last executing test programs: 1m6.930314484s ago: executing program 4 (id=1347): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 1m6.611554939s ago: executing program 4 (id=1349): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5a694428, 0x2, 0xffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}, 0x50) creat(&(0x7f00000003c0)='./file0\x00', 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m6.288238744s ago: executing program 4 (id=1352): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 1m5.529691606s ago: executing program 4 (id=1356): socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4004, &(0x7f0000000000)=0xfffffffffffffff9, 0x5, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock(&(0x7f000002b000/0x3000)=nil, 0x3000) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioperm(0x0, 0x8001, 0x9) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) poll(0x0, 0x0, 0x80000201) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m4.259558026s ago: executing program 4 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xd}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x20001}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xb}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 41.808938077s ago: executing program 4 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xd}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x20001}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @remote}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0xb}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 38.079871415s ago: executing program 3 (id=1472): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x1b67, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 36.335466712s ago: executing program 3 (id=1475): io_setup(0x3, 0x0) io_submit(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000303000/0x3000)=nil, 0x3000, 0xb635773f04ebbee6, 0x30, 0xffffffffffffffff, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 35.965182758s ago: executing program 0 (id=1477): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00'], 0x40}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 35.287479639s ago: executing program 0 (id=1479): r0 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000140)=""/240, &(0x7f0000000280)=0xf0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x9, 0x8b, 0xf20, 0x1, 0x8}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 34.831479916s ago: executing program 3 (id=1480): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 34.772616057s ago: executing program 0 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 34.324971483s ago: executing program 3 (id=1482): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ffff000000001b000000060021"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000140)={0x0, 0x0, 0x0}) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) read(r5, &(0x7f0000000640)=""/4096, 0x1000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x30000015}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sctp\x00') mkdirat(r6, &(0x7f0000000080)='./file0\x00', 0x48) close_range(r4, r5, 0x0) 33.506081447s ago: executing program 0 (id=1483): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = socket(0x1e, 0x4, 0x0) sendmmsg(r4, &(0x7f00000030c0), 0x0, 0x9200000000000000) openat$autofs(0xffffff9c, 0x0, 0x208400, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005b80)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10520}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_MODE={0xffffffffffffffec, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x9, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) 29.514599819s ago: executing program 3 (id=1492): syz_open_dev$media(&(0x7f0000000000), 0xf7, 0x40a01) pipe2$9p(&(0x7f0000000240), 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.41993131s ago: executing program 0 (id=1493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 28.259024638s ago: executing program 0 (id=1494): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000003d00)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2000}, 0x60) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/54, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc780000000000000000000000005"], 0x120}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8005}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x24000001) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 28.251766709s ago: executing program 3 (id=1495): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2502000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 24.113048823s ago: executing program 1 (id=1509): r0 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000140)=""/240, &(0x7f0000000280)=0xf0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x9, 0x8b, 0xf20, 0x1, 0x8}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 23.07788987s ago: executing program 1 (id=1502): openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='objagg_obj_create\x00', r5}, 0x18) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000006480)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x587, @mcast2, 0x1}, 0x1c, 0x0}}], 0x1, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 22.980734881s ago: executing program 2 (id=1503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x1, 0xf2, 0x0) 22.886591133s ago: executing program 2 (id=1504): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 21.14408554s ago: executing program 2 (id=1505): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x4, 0x9, 0x41495043, 0x9, 0x5, [{0x1, 0xb}, {0x3, 0x9}, {0x3, 0x3ff}, {0x8, 0x7a25}, {}, {0xffff, 0xffff8000}, {0x7, 0x4}, {0x4, 0x10000}], 0xa, 0x7f, 0x4, 0x2, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 20.921900173s ago: executing program 1 (id=1506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0xfffffffa, 0x1, 0x4, {0x80, 0x5}, 0xe95, 0x46}) 20.628741388s ago: executing program 1 (id=1507): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100ffffffffffdbdf251800000008000300", @ANYRES32=r2, @ANYBLOB='$\x000'], 0x40}, 0x1, 0x0, 0x0, 0x4004080}, 0x810) 20.395849751s ago: executing program 1 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_usb_connect(0x0, 0x14f, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x57, 0xb2, 0x82, 0x40, 0x10c4, 0x8938, 0x1025, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13d, 0x1, 0x81, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0xc3, 0x6, 0x8, 0x3, 0xf3, 0x10, 0x1, [], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0xff, 0x81, 0x8}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x8, 0x6, 0xfd, [@generic={0x2, 0x23}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x40, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x15c9adb02d800f6d, 0x40, 0xc068}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x81, 0x7, 0x8, [@generic={0xca, 0x11, "ae10d09077c9a2cb580f391ea21a2168f77917b26eea0738046ca60a5abf0fa9ba4ac9d85caeb80b1719370050ed090c32da86e1c015df116d7d8819c5036d76527ef88d45b6260a03d2c36730e94143cf837516359093cd204f591de92ecacef5c393d0264d605da56c22885954390eb39e115cf705192b87f1cc0e10b7f4ec175a7b34045625df06d036ef296517420436ef31b081e5e8003d9f530ca07e17eca6804e2e2d6d5f0f7a82d006b2f3a4f9b554ef9a85b4b72ec2883ba418db6145576ecaa1039964"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x40, 0x1b, 0x61, [@generic={0x7, 0x22, "c3511e6d34"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0xac, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x4, 0x95, 0x80, [@generic={0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x8, 0xff, 0x0, 0x9}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x3, [{0x5d, &(0x7f0000000740)=@string={0x5d, 0x3, "ec1c877bd1d9b6f44e7b9ab8229ef3804c4a6c00f74b5523dcbc2eb0d2e0c5678b5da5b0b4d45e8bd2e5bd11b2f840b9212a4d7903ea36bcb39a0723b123196f84140ea823bae49154c68026dcce008794b86584f1d5d81e5c91ee"}}, {0x2, &(0x7f0000000840)=@string={0x2}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1809}}]}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 18.725978778s ago: executing program 1 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYBLOB="000000000000001000000000000000", @ANYBLOB], 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000150e62f9d7b7320fee356f79462ace48aa21d1fd31376501203a070597313a8b26a449bc0be7b095a09c5f39c218b9596051ff1d7848f6b2c69294000000000000000000191f445d914af6cb72c4a859563758b5d81d38a32f7975cafdc5e783ae7674cb46922fe14e59c010a23a02135697f2eae683ee93ea3925503dbff8767daf922b7512f3a03bb737d329830e7c83e1ae936a2719c560564c74c21d2514272755162e38ec169b18c721d2259bab636de87134341b65da1c009404f736d17cef"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 18.725771888s ago: executing program 2 (id=1511): socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mq_open(0x0, 0x40, 0x46, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0xfffffffe, 0x345, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) splice(r6, 0x0, r5, 0x0, 0x7ffff041, 0x1200000000000008) 15.588498406s ago: executing program 2 (id=1512): pwritev2(0xffffffffffffffff, 0x0, 0xfffffffffffffc78, 0x81, 0x7ffffffe, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') 15.34460935s ago: executing program 2 (id=1513): r0 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000140)=""/240, &(0x7f0000000280)=0xf0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x9, 0x8b, 0xf20, 0x1, 0x8}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.074051496s ago: executing program 32 (id=1494): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, 0x0, &(0x7f0000003d00)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2000}, 0x60) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/54, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc780000000000000000000000005"], 0x120}}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8005}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40840}, 0x24000001) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 13.014320327s ago: executing program 33 (id=1495): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2502000000", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.056988942s ago: executing program 34 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYBLOB="000000000000001000000000000000", @ANYBLOB], 0x48) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 0s ago: executing program 35 (id=1513): r0 = syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, &(0x7f0000000140)=""/240, &(0x7f0000000280)=0xf0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x9, 0x8b, 0xf20, 0x1, 0x8}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): batadv_slave_0 [ 85.884017][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.896086][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.908793][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.919447][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.930316][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.941053][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.951047][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.961865][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.974215][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.988727][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.998298][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.006559][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.014442][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.023419][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.032277][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.042169][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.060955][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.072014][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.082188][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.092761][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.102790][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.113270][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.123373][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.135076][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.146610][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.155413][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.164152][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.173390][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.182878][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.213382][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.225895][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.233178][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.237003][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.250832][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.271885][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.285482][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.308218][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.319251][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.338249][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.348886][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.360051][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.370944][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.381032][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.391660][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.404767][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.417405][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.427873][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.438790][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.477122][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.485988][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.486043][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.502346][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.511414][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.522597][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.556448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.637551][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.671557][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.723183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.814828][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.823206][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.839533][ T3518] cfg80211: failed to load regulatory.db [ 86.842993][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.853213][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.882167][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.903616][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.924751][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 86.930843][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 86.937961][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 86.946077][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 86.995083][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 87.132238][ T4299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.156477][ T4299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.156758][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.179062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.215541][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.251313][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.381000][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.421853][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.461632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.925725][ T4344] syz.4.5 (4344) used greatest stack depth: 19256 bytes left [ 89.024320][ T4334] loop2: detected capacity change from 0 to 32768 [ 89.164230][ T4334] XFS (loop2): Mounting V5 Filesystem [ 89.863917][ T4334] XFS (loop2): Ending clean mount [ 89.942041][ T4334] XFS (loop2): Quotacheck needed: Please wait. [ 90.181897][ T4334] XFS (loop2): Quotacheck: Done. [ 90.406521][ T4376] loop1: detected capacity change from 0 to 128 [ 90.569700][ T4264] XFS (loop2): Unmounting Filesystem [ 90.772672][ T4359] loop0: detected capacity change from 0 to 32768 [ 90.943931][ T4359] XFS (loop0): Mounting V5 Filesystem [ 91.186097][ T4359] XFS (loop0): Ending clean mount [ 91.220379][ T4359] XFS (loop0): Quotacheck needed: Please wait. [ 91.302032][ T4359] XFS (loop0): Quotacheck: Done. [ 92.408697][ T4253] XFS (loop0): Unmounting Filesystem [ 94.204616][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 94.215188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 94.224812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 94.234792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 96.400753][ T4429] loop0: detected capacity change from 0 to 128 [ 97.266728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.275560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 