last executing test programs: 2m33.976175418s ago: executing program 2 (id=125): syz_emit_vhci(&(0x7f0000002200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x3}, {0xfd, "5ec7deed77cd7cd0"}}}}, 0xf) 2m33.862662278s ago: executing program 2 (id=127): r0 = socket$caif_stream(0x25, 0x1, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x4084000) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000a00)={0x414, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x403, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @nested={0x268, 0x2f, 0x0, 0x1, [@nested={0xc, 0xa2, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @str='syz\x00'}]}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x8, 0x88, 0x0, 0x1, [@typed={0x4, 0xc7}]}, @nested={0x141, 0x6c, 0x0, 0x1, [@generic="89ed77aab594e82d4130765cfe27a0474702f92d05922f9058b43bbd4ec0aaa9a29b63124516a94dcb22e6b848ff43c4ec16d62c5c5519d4f3be551d", @generic="d39fcaea8aedd4f2d112542cb024be83f11e60b3eb0431b54bf552948680dc1be5500553ff7ec1e37664c17a09e6c5aeaf6a93b6a435f09861142251f6b6d7ad9fff375e4e5fb5524271d4582c9bccc461c18bb51b9f4b80e2ae039a7154e85e51b21b87e65348e6a31ecd8b4686", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="a68c349c349d87b44b6ccb4c6165748f623009feaff556951d44fa69d1b6c74e019e3ae39d8a1bf06ce795da916b38ef8bfc3b4a34f16b2770bd536bd71fd0b8ca2a2ca1d4c27481f11dea854f922c6eedf306c6eaefaaef25d38008e27e8079b660bf4c383fa855ba1c48c024da9ca571f91ea7e6740fc095d1505551418b7a3e7d2f3cb3b946d42bef99"]}, @nested={0xf5, 0x34, 0x0, 0x1, [@nested={0xa1, 0x58, 0x0, 0x1, [@generic="d5814ea826aa7f73f6edca3c5d5131ea47f09be4a580c1621f22b58b98dfde0bc50dc80408c634fb958a3349e70a7cc6d07d3875969a012ca44d37092de8ca6eaa444a5c6aa178a6e4e7b9497e96c5899f744933d157688bfc805a5f5e480946c8f23f08e88018474058b9ad1374ff20cdc3e9da42a4c44ed5a145460aad1349116b75058b1c9dbdadbce9d318aefabc9e3d195f540d8a2110", @nested={0x4}]}, @nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0x108}]}, @generic="7558a560cc5cb15e4f38d09a7a05c4e9637e7a6cfae3f02923b74b46eeb09f54d7a254d9115d647375b576520350c2781ebe799dc9060dcf8c7b1a4f8b", @typed={0x8, 0xae, 0x0, 0x0, @u32=0x81}]}]}, @generic="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"]}]}, 0x414}], 0x1}, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = dup(r7) ioctl$PTP_EXTTS_REQUEST2(r8, 0xc0603d0f, &(0x7f0000000100)) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x7ff, 0x4) 2m33.567266344s ago: executing program 2 (id=130): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x541b) 2m33.38772531s ago: executing program 2 (id=132): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 2m33.255471421s ago: executing program 2 (id=133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 2m32.942435119s ago: executing program 2 (id=136): mkdir(&(0x7f0000000340)='./file\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x4e22}, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0xa}, 0xa) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='.\x00', 0x800, 0x82) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') sync() sync() 2m17.621158779s ago: executing program 32 (id=136): mkdir(&(0x7f0000000340)='./file\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x8, 0x1, 0x4e22}, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000002c0)=@file={0xa}, 0xa) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r3 = open(&(0x7f00000002c0)='.\x00', 0x800, 0x82) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000180)='./file0\x00') sync() sync() 16.311853543s ago: executing program 4 (id=626): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 13.573859715s ago: executing program 4 (id=633): prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 12.270862291s ago: executing program 4 (id=640): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) 11.991098576s ago: executing program 4 (id=643): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) 11.302453257s ago: executing program 4 (id=646): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(0x0, 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x1024020, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) read$qrtrtun(r2, 0x0, 0x0) 10.221860353s ago: executing program 4 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r0, r1, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x7ffe, 0x0, r2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 5.564106486s ago: executing program 0 (id=657): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 5.172107801s ago: executing program 0 (id=660): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 4.991320907s ago: executing program 1 (id=661): prlimit64(0x0, 0x7, &(0x7f0000000dc0), 0x0) fsopen(&(0x7f0000000000)='jfs\x00', 0x1) 4.824188952s ago: executing program 0 (id=662): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 4.743891469s ago: executing program 1 (id=663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3, 0xffffffe4}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d800010000000000000000000000008"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a6970740000000009000200"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0xfffffffe}}, @const={0x1, 0x0, 0x0, 0xa, 0x5}, @union={0x0, 0x6, 0x0, 0x9, 0x0, 0x2, [{0xf, 0x3, 0x81}, {0x0, 0x3, 0x7}, {0x6, 0x4, 0x8}, {0x4, 0x5, 0x5}, {0xa, 0x3, 0x43}, {0xf, 0x3, 0x10}]}]}}, 0x0, 0x92}, 0x28) r7 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 4.428536887s ago: executing program 3 (id=664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r5) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xde}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x44}}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2386}}) 3.679214894s ago: executing program 0 (id=665): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x880, 0xffffffff, 0x0, "8100e1c8e80b598c36ff000800"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$vnet(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x900001d) syz_open_dev$MSR(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 2.819959839s ago: executing program 3 (id=666): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.577401461s ago: executing program 3 (id=667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) io_uring_setup(0x734c, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x0, 0xfff3fffc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0xff, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000008500000069000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000080)='./file0\x00') mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x2000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.019838531s ago: executing program 0 (id=668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = dup(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000040), 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xffffffff, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000100170000000900020073797a310000000014000780080012400008000008001340000000020c000300686173683a697000050005000a000000050004"], 0x58}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x54}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x19, 0x0, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r9) 1.732076697s ago: executing program 1 (id=669): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r1, &(0x7f0000000100)=ANY=[], 0x1010) write$P9_RREAD(r1, &(0x7f00000025c0)={0xfff, 0x75, 0x2, {0xff4, "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"}}, 0xfff) 1.391948247s ago: executing program 1 (id=670): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x126, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80000180], 0x11, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x41, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x26, 0x88f8, 'tunl0\x00', 'pimreg0\x00', 'veth0_to_bridge\x00', 'ip_vti0\x00', @multicast, [0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x96, [], [], @common=@STANDARD={'\x00', 0x4, {0xfffffffffffffffc}}}]}]}, 0x1a6) 1.24494168s ago: executing program 1 (id=671): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) gettid() openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000020601040000000000000000000000000c00078008000640000000010500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400000000bffb2648c216955eadf2594f9a8b282112759761b8fbd6cd305a1b3bfee9337edf84371ab0475b8ec7c4416bd2d503c975aaed22ca96f54d7d7cc8c089ab39"], 0x54}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x4048, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}]) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000880)={0x8, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r3) syz_io_uring_setup(0x50ce, &(0x7f0000000000)={0x0, 0x58a3, 0x80, 0x3, 0x37a}, &(0x7f0000000100), &(0x7f0000ff4000)) socket$netlink(0x10, 0x3, 0x0) 468.173349ms ago: executing program 3 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 467.060889ms ago: executing program 0 (id=680): socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x707cb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) 187.623633ms ago: executing program 3 (id=673): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 58.757205ms ago: executing program 3 (id=674): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x36b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0xd, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0x40045010, &(0x7f0000000080)=0xd8eb) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, 0x0, 0x20044000) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r6 = syz_open_dev$dri(0x0, 0x7, 0x220042) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r7, 0xc01064ab, &(0x7f0000000380)={0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000440)={0x5}) syz_io_uring_setup(0x7a72, &(0x7f0000000480)={0x0, 0x2d12, 0x1000, 0x2, 0x306}, &(0x7f0000000140), &(0x7f0000000280)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 0s ago: executing program 1 (id=675): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x104) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xb, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda1", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x2e, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x13}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.196' (ED25519) to the list of known hosts. [ 80.840934][ T5755] cgroup: Unknown subsys name 'net' [ 80.983351][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.745567][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.537707][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.564934][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.572968][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.581788][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.589730][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.604279][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.634535][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.645074][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.652900][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.661640][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.669815][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.678254][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.703411][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.715391][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.723097][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.731697][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.739787][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.747320][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.791275][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.799909][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.808805][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.817431][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.826758][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.834863][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.249623][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 85.431237][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.454134][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.466570][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 85.483176][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.490760][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.498377][ T5764] bridge_slave_0: entered allmulticast mode [ 85.505747][ T5764] bridge_slave_0: entered promiscuous mode [ 85.519516][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.527267][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.534656][ T5764] bridge_slave_1: entered allmulticast mode [ 85.541690][ T5764] bridge_slave_1: entered promiscuous mode [ 85.675059][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.687550][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.810248][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.817720][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.825073][ T5769] bridge_slave_0: entered allmulticast mode [ 85.832100][ T5769] bridge_slave_0: entered promiscuous mode [ 85.840995][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.848557][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.857013][ T5775] bridge_slave_0: entered allmulticast mode [ 85.864427][ T5775] bridge_slave_0: entered promiscuous mode [ 85.876890][ T5764] team0: Port device team_slave_0 added [ 85.883251][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.890678][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.898006][ T5771] bridge_slave_0: entered allmulticast mode [ 85.905693][ T5771] bridge_slave_0: entered promiscuous mode [ 85.914310][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.921612][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.929001][ T5771] bridge_slave_1: entered allmulticast mode [ 85.936654][ T5771] bridge_slave_1: entered promiscuous mode [ 85.943461][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.950829][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.958201][ T5769] bridge_slave_1: entered allmulticast mode [ 85.965607][ T5769] bridge_slave_1: entered promiscuous mode [ 85.983764][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.991156][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.998503][ T5775] bridge_slave_1: entered allmulticast mode [ 86.006077][ T5775] bridge_slave_1: entered promiscuous mode [ 86.025972][ T5764] team0: Port device team_slave_1 added [ 86.097624][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.122686][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.132942][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.140276][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.166334][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.183207][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.202613][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.213885][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.236411][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.243412][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.269413][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.289109][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.328341][ T5775] team0: Port device team_slave_0 added [ 86.391231][ T5775] team0: Port device team_slave_1 added [ 86.430846][ T5771] team0: Port device team_slave_0 added [ 86.440526][ T5769] team0: Port device team_slave_0 added [ 86.449863][ T5769] team0: Port device team_slave_1 added [ 86.475012][ T5764] hsr_slave_0: entered promiscuous mode [ 86.481625][ T5764] hsr_slave_1: entered promiscuous mode [ 86.490224][ T5771] team0: Port device team_slave_1 added [ 86.522047][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.529151][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.555321][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.568335][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.575507][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.602702][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.627428][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.634501][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.656697][ T5082] Bluetooth: hci0: command tx timeout [ 86.660488][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.708860][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.716251][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.742558][ T5082] Bluetooth: hci1: command tx timeout [ 86.748455][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.767150][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.774413][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.800805][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.814097][ T5082] Bluetooth: hci2: command tx timeout [ 86.854750][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.861879][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.887970][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.899047][ T5082] Bluetooth: hci3: command tx timeout [ 86.999358][ T5775] hsr_slave_0: entered promiscuous mode [ 87.011756][ T5775] hsr_slave_1: entered promiscuous mode [ 87.022614][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.052413][ T5775] Cannot create hsr debugfs directory [ 87.080131][ T5771] hsr_slave_0: entered promiscuous mode [ 87.087071][ T5771] hsr_slave_1: entered promiscuous mode [ 87.093541][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.107436][ T5771] Cannot create hsr debugfs directory [ 87.304782][ T5769] hsr_slave_0: entered promiscuous mode [ 87.311547][ T5769] hsr_slave_1: entered promiscuous mode [ 87.319199][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.327182][ T5769] Cannot create hsr debugfs directory [ 87.675554][ T5764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.705248][ T5764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.716140][ T5764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.727629][ T5764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.799223][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.827741][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.838258][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.858392][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.972482][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.983115][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.995727][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.009595][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.102808][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.119321][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.130279][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.141144][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.236612][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.280170][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.324724][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.351306][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.358861][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.392619][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.408239][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.415500][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.438572][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.445866][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.465272][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.472503][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.495518][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.548785][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.579947][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.587156][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.599396][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.606581][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.638368][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.679009][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.734227][ T5082] Bluetooth: hci0: command tx timeout [ 88.767681][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.802542][ T1293] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.809779][ T1293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.824291][ T5082] Bluetooth: hci1: command tx timeout [ 88.867404][ T1293] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.874688][ T1293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.894276][ T5082] Bluetooth: hci2: command tx timeout [ 88.974871][ T5082] Bluetooth: hci3: command tx timeout [ 89.209174][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.255668][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.367980][ T5764] veth0_vlan: entered promiscuous mode [ 89.418117][ T5764] veth1_vlan: entered promiscuous mode [ 89.488180][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.509173][ T5775] veth0_vlan: entered promiscuous mode [ 89.552765][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.568416][ T5775] veth1_vlan: entered promiscuous mode [ 89.587375][ T5764] veth0_macvtap: entered promiscuous mode [ 89.600470][ T5764] veth1_macvtap: entered promiscuous mode [ 89.688891][ T5769] veth0_vlan: entered promiscuous mode [ 89.705351][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.720546][ T5769] veth1_vlan: entered promiscuous mode [ 89.735055][ T5775] veth0_macvtap: entered promiscuous mode [ 89.754789][ T5771] veth0_vlan: entered promiscuous mode [ 89.768215][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.786504][ T5775] veth1_macvtap: entered promiscuous mode [ 89.797589][ T5771] veth1_vlan: entered promiscuous mode [ 89.807823][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.817120][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.826599][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.835705][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.890869][ T5769] veth0_macvtap: entered promiscuous mode [ 89.920197][ T5769] veth1_macvtap: entered promiscuous mode [ 89.939692][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.955922][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.969558][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.983288][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.994632][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.007097][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.030072][ T5771] veth0_macvtap: entered promiscuous mode [ 90.053495][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.063856][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.072915][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.082509][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.112839][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.124601][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.134947][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.146385][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.158447][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.172005][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.183192][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.193421][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.205335][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.217661][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.226219][ T5771] veth1_macvtap: entered promiscuous mode [ 90.269862][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.279862][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.289641][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298511][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.324951][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.333101][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.399501][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.410343][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.421400][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.432402][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.442666][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.453319][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.468422][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.482326][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.493650][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.505109][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.515664][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.526011][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.536584][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.548579][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.586257][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.601883][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.611756][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.620830][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.640639][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.653066][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.730502][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.774322][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.814645][ T5082] Bluetooth: hci0: command tx timeout [ 90.845190][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.854465][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.894364][ T5082] Bluetooth: hci1: command tx timeout [ 90.905551][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.913440][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.975062][ T5082] Bluetooth: hci2: command tx timeout [ 90.997077][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.021643][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.054833][ T5082] Bluetooth: hci3: command tx timeout [ 91.109696][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.160271][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.235713][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.257032][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.565650][ T5811] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.636674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 91.861262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.999325][ T5811] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.010732][ T5811] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.031055][ T5811] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.048086][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.130308][ T27] cfg80211: failed to load regulatory.db [ 92.136246][ T5811] usb 3-1: Product: syz [ 92.153720][ T5811] usb 3-1: Manufacturer: syz [ 92.176071][ T5811] usb 3-1: SerialNumber: syz [ 92.207560][ T5811] usb 3-1: config 0 descriptor?? [ 92.308676][ T5811] usb 3-1: selecting invalid altsetting 0 [ 92.460635][ T5857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.484767][ T5857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.628631][ T5867] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 92.899593][ T5082] Bluetooth: hci0: command tx timeout [ 92.974932][ T5082] Bluetooth: hci1: command tx timeout [ 93.034623][ T5876] lo speed is unknown, defaulting to 1000 [ 93.041111][ T5876] lo speed is unknown, defaulting to 1000 [ 93.055058][ T5082] Bluetooth: hci2: command tx timeout [ 93.074347][ T5876] lo speed is unknown, defaulting to 1000 [ 93.099599][ T5876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.134161][ T5082] Bluetooth: hci3: command tx timeout [ 93.147139][ T5876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.276844][ T5877] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.374359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.065274][ T5876] lo speed is unknown, defaulting to 1000 [ 94.116794][ T5876] lo speed is unknown, defaulting to 1000 [ 94.157074][ T5876] lo speed is unknown, defaulting to 1000 [ 94.207882][ T5876] lo speed is unknown, defaulting to 1000 [ 94.489362][ T5831] usb 3-1: USB disconnect, device number 2 [ 95.064136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 95.977241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.007636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.268450][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.548140][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 97.824199][ T5767] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.045702][ T5767] usb 3-1: Using ep0 maxpacket: 8 [ 98.073206][ T5767] usb 3-1: config 0 has no interfaces? [ 98.094911][ T5767] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.114628][ T5767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.141996][ T5767] usb 3-1: config 0 descriptor?? [ 98.284182][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.381871][ T23] usb 3-1: USB disconnect, device number 3 [ 98.498418][ T27] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 98.524260][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 98.550213][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 98.582167][ T27] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 98.597185][ T27] usb 1-1: Product: syz [ 98.601458][ T27] usb 1-1: Manufacturer: syz [ 98.608515][ T27] usb 1-1: SerialNumber: syz [ 98.624365][ T27] usb 1-1: config 0 descriptor?? [ 98.648184][ T27] usb 1-1: selecting invalid altsetting 0 [ 98.997769][ T5917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.017931][ T5917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.218337][ T5926] siw: device registration error -23 [ 100.126123][ T787] usb 1-1: USB disconnect, device number 2 [ 100.257153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.267358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.287206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 101.218579][ T5941] tipc: Started in network mode [ 101.228664][ T5941] tipc: Node identity , cluster identity 4711 [ 101.240286][ T5941] tipc: Failed to obtain node identity [ 101.253254][ T5941] tipc: Enabling of bearer rejected, failed to enable media [ 102.484029][ T5954] Zero