390 [ 2110.998554][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2111.003624][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2111.008257][ T29] ret_from_fork+0x48/0x80 [ 2111.012810][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2111.017532][ T29] ret_from_fork_asm+0x11/0x20 [ 2111.022346][ T29] [ 2111.025931][ T29] Sending NMI from CPU 1 to CPUs 0: [ 2111.031210][ C0] NMI backtrace for cpu 0 [ 2111.031223][ C0] CPU: 0 PID: 2941 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 2111.031240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2111.031251][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 2111.031275][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60 [ 2111.031299][ C0] Code: 04 24 65 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 [ 2111.031315][ C0] RSP: 0018:ffffc9000c0375d8 EFLAGS: 00000246 [ 2111.031328][ C0] RAX: ffffffff813b6b62 RBX: ffffc9000c037648 RCX: ffff88802c125a00 [ 2111.031342][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2111.031352][ C0] RBP: 0000000000000000 R08: ffffc9000c037601 R09: 0000000000000000 [ 2111.031364][ C0] R10: ffffc9000c037648 R11: fffff52001806ed5 R12: ffffc9000c0375e0 [ 2111.031376][ C0] R13: ffffc9000c037668 R14: ffffc9000c037670 R15: 1ffff92001806ece [ 2111.031390][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2111.031404][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2111.031416][ C0] CR2: 000055cabb2e4660 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 2111.031432][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2111.031443][ C0] DR3: ffffffffafffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2111.031455][ C0] Call Trace: [ 2111.031461][ C0] [ 2111.031466][ C0] __unwind_start+0x532/0x7e0 [ 2111.031487][ C0] ? stack_trace_save+0x100/0x100 [ 2111.031508][ C0] arch_stack_walk+0xf8/0x190 [ 2111.031529][ C0] ? __unwind_start+0x2d2/0x7e0 [ 2111.031546][ C0] stack_trace_save+0xaa/0x100 [ 2111.031566][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2111.031588][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2111.031609][ C0] ? lock_chain_count+0x20/0x20 [ 2111.031629][ C0] kasan_set_track+0x4e/0x70 [ 2111.031674][ C0] ? __kmem_cache_alloc_node+0x13a/0x250 [ 2111.031699][ C0] ? __alloc_skb+0x138/0x2c0 [ 2111.031720][ C0] __kasan_kmalloc+0x8f/0xa0 [ 2111.031739][ C0] ? __alloc_skb+0x138/0x2c0 [ 2111.031754][ C0] __kmalloc_node_track_caller+0xb2/0x230 [ 2111.031779][ C0] ? rcu_is_watching+0x15/0xb0 [ 2111.031803][ C0] ? __alloc_skb+0x138/0x2c0 [ 2111.031817][ C0] kmalloc_reserve+0x116/0x240 [ 2111.031835][ C0] __alloc_skb+0x138/0x2c0 [ 2111.031853][ C0] nsim_dev_trap_report_work+0x293/0xb00 [ 2111.031880][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 2111.031903][ C0] process_scheduled_works+0xa5d/0x15d0 [ 2111.031939][ C0] ? worker_attach_to_pool+0x380/0x380 [ 2111.031964][ C0] ? assign_work+0x3d2/0x5d0 [ 2111.031988][ C0] worker_thread+0xa55/0xfc0 [ 2111.032023][ C0] kthread+0x2fa/0x390 [ 2111.032039][ C0] ? pr_cont_work+0x560/0x560 [ 2111.032060][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2111.032076][ C0] ret_from_fork+0x48/0x80 [ 2111.032097][ C0] ? kthread_blkcg+0xd0/0xd0 [ 2111.032114][ C0] ret_from_fork_asm+0x11/0x20 [ 2111.032145][ C0] [ 2111.334725][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2111.341719][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2111.349062][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2111.359180][ T29] Call Trace: [ 2111.362599][ T29] [ 2111.365666][ T29] dump_stack_lvl+0x18c/0x250 [ 2111.370772][ T29] ? show_regs_print_info+0x20/0x20 [ 2111.376048][ T29] ? load_image+0x420/0x420 [ 2111.380615][ T29] panic+0x2dc/0x730 [ 2111.384563][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2111.390246][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2111.394804][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2111.400408][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2111.406628][ T29] watchdog+0xf7c/0xf80 [ 2111.410848][ T29] ? watchdog+0x1e1/0xf80 [ 2111.415249][ T29] kthread+0x2fa/0x390 [ 2111.419365][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2111.424430][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2111.429081][ T29] ret_from_fork+0x48/0x80 [ 2111.433519][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2111.438138][ T29] ret_from_fork_asm+0x11/0x20 [ 2111.442955][ T29] [ 2111.446570][ T29] Kernel Offset: disabled [ 2111.450908][ T29] Rebooting in 86400 seconds..