97.847305][ T4442] loop0: detected capacity change from 0 to 2048 [ 98.685796][ T4442] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 98.705384][ T4442] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 98.827422][ T4442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.311982][ T4488] loop2: detected capacity change from 0 to 8 [ 102.508281][ T4488] unable to read xattr id index table [ 104.156770][ T4494] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 105.470967][ T4532] overlayfs: missing 'lowerdir' [ 106.256207][ T4541] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.401792][ T4546] loop1: detected capacity change from 0 to 128 [ 108.988079][ T4569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 109.334832][ T4316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.441045][ T4585] loop2: detected capacity change from 0 to 128 [ 109.934042][ T4592] loop3: detected capacity change from 0 to 128 [ 110.568059][ T4585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.611662][ T4585] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.658737][ T4316] usb 2-1: config 129 has an invalid interface number: 195 but max is 0 [ 110.674624][ T4316] usb 2-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 110.704587][ T4316] usb 2-1: config 129 has no interface number 0 [ 110.711030][ T4316] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 110.814924][ T4316] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 110.865808][ T4316] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 110.887098][ T4316] usb 2-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 110.936906][ T4316] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 110.950578][ T4316] usb 2-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 110.962036][ T4316] usb 2-1: config 129 interface 195 has no altsetting 0 [ 110.974912][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 110.982582][ T4316] usb 2-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 111.054738][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.083370][ T4316] usb 2-1: Product: ᠉ [ 111.094649][ T4316] usb 2-1: SerialNumber: syz [ 111.205534][ T4608] overlayfs: missing 'lowerdir' [ 111.396371][ T4614] netlink: 60 bytes leftover after parsing attributes in process `syz.0.94'. [ 111.424705][ T4316] cp210x 2-1:129.195: cp210x converter detected [ 111.444251][ T4316] cp210x 2-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 111.458179][ T4316] cp210x 2-1:129.195: querying part number failed [ 111.524259][ T4316] usb 2-1: cp210x converter now attached to ttyUSB0 [ 111.668964][ T4316] usb 2-1: USB disconnect, device number 2 [ 112.526368][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 112.605350][ T4316] cp210x 2-1:129.195: device disconnected [ 113.005898][ T4636] loop3: detected capacity change from 0 to 128 [ 114.922597][ T4645] loop2: detected capacity change from 0 to 1024 [ 115.094014][ T27] audit: type=1326 audit(1742768637.436:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846858d169 code=0x7ffc0000 [ 115.132451][ T4653] loop4: detected capacity change from 0 to 1024 [ 115.161265][ T4653] ======================================================= [ 115.161265][ T4653] WARNING: The mand mount option has been deprecated and [ 115.161265][ T4653] and is ignored by this kernel. Remove the mand [ 115.161265][ T4653] option from the mount to silence this warning. [ 115.161265][ T4653] ======================================================= [ 115.209342][ T27] audit: type=1326 audit(1742768637.436:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846858d169 code=0x7ffc0000 [ 115.288540][ T27] audit: type=1326 audit(1742768637.486:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f846858d169 code=0x7ffc0000 [ 115.423214][ T27] audit: type=1326 audit(1742768637.486:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846858d169 code=0x7ffc0000 [ 115.445810][ T27] audit: type=1326 audit(1742768637.486:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4650 comm="syz.3.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846858d169 code=0x7ffc0000 [ 115.462058][ T4653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.659431][ T27] audit: type=1800 audit(1742768637.976:7): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.95" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 115.791461][ T4252] EXT4-fs (loop4): unmounting filesystem. [ 117.819084][ T4690] loop3: detected capacity change from 0 to 128 [ 118.829486][ T4700] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.872146][ T4700] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.890883][ T4700] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.903815][ T4701] loop2: detected capacity change from 0 to 4096 [ 118.925431][ T4700] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 118.947884][ T4701] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 118.958028][ T4700] device geneve2 entered promiscuous mode [ 119.304744][ T4297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.183806][ T4718] loop3: detected capacity change from 0 to 1024 [ 120.245774][ T4718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.301877][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 120.352883][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.409923][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.479117][ T4297] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.543816][ T4297] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.554208][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.644143][ T4732] loop0: detected capacity change from 0 to 128 [ 121.412359][ T4250] EXT4-fs (loop3): unmounting filesystem. [ 121.417501][ T4297] usb 2-1: config 0 descriptor?? [ 121.513019][ T4736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.124'. [ 121.542842][ T4736] Zero length message leads to an empty skb [ 121.684714][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.728310][ T4742] loop2: detected capacity change from 0 to 256 [ 121.772917][ T4679] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 121.785960][ T4742] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.816248][ T4742] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 121.836130][ T4297] usbhid 2-1:0.0: can't add hid device: -71 [ 121.842228][ T4297] usbhid: probe of 2-1:0.0 failed with error -71 [ 121.868213][ T4297] usb 2-1: USB disconnect, device number 3 [ 121.887381][ T26] usb 5-1: config 129 has an invalid interface number: 195 but max is 0 [ 121.891662][ T4742] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 121.904684][ T26] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 121.954661][ T26] usb 5-1: config 129 has no interface number 0 [ 121.971318][ T26] usb 5-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 121.998797][ T26] usb 5-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 122.010556][ T27] audit: type=1800 audit(1742768644.346:8): pid=4742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.126" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 122.043589][ T26] usb 5-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 122.206378][ T26] usb 5-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 122.217786][ T26] usb 5-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 122.228903][ T26] usb 5-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 122.239615][ T26] usb 5-1: config 129 interface 195 has no altsetting 0 [ 122.249020][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.258057][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.270769][ T26] usb 5-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 122.292157][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.357780][ T26] usb 5-1: Product: ᠉ [ 122.381300][ T26] usb 5-1: SerialNumber: syz [ 123.134605][ T4316] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 123.163060][ T4756] loop1: detected capacity change from 0 to 1024 [ 123.171718][ T4756] EXT4-fs: Ignoring removed bh option [ 123.192907][ T4756] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.246486][ T26] cp210x 5-1:129.195: cp210x converter detected [ 123.261683][ T26] cp210x 5-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 123.295107][ T26] cp210x 5-1:129.195: querying part number failed [ 123.301973][ T4316] usb 1-1: device descriptor read/64, error -71 [ 123.311472][ T26] usb 5-1: cp210x converter now attached to ttyUSB0 [ 123.320076][ T4756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 123.393044][ T26] usb 5-1: USB disconnect, device number 2 [ 123.441270][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 123.486017][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.524371][ T26] cp210x 5-1:129.195: device disconnected [ 123.791860][ T4770] loop2: detected capacity change from 0 to 128 [ 123.890520][ T4316] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 124.932989][ T4781] loop3: detected capacity change from 0 to 4096 [ 124.954675][ T4316] usb 1-1: device descriptor read/64, error -71 [ 125.074759][ T4316] usb usb1-port1: attempt power cycle [ 125.185332][ T4790] loop2: detected capacity change from 0 to 64 [ 125.414699][ T126] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 125.634586][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 125.652122][ T126] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD8, skipping [ 125.918001][ T126] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 126.094028][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.140293][ T126] usb 2-1: Product: syz [ 126.173753][ T126] usb 2-1: Manufacturer: syz [ 126.189071][ T126] usb 2-1: SerialNumber: syz [ 126.231791][ T126] usb 2-1: config 0 descriptor?? [ 126.283963][ T126] usb 2-1: no audio or video endpoints found [ 126.287908][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 126.316736][ T4797] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 126.338048][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 126.436243][ T4804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 126.454469][ T4806] netlink: 24 bytes leftover after parsing attributes in process `syz.4.150'. [ 126.472179][ T4316] usb 2-1: USB disconnect, device number 4 [ 126.611938][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 126.622482][ T4808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.708320][ T4808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.730303][ T126] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.113941][ T126] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 127.127521][ T126] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 127.137398][ T126] usb 3-1: config 129 has no interface number 0 [ 127.143720][ T126] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 127.819007][ T4816] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.860549][ T4816] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.891270][ T4816] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.913277][ T4816] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.927328][ T126] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 127.938601][ T126] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 127.949553][ T126] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 127.960617][ T126] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 127.971579][ T126] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 127.981663][ T126] usb 3-1: config 129 interface 195 has no altsetting 0 [ 127.989718][ T4816] device geneve2 entered promiscuous mode [ 127.999815][ T126] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 128.011980][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.025664][ T126] usb 3-1: Product: ᠉ [ 128.029901][ T126] usb 3-1: SerialNumber: syz [ 128.056875][ T4266] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 128.057473][ T4818] loop0: detected capacity change from 0 to 8 [ 128.125800][ T4818] unable to read xattr id index table [ 128.304142][ T4824] loop4: detected capacity change from 0 to 4096 [ 128.329830][ T126] cp210x 3-1:129.195: cp210x converter detected [ 128.355075][ T126] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 128.363314][ T126] cp210x 3-1:129.195: querying part number failed [ 128.371914][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 128.378693][ T4266] Bluetooth: hci5: command 0x1003 tx timeout [ 128.392284][ T126] usb 3-1: cp210x converter now attached to ttyUSB0 [ 128.405848][ T126] usb 3-1: USB disconnect, device number 2 [ 128.416620][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.426177][ T126] cp210x 3-1:129.195: device disconnected [ 128.463937][ T4828] loop0: detected capacity change from 0 to 4096 [ 128.474082][ T4828] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 128.494611][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.684867][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 128.698960][ T4316] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 128.746427][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.766312][ T4316] usb 2-1: Product: syz [ 128.774012][ T4316] usb 2-1: Manufacturer: syz [ 128.784698][ T4316] usb 2-1: SerialNumber: syz [ 128.803801][ T4834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 128.819479][ T4316] usb 2-1: config 0 descriptor?? [ 128.842858][ T4316] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 129.835102][ T4848] loop4: detected capacity change from 0 to 128 [ 129.904867][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.153958][ T4859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.201114][ T4855] loop2: detected capacity change from 0 to 2048 [ 130.210083][ T4296] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.220658][ T4296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.238899][ T4296] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 130.254997][ T4855] EXT4-fs: Ignoring removed oldalloc option [ 130.261169][ T4296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.273290][ T4296] usb 4-1: Product: syz [ 130.278281][ T4296] usb 4-1: Manufacturer: syz [ 130.283506][ T4296] usb 4-1: SerialNumber: syz [ 130.288516][ T4855] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.313240][ T4296] usb 4-1: config 0 descriptor?? [ 130.336485][ T4296] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 130.357124][ T4296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.366187][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 130.368311][ T4296] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 130.385125][ T4296] usb 4-1: media controller created [ 130.416271][ T4296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.447956][ T4861] loop4: detected capacity change from 0 to 4096 [ 130.534921][ T4296] DVB: Unable to find symbol tda10046_attach() [ 130.541319][ T4296] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 130.560478][ T4296] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 130.578657][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 130.692376][ T4867] loop2: detected capacity change from 0 to 128 [ 130.718995][ T4316] gspca_topro: Sensor cx0342 [ 130.757570][ T4867] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 130.897966][ T4873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.174'. [ 130.901226][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 130.939171][ T4313] usb 2-1: USB disconnect, device number 5 [ 131.105946][ T4876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 131.232257][ T4878] loop4: detected capacity change from 0 to 4096 [ 131.258687][ T4878] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 131.324613][ T4316] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.532856][ T4316] usb 1-1: config 129 has an invalid interface number: 195 but max is 0 [ 131.542867][ T4316] usb 1-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 131.552747][ T4316] usb 1-1: config 129 has no interface number 0 [ 131.576816][ T4316] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 131.594646][ T4296] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71 [ 131.627339][ T4296] usb 4-1: USB disconnect, device number 2 [ 131.651765][ T4316] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 131.677548][ T4316] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 131.694195][ T4891] loop1: detected capacity change from 0 to 512 [ 131.714087][ T4316] usb 1-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 131.728127][ T4891] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.750937][ T4316] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 131.782843][ T4316] usb 1-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 131.798552][ T4891] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 131.849405][ T4316] usb 1-1: config 129 interface 195 has no altsetting 0 [ 131.889527][ T4316] usb 