length message leads to an empty skb [ 103.039090][ T5953] sched: RT throttling activated [ 103.294679][ T5954] comedi comedi0: Minor 47 could not be opened [ 104.825305][ T5082] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 104.834607][ T5082] Bluetooth: hci1: Injecting HCI hardware error event [ 104.842761][ T5773] Bluetooth: hci1: hardware error 0x00 [ 105.024268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.146688][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 107.248877][ T5831] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.433401][ T5986] netlink: 'syz.2.42': attribute type 1 has an invalid length. [ 107.458275][ T5831] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.488029][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.517578][ T5831] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.531689][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.544322][ T5831] usb 4-1: Product: syz [ 107.561647][ T5831] usb 4-1: Manufacturer: syz [ 107.576833][ T5988] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.589545][ T5831] usb 4-1: SerialNumber: syz [ 107.614711][ T5831] usb 4-1: config 0 descriptor?? [ 107.631662][ T5831] usb 4-1: selecting invalid altsetting 0 [ 107.958058][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.001719][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.223795][ T5993] siw: device registration error -23 [ 108.955853][ T5767] usb 4-1: USB disconnect, device number 2 [ 110.798881][ T28] audit: type=1326 audit(1767486625.439:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 110.867204][ T28] audit: type=1326 audit(1767486625.449:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 110.930668][ T28] audit: type=1326 audit(1767486625.449:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 110.993456][ T28] audit: type=1326 audit(1767486625.479:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 111.084288][ T28] audit: type=1326 audit(1767486625.479:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 111.175572][ T28] audit: type=1326 audit(1767486625.479:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 111.261832][ T28] audit: type=1326 audit(1767486625.479:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 111.292696][ T28] audit: type=1326 audit(1767486625.479:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 111.337956][ T28] audit: type=1326 audit(1767486625.479:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 111.401222][ T28] audit: type=1326 audit(1767486625.479:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9c08d915dc code=0x7ffc0000 [ 111.434085][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.654200][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 111.674604][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.714118][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.740537][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.751020][ T6027] ubi31: attaching mtd0 [ 111.769831][ T6027] ubi31: scanning is finished [ 111.796075][ T6027] ubi31: empty MTD device detected [ 111.808282][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.862414][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.908531][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.995080][ T6027] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 112.002717][ T6027] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 112.051718][ T6027] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 112.074356][ T6027] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 112.133617][ T6027] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 112.163083][ T6027] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 112.185258][ T6027] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1016500533 [ 112.214139][ T787] usb 3-1: usb_control_msg returned -32 [ 112.220217][ T787] usbtmc 3-1:16.0: can't read capabilities [ 112.254487][ T6027] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 112.364913][ T6029] ubi31: background thread "ubi_bgt31d" started, PID 6029 [ 113.671324][ T6047] netlink: 224 bytes leftover after parsing attributes in process `syz.3.56'. [ 115.199992][ T9] usb 3-1: USB disconnect, device number 4 [ 115.835090][ T6060] syz.1.61 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 116.283828][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 116.390187][ T6067] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 116.471750][ T6067] netlink: 'syz.2.66': attribute type 2 has an invalid length. [ 116.773994][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.996959][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 117.016133][ T9] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 117.036489][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.083004][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.116085][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.148817][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.161456][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.174226][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.186166][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.197616][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.209259][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 117.218939][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 117.227372][ T9] usb 2-1: SerialNumber: syz [ 117.251048][ T9] usb 2-1: config 0 descriptor?? [ 117.262029][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 117.306362][ T6077] syz.2.69[6077]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 117.349141][ T6077] process 'syz.2.69' launched '/dev/fd/9' with NULL argv: empty string added [ 117.510821][ T5122] bcm5974 2-1:0.0: could not read from device [ 117.540028][ T9] usb 2-1: USB disconnect, device number 2 [ 117.542314][ T6083] netlink: 44 bytes leftover after parsing attributes in process `syz.3.71'. [ 117.714669][ T6077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.027012][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 119.879771][ T6105] input: syz1 as /devices/virtual/input/input6 [ 121.564728][ T6130] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 121.724028][ T6130] batman_adv: batadv0: Adding interface: team0 [ 121.744327][ T6130] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.771214][ T6130] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 122.125190][ T6132] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 122.154395][ T6132] netlink: 2 bytes leftover after parsing attributes in process `syz.2.83'. [ 122.182045][ T6132] team0: entered promiscuous mode [ 122.204985][ T6132] team_slave_0: entered promiscuous mode [ 122.224598][ T6132] team_slave_1: entered promiscuous mode [ 122.417654][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.425415][ T6132] batman_adv: batadv0: Interface activated: team0 [ 122.431935][ T6132] batman_adv: batadv0: Interface deactivated: team0 [ 122.438692][ T6132] batman_adv: batadv0: Removing interface: team0 [ 122.446571][ T6132] bridge0: port 3(team0) entered blocking state [ 122.453140][ T6132] bridge0: port 3(team0) entered disabled state [ 122.462983][ T6132] team0: entered allmulticast mode [ 122.520415][ T6132] team_slave_0: entered allmulticast mode [ 122.543732][ T6132] team_slave_1: entered allmulticast mode [ 122.591571][ T6132] bridge0: port 3(team0) entered blocking state [ 122.598740][ T6132] bridge0: port 3(team0) entered forwarding state [ 122.722155][ T6148] nbd0: detected capacity change from 0 to 8589934655 [ 123.571111][ T5773] block nbd0: Receive control failed (result -104) [ 124.749812][ T5767] libceph: connect (1)[c::]:6789 error -101 [ 124.763158][ T5767] libceph: mon0 (1)[c::]:6789 connect error [ 124.814656][ T6168] ceph: No mds server is up or the cluster is laggy [ 126.217025][ T6213] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 126.268270][ T6213] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.657370][ T6213] syz.0.115 (6213) used greatest stack depth: 20360 bytes left [ 130.969098][ T6246] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 130.991720][ T6246] netlink: 396 bytes leftover after parsing attributes in process `syz.2.127'. [ 131.030300][ T6246] NCSI netlink: No device for ifindex 0 [ 131.529389][ T6259] netlink: 76 bytes leftover after parsing attributes in process `syz.2.133'. [ 131.948955][ T6273] overlayfs: failed to clone upperpath 6ĆeB[ 132.252751][ T6286] 9pnet_virtio: no channels available for device syz [ 133.063874][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.674057][ T5831] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.867607][ T5831] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 133.896982][ T5831] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 133.916981][ T5831] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 133.937405][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 133.948663][ T5831] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 133.966331][ T5831] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.977294][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.985503][ T5831] usb 4-1: Product: syz [ 133.989977][ T5831] usb 4-1: Manufacturer: syz [ 134.007062][ T5831] cdc_wdm 4-1:1.0: skipping garbage [ 134.022733][ T5831] cdc_wdm 4-1:1.0: skipping garbage [ 134.036642][ T5831] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 134.042638][ T5831] cdc_wdm 4-1:1.0: Unknown control protocol [ 134.299501][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.302153][ T5767] usb 4-1: USB disconnect, device number 3 [ 134.306592][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.318636][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 137.046402][ T6357] capability: warning: `syz.0.170' uses deprecated v2 capabilities in a way that may be insecure [ 137.107630][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.171'. [ 137.126308][ T6360] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 137.154777][ T6360] macvtap1: entered allmulticast mode [ 137.160257][ T6360] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 137.619883][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 137.747936][ T6371] hsr_slave_1 (unregistering): left promiscuous mode [ 138.302924][ T5773] Bluetooth: Unexpected continuation frame (len 10) [ 138.616228][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 138.616244][ T28] audit: type=1326 audit(1767486653.269:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 138.718053][ T28] audit: type=1326 audit(1767486653.299:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 138.964446][ T28] audit: type=1326 audit(1767486653.309:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 139.023995][ T28] audit: type=1326 audit(1767486653.309:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 139.070189][ T28] audit: type=1326 audit(1767486653.309:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6397 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 139.644193][ T6407] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 139.651161][ T6407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.727836][ T6407] vhci_hcd vhci_hcd.0: Device attached [ 139.988597][ T6408] vhci_hcd: connection closed [ 139.990031][ T23] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 140.004438][ T144] vhci_hcd: stop threads [ 140.029780][ T144] vhci_hcd: release socket [ 140.056527][ T144] vhci_hcd: disconnect device [ 141.514932][ T6435] fuse: Unknown parameter '0x000000000000000800000000000000000000' [ 141.806706][ T6444] program syz.0.204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.972641][ T6448] lo speed is unknown, defaulting to 1000 [ 142.364701][ T6448] syz.3.205 uses obsolete (PF_INET,SOCK_PACKET) [ 143.380042][ T6467] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 143.403853][ T6467] tipc: Trying to set illegal importance in message [ 144.352964][ T6479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.681096][ T6479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.904308][ T6485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.941211][ T6479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.004177][ T6485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.145112][ T23] vhci_hcd: vhci_device speed not set [ 145.170076][ T6479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.180850][ T6485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 145.202107][ T6485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.214710][ T6485] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.271404][ T6485] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 145.304017][ T6485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.345463][ T6485] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.395888][ T6485] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 145.435892][ T6479] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.456351][ T6479] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.479154][ T6479] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.527492][ T6479] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.848846][ T6500] siw: device registration error -23 [ 146.894257][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 147.214764][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.294276][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.847970][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.863142][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.884629][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.903012][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.911107][ T5082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.919228][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.676704][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 148.974595][ T5082] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.049555][ T6542] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 149.056164][ T6542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 149.090309][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.114562][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.140513][ T6517] bridge_slave_0: entered allmulticast mode [ 149.184123][ T6517] bridge_slave_0: entered promiscuous mode [ 149.232486][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.254025][ T6542] vhci_hcd vhci_hcd.0: Device attached [ 149.264654][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.294233][ T5082] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.301068][ T6517] bridge_slave_1: entered allmulticast mode [ 149.345135][ T6517] bridge_slave_1: entered promiscuous mode [ 149.374157][ T5082] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.604119][ T5851] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 149.617520][ T6543] vhci_hcd: connection closed [ 149.635636][ T6544] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 149.754375][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.784653][ T34] vhci_hcd: stop threads [ 149.788999][ T34] vhci_hcd: release socket [ 149.824208][ T34] vhci_hcd: disconnect device [ 149.986166][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.014628][ T5082] Bluetooth: hci4: command tx timeout [ 150.236054][ T6517] team0: Port device team_slave_0 added [ 150.265762][ T6517] team0: Port device team_slave_1 added [ 150.426199][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.458718][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.521969][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.554405][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.594193][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.702526][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.900867][ T6517] hsr_slave_0: entered promiscuous mode [ 150.929816][ T6517] hsr_slave_1: entered promiscuous mode [ 150.955918][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.994345][ T6517] Cannot create hsr debugfs directory [ 151.054326][ T5082] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.374010][ T5082] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.454502][ T5082] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.730347][ T6517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.756042][ T6517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.780627][ T6517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.795039][ T6575] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 151.807885][ T6517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.094251][ T5082] Bluetooth: hci4: command tx timeout [ 153.547075][ T5936] block nbd0: Possible stuck request ffff8880218b0000: control (read@0,1024B). Runtime 30 seconds [ 153.558482][ T5936] block nbd0: Possible stuck request ffff8880218b0200: control (read@1024,1024B). Runtime 30 seconds [ 153.924684][ T5936] block nbd0: Possible stuck request ffff8880218b0400: control (read@2048,1024B). Runtime 30 seconds [ 153.936187][ T5936] block nbd0: Possible stuck request ffff8880218b0600: control (read@3072,1024B). Runtime 30 seconds [ 154.175561][ T5082] Bluetooth: hci4: command tx timeout [ 154.734361][ T5851] vhci_hcd: vhci_device speed not set [ 154.784793][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.883564][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.006466][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.013693][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.135521][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.142780][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.898750][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.314142][ T5082] Bluetooth: hci4: command tx timeout [ 156.874307][ T6612] 9pnet_virtio: no channels available for device syz [ 157.142058][ T6613] cgroup: Need name or subsystem set [ 158.667214][ T6517] veth0_vlan: entered promiscuous mode [ 158.690239][ T6517] veth1_vlan: entered promiscuous mode [ 158.788306][ T6517] veth0_macvtap: entered promiscuous mode [ 158.803204][ T6517] veth1_macvtap: entered promiscuous mode [ 158.869003][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.898966][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.910094][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.932260][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.002598][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.029641][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.049637][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.063485][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.115605][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.147114][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.165559][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.176255][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.190025][ T6630] binder: 6629:6630 ioctl c00c6211 0 returned -14 [ 159.205917][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.254007][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.273967][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.283841][ T6517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.334631][ T6517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.377833][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.431422][ T6517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.627357][ T6517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.636818][ T6517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.645655][ T6517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.889821][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.141559][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.518056][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.546911][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.466969][ T5082] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 161.657478][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.893760][ T6663] capability: warning: `syz.0.264' uses 32-bit