1-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 131.917653][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.936306][ T4316] usb 1-1: Product: ᠉ [ 131.943974][ T4316] usb 1-1: SerialNumber: syz [ 131.952855][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 132.261191][ T4316] cp210x 1-1:129.195: cp210x converter detected [ 132.277973][ T4316] cp210x 1-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 132.325488][ T4316] cp210x 1-1:129.195: querying part number failed [ 132.389452][ T4316] usb 1-1: cp210x converter now attached to ttyUSB0 [ 132.478156][ T4912] loop4: detected capacity change from 0 to 128 [ 132.920972][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.928403][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.135269][ T4915] loop2: detected capacity change from 0 to 1024 [ 133.195516][ T4915] EXT4-fs: Ignoring removed bh option [ 133.212864][ T4316] usb 1-1: USB disconnect, device number 5 [ 133.228558][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.240054][ T4316] cp210x 1-1:129.195: device disconnected [ 133.248576][ T4915] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.318027][ T4915] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 133.427072][ T4922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 133.491228][ T4916] loop3: detected capacity change from 0 to 4096 [ 134.396148][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 134.617395][ T4938] bridge0: port 3(syz_tun) entered blocking state [ 134.636641][ T4938] bridge0: port 3(syz_tun) entered disabled state [ 134.700614][ T4938] device syz_tun entered promiscuous mode [ 134.743648][ T4938] bridge0: port 3(syz_tun) entered blocking state [ 134.750888][ T4938] bridge0: port 3(syz_tun) entered forwarding state [ 135.987798][ T4955] loop0: detected capacity change from 0 to 128 [ 136.346845][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 136.521365][ T4956] loop4: detected capacity change from 0 to 512 [ 136.916395][ T4956] EXT4-fs: Ignoring removed nobh option [ 136.922054][ T4956] journal_path: Lookup failure for './bus' [ 136.934676][ T4956] EXT4-fs: error: could not find journal device path [ 136.948691][ T4969] loop1: detected capacity change from 0 to 4096 [ 137.719688][ T4994] loop0: detected capacity change from 0 to 128 [ 139.123467][ T5010] loop2: detected capacity change from 0 to 4096 [ 140.117809][ T5047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'. [ 140.482725][ T5053] loop2: detected capacity change from 0 to 4096 [ 141.271892][ T4266] Bluetooth: hci5: sending frame failed (-49) [ 141.279296][ T4268] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 141.318385][ T5057] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 143.670357][ T5097] loop3: detected capacity change from 0 to 4096 [ 147.070775][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 147.363602][ T5171] raw_sendmsg: syz.3.289 forgot to set AF_INET. Fix it! [ 147.394651][ T4316] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.590743][ T4316] usb 5-1: config 129 has an invalid interface number: 195 but max is 0 [ 147.601238][ T4316] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 147.626876][ T4316] usb 5-1: config 129 has no interface number 0 [ 147.633216][ T4316] usb 5-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 147.663225][ T4316] usb 5-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 147.683822][ T4316] usb 5-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 147.695622][ T4316] usb 5-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 147.714769][ T4316] usb 5-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 147.748551][ T4316] usb 5-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 147.778863][ T4316] usb 5-1: config 129 interface 195 has no altsetting 0 [ 147.811484][ T4316] usb 5-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 147.848351][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.875857][ T4316] usb 5-1: Product: ᠉ [ 147.896560][ T4316] usb 5-1: SerialNumber: syz [ 148.165446][ T4316] cp210x 5-1:129.195: cp210x converter detected [ 148.183121][ T4316] cp210x 5-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 148.191099][ T4316] cp210x 5-1:129.195: querying part number failed [ 148.200412][ T4316] usb 5-1: cp210x converter now attached to ttyUSB0 [ 148.220832][ T4316] usb 5-1: USB disconnect, device number 3 [ 148.431728][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 148.601960][ T4316] cp210x 5-1:129.195: device disconnected [ 151.125746][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 151.312585][ T4268] Bluetooth: hci2: Malformed LE Event: 0x1b [ 151.337058][ T26] usb 4-1: config 129 has an invalid interface number: 195 but max is 0 [ 151.361339][ T26] usb 4-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 151.383022][ T26] usb 4-1: config 129 has no interface number 0 [ 151.398220][ T26] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 151.423333][ T26] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 151.444625][ T26] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 151.458519][ T26] usb 4-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 151.469761][ T26] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 151.485231][ T26] usb 4-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 151.496092][ T26] usb 4-1: config 129 interface 195 has no altsetting 0 [ 151.519817][ T26] usb 4-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 151.550657][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.571113][ T26] usb 4-1: Product: ᠉ [ 151.599933][ T26] usb 4-1: SerialNumber: syz [ 151.888643][ T26] cp210x 4-1:129.195: cp210x converter detected [ 151.904740][ T26] cp210x 4-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 151.912667][ T26] cp210x 4-1:129.195: querying part number failed [ 151.983532][ T26] usb 4-1: cp210x converter now attached to ttyUSB0 [ 152.764848][ T26] usb 4-1: USB disconnect, device number 3 [ 152.795106][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.022373][ T26] cp210x 4-1:129.195: device disconnected [ 154.431150][ T5301] loop1: detected capacity change from 0 to 128 [ 157.196213][ T5336] loop2: detected capacity change from 0 to 128 [ 159.251785][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 159.305099][ T5356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 159.483447][ T5362] input: syz1 as /devices/virtual/input/input5 [ 159.637395][ T5370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.366'. [ 159.663732][ T5364] loop2: detected capacity change from 0 to 4096 [ 160.181239][ T5383] 9pnet_virtio: no channels available for device syz [ 162.037620][ T5419] 9pnet_virtio: no channels available for device syz [ 162.059207][ T5414] loop0: detected capacity change from 0 to 4096 [ 163.434310][ T5434] lo speed is unknown, defaulting to 1000 [ 163.457116][ T5434] lo speed is unknown, defaulting to 1000 [ 163.472761][ T5434] lo speed is unknown, defaulting to 1000 [ 164.055459][ T5434] infiniband sz1: set active [ 164.060561][ T5434] infiniband sz1: added lo [ 164.181805][ T5434] RDS/IB: sz1: added [ 164.188036][ T5434] smc: adding ib device sz1 with port count 1 [ 164.194475][ T5434] smc: ib device sz1 port 1 has pnetid [ 164.205557][ T4313] lo speed is unknown, defaulting to 1000 [ 164.213377][ T5434] lo speed is unknown, defaulting to 1000 [ 164.287569][ T4313] lo speed is unknown, defaulting to 1000 [ 164.464254][ T5434] lo speed is unknown, defaulting to 1000 [ 164.569875][ T5434] lo speed is unknown, defaulting to 1000 [ 164.687815][ T5434] lo speed is unknown, defaulting to 1000 [ 164.791411][ T5443] capability: warning: `syz.2.391' uses deprecated v2 capabilities in a way that may be insecure [ 164.808735][ T5434] lo speed is unknown, defaulting to 1000 [ 164.908820][ T5446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.392'. [ 165.404288][ T5454] netlink: set zone limit has 8 unknown bytes [ 165.517469][ T5455] loop0: detected capacity change from 0 to 128 [ 166.553551][ T5465] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.273346][ T5488] loop1: detected capacity change from 0 to 4096 [ 167.643390][ T5502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 169.491776][ T5529] loop4: detected capacity change from 0 to 4096 [ 171.659247][ T5573] loop2: detected capacity change from 0 to 4096 [ 171.823051][ T5579] loop1: detected capacity change from 0 to 128 [ 173.826940][ T5621] loop2: detected capacity change from 0 to 128 [ 174.509683][ T5620] loop3: detected capacity change from 0 to 4096 [ 174.641752][ T5623] 9pnet_virtio: no channels available for device syz [ 176.172390][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 176.222345][ T5644] device vlan0 entered promiscuous mode [ 176.250624][ T5644] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 177.377523][ T5673] lo speed is unknown, defaulting to 1000 [ 177.409097][ T27] audit: type=1326 audit(1742768699.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5672 comm="syz.2.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b83d8d169 code=0x0 [ 178.703030][ T5695] loop0: detected capacity change from 0 to 128 [ 179.854319][ T5716] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 180.764731][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 181.124773][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 181.157949][ T5746] loop0: detected capacity change from 0 to 128 [ 181.488639][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 181.750136][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 181.813147][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 181.921294][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.987090][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.037715][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.294832][ T14] usb 4-1: usb_control_msg returned -32 [ 182.300641][ T14] usbtmc 4-1:16.0: can't read capabilities [ 182.687927][ T5769] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 182.891965][ T14] usb 4-1: USB disconnect, device number 4 [ 183.899157][ T5805] netlink: 'syz.3.528': attribute type 16 has an invalid length. [ 183.944908][ T5805] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.528'. [ 184.172357][ T5812] lo speed is unknown, defaulting to 1000 [ 191.029274][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.072707][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.084786][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.114668][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 191.126187][ T5945] device geneve2 entered promiscuous mode [ 191.397664][ T5950] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 191.742614][ T5968] lo speed is unknown, defaulting to 1000 [ 191.782356][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.588'. [ 194.621716][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.634588][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838937][ T6027] input: syz1 as /devices/virtual/input/input8 [ 196.335977][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'. [ 196.354383][ T6065] input: syz1 as /devices/virtual/input/input9 [ 196.771102][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.436396][ T26] usb 1-1: config 129 has an invalid interface number: 195 but max is 0 [ 197.450022][ T26] usb 1-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 197.459540][ T26] usb 1-1: config 129 has no interface number 0 [ 197.468151][ T26] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 197.479968][ T26] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 197.491570][ T26] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 197.504607][ T26] usb 1-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 197.516533][ T26] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 197.529613][ T26] usb 1-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 197.540391][ T26] usb 1-1: config 129 interface 195 has no altsetting 0 [ 197.555574][ T26] usb 1-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 197.571287][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.586855][ T26] usb 1-1: Product: ᠉ [ 197.591095][ T26] usb 1-1: SerialNumber: syz [ 197.817649][ T26] cp210x 1-1:129.195: cp210x converter detected [ 197.836896][ T26] cp210x 1-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 197.870435][ T26] cp210x 1-1:129.195: querying part number failed [ 197.909988][ T26] usb 1-1: cp210x converter now attached to ttyUSB0 [ 197.941226][ T26] usb 1-1: USB disconnect, device number 6 [ 197.959186][ T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.978750][ T26] cp210x 1-1:129.195: device disconnected [ 198.101047][ T6099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.354639][ T6103] input: syz1 as /devices/virtual/input/input10 [ 198.967571][ T6123] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 198.974747][ T6123] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 199.094078][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 199.192890][ T6129] lo speed is unknown, defaulting to 1000 [ 199.394620][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 199.596444][ T22] usb 4-1: config 129 has an invalid interface number: 195 but max is 0 [ 199.620267][ T22] usb 4-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 199.644966][ T22] usb 4-1: config 129 has no interface number 0 [ 199.651349][ T22] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 199.680865][ T22] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 199.695299][ T22] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 199.707079][ T22] usb 4-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 199.718601][ T22] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 199.730989][ T22] usb 4-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 199.741559][ T22] usb 4-1: config 129 interface 195 has no altsetting 0 [ 199.757816][ T22] usb 4-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 199.770223][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.778802][ T22] usb 4-1: Product: ᠉ [ 199.783098][ T22] usb 4-1: SerialNumber: syz [ 200.011867][ T22] cp210x 4-1:129.195: cp210x converter detected [ 200.022027][ T22] cp210x 4-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 200.051377][ T22] cp210x 4-1:129.195: querying part number failed [ 200.098869][ T22] usb 4-1: cp210x converter now attached to ttyUSB0 [ 200.165657][ T22] usb 4-1: USB disconnect, device number 5 [ 200.251729][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.274439][ T22] cp210x 4-1:129.195: device disconnected [ 201.554830][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 201.555058][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 201.560900][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 201.567798][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 201.574147][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 202.848761][ T6199] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 202.930999][ T6195] kvm: pic: non byte read [ 202.936660][ T6195] kvm: pic: level sensitive irq not supported [ 202.936880][ T6195] kvm: pic: non byte read [ 203.258614][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 203.545929][ T6212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.680'. [ 203.594600][ T4296] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 203.808199][ T4296] usb 1-1: config 129 has an invalid interface number: 195 but max is 0 [ 203.827146][ T4296] usb 1-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 203.873290][ T4296] usb 1-1: config 129 has no interface number 0 [ 203.923864][ T4296] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 203.979140][ T4296] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 204.007457][ T4296] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 204.020835][ T4296] usb 1-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 204.055720][ T4296] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 204.088035][ T4296] usb 1-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 204.131731][ T4296] usb 1-1: config 129 interface 195 has no altsetting 0 [ 204.160709][ T4296] usb 1-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 204.197103][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.221475][ T4296] usb 1-1: Product: ᠉ [ 204.234399][ T4296] usb 1-1: SerialNumber: syz [ 204.361766][ T6236] kvm: emulating exchange as write [ 204.469921][ T4296] cp210x 1-1:129.195: cp210x converter detected [ 204.486061][ T4296] cp210x 1-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 204.511464][ T4296] cp210x 1-1:129.195: querying part number failed [ 204.554835][ T4296] usb 1-1: cp210x converter now attached to ttyUSB0 [ 204.599916][ T4296] usb 1-1: USB disconnect, device number 7 [ 204.685159][ T4296] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.726591][ T4296] cp210x 1-1:129.195: device disconnected [ 206.835782][ T6302] netlink: 36 bytes leftover after parsing attributes in process `syz.4.705'. [ 207.138532][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.707'. [ 207.279963][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.294268][ T6314] bond0: (slave rose0): Enslaving as an active interface with an up link [ 207.300346][ T6310] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 207.313479][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 207.382042][ T6310] kvm: pic: non byte read [ 207.395623][ T6310] kvm: pic: level sensitive irq not supported [ 207.395700][ T6310] kvm: pic: non byte read [ 207.484837][ T4255] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 208.186584][ T4255] usb 5-1: config 129 has an invalid interface number: 195 but max is 0 [ 208.204588][ T4255] usb 5-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 208.213559][ T4255] usb 5-1: config 129 has no interface number 0 [ 208.238338][ T4255] usb 5-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 208.264723][ T4255] usb 5-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 208.289642][ T4255] usb 5-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 208.311185][ T4255] usb 5-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 208.332398][ T4255] usb 5-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 208.349464][ T4255] usb 5-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 208.360129][ T4255] usb 5-1: config 129 interface 195 has no altsetting 0 [ 208.495573][ T4255] usb 5-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 208.514603][ T4255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.522695][ T4255] usb 5-1: Product: ᠉ [ 208.534549][ T4255] usb 5-1: SerialNumber: syz [ 208.797631][ T4255] cp210x 5-1:129.195: cp210x converter detected [ 208.840073][ T4255] cp210x 5-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 208.864624][ T4255] cp210x 5-1:129.195: querying part number failed [ 208.896473][ T4255] usb 5-1: cp210x converter now attached to ttyUSB0 [ 208.965127][ T4255] usb 5-1: USB disconnect, device number 4 [ 209.015804][ T4255] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 209.054857][ T4255] cp210x 5-1:129.195: device disconnected [ 209.670494][ T6372] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 210.258915][ T6392] hugetlbfs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 211.904385][ T6451] smc: net device bond0 applied user defined pnetid SYZ0 [ 213.471950][ T6477] xt_hashlimit: size too large, truncated to 1048576 [ 213.957255][ T6484] Bluetooth: MGMT ver 1.22 [ 217.614728][ T26] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 217.836263][ T26] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.855920][ T26] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 217.878140][ T26] usb 3-1: can't read configurations, error -71 [ 223.521772][ T6639] process 'syz.2.802' launched './file1' with NULL argv: empty string added [ 223.743114][ T6643] syz.1.805 (6643) used greatest stack depth: 19008 bytes left [ 224.101209][ T6660] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 224.950271][ T4316] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.150098][ T4316] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.172564][ T4316] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.189457][ T4316] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.209486][ T6687] netlink: 'syz.1.818': attribute type 39 has an invalid length. [ 225.217383][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.240749][ T6669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.503263][ T22] usb 4-1: USB disconnect, device number 6 [ 226.471409][ T4266] Bluetooth: hci3: unexpected subevent 0x01 length: 31 > 18 [ 228.370623][ T6775] 9pnet_virtio: no channels available for device syz [ 235.134844][ T126] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 235.336938][ T126] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 235.351409][ T126] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 235.369778][ T126] usb 3-1: config 129 has no interface number 0 [ 235.384729][ T126] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 235.421090][ T126] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 235.475689][ T126] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 235.506242][ T126] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 235.534673][ T126] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 235.551339][ T126] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 235.572006][ T126] usb 3-1: config 129 interface 195 has no altsetting 0 [ 235.595475][ T126] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 235.612026][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.684104][ T126] usb 3-1: Product: ᠉ [ 235.692814][ T126] usb 3-1: SerialNumber: syz [ 235.923331][ T126] cp210x 3-1:129.195: cp210x converter detected [ 235.955298][ T126] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 235.991792][ T126] cp210x 3-1:129.195: querying part number failed [ 236.022640][ T126] usb 3-1: cp210x converter now attached to ttyUSB0 [ 236.087657][ T126] usb 3-1: USB disconnect, device number 5 [ 236.115546][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 236.130513][ T126] cp210x 3-1:129.195: device disconnected [ 237.969522][ T4255] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 238.173295][ T4255] usb 2-1: config 129 has an invalid interface number: 195 but max is 0 [ 238.203948][ T4255] usb 2-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 238.224373][ T4255] usb 2-1: config 129 has no interface number 0 [ 238.254154][ T4255] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 238.274849][ T4255] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 238.291527][ T4255] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 238.312989][ T4255] usb 2-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 238.344419][ T4255] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 238.392124][ T4255] usb 2-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 238.420636][ T4255] usb 2-1: config 129 interface 195 has no altsetting 0 [ 238.448464][ T4255] usb 2-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 238.457902][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.466462][ T4255] usb 2-1: Product: ᠉ [ 238.470805][ T4255] usb 2-1: SerialNumber: syz [ 238.701172][ T4255] cp210x 2-1:129.195: cp210x converter detected [ 238.714735][ T4255] cp210x 2-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 238.753932][ T4255] cp210x 2-1:129.195: querying part number failed [ 238.795102][ T4255] usb 2-1: cp210x converter now attached to ttyUSB0 [ 238.826462][ T4255] usb 2-1: USB disconnect, device number 6 [ 239.382476][ T4255] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 239.410863][ T4255] cp210x 2-1:129.195: device disconnected [ 241.474945][ T4316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.698913][ T4316] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 241.737853][ T4316] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 241.776576][ T4316] usb 3-1: config 129 has no interface number 0 [ 241.782917][ T4316] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 241.785436][ T7141] input: syz0 as /devices/virtual/input/input11 [ 241.841267][ T7141] input: failed to attach handler leds to device input11, error: -6 [ 241.850617][ T4316] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 241.926639][ T4316] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 241.965581][ T4316] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 241.982720][ T4316] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 242.522382][ T4316] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 242.532907][ T4316] usb 3-1: config 129 interface 195 has no altsetting 0 [ 242.582154][ T4316] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 242.606095][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.614161][ T4316] usb 3-1: Product: ᠉ [ 242.657099][ T4316] usb 3-1: SerialNumber: syz [ 242.893775][ T4316] cp210x 3-1:129.195: cp210x converter detected [ 242.907032][ T4316] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 242.934298][ T4316] cp210x 3-1:129.195: querying part number failed [ 242.955511][ T4316] usb 3-1: cp210x converter now attached to ttyUSB0 [ 242.975719][ T4255] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.018526][ T4316] usb 3-1: USB disconnect, device number 6 [ 243.036999][ T4316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.046319][ T4316] cp210x 3-1:129.195: device disconnected [ 243.175802][ T4255] usb 2-1: Using ep0 maxpacket: 16 [ 243.183512][ T4255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.220474][ T4255] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.250320][ T4255] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 243.265735][ T7177] 9pnet_virtio: no channels available for device syz [ 243.272667][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.310085][ T4255] usb 2-1: config 0 descriptor?? [ 243.333028][ T4255] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 243.577845][ T4316] usb 2-1: USB disconnect, device number 7 [ 244.425020][ T4296] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 244.694813][ T4296] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 244.703119][ T4296] usb 5-1: config 7 has no interface number 0 [ 244.743271][ T4296] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 244.762968][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.778075][ T4296] usb 5-1: Product: syz [ 244.782406][ T4296] usb 5-1: Manufacturer: syz [ 244.792563][ T4296] usb 5-1: SerialNumber: syz [ 245.207146][ T4255] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 245.243796][ T4296] as10x_usb: device has been detected [ 245.250048][ T4296] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 245.277509][ T4296] usb 5-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 245.348098][ T4296] as10x_usb: error during firmware upload part1 [ 245.355144][ T4296] Registered device Elgato EyeTV DTT Deluxe [ 245.405540][ T4255] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 245.420594][ T4255] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 245.435146][ T4255] usb 3-1: config 129 has no interface number 0 [ 245.443568][ T4255] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 245.453609][ T4296] usb 5-1: USB disconnect, device number 5 [ 245.455346][ T4255] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 245.472052][ T4255] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 245.483623][ T4255] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 245.497395][ T4255] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 245.508799][ T4255] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 245.519475][ T4255] usb 3-1: config 129 interface 195 has no altsetting 0 [ 245.522114][ T4296] Unregistered device Elgato EyeTV DTT Deluxe [ 245.529744][ T4255] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 245.538212][ T4296] as10x_usb: device has been disconnected [ 245.546076][ T4255] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.562487][ T4255] usb 3-1: Product: ᠉ [ 245.566992][ T4255] usb 3-1: SerialNumber: syz [ 245.778812][ T4255] cp210x 3-1:129.195: cp210x converter detected [ 245.789010][ T4255] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 245.816019][ T4255] cp210x 3-1:129.195: querying part number failed [ 245.860085][ T4255] usb 3-1: cp210x converter now attached to ttyUSB0 [ 246.447794][ T4255] usb 3-1: USB disconnect, device number 7 [ 246.492970][ T4255] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 246.506529][ T4255] cp210x 3-1:129.195: device disconnected [ 246.791687][ T7246] fuse: Bad value for 'fd' [ 248.754782][ T3518] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 248.956549][ T3518] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 248.965811][ T3518] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 249.026114][ T3518] usb 3-1: config 129 has no interface number 0 [ 249.032481][ T3518] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 249.074810][ T3518] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 249.106828][ T3518] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 249.145668][ T3518] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 249.179758][ T3518] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 249.233666][ T3518] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 249.293231][ T3518] usb 3-1: config 129 interface 195 has no altsetting 0 [ 249.361139][ T3518] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 249.376923][ T3518] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.388781][ T3518] usb 3-1: Product: ᠉ [ 249.393198][ T3518] usb 3-1: SerialNumber: syz [ 249.938010][ T3518] cp210x 3-1:129.195: cp210x converter detected [ 249.968354][ T3518] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 249.994676][ T3518] cp210x 3-1:129.195: querying part number failed [ 250.012434][ T3518] usb 3-1: cp210x converter now attached to ttyUSB0 [ 250.062651][ T3518] usb 3-1: USB disconnect, device number 8 [ 250.148568][ T3518] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.185126][ T3518] cp210x 3-1:129.195: device disconnected [ 250.443374][ T7313] support for cryptoloop has been removed. Use dm-crypt instead. [ 255.656873][ T7409] fuse: Bad value for 'fd' [ 255.797851][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804274][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.151278][ T7501] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 259.199462][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.238151][ T7501] bond0: (slave team0): Enslaving as an active interface with an up link [ 262.872490][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1133'. [ 263.470867][ T7588] autofs4:pid:7588:autofs_fill_super: called with bogus options [ 266.076536][ T7598] sched: RT throttling activated [ 266.913107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 266.939922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 267.305371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 268.599207][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 268.656125][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 268.662831][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 269.027531][ T4296] ip6tnl0 speed is unknown, defaulting to 1000 [ 269.042375][ T7640] infiniband syz0: set active [ 269.054678][ T7640] infiniband syz0: added ip6tnl0 [ 269.214310][ T7647] block device autoloading is deprecated and will be removed. [ 269.350789][ T7640] RDS/IB: syz0: added [ 269.359433][ T7640] smc: adding ib device syz0 with port count 1 [ 269.372527][ T7640] smc: ib device syz0 port 1 has pnetid [ 269.381099][ T4313] ip6tnl0 speed is unknown, defaulting to 1000 [ 269.420259][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 270.115313][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 271.029065][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 271.358995][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 271.706194][ T7640] ip6tnl0 speed is unknown, defaulting to 1000 [ 273.700027][ T7723] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.575159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 279.212453][ T4255] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 279.474704][ T4255] usb 1-1: Using ep0 maxpacket: 16 [ 279.483498][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.501846][ T4255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.540246][ T4255] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 279.555382][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.584962][ T4255] usb 1-1: config 0 descriptor?? [ 279.679004][ T7781] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 280.429302][ T52] block nbd4: Attempted send on invalid socket [ 280.436457][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.472955][ T52] block nbd4: Attempted send on invalid socket [ 280.479387][ T52] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.491208][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 280.519092][ T52] block nbd4: Attempted send on invalid socket [ 280.525437][ T52] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.535951][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 280.574105][ T52] block nbd4: Attempted send on invalid socket [ 280.580688][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.591077][ T52] block nbd4: Attempted send on invalid socket [ 280.597457][ T52] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.611085][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 280.621443][ T52] block nbd4: Attempted send on invalid socket [ 280.627808][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.637724][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 280.648470][ T52] block nbd4: Attempted send on invalid socket [ 280.654812][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.685738][ T52] block nbd4: Attempted send on invalid socket [ 280.692011][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.711667][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 280.724583][ T52] block nbd4: Attempted send on invalid socket [ 280.730833][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.740623][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 280.751198][ T52] block nbd4: Attempted send on invalid socket [ 280.757516][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.769660][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 280.779766][ T7793] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 280.789579][ T7793] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 280.944723][ T4255] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 280.952301][ T4255] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 280.959547][ T4255] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 280.967075][ T4255] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 280.974366][ T4255] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 280.985561][ T4255] appleir 0003:05AC:8241.0001: No inputs registered, leaving [ 281.011299][ T4255] appleir 0003:05AC:8241.