capabilities (legacy support in use) [ 161.947377][ T6658] netlink: 'syz.1.262': attribute type 3 has an invalid length. [ 162.492028][ T6657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.286515][ T5082] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 163.435595][ T6680] syzkaller0: entered promiscuous mode [ 163.461058][ T6680] syzkaller0: entered allmulticast mode [ 163.759829][ T6683] block device autoloading is deprecated and will be removed. [ 164.505111][ T5082] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 165.585930][ T6709] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 167.334339][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 167.377349][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee4b800: rx timeout, send abort [ 170.569773][ T6780] random: crng reseeded on system resumption [ 171.377442][ T6789] netlink: 128 bytes leftover after parsing attributes in process `syz.3.312'. [ 178.682518][ T6823] netlink: 'syz.1.323': attribute type 39 has an invalid length. [ 179.758302][ T6842] Bluetooth: MGMT ver 1.22 [ 179.914082][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.3.330'. [ 180.057092][ T6847] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3494536612 (27956292896 ns) > initial count (3818115376 ns). Using initial count to start timer. [ 180.099929][ T6847] kvm: pic: non byte read [ 180.131926][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 180.428996][ T6834] 9pnet_virtio: no channels available for device syz [ 181.556537][ T6864] ubi: mtd0 is already attached to ubi31 [ 182.084450][ T28] audit: type=1326 audit(1767486696.729:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf98f749 code=0x7ffc0000 [ 182.115848][ T28] audit: type=1326 audit(1767486696.729:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf98f749 code=0x7ffc0000 [ 182.173995][ T28] audit: type=1326 audit(1767486696.729:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f41bf98f749 code=0x7ffc0000 [ 182.203770][ T28] audit: type=1326 audit(1767486696.739:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf98f749 code=0x7ffc0000 [ 182.239645][ T28] audit: type=1326 audit(1767486696.739:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6880 comm="syz.1.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf98f749 code=0x7ffc0000 [ 183.721771][ T6903] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 184.814151][ T6901] netlink: 'syz.0.345': attribute type 10 has an invalid length. [ 185.062088][ T5936] block nbd0: Possible stuck request ffff8880218b0000: control (read@0,1024B). Runtime 60 seconds [ 185.073291][ T5936] block nbd0: Possible stuck request ffff8880218b0200: control (read@1024,1024B). Runtime 60 seconds [ 185.084434][ T5936] block nbd0: Possible stuck request ffff8880218b0400: control (read@2048,1024B). Runtime 60 seconds [ 185.095413][ T5936] block nbd0: Possible stuck request ffff8880218b0600: control (read@3072,1024B). Runtime 60 seconds [ 185.164066][ T6901] bond0: (slave dummy0): Releasing backup interface [ 185.191087][ T6901] team0: Port device dummy0 added [ 185.556859][ T6913] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 186.044989][ T6921] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 187.222164][ T6940] netlink: 156 bytes leftover after parsing attributes in process `syz.1.358'. [ 187.256287][ T28] audit: type=1326 audit(1767486701.909:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.288896][ T28] audit: type=1326 audit(1767486701.919:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.330543][ T28] audit: type=1326 audit(1767486701.929:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.371767][ T28] audit: type=1326 audit(1767486701.929:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.401152][ T28] audit: type=1326 audit(1767486701.929:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.450347][ T28] audit: type=1326 audit(1767486701.929:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.481376][ T28] audit: type=1326 audit(1767486701.929:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.577458][ T28] audit: type=1326 audit(1767486701.939:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.618151][ T28] audit: type=1326 audit(1767486701.939:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 187.672392][ T28] audit: type=1326 audit(1767486701.939:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c08d8f749 code=0x7ffc0000 [ 188.727169][ T6982] 9pnet_virtio: no channels available for device syz [ 193.122065][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 193.122081][ T28] audit: type=1326 audit(1767486707.769:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 193.159444][ T5831] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 193.184930][ T28] audit: type=1326 audit(1767486707.809:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7002 comm="syz.0.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 193.529469][ T5831] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 193.587757][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 193.607393][ T5831] usb 5-1: Product: syz [ 193.611646][ T5831] usb 5-1: Manufacturer: syz [ 193.617160][ T5831] usb 5-1: SerialNumber: syz [ 193.655140][ T5831] usb 5-1: config 0 descriptor?? [ 193.716326][ T5831] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 193.778966][ T5831] dvb-usb: bulk message failed: -22 (2/0) [ 193.837568][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 193.882402][ T5831] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 193.891989][ T5831] usb 5-1: media controller created [ 193.935407][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.996517][ T5831] cxusb: set interface failed [ 194.010885][ T5831] dvb-usb: bulk message failed: -22 (1/0) [ 194.087624][ T5831] DVB: Unable to find symbol mt352_attach() [ 194.124929][ T5831] dvb-usb: bulk message failed: -22 (5/0) [ 194.172538][ T5831] zl10353_read_register: readreg error (reg=127, ret==-121) [ 194.204960][ T5831] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 194.354295][ T5831] rc_core: IR keymap rc-dvico-mce not found [ 194.362532][ T5831] Registered IR keymap rc-empty [ 194.395183][ T5831] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 194.436909][ T5831] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input7 [ 194.486942][ T5831] dvb-usb: schedule remote query interval to 100 msecs. [ 194.501117][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.544009][ T5831] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 194.581544][ T5831] usb 5-1: USB disconnect, device number 2 [ 195.665015][ T5831] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 196.474031][ T5831] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 197.396578][ T5831] usb 4-1: config 0 has no interfaces? [ 197.402103][ T5831] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 199.544410][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.581088][ T5831] usb 4-1: config 0 descriptor?? [ 199.632152][ T5831] usb 4-1: can't set config #0, error -71 [ 199.704247][ T5831] usb 4-1: USB disconnect, device number 4 [ 200.418731][ T7056] dvmrp0: entered allmulticast mode [ 204.013536][ T5137] udevd[5137]: worker [5866] /devices/virtual/block/nbd0 is taking a long time [ 204.773332][ T7106] netlink: 104 bytes leftover after parsing attributes in process `syz.3.410'. [ 206.285219][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.414'. [ 206.492256][ T7124] netlink: 26 bytes leftover after parsing attributes in process `syz.3.416'. [ 215.186173][ T7247] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 215.192785][ T7247] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 215.200711][ T7247] vhci_hcd vhci_hcd.0: Device attached [ 216.031236][ T7248] vhci_hcd: connection closed [ 216.038002][ T5936] block nbd0: Possible stuck request ffff8880218b0000: control (read@0,1024B). Runtime 90 seconds [ 216.053710][ T5936] block nbd0: Possible stuck request ffff8880218b0200: control (read@1024,1024B). Runtime 90 seconds [ 216.064922][ T5936] block nbd0: Possible stuck request ffff8880218b0400: control (read@2048,1024B). Runtime 90 seconds [ 216.076023][ T5936] block nbd0: Possible stuck request ffff8880218b0600: control (read@3072,1024B). Runtime 90 seconds [ 216.504073][ T11] vhci_hcd: stop threads [ 216.528717][ T11] vhci_hcd: release socket [ 216.546964][ T11] vhci_hcd: disconnect device [ 221.749936][ T7288] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 221.768683][ T7288] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 222.372098][ T7311] ubi: mtd0 is already attached to ubi31 [ 224.430606][ T7330] fuse: Unknown parameter 'roytmode' [ 224.568296][ T7335] netlink: 'syz.1.488': attribute type 10 has an invalid length. [ 224.691458][ T7335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.801456][ T7340] bond_slave_0: entered promiscuous mode [ 224.807536][ T7340] bond_slave_1: entered promiscuous mode [ 224.820061][ T7340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.834973][ T7340] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 225.906463][ T28] audit: type=1326 audit(1767486740.509:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 225.936114][ T28] audit: type=1326 audit(1767486740.509:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 225.989393][ T28] audit: type=1326 audit(1767486740.619:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 226.045309][ T28] audit: type=1326 audit(1767486740.629:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 226.072069][ T28] audit: type=1326 audit(1767486740.629:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 226.372488][ T28] audit: type=1326 audit(1767486740.689:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 226.398556][ T28] audit: type=1326 audit(1767486740.689:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 226.504053][ T28] audit: type=1326 audit(1767486740.689:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262718f749 code=0x7ffc0000 [ 229.989720][ T7396] vivid-006: disconnect [ 230.083320][ T7391] vivid-006: reconnect [ 232.464127][ T7412] comedi comedi0: Minor 47 could not be opened [ 233.885510][ T7422] 9pnet_virtio: no channels available for device syz [ 234.378455][ T7433] netlink: 'syz.3.525': attribute type 12 has an invalid length. [ 234.393760][ T7433] netlink: 'syz.3.525': attribute type 29 has an invalid length. [ 234.411600][ T7433] netlink: 148 bytes leftover after parsing attributes in process `syz.3.525'. [ 234.425569][ T7433] netlink: 'syz.3.525': attribute type 2 has an invalid length. [ 234.433444][ T7433] netlink: 'syz.3.525': attribute type 3 has an invalid length. [ 234.446832][ T7433] netlink: 15 bytes leftover after parsing attributes in process `syz.3.525'. [ 235.743958][ T5082] Bluetooth: hci4: command tx timeout [ 235.747307][ T7447] overlayfs: failed to clone upperpath [ 238.841536][ T7464] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[7464] [ 239.781960][ T7473] overlayfs: failed to clone upperpath [ 245.253506][ T7508] tipc: Trying to set illegal importance in message [ 246.334505][ T55] block nbd0: Possible stuck request ffff8880218b0000: control (read@0,1024B). Runtime 120 seconds [ 246.345566][ T55] block nbd0: Possible stuck request ffff8880218b0200: control (read@1024,1024B). Runtime 120 seconds [ 246.378695][ T55] block nbd0: Possible stuck request ffff8880218b0400: control (read@2048,1024B). Runtime 120 seconds [ 246.426068][ T55] block nbd0: Possible stuck request ffff8880218b0600: control (read@3072,1024B). Runtime 120 seconds [ 248.140943][ T7533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.161192][ T7533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.194584][ T7533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 248.253130][ T7533] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 248.266588][ T7533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 248.291962][ T7533] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 250.681187][ T5082] Bluetooth: hci2: command 0x0c1a tx timeout [ 250.681762][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 250.687531][ T5082] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.694107][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 252.769794][ T5773] Bluetooth: hci4: command 0x0c1a tx timeout [ 254.501189][ T7595] netlink: 176 bytes leftover after parsing attributes in process `syz.3.572'. [ 254.744021][ T5767] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 254.817331][ T5773] Bluetooth: hci4: command 0x0c1a tx timeout [ 255.000058][ T5767] usb 5-1: Using ep0 maxpacket: 32 [ 255.056747][ T5767] usb 5-1: config 211 has an invalid interface number: 98 but max is 0 [ 255.065508][ T5767] usb 5-1: config 211 has no interface number 0 [ 255.071845][ T5767] usb 5-1: config 211 interface 98 has no altsetting 0 [ 255.133275][ T5767] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 255.195353][ T7601] Bluetooth: MGMT ver 1.22 [ 255.942022][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.023831][ T5767] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.032437][ T5767] usb 5-1: Product: syz [ 256.036924][ T5767] usb 5-1: Manufacturer: syz [ 256.041564][ T5767] usb 5-1: SerialNumber: syz [ 256.978181][ T5767] mct_u232 5-1:211.98: MCT U232 converter detected [ 257.137704][ T5767] mct_u232 ttyUSB0: expected endpoint missing [ 257.234312][ T5767] usb 5-1: USB disconnect, device number 3 [ 257.277149][ T5767] mct_u232 5-1:211.98: device disconnected [ 258.587984][ T7621] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 258.641105][ T7621] tipc: Trying to set illegal importance in message [ 260.848255][ T7623] syzkaller1: entered promiscuous mode [ 260.853807][ T7623] syzkaller1: entered allmulticast mode [ 260.861726][ T7623] program syz.3.579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.319160][ T7578] Set syz1 is full, maxelem 65536 reached [ 262.976072][ T5773] Bluetooth: hci2: unexpected event for opcode 0x080c [ 263.258669][ T7645] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 263.297294][ T7645] bond1: option mode: unable to set because the bond device has slaves [ 263.354430][ T7645] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 263.399594][ T7647] lo speed is unknown, defaulting to 1000 [ 263.407600][ T7647] lo speed is unknown, defaulting to 1000 [ 263.424581][ T7647] lo speed is unknown, defaulting to 1000 [ 263.485741][ T7647] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 263.543516][ T7647] lo speed is unknown, defaulting to 1000 [ 263.561421][ T7647] lo speed is unknown, defaulting to 1000 [ 263.579208][ T7647] lo speed is unknown, defaulting to 1000 [ 263.598577][ T7647] lo speed is unknown, defaulting to 1000 [ 263.618429][ T7647] lo speed is unknown, defaulting to 1000 [ 264.047218][ T7660] netlink: 64 bytes leftover after parsing attributes in process `syz.1.593'. [ 264.698239][ T7671] lo speed is unknown, defaulting to 1000 [ 264.831840][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 266.124218][ T5767] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.269266][ T7710] binder: 7708:7710 unknown command 1074553619 [ 266.275724][ T7710] binder: 7708:7710 ioctl c0306201 200000000040 returned -22 [ 266.313970][ T5767] usb 5-1: Using ep0 maxpacket: 8 [ 266.322759][ T5767] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 266.334208][ T5767] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 266.344319][ T5767] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.354447][ T5767] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.367579][ T5767] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.377432][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.598735][ T5767] usb 5-1: GET_CAPABILITIES returned 0 [ 266.608789][ T5767] usbtmc 5-1:16.0: can't read capabilities [ 266.878273][ T5831] usb 5-1: USB disconnect, device number 4 [ 267.765883][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.621'. [ 267.827949][ T7728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 267.897645][ T7731] macvlan2: entered promiscuous mode [ 267.968522][ T7731] macvlan2: entered allmulticast mode [ 267.978392][ T7731] bond1: entered promiscuous mode [ 268.010081][ T7731] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.033614][ T7731] bond1: left promiscuous mode [ 268.640949][ T7747] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 268.768395][ T7749] veth0: entered promiscuous mode [ 268.791568][ T7749] veth0: left promiscuous mode [ 269.381885][ T7764] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 269.475400][ T7764] batman_adv: batadv0: Adding interface: team0 [ 269.481880][ T7764] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.507590][ T7764] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 269.518485][ T7766] netlink: 'syz.1.630': attribute type 10 has an invalid length. [ 269.528700][ T7766] netlink: 2 bytes leftover after parsing attributes in process `syz.1.630'. [ 269.537875][ T7766] team0: entered promiscuous mode [ 269.542963][ T7766] team_slave_0: entered promiscuous mode [ 269.550450][ T7766] team_slave_1: entered promiscuous mode [ 269.558299][ T7766] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.565352][ T7766] batman_adv: batadv0: Interface activated: team0 [ 269.571935][ T7766] batman_adv: batadv0: Interface deactivated: team0 [ 269.578722][ T7766] batman_adv: batadv0: Removing interface: team0 [ 269.618211][ T7766] bridge0: port 3(team0) entered blocking state [ 269.627495][ T7766] bridge0: port 3(team0) entered disabled state [ 269.634470][ T7766] team0: entered allmulticast mode [ 269.639790][ T7766] team_slave_0: entered allmulticast mode [ 269.645797][ T7766] team_slave_1: entered allmulticast mode [ 269.656571][ T7766] bridge0: port 3(team0) entered blocking state [ 269.663019][ T7766] bridge0: port 3(team0) entered forwarding state [ 270.590281][ T7770] nbd1: detected capacity change from 0 to 8589934655 [ 271.054789][ T5773] block nbd1: Receive control failed (result -104) [ 271.139413][ T7774] netlink: 64 bytes leftover after parsing attributes in process `syz.1.632'. [ 271.175253][ T7774] netlink: 64 bytes leftover after parsing attributes in process `syz.1.632'. [ 271.507760][ T7777] netlink: 'syz.0.634': attribute type 4 has an invalid length. [ 274.723237][ T7806] ptrace attach of ""[7809] was attempted by "./syz-executor exec"[7806] [ 275.126873][ T7811] /dev/nullb0: Can't lookup blockdev [ 277.994413][ T5936] block nbd0: Possible stuck request ffff8880218b0000: control (read@0,1024B). Runtime 150 seconds [ 278.005264][ T5936] block nbd0: Possible stuck request ffff8880218b0200: control (read@1024,1024B). Runtime 150 seconds [ 278.016901][ T5936] block nbd0: Possible stuck request ffff8880218b0400: control (read@2048,1024B). Runtime 150 seconds [ 278.028014][ T5936] block nbd0: Possible stuck request ffff8880218b0600: control (read@3072,1024B). Runtime 150 seconds [ 278.718282][ T7832] Set syz1 is full, maxelem 65536 reached [ 278.824249][ T5852] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 279.058037][ T5852] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 47, changing to 4 [ 279.101347][ T5852] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid maxpacket 42203, setting to 1023 [ 279.131822][ T5852] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.144061][ T5852] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 279.163548][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 279.196087][ T5852] usb 4-1: Product: syz [ 279.200340][ T5852] usb 4-1: Manufacturer: syz [ 279.224100][ T5852] usb 4-1: SerialNumber: syz [ 279.251914][ T5852] usb 4-1: config 0 descriptor?? [ 279.269304][ T5852] usb 4-1: selecting invalid altsetting 0 [ 279.529925][ T7827] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 279.599654][ T5811] usb 4-1: USB disconnect, device number 5 [ 280.936553][ T7864] netlink: 40 bytes leftover after parsing attributes in process `syz.1.663'. [ 285.374182][ T29] INFO: task syz.2.136:6267 blocked for more than 143 seconds. [ 285.394408][ T29] Not tainted syzkaller #0 [ 285.409596][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.432433][ T7911] netlink: set zone limit has 8 unknown bytes [ 285.444131][ T29] task:syz.2.136 state:D stack:27848 pid:6267 ppid:5769 flags:0x00004004 [ 285.518075][ T29] Call Trace: [ 285.575535][ T29] [ 285.584093][ T29] __schedule+0x14d2/0x44d0 [ 285.604128][ T29] ? asan.module_dtor+0x20/0x20 [ 285.629269][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 285.647885][ T29] ? __mutex_trylock_common+0x84/0x250 [ 285.670530][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 285.693736][ T29] schedule+0xbd/0x170 [ 285.707387][ T29] schedule_preempt_disabled+0x13/0x20 [ 285.737816][ T29] __mutex_lock+0x6b7/0xcc0 [ 285.751613][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 285.765579][ T29] ? sync_bdevs+0x1af/0x330 [ 285.777186][ T29] ? mutex_lock_nested+0x20/0x20 [ 285.792586][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 285.803948][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 285.820983][ T29] sync_bdevs+0x1af/0x330 [ 285.834149][ T29] ksys_sync+0xba/0x150 [ 285.843382][ T29] ? sync_filesystem+0x220/0x220 [ 285.892626][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 285.924096][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 285.943753][ T29] __ia32_sys_sync+0xe/0x20 [ 285.958722][ T29] do_syscall_64+0x55/0xb0 [ 285.971155][ T29] ? clear_bhb_loop+0x40/0x90 [ 285.983149][ T29] ? clear_bhb_loop+0x40/0x90 [ 286.002991][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.026612][ T29] RIP: 0033:0x7f2f2c58f749 [ 286.047571][ T29] RSP: 002b:00007f2f2d3f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 286.072602][ T29] RAX: ffffffffffffffda RBX: 00007f2f2c7e5fa0 RCX: 00007f2f2c58f749 [ 286.098592][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.121554][ T29] RBP: 00007f2f2c7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 286.142794][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.176281][ T29] R13: 00007f2f2c7e6038 R14: 00007f2f2c7e5fa0 R15: 00007fff1ccc1a48 [ 286.194811][ T29] [ 286.206629][ T29] INFO: task syz.2.136:6271 blocked for more than 144 seconds. [ 286.222498][ T29] Not tainted syzkaller #0 [ 286.228415][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.238768][ T29] task:syz.2.136 state:D stack:27912 pid:6271 ppid:5769 flags:0x00004004 [ 286.258681][ T29] Call Trace: [ 286.262126][ T29] [ 286.265481][ T29] __schedule+0x14d2/0x44d0 [ 286.270279][ T29] ? asan.module_dtor+0x20/0x20 [ 286.276610][ T29] ? __mutex_lock+0x6b2/0xcc0 [ 286.281546][ T29] ? __mutex_trylock_common+0x84/0x250 [ 286.289588][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 286.301391][ T29] schedule+0xbd/0x170 [ 286.314467][ T29] schedule_preempt_disabled+0x13/0x20 [ 286.323257][ T29] __mutex_lock+0x6b7/0xcc0 [ 286.328144][ T29] ? __mutex_lock+0x4e8/0xcc0 [ 286.334912][ T29] ? sync_bdevs+0x1af/0x330 [ 286.342083][ T29] ? mutex_lock_nested+0x20/0x20 [ 286.347465][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 286.352927][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 286.358844][ T29] sync_bdevs+0x1af/0x330 [ 286.363330][ T29] ksys_sync+0xba/0x150 [ 286.378836][ T29] ? sync_filesystem+0x220/0x220 [ 286.384626][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 286.390751][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 286.416076][ T29] __ia32_sys_sync+0xe/0x20 [ 286.465890][ T29] do_syscall_64+0x55/0xb0 [ 286.503736][ T29] ? clear_bhb_loop+0x40/0x90 [ 286.526775][ T29] ? clear_bhb_loop+0x40/0x90 [ 286.553767][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.592597][ T29] RIP: 0033:0x7f2f2c58f749 [ 286.628137][ T29] RSP: 002b:00007f2f2d3d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 286.656833][ T29] RAX: ffffffffffffffda RBX: 00007f2f2c7e6090 RCX: 00007f2f2c58f749 [ 286.678296][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 286.707292][ T29] RBP: 00007f2f2c7e6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.716984][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.738625][ T29] R13: 00007f2f2c7e6128 R14: 00007f2f2c7e6090 R15: 00007fff1ccc1a48 [ 286.753363][ T29] [ 286.756768][ T29] [ 286.756768][ T29] Showing all locks held in the system: [ 286.768947][ T29] 1 lock held by khungtaskd/29: [ 286.778453][ T29] #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 286.792369][ T29] 2 locks held by getty/5533: [ 286.798131][ T29] #0: ffff88802cdae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 286.811656][ T29] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 286.824837][ T29] 2 locks held by kworker/1:3/5767: [ 286.830608][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 286.848001][ T29] #1: ffffc9000451fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 286.871056][ T29] 1 lock held by udevd/5866: [ 286.877007][ T29] #0: ffff888141f2e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 286.893779][ T29] 1 lock held by udevd/5870: [ 286.899667][ T29] #0: ffff88802186a4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 286.917292][ T29] 1 lock held by syz.2.136/6267: [ 286.922302][ T29] #0: ffff888141f2e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 286.969700][ T29] 1 lock held by syz.2.136/6271: [ 286.983952][ T29] #0: ffff888141f2e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1af/0x330 [ 287.014077][ T29] 1 lock held by syz.4.647/7807: [ 287.023997][ T29] #0: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 287.044093][ T29] 1 lock held by syz.3.674/7906: [ 287.049463][ T29] [ 287.051930][ T29] ============================================= [ 287.051930][ T29] [ 287.074797][ T29] NMI backtrace for cpu 1 [ 287.079207][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 287.086497][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.096650][ T29] Call Trace: [ 287.099936][ T29] [ 287.102871][ T29] dump_stack_lvl+0x16c/0x230 [ 287.107579][ T29] ? show_regs_print_info+0x20/0x20 [ 287.112817][ T29] ? load_image+0x3b0/0x3b0 [ 287.117343][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 287.122289][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 287.128455][ T29] ? _printk+0xd0/0x110 [ 287.132631][ T29] ? load_image+0x3b0/0x3b0 [ 287.137160][ T29] ? load_image+0x3b0/0x3b0 [ 287.141683][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 287.147772][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 287.153784][ T29] watchdog+0xf41/0xf80 [ 287.158121][ T29] ? watchdog+0x1e1/0xf80 [ 287.162492][ T29] kthread+0x2fa/0x390 [ 287.166571][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.171610][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.176240][ T29] ret_from_fork+0x48/0x80 [ 287.180673][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.185276][ T29] ret_from_fork_asm+0x11/0x20 [ 287.190066][ T29] [ 287.193203][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.199759][ T29] Sending NMI from CPU 1 to CPUs 0: [ 287.205332][ C0] NMI backtrace for cpu 0 [ 287.205342][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 287.205358][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.205367][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 287.205393][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 bb 40 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 287.205406][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 287.205421][ C0] RAX: c58c72b4f943fd00 RBX: ffffffff8161881b RCX: c58c72b4f943fd00 [ 287.205433][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 287.205445][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 287.205457][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a2128 [ 287.205469][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688 [ 287.205479][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 287.205492][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.205503][ C0] CR2: 00002000001ed000 CR3: 000000002f2e5000 CR4: 00000000003506f0 [ 287.205518][ C0] Call Trace: [ 287.205523][ C0] [ 287.205528][ C0] default_idle+0x13/0x20 [ 287.205549][ C0] default_idle_call+0x6c/0xa0 [ 287.205571][ C0] do_idle+0x1eb/0x510 [ 287.205591][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 287.205611][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 287.205632][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 287.205656][ C0] ? do_idle+0x4ef/0x510 [ 287.205675][ C0] cpu_startup_entry+0x43/0x60 [ 287.205694][ C0] rest_init+0x2e2/0x300 [ 287.205715][ C0] ? time_init+0x40/0x40 [ 287.205730][ C0] arch_call_rest_init+0xe/0x10 [ 287.205749][ C0] start_kernel+0x459/0x4e0 [ 287.205768][ C0] x86_64_start_reservations+0x2a/0x30 [ 287.205796][ C0] x86_64_start_kernel+0x60/0x60 [ 287.205821][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 287.205852][ C0] [ 287.522332][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 287.529258][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 287.536513][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.546580][ T29] Call Trace: [ 287.549901][ T29] [ 287.552852][ T29] dump_stack_lvl+0x16c/0x230 [ 287.557573][ T29] ? show_regs_print_info+0x20/0x20 [ 287.562833][ T29] ? load_image+0x3b0/0x3b0 [ 287.567390][ T29] panic+0x2c0/0x710 [ 287.571336][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 287.577019][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 287.581556][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 287.587152][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 287.593361][ T29] watchdog+0xf80/0xf80 [ 287.597564][ T29] ? watchdog+0x1e1/0xf80 [ 287.601938][ T29] kthread+0x2fa/0x390 [ 287.606041][ T29] ? hungtask_pm_notify+0x90/0x90 [ 287.611179][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.615791][ T29] ret_from_fork+0x48/0x80 [ 287.620237][ T29] ? kthread_blkcg+0xd0/0xd0 [ 287.624850][ T29] ret_from_fork_asm+0x11/0x20 [ 287.629661][ T29] [ 287.633257][ T29] Kernel Offset: disabled [ 287.637603][ T29] Rebooting in 86400 seconds..