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 281.337444][ T7797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.356363][ T7797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.401451][ T4255] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 288.733743][ T4313] usb 1-1: USB disconnect, device number 8 [ 288.888394][ T7857] 9pnet_virtio: no channels available for device syz [ 292.672393][ T7893] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 293.421514][ T7896] fuse: Bad value for 'fd' [ 293.668351][ T7909] team0: No ports can be present during mode change [ 294.991555][ T7929] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 295.030959][ T7929] team0: Port device netdevsim0 added [ 295.095393][ T7929] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 295.754620][ T4296] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.890325][ T7929] team0: Port device netdevsim0 removed [ 295.899104][ T7929] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 295.947331][ T4296] usb 2-1: Using ep0 maxpacket: 16 [ 295.958539][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.988669][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.019185][ T4296] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 296.091703][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.119758][ T4296] usb 2-1: config 0 descriptor?? [ 296.992535][ T7962] fuse: Bad value for 'fd' [ 297.246856][ T7965] fuse: Bad value for 'group_id' [ 297.375186][ T4296] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 297.382308][ T4296] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 297.399234][ T4296] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 297.410943][ T4296] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 297.418339][ T4296] appleir 0003:05AC:8241.0002: unknown main item tag 0x0 [ 297.430873][ T4296] appleir 0003:05AC:8241.0002: No inputs registered, leaving [ 297.460331][ T4296] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 297.703025][ T4296] usb 2-1: USB disconnect, device number 8 [ 300.800856][ T7960] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 300.816731][ T7960] team0: Port device wlan1 added [ 303.106060][ T8022] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1265' sets config #1 [ 303.780413][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 303.780508][ T52] block nbd1: Attempted send on invalid socket [ 303.793325][ T52] blk_print_req_error: 2 callbacks suppressed [ 303.793373][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.813240][ T52] block nbd1: Attempted send on invalid socket [ 303.819825][ T52] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.848836][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 303.891771][ T52] block nbd1: Attempted send on invalid socket [ 303.898209][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 303.909279][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 303.948381][ T52] block nbd1: Attempted send on invalid socket [ 303.955036][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.095550][ T52] block nbd1: Attempted send on invalid socket [ 304.102191][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.112346][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 304.126589][ T52] block nbd1: Attempted send on invalid socket [ 304.133006][ T52] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.144558][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 304.159869][ T52] block nbd1: Attempted send on invalid socket [ 304.166428][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.177925][ T52] block nbd1: Attempted send on invalid socket [ 304.184275][ T52] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.194353][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 304.226795][ T52] block nbd1: Attempted send on invalid socket [ 304.233148][ T52] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.243211][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 304.288454][ T52] block nbd1: Attempted send on invalid socket [ 304.294948][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.307404][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 304.349092][ T8023] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 304.387609][ T8023] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 304.551272][ T8028] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 304.606449][ T8028] kvm: pic: level sensitive irq not supported [ 304.606517][ T8028] kvm: pic: non byte read [ 307.059644][ T8080] device bridge1 entered promiscuous mode [ 307.624722][ T4316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 307.824538][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 307.831574][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.866142][ T4316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.891891][ T4316] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 307.911679][ T4316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.965093][ T4316] usb 1-1: config 0 descriptor?? [ 308.146766][ T8098] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 308.312572][ T8100] 9pnet_virtio: no channels available for device syz [ 310.489618][ T4316] usbhid 1-1:0.0: can't add hid device: -71 [ 310.505047][ T4316] usbhid: probe of 1-1:0.0 failed with error -71 [ 310.521508][ T4316] usb 1-1: USB disconnect, device number 9 [ 311.146969][ T8142] 9pnet_virtio: no channels available for device syz [ 313.838824][ T8192] tipc: Started in network mode [ 313.844180][ T8192] tipc: Node identity ac14140f, cluster identity 4711 [ 313.858925][ T8192] tipc: New replicast peer: 255.255.255.255 [ 313.867099][ T8192] tipc: Enabled bearer , priority 10 [ 313.912694][ T8192] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 314.675326][ T8198] autofs4:pid:8198:autofs_fill_super: called with bogus options [ 314.877010][ T4331] tipc: Node number set to 2886997007 [ 316.428405][ T8224] 9pnet_virtio: no channels available for device syz [ 317.240712][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.247118][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.263953][ T8249] fuse: Unknown parameter 'grou00000000000000000000' [ 319.174596][ T126] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 319.389414][ T126] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 319.408305][ T126] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 319.439416][ T126] usb 3-1: config 129 has no interface number 0 [ 319.467546][ T126] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 319.519766][ T126] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 319.551625][ T126] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 319.573388][ T126] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 319.604680][ T126] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 319.634629][ T126] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 319.648524][ T126] usb 3-1: config 129 interface 195 has no altsetting 0 [ 319.681673][ T126] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 319.705596][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.733698][ T126] usb 3-1: Product: ᠉ [ 319.744579][ T126] usb 3-1: SerialNumber: syz [ 319.977448][ T126] cp210x 3-1:129.195: cp210x converter detected [ 320.007370][ T126] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 320.038858][ T126] cp210x 3-1:129.195: querying part number failed [ 320.086794][ T126] usb 3-1: cp210x converter now attached to ttyUSB0 [ 320.111374][ T126] usb 3-1: USB disconnect, device number 9 [ 320.158765][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 320.190444][ T126] cp210x 3-1:129.195: device disconnected [ 320.302786][ T8287] fuse: Unknown parameter 'grou00000000000000000000' [ 321.415542][ T8308] fuse: Invalid rootmode [ 322.313321][ T4252] bridge0: port 3(syz_tun) entered disabled state [ 322.423823][ T4252] device syz_tun left promiscuous mode [ 322.475562][ T4252] bridge0: port 3(syz_tun) entered disabled state [ 322.513900][ T8317] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 322.559523][ T8317] kvm: pic: level sensitive irq not supported [ 322.559607][ T8317] kvm: pic: non byte read [ 322.767829][ T4679] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.821814][ T8323] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1362'. [ 322.926324][ T4679] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.243593][ T4679] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.684833][ T4241] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 323.766583][ T4679] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.878906][ T4241] usb 4-1: config 129 has an invalid interface number: 195 but max is 0 [ 323.895563][ T4241] usb 4-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 323.935427][ T4241] usb 4-1: config 129 has no interface number 0 [ 323.941800][ T4241] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 324.004546][ T4241] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 324.045497][ T4241] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 324.084547][ T4241] usb 4-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 324.110785][ T4241] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 324.132210][ T4241] usb 4-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 324.157066][ T4241] usb 4-1: config 129 interface 195 has no altsetting 0 [ 324.184299][ T8345] device bridge1 entered promiscuous mode [ 324.214540][ T4241] usb 4-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 324.426320][ T4241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.434999][ T4241] usb 4-1: Product: ᠉ [ 324.439218][ T4241] usb 4-1: SerialNumber: syz [ 324.497855][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.508477][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.517744][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.533878][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.547622][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 324.555227][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.815466][ T4241] cp210x 4-1:129.195: cp210x converter detected [ 324.835084][ T4241] cp210x 4-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 324.858711][ T4241] cp210x 4-1:129.195: querying part number failed [ 324.875981][ T4241] usb 4-1: cp210x converter now attached to ttyUSB0 [ 324.924887][ T8361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1371'. [ 324.944037][ T4241] usb 4-1: USB disconnect, device number 7 [ 324.967985][ T4241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 324.982738][ T4241] cp210x 4-1:129.195: device disconnected [ 324.991354][ T8353] lo speed is unknown, defaulting to 1000 [ 325.470626][ T8353] ip6tnl0 speed is unknown, defaulting to 1000 [ 326.594613][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 326.659112][ T8353] chnl_net:caif_netlink_parms(): no params data found [ 327.305402][ T8353] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.325295][ T8353] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.333580][ T8353] device bridge_slave_0 entered promiscuous mode [ 327.387008][ T8435] 9pnet_virtio: no channels available for device syz [ 327.389112][ T8353] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.464844][ T8353] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.510462][ T8353] device bridge_slave_1 entered promiscuous mode [ 327.796743][ T8353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.854177][ T4679] device hsr_slave_0 left promiscuous mode [ 327.936997][ T4679] device hsr_slave_1 left promiscuous mode [ 328.007016][ T4679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.025489][ T4679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.064772][ T4241] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 328.093956][ T4679] device bridge_slave_1 left promiscuous mode [ 328.107084][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.208416][ T4679] device bridge_slave_0 left promiscuous mode [ 328.223336][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.266494][ T4241] usb 1-1: config 129 has an invalid interface number: 195 but max is 0 [ 328.286085][ T4241] usb 1-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 328.293920][ T8458] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 328.305044][ T4241] usb 1-1: config 129 has no interface number 0 [ 328.321669][ T4241] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 328.341944][ T4241] usb 1-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 328.365905][ T4241] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 328.384910][ T4241] usb 1-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 328.406707][ T4241] usb 1-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 328.436506][ T4241] usb 1-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 328.460313][ T4241] usb 1-1: config 129 interface 195 has no altsetting 0 [ 328.489723][ T4241] usb 1-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 328.509909][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.521969][ T4241] usb 1-1: Product: ᠉ [ 328.526667][ T4241] usb 1-1: SerialNumber: syz [ 328.562831][ T4679] device veth1_macvtap left promiscuous mode [ 328.570083][ T4679] device veth0_macvtap left promiscuous mode [ 328.610419][ T4679] device veth1_vlan left promiscuous mode [ 328.645095][ T4679] device veth0_vlan left promiscuous mode [ 328.674674][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 329.876332][ T4679] team0 (unregistering): Port device team_slave_1 removed [ 329.931171][ T4679] team0 (unregistering): Port device team_slave_0 removed [ 329.986792][ T4679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.043536][ T4679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.754600][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 330.880572][ T4679] bond0 (unregistering): Released all slaves [ 330.980242][ T8353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.097360][ T4241] cp210x 1-1:129.195: cp210x converter detected [ 331.110839][ T4241] cp210x 1-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 331.135239][ T4241] cp210x 1-1:129.195: querying part number failed [ 331.143531][ T4241] usb 1-1: cp210x converter now attached to ttyUSB0 [ 331.183010][ T4241] usb 1-1: USB disconnect, device number 10 [ 331.230241][ T8353] team0: Port device team_slave_0 added [ 331.237562][ T4241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 331.260415][ T4241] cp210x 1-1:129.195: device disconnected [ 331.296195][ T8353] team0: Port device team_slave_1 added [ 331.365267][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.401309][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.519185][ T8353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.582475][ T8353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.595345][ T8353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.694527][ T8353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.966419][ T8353] device hsr_slave_0 entered promiscuous mode [ 331.983759][ T8353] device hsr_slave_1 entered promiscuous mode [ 333.128430][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 333.924515][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 334.185468][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 334.197144][ T14] usb 2-1: config 129 has an invalid interface number: 195 but max is 0 [ 334.202362][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'. [ 334.225428][ T8558] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1420'. [ 334.248117][ T14] usb 2-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 334.359630][ T14] usb 2-1: config 129 has no interface number 0 [ 334.396938][ T14] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 334.484570][ T14] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 334.518297][ T14] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 334.730392][ T14] usb 2-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 334.812292][ T14] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 334.854795][ T14] usb 2-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 334.873232][ T14] usb 2-1: config 129 interface 195 has no altsetting 0 [ 334.926309][ T14] usb 2-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 334.970874][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.011556][ T14] usb 2-1: Product: ᠉ [ 335.042445][ T14] usb 2-1: SerialNumber: syz [ 335.260791][ T8353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.328437][ T14] cp210x 2-1:129.195: cp210x converter detected [ 335.341263][ T8353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 335.399907][ T14] cp210x 2-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 335.454934][ T14] cp210x 2-1:129.195: querying part number failed [ 335.518260][ T14] usb 2-1: cp210x converter now attached to ttyUSB0 [ 335.562581][ T14] usb 2-1: USB disconnect, device number 9 [ 335.586032][ T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 335.650558][ T14] cp210x 2-1:129.195: device disconnected [ 335.731825][ T8353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 335.776087][ T8353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 336.350666][ T8353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.468944][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 336.499791][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 336.532481][ T8353] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.589857][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 336.644971][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.815316][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.823996][ T4679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.742976][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 337.770963][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.828121][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.873804][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.880961][ T4679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.965053][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.010698][ T4679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.123638][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 338.158882][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.221164][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.246763][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.283840][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.331020][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.359693][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.414028][ T8353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.476106][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.524542][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1434'. [ 338.534819][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.556963][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.874619][ T4241] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 339.102988][ T4241] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 339.117335][ T4241] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 339.152402][ T4241] usb 3-1: config 129 has no interface number 0 [ 339.169980][ T4241] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 339.198262][ T4241] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 339.223032][ T4241] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 339.240949][ T4241] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 339.255142][ T4241] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 339.271470][ T4241] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 339.286123][ T4241] usb 3-1: config 129 interface 195 has no altsetting 0 [ 339.317887][ T4241] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 339.331755][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.333551][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 339.348788][ T4241] usb 3-1: Product: ᠉ [ 339.353322][ T4241] usb 3-1: SerialNumber: syz [ 339.376014][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 339.401238][ T8353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.591801][ T4241] cp210x 3-1:129.195: cp210x converter detected [ 339.603288][ T4241] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 339.674341][ T4241] cp210x 3-1:129.195: querying part number failed [ 339.687153][ T4241] usb 3-1: cp210x converter now attached to ttyUSB0 [ 339.714973][ T4241] usb 3-1: USB disconnect, device number 10 [ 339.748980][ T4241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 339.813873][ T4241] cp210x 3-1:129.195: device disconnected [ 340.318794][ T8655] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 340.654356][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.677367][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.784392][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.814098][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.883604][ T8353] device veth0_vlan entered promiscuous mode [ 340.918261][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.965446][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.979363][ T8353] device veth1_vlan entered promiscuous mode [ 341.101276][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.151206][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 341.197777][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.230633][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.272198][ T8353] device veth0_macvtap entered promiscuous mode [ 341.335355][ T8353] device veth1_macvtap entered promiscuous mode [ 341.422499][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.442477][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.494539][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.535589][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.559415][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.566527][ T8691] fuse: Unknown parameter 'group_id00000000000000000000' [ 341.614681][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.654474][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.711743][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.755359][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.763774][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.806178][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.855368][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 341.889275][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 341.917125][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.979574][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.025976][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.063317][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.073304][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.084373][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.094604][ T8353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.105242][ T8353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.117073][ T8353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.162924][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 342.182530][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 342.257337][ T8353] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.311300][ T8353] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.379316][ T8353] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.394530][ T8005] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 343.036515][ T8005] usb 4-1: config 129 has an invalid interface number: 195 but max is 0 [ 343.055350][ T8005] usb 4-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 343.064273][ T8005] usb 4-1: config 129 has no interface number 0 [ 343.133061][ T8353] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.152678][ T8005] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 343.254051][ T8005] usb 4-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 343.294695][ T8005] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 343.316022][ T8005] usb 4-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 343.350202][ T8005] usb 4-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 343.381891][ T8005] usb 4-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 343.434498][ T8005] usb 4-1: config 129 interface 195 has no altsetting 0 [ 343.477709][ T8005] usb 4-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 343.507357][ T8005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.527641][ T8005] usb 4-1: Product: ᠉ [ 343.531879][ T8005] usb 4-1: SerialNumber: syz [ 343.946992][ T8005] cp210x 4-1:129.195: cp210x converter detected [ 343.966305][ T8005] cp210x 4-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 343.974255][ T8005] cp210x 4-1:129.195: querying part number failed [ 343.989399][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.050918][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.078727][ T8005] usb 4-1: cp210x converter now attached to ttyUSB0 [ 344.124039][ T8005] usb 4-1: USB disconnect, device number 8 [ 344.146840][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.166850][ T4299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.228716][ T4299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.228895][ T8005] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 344.266493][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 344.266519][ T52] block nbd2: Attempted send on invalid socket [ 344.279029][ T52] blk_print_req_error: 2 callbacks suppressed [ 344.279047][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.307455][ T52] block nbd2: Attempted send on invalid socket [ 344.313817][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.320826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.344012][ T8005] cp210x 4-1:129.195: device disconnected [ 344.352270][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 344.376425][ T52] block nbd2: Attempted send on invalid socket [ 344.382691][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.401534][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 344.417387][ T52] block nbd2: Attempted send on invalid socket [ 344.423708][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.433850][ T52] block nbd2: Attempted send on invalid socket [ 344.440247][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.457455][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 344.493905][ T52] block nbd2: Attempted send on invalid socket [ 344.500323][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.510623][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 344.575163][ T52] block nbd2: Attempted send on invalid socket [ 344.581406][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.602605][ T52] block nbd2: Attempted send on invalid socket [ 344.609212][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.623054][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 344.641487][ T52] block nbd2: Attempted send on invalid socket [ 344.648377][ T52] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.659266][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 344.670178][ T52] block nbd2: Attempted send on invalid socket [ 344.676809][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 344.686834][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 344.696840][ T8743] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 344.708143][ T8743] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 345.208888][ T4463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.512015][ T4463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.746062][ T4463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.937444][ T4463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.392251][ T8763] fuse: Bad value for 'user_id' [ 346.851210][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.862173][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.871184][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.881227][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.901938][ T4267] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 346.909391][ T4267] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 347.105651][ T8771] lo speed is unknown, defaulting to 1000 [ 347.529460][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 347.565997][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1469'. [ 348.501568][ T8771] ip6tnl0 speed is unknown, defaulting to 1000 [ 348.996450][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 349.268367][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 349.629903][ T8796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.075847][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 351.398873][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 351.441078][ T4463] device hsr_slave_0 left promiscuous mode [ 351.485428][ T4463] device hsr_slave_1 left promiscuous mode [ 351.501121][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.524777][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.575897][ T4463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.583370][ T4463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.637163][ T4463] device bridge_slave_1 left promiscuous mode [ 351.674219][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.716579][ T4463] device bridge_slave_0 left promiscuous mode [ 351.772138][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.985094][ T4463] device veth1_macvtap left promiscuous mode [ 352.001045][ T4463] device veth0_macvtap left promiscuous mode [ 352.034608][ T4463] device veth1_vlan left promiscuous mode [ 352.084331][ T4463] device veth0_vlan left promiscuous mode [ 352.140221][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 352.140246][ T52] block nbd2: Attempted send on invalid socket [ 352.152330][ T52] blk_print_req_error: 2 callbacks suppressed [ 352.152346][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.174091][ T52] block nbd2: Attempted send on invalid socket [ 352.180426][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 352.259004][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 353.176935][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 353.334713][ T52] block nbd2: Attempted send on invalid socket [ 353.340990][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.364656][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 353.407109][ T52] block nbd2: Attempted send on invalid socket [ 353.413351][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.423381][ T52] block nbd2: Attempted send on invalid socket [ 353.429651][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.439829][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 353.459165][ T52] block nbd2: Attempted send on invalid socket [ 353.466109][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.476168][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 353.495483][ T52] block nbd2: Attempted send on invalid socket [ 353.501767][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.512919][ T52] block nbd2: Attempted send on invalid socket [ 353.519235][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.529185][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 353.539403][ T52] block nbd2: Attempted send on invalid socket [ 353.546013][ T52] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.556837][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 353.573309][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 353.584005][ T52] block nbd2: Attempted send on invalid socket [ 353.590444][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.600546][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 353.610839][ T8845] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 353.620812][ T8845] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 355.234592][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 355.428469][ T4463] team0 (unregistering): Port device team_slave_1 removed [ 355.623048][ T4463] team0 (unregistering): Port device team_slave_0 removed [ 355.762063][ T4463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.843278][ T4463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.928574][ T4463] bond0 (unregistering): Released all slaves [ 357.111596][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 357.673528][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.721843][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.766272][ T8771] device bridge_slave_0 entered promiscuous mode [ 357.822986][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.559889][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.660039][ T8771] device bridge_slave_1 entered promiscuous mode [ 358.787432][ T8912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1494'. [ 358.799477][ T8914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1495'. [ 358.949446][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.047644][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.281837][ T8771] team0: Port device team_slave_0 added [ 359.321527][ T8771] team0: Port device team_slave_1 added [ 359.508839][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.525909][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.588517][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.616747][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.644358][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.689545][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.700564][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1497'. [ 359.883998][ T8771] device hsr_slave_0 entered promiscuous mode [ 359.925205][ T8771] device hsr_slave_1 entered promiscuous mode [ 359.926186][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 359.926211][ T52] block nbd1: Attempted send on invalid socket [ 359.943712][ T52] blk_print_req_error: 2 callbacks suppressed [ 359.943729][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.960231][ T52] block nbd1: Attempted send on invalid socket [ 359.966548][ T52] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 359.984802][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 360.034224][ T52] block nbd1: Attempted send on invalid socket [ 360.040673][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.050505][ T4297] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 360.066947][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 360.087354][ T52] block nbd1: Attempted send on invalid socket [ 360.093658][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.103721][ T52] block nbd1: Attempted send on invalid socket [ 360.110004][ T52] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.120262][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 360.131546][ T52] block nbd1: Attempted send on invalid socket [ 360.138234][ T52] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.147932][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 360.159220][ T52] block nbd1: Attempted send on invalid socket [ 360.165484][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.175316][ T52] block nbd1: Attempted send on invalid socket [ 360.181567][ T52] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.191391][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 360.201528][ T52] block nbd1: Attempted send on invalid socket [ 360.207848][ T52] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.217695][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 360.228453][ T52] block nbd1: Attempted send on invalid socket [ 360.234883][ T52] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.255680][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 360.266118][ T4297] usb 3-1: config 129 has an invalid interface number: 195 but max is 0 [ 360.277701][ T4297] usb 3-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 360.287231][ T8935] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 360.310532][ T4297] usb 3-1: config 129 has no interface number 0 [ 360.317750][ T4297] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 360.329371][ T8935] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 360.338358][ T4297] usb 3-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 360.349888][ T4297] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 360.362863][ T4297] usb 3-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 360.374050][ T4297] usb 3-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 360.385261][ T4297] usb 3-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 360.395538][ T4297] usb 3-1: config 129 interface 195 has no altsetting 0 [ 360.408486][ T4297] usb 3-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 360.434583][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.442666][ T4297] usb 3-1: Product: ᠉ [ 360.454875][ T4297] usb 3-1: SerialNumber: syz [ 360.685210][ T4297] cp210x 3-1:129.195: cp210x converter detected [ 360.694643][ T4297] cp210x 3-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 360.702563][ T4297] cp210x 3-1:129.195: querying part number failed [ 360.722067][ T4297] usb 3-1: cp210x converter now attached to ttyUSB0 [ 360.765154][ T4297] usb 3-1: USB disconnect, device number 11 [ 360.786701][ T4297] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 360.806228][ T4297] cp210x 3-1:129.195: device disconnected [ 361.260280][ T8771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 361.288032][ T8771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 361.316510][ T8771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 361.351285][ T8771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 361.542952][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.602860][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.628152][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.639783][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.653234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 361.664365][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 361.675601][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.682819][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.691536][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 362.489515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.499301][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.508633][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.515820][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.525997][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.535800][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.571766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.583475][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 362.707265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 362.735955][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 362.750448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 362.792484][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 362.818919][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 362.865774][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 362.901036][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 362.927690][ T8771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 362.938246][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1499'. [ 362.977344][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1499'. [ 363.435024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 363.442597][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 363.470958][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.965804][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 365.982329][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 366.013317][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 366.026910][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 366.057650][ T8771] device veth0_vlan entered promiscuous mode [ 366.069951][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 366.081513][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 366.103632][ T8771] device veth1_vlan entered promiscuous mode [ 366.201105][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 366.218784][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 366.253857][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 366.285222][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 366.317198][ T8771] device veth0_macvtap entered promiscuous mode [ 366.342610][ T8771] device veth1_macvtap entered promiscuous mode [ 366.379619][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.393765][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.410041][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.433313][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.444239][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.460038][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.503007][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.540398][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.579445][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.600762][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 366.609187][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 366.629653][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 366.640630][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.654776][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.676165][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.695065][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.720381][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.732204][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.746557][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.758071][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.769218][ T8771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.784491][ T8771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.809106][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.831088][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.849138][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.877988][ T8771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.892311][ T8771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.902022][ T8771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.923594][ T8771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.954628][ T4255] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 367.146648][ T4255] usb 2-1: config 129 has an invalid interface number: 195 but max is 0 [ 367.162362][ T4255] usb 2-1: config 129 contains an unexpected descriptor of type 0x1, skipping [ 367.172105][ T4255] usb 2-1: config 129 has no interface number 0 [ 367.190291][ T4255] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 367.208956][ T4255] usb 2-1: config 129 interface 195 altsetting 6 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 367.223162][ T4255] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 367.236698][ T4255] usb 2-1: config 129 interface 195 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 367.248299][ T4255] usb 2-1: config 129 interface 195 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 367.260080][ T4255] usb 2-1: config 129 interface 195 altsetting 6 bulk endpoint 0x7 has invalid maxpacket 8 [ 367.273182][ T4255] usb 2-1: config 129 interface 195 has no altsetting 0 [ 367.287257][ T4255] usb 2-1: New USB device found, idVendor=10c4, idProduct=8938, bcdDevice=10.25 [ 367.299083][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.308240][ T4255] usb 2-1: Product: ᠉ [ 367.312736][ T4255] usb 2-1: SerialNumber: syz [ 367.546163][ T4255] cp210x 2-1:129.195: cp210x converter detected [ 367.557776][ T4255] cp210x 2-1:129.195: failed to get vendor val 0x370b size 1: -71 [ 367.566008][ T4255] cp210x 2-1:129.195: querying part number failed [ 367.587535][ T4255] usb 2-1: cp210x converter now attached to ttyUSB0 [ 367.631064][ T4255] usb 2-1: USB disconnect, device number 10 [ 367.665972][ T4255] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 367.681188][ T4255] cp210x 2-1:129.195: device disconnected [ 378.677778][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.688928][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.116668][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.123063][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.556383][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.562750][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.395017][ T28] INFO: task kworker/1:7:4331 blocked for more than 143 seconds. [ 505.402824][ T28] Not tainted 6.1.131-syzkaller #0 [ 505.414058][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.423106][ T28] task:kworker/1:7 state:D stack:22848 pid:4331 ppid:2 flags:0x00004000 [ 505.432823][ T28] Workqueue: events rfkill_sync_work [ 505.438465][ T28] Call Trace: [ 505.441800][ T28] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 505.445080][ T28] __schedule+0x143f/0x4570 [ 505.450213][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 505.456673][ T28] ? print_irqtrace_events+0x210/0x210 [ 505.462208][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 505.467906][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 505.514428][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 505.519748][ T28] schedule+0xbf/0x180 [ 505.523873][ T28] schedule_preempt_disabled+0xf/0x20 [ 505.562718][ T28] __mutex_lock+0x6b9/0xd80 [ 505.568167][ T28] ? __mutex_lock+0x53c/0xd80 [ 505.572913][ T28] ? rfkill_sync_work+0x25/0xe0 [ 505.577957][ T28] ? mutex_lock_nested+0x10/0x10 [ 505.582961][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 505.589130][ T28] ? print_irqtrace_events+0x210/0x210 [ 505.594728][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 505.600671][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 505.605966][ T28] rfkill_sync_work+0x25/0xe0 [ 505.610695][ T28] ? process_one_work+0x806/0x1260 [ 505.615897][ T28] process_one_work+0x917/0x1260 [ 505.620880][ T28] ? worker_detach_from_pool+0x260/0x260 [ 505.626596][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 505.632214][ T28] ? kthread_data+0x4e/0xc0 [ 505.636849][ T28] ? wq_worker_running+0x97/0x190 [ 505.641947][ T28] worker_thread+0xa47/0x1200 [ 505.646755][ T28] ? _raw_spin_unlock+0x40/0x40 [ 505.651703][ T28] kthread+0x28d/0x320 [ 505.656029][ T28] ? worker_clr_flags+0x190/0x190 [ 505.661117][ T28] ? kthread_blkcg+0xd0/0xd0 [ 505.665869][ T28] ret_from_fork+0x1f/0x30 [ 505.670343][ T28] [ 505.673399][ T28] INFO: task kworker/1:8:8005 blocked for more than 143 seconds. [ 505.681426][ T28] Not tainted 6.1.131-syzkaller #0 [ 505.687125][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.695868][ T28] task:kworker/1:8 state:D stack:22968 pid:8005 ppid:2 flags:0x00004000 [ 505.705201][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 505.711965][ T28] Call Trace: [ 505.715352][ T28] [ 505.718497][ T28] __schedule+0x143f/0x4570 [ 505.723070][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 505.729057][ T28] ? print_irqtrace_events+0x210/0x210 [ 505.734615][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 505.739847][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 505.745115][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 505.750346][ T28] schedule+0xbf/0x180 [ 505.754485][ T28] schedule_preempt_disabled+0xf/0x20 [ 505.759905][ T28] __mutex_lock+0x6b9/0xd80 [ 505.764634][ T28] ? __mutex_lock+0x53c/0xd80 [ 505.769372][ T28] ? rfkill_global_led_trigger_worker+0x23/0xd0 [ 505.775718][ T28] ? mutex_lock_nested+0x10/0x10 [ 505.780692][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 505.786816][ T28] ? print_irqtrace_events+0x210/0x210 [ 505.792315][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 505.798559][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 505.804022][ T28] ? process_one_work+0x806/0x1260 [ 505.809270][ T28] rfkill_global_led_trigger_worker+0x23/0xd0 [ 505.815452][ T28] ? process_one_work+0x806/0x1260 [ 505.820719][ T28] process_one_work+0x917/0x1260 [ 505.825794][ T28] ? worker_detach_from_pool+0x260/0x260 [ 505.831502][ T28] ? _raw_spin_lock_irqsave+0x120/0x120 [ 505.837129][ T28] ? kthread_data+0x4e/0xc0 [ 505.841684][ T28] ? wq_worker_running+0x97/0x190 [ 505.846785][ T28] worker_thread+0xa47/0x1200 [ 505.851521][ T28] ? _raw_spin_unlock+0x40/0x40 [ 505.856511][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 505.862504][ T28] ? _raw_spin_unlock+0x40/0x40 [ 505.867482][ T28] kthread+0x28d/0x320 [ 505.871701][ T28] ? worker_clr_flags+0x190/0x190 [ 505.877023][ T28] ? kthread_blkcg+0xd0/0xd0 [ 505.881666][ T28] ret_from_fork+0x1f/0x30 [ 505.886197][ T28] [ 505.889285][ T28] INFO: task syz.3.1495:8909 blocked for more than 143 seconds. [ 505.897046][ T28] Not tainted 6.1.131-syzkaller #0 [ 505.902745][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 505.911590][ T28] task:syz.3.1495 state:D stack:25864 pid:8909 ppid:4250 flags:0x00004004 [ 505.920912][ T28] Call Trace: [ 505.924196][ T28] [ 505.927254][ T28] __schedule+0x143f/0x4570 [ 505.931839][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 505.937832][ T28] schedule+0xbf/0x180 [ 505.941941][ T28] schedule_timeout+0xac/0x300 [ 505.946800][ T28] ? console_conditional_schedule+0x40/0x40 [ 505.952720][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 505.958910][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 505.964166][ T28] ? wait_for_completion+0x2f9/0x610 [ 505.969624][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 505.974940][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 505.980179][ T28] ? wait_for_completion+0x2f9/0x610 [ 505.985677][ T28] wait_for_completion+0x350/0x610 [ 505.990885][ T28] ? io_schedule+0x100/0x100 [ 505.995581][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 506.000852][ T28] ? __flush_work+0xe5/0xad0 [ 506.005520][ T28] __flush_work+0x95b/0xad0 [ 506.010092][ T28] ? __flush_work+0xe5/0xad0 [ 506.014858][ T28] ? flush_work+0x20/0x20 [ 506.019241][ T28] ? move_linked_works+0x230/0x230 [ 506.024641][ T28] ? print_irqtrace_events+0x210/0x210 [ 506.030169][ T28] ? __cancel_work_timer+0x467/0x6a0 [ 506.036084][ T28] __cancel_work_timer+0x519/0x6a0 [ 506.041249][ T28] ? rcu_is_watching+0x11/0xb0 [ 506.046106][ T28] ? cancel_work_sync+0x20/0x20 [ 506.051011][ T28] ? memcpy+0x3c/0x60 [ 506.055116][ T28] ? nla_put+0x12d/0x1e0 [ 506.059385][ T28] ? nfc_unregister_device+0x5f/0x290 [ 506.064871][ T28] ? mutex_lock_nested+0x10/0x10 [ 506.069863][ T28] ? nfc_genl_device_removed+0x251/0x370 [ 506.075604][ T28] ? nfc_genl_setup_device_added+0x3f0/0x3f0 [ 506.081629][ T28] rfkill_unregister+0x92/0x220 [ 506.086588][ T28] nfc_unregister_device+0x92/0x290 [ 506.091847][ T28] virtual_ncidev_close+0x55/0x90 [ 506.097100][ T28] ? virtual_ncidev_open+0xc0/0xc0 [ 506.102272][ T28] __fput+0x3f6/0x8d0 [ 506.106401][ T28] task_work_run+0x246/0x300 [ 506.111044][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 506.116174][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 506.121687][ T28] exit_to_user_mode_loop+0xde/0x100 [ 506.127080][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 506.132662][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 506.138292][ T28] do_syscall_64+0x47/0xb0 [ 506.142762][ T28] ? clear_bhb_loop+0x45/0xa0 [ 506.147528][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.153454][ T28] RIP: 0033:0x7f846858d169 [ 506.157971][ T28] RSP: 002b:00007ffdc6836298 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 506.166531][ T28] RAX: 0000000000000000 RBX: 00007f84687a7ba0 RCX: 00007f846858d169 [ 506.174595][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 506.182617][ T28] RBP: 00007f84687a7ba0 R08: 000000000000156c R09: 00000007c683658f [ 506.190678][ T28] R10: 00000000003fe870 R11: 0000000000000246 R12: 0000000000057c36 [ 506.198761][ T28] R13: 00007f84687a6080 R14: ffffffffffffffff R15: 00007ffdc68363b0 [ 506.207043][ T28] [ 506.210133][ T28] INFO: task syz.0.1494:8912 blocked for more than 144 seconds. [ 506.218683][ T28] Not tainted 6.1.131-syzkaller #0 [ 506.224408][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 506.233148][ T28] task:syz.0.1494 state:D stack:24448 pid:8912 ppid:4253 flags:0x00004004 [ 506.242625][ T28] Call Trace: [ 506.245973][ T28] [ 506.248960][ T28] __schedule+0x143f/0x4570 [ 506.253591][ T28] ? __mutex_lock+0x6b4/0xd80 [ 506.258427][ T28] ? release_firmware_map_entry+0x18b/0x18b [ 506.264422][ T28] ? __mutex_trylock_common+0x8d/0x2e0 [ 506.270018][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 506.275873][ T28] schedule+0xbf/0x180 [ 506.280006][ T28] schedule_preempt_disabled+0xf/0x20 [ 506.285691][ T28] __mutex_lock+0x6b9/0xd80 [ 506.290279][ T28] ? __mutex_lock+0x53c/0xd80 [ 506.295056][ T28] ? nfc_rfkill_set_block+0x4c/0x2f0 [ 506.300435][ T28] ? mutex_lock_nested+0x10/0x10 [ 506.305467][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 506.310712][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 506.316169][ T28] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 506.322118][ T28] ? _raw_spin_unlock+0x40/0x40 [ 506.327081][ T28] nfc_rfkill_set_block+0x4c/0x2f0 [ 506.332326][ T28] ? nfc_unregister_device+0x290/0x290 [ 506.337955][ T28] rfkill_set_block+0x1e7/0x430 [ 506.342856][ T28] rfkill_fop_write+0x5b7/0x790 [ 506.347801][ T28] ? rfkill_fop_read+0x470/0x470 [ 506.352785][ T28] ? fsnotify_perm+0x64/0x590 [ 506.357547][ T28] ? security_file_permission+0x75/0xa0 [ 506.363137][ T28] ? rfkill_fop_read+0x470/0x470 [ 506.368200][ T28] vfs_write+0x2d9/0xbc0 [ 506.372514][ T28] ? do_sys_openat2+0x1f9/0x4f0 [ 506.377500][ T28] ? file_end_write+0x250/0x250 [ 506.382386][ T28] ? __fget_files+0x28/0x4a0 [ 506.387055][ T28] ? __fget_files+0x435/0x4a0 [ 506.391762][ T28] ? __fget_files+0x28/0x4a0 [ 506.396458][ T28] ? __fdget_pos+0x1db/0x360 [ 506.401076][ T28] ? ksys_write+0x77/0x2c0 [ 506.405575][ T28] ksys_write+0x19c/0x2c0 [ 506.409932][ T28] ? print_irqtrace_events+0x210/0x210 [ 506.415510][ T28] ? __ia32_sys_read+0x80/0x80 [ 506.420307][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 506.426528][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 506.431788][ T28] ? syscall_enter_from_user_mode+0x2e/0x230 [ 506.437910][ T28] do_syscall_64+0x3b/0xb0 [ 506.442379][ T28] ? clear_bhb_loop+0x45/0xa0 [ 506.447264][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.453227][ T28] RIP: 0033:0x7f4569d8d169 [ 506.457759][ T28] RSP: 002b:00007f456ac55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 506.466265][ T28] RAX: ffffffffffffffda RBX: 00007f4569fa5fa0 RCX: 00007f4569d8d169 [ 506.474632][ T28] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000007 [ 506.482652][ T28] RBP: 00007f4569e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 506.490749][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.498800][ T28] R13: 0000000000000000 R14: 00007f4569fa5fa0 R15: 00007ffcc6640638 [ 506.506882][ T28] [ 506.509973][ T28] [ 506.509973][ T28] Showing all locks held in the system: [ 506.517797][ T28] 1 lock held by rcu_tasks_kthre/12: [ 506.523143][ T28] #0: ffffffff8d32e890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 506.533747][ T28] 1 lock held by rcu_tasks_trace/13: [ 506.539276][ T28] #0: ffffffff8d32f090 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 506.550399][ T28] 1 lock held by khungtaskd/28: [ 506.555335][ T28] #0: ffffffff8d32e6c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 506.565389][ T28] 2 locks held by getty/4017: [ 506.570089][ T28] #0: ffff888030e16098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 506.579933][ T28] #1: ffffc9000325e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x54a/0x1620 [ 506.590555][ T28] 1 lock held by syz-executor/4250: [ 506.595841][ T28] #0: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xcc/0x220 [ 506.606136][ T28] 3 locks held by kworker/1:7/4331: [ 506.611344][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 506.621800][ T28] #1: ffffc90004817d20 ((work_completion)(&rfkill->sync_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 506.633658][ T28] #2: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_sync_work+0x25/0xe0 [ 506.643758][ T28] 3 locks held by kworker/1:8/8005: [ 506.649117][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 506.659580][ T28] #1: ffffc900057b7d20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x806/0x1260 [ 506.672558][ T28] #2: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x23/0xd0 [ 506.684636][ T28] 2 locks held by syz-executor/8771: [ 506.690873][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.699602][ T28] #1: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_open+0x130/0x680 [ 506.710111][ T28] 1 lock held by syz.3.1495/8909: [ 506.715262][ T28] #0: ffff888058aa7100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x5f/0x290 [ 506.725194][ T28] 2 locks held by syz.0.1494/8912: [ 506.730335][ T28] #0: ffffffff8e812408 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1a5/0x790 [ 506.740612][ T28] #1: ffff888058aa7100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2f0 [ 506.750459][ T28] 1 lock held by syz.1.1510/9062: [ 506.755825][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.764492][ T28] 1 lock held by syz.2.1513/9131: [ 506.769542][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.778151][ T28] 1 lock held by syz-executor/9188: [ 506.783406][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.792005][ T28] 1 lock held by syz-executor/9189: [ 506.797279][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.805865][ T28] 1 lock held by syz-executor/9191: [ 506.811099][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.819784][ T28] 1 lock held by syz-executor/9193: [ 506.825834][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.834530][ T28] 1 lock held by syz-executor/9195: [ 506.840002][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.848712][ T28] 1 lock held by syz-executor/9197: [ 506.854038][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.862606][ T28] 1 lock held by syz-executor/9199: [ 506.867888][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.876494][ T28] 1 lock held by syz-executor/9201: [ 506.881712][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.890273][ T28] 1 lock held by syz-executor/9203: [ 506.896261][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.904881][ T28] 1 lock held by syz-executor/9205: [ 506.910113][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.919143][ T28] 1 lock held by syz-executor/9207: [ 506.924438][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.932981][ T28] 1 lock held by syz-executor/9209: [ 506.938369][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.946957][ T28] 1 lock held by syz-executor/9214: [ 506.952183][ T28] #0: ffffffff8daaf568 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 506.960863][ T28] [ 506.963207][ T28] ============================================= [ 506.963207][ T28] [ 506.971738][ T28] NMI backtrace for cpu 1 [ 506.976120][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0 [ 506.984040][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 506.994130][ T28] Call Trace: [ 506.997439][ T28] [ 507.000396][ T28] dump_stack_lvl+0x1e3/0x2cb [ 507.005093][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 507.010557][ T28] ? panic+0x764/0x764 [ 507.014669][ T28] ? vprintk_emit+0x622/0x740 [ 507.019368][ T28] ? printk_sprint+0x490/0x490 [ 507.024146][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 507.029287][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 507.034277][ T28] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 507.040465][ T28] ? _printk+0xd1/0x111 [ 507.044645][ T28] ? panic+0x764/0x764 [ 507.048728][ T28] ? __wake_up_klogd+0xcc/0x100 [ 507.053594][ T28] ? panic+0x764/0x764 [ 507.057705][ T28] ? nmi_trigger_cpumask_backtrace+0xfc/0x430 [ 507.063794][ T28] nmi_trigger_cpumask_backtrace+0x1ca/0x430 [ 507.069795][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 507.075881][ T28] watchdog+0xf88/0xfd0 [ 507.080067][ T28] ? watchdog+0x1f8/0xfd0 [ 507.084422][ T28] kthread+0x28d/0x320 [ 507.088508][ T28] ? hungtask_pm_notify+0x50/0x50 [ 507.093553][ T28] ? kthread_blkcg+0xd0/0xd0 [ 507.098179][ T28] ret_from_fork+0x1f/0x30 [ 507.102650][ T28] [ 507.105966][ T28] Sending NMI from CPU 1 to CPUs 0: [ 507.111232][ C0] NMI backtrace for cpu 0 [ 507.111245][ C0] CPU: 0 PID: 4679 Comm: kworker/u4:13 Not tainted 6.1.131-syzkaller #0 [ 507.111263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.111274][ C0] Workqueue: events_unbound toggle_allocation_gate [ 507.111311][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 507.111337][ C0] Code: 00 0f 0b 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d e8 0c 16 0d 48 89 de 5b e9 67 8a 56 00 cc cc cc cc cc cc cc 48 8b 04 24 <65> 48 8b 0d 74 c5 77 7e 65 8b 15 75 c5 77 7e 81 e2 00 01 ff 00 74 [ 507.111352][ C0] RSP: 0018:ffffc9000658f650 EFLAGS: 00000246 [ 507.111365][ C0] RAX: ffffffff8aaf06a8 RBX: 00000000000000e9 RCX: dffffc0000000000 [ 507.111377][ C0] RDX: ffff888026e69dc0 RSI: 00000000fffffff4 RDI: 00000000fffffff5 [ 507.111390][ C0] RBP: 00000000fffffff4 R08: ffffffff8aaf069e R09: ffffc9000658f980 [ 507.111402][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 507.111413][ C0] R13: ffffffff81e12a1c R14: dffffc0000000000 R15: ffffc9000658f980 [ 507.111426][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 507.111440][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.111452][ C0] CR2: 00007ffe03701fb8 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 507.111467][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 507.111477][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 507.111487][ C0] Call Trace: [ 507.111492][ C0] [ 507.111498][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 507.111517][ C0] ? read_lock_is_recursive+0x10/0x10 [ 507.111545][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 507.111563][ C0] ? nmi_handle+0x25/0x440 [ 507.111598][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 507.111614][ C0] ? nmi_handle+0x12e/0x440 [ 507.111639][ C0] ? nmi_handle+0x25/0x440 [ 507.111665][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 507.111687][ C0] ? default_do_nmi+0x62/0x150 [ 507.111707][ C0] ? exc_nmi+0xa8/0x100 [ 507.111724][ C0] ? end_repeat_nmi+0x16/0x31 [ 507.111747][ C0] ? __kmem_cache_alloc_node+0x5c/0x260 [ 507.111772][ C0] ? insn_get_prefixes+0x46e/0x18a0 [ 507.111790][ C0] ? insn_get_prefixes+0x478/0x18a0 [ 507.111809][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 507.111833][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 507.111856][ C0] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 507.111899][ C0] [ 507.111904][ C0] [ 507.111908][ C0] insn_get_prefixes+0x478/0x18a0 [ 507.111927][ C0] ? __kmem_cache_alloc_node+0x5d/0x260 [ 507.111956][ C0] insn_get_opcode+0x1ae/0xa50 [ 507.111983][ C0] insn_get_modrm+0x22a/0x790 [ 507.112006][ C0] insn_get_displacement+0x13a/0x970 [ 507.112029][ C0] insn_get_immediate+0x458/0x1390 [ 507.112050][ C0] ? __kmem_cache_alloc_node+0x48/0x260 [ 507.112075][ C0] insn_decode+0x3a8/0x540 [ 507.112093][ C0] ? __kmem_cache_alloc_node+0x5c/0x260 [ 507.112117][ C0] __jump_label_patch+0xe4/0x440 [ 507.112135][ C0] ? __kmem_cache_alloc_node+0x5c/0x260 [ 507.112159][ C0] ? arch_jump_label_transform_queue+0xd0/0xd0 [ 507.112182][ C0] ? __kmem_cache_alloc_node+0x5c/0x260 [ 507.112204][ C0] ? __kmem_cache_alloc_node+0x6b/0x260 [ 507.112226][ C0] ? __kmem_cache_alloc_node+0x5c/0x260 [ 507.112250][ C0] ? static_key_disable_cpuslocked+0x97/0x1b0 [ 507.112276][ C0] ? mutex_lock_nested+0x10/0x10 [ 507.112312][ C0] arch_jump_label_transform_queue+0x4a/0xd0 [ 507.112332][ C0] __jump_label_update+0x177/0x3a0 [ 507.112361][ C0] static_key_disable_cpuslocked+0xce/0x1b0 [ 507.112386][ C0] static_key_disable+0x16/0x20 [ 507.112409][ C0] toggle_allocation_gate+0x3e0/0x480 [ 507.112434][ C0] ? show_object+0xa0/0xa0 [ 507.112456][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 507.112484][ C0] ? print_irqtrace_events+0x210/0x210 [ 507.112509][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 507.112529][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 507.112550][ C0] ? process_one_work+0x806/0x1260 [ 507.112580][ C0] process_one_work+0x917/0x1260 [ 507.112609][ C0] ? worker_detach_from_pool+0x260/0x260 [ 507.112632][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 507.112649][ C0] ? kthread_data+0x4e/0xc0 [ 507.112676][ C0] ? wq_worker_running+0x97/0x190 [ 507.112694][ C0] worker_thread+0xa47/0x1200 [ 507.112719][ C0] ? _raw_spin_unlock+0x40/0x40 [ 507.112742][ C0] kthread+0x28d/0x320 [ 507.112757][ C0] ? worker_clr_flags+0x190/0x190 [ 507.112776][ C0] ? kthread_blkcg+0xd0/0xd0 [ 507.112793][ C0] ret_from_fork+0x1f/0x30 [ 507.112823][ C0] [ 507.114193][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 507.567693][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0 [ 507.575604][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 507.585672][ T28] Call Trace: [ 507.588971][ T28] [ 507.592011][ T28] dump_stack_lvl+0x1e3/0x2cb [ 507.596702][ T28] ? nf_tcp_handle_invalid+0x647/0x647 [ 507.602186][ T28] ? panic+0x764/0x764 [ 507.606283][ T28] ? vscnprintf+0x59/0x80 [ 507.610652][ T28] panic+0x318/0x764 [ 507.614572][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 507.620785][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 507.626187][ T28] ? preempt_schedule_thunk+0x16/0x18 [ 507.631591][ T28] ? nmi_trigger_cpumask_backtrace+0x2db/0x430 [ 507.637778][ T28] ? nmi_trigger_cpumask_backtrace+0x358/0x430 [ 507.643942][ T28] ? nmi_trigger_cpumask_backtrace+0x35d/0x430 [ 507.650116][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 507.656221][ T28] watchdog+0xfc7/0xfd0 [ 507.660392][ T28] ? watchdog+0x1f8/0xfd0 [ 507.664742][ T28] kthread+0x28d/0x320 [ 507.668836][ T28] ? hungtask_pm_notify+0x50/0x50 [ 507.673892][ T28] ? kthread_blkcg+0xd0/0xd0 [ 507.678516][ T28] ret_from_fork+0x1f/0x30 [ 507.682954][ T28] [ 507.686273][ T28] Kernel Offset: disabled [ 507.690612][ T28] Rebooting in 86400 seconds..