last executing test programs: 38.302877023s ago: executing program 1 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103f5ffffffffffffff0100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 37.946224427s ago: executing program 1 (id=189): r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x12, @remote}, 0x10, 0x0}, 0xffffffff}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x97ff, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}}], 0x2, 0x0) 37.626147912s ago: executing program 1 (id=191): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x6, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x2000000, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10001, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x202, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x2, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x86, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 37.213914785s ago: executing program 1 (id=192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700050008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000024001780040006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 33.756835518s ago: executing program 1 (id=199): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902180101040000030904"], 0x0) syz_usb_connect(0x5, 0x51, &(0x7f00000000c0)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63000000000009050300000000000009050cf2000002060209050f0000004000000905", @ANYBLOB="cb"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x8001, r3}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0) 33.545300421s ago: executing program 0 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000140)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0xffff1000, 0x2}}, "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", "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"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000021c0)={'\x00', 0xfffc, 0x2, 0x2, 0x0, 0x7, 0xd000, 0x80a0000, '\x00', 0x9}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbdabbbbbbbbaaaaaaaaaaaa08060001080006040001"], 0x2e) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) accept4(r3, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500032400000000080001400000000108000240000000170900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 33.075807522s ago: executing program 2 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) (async) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0xfffffffa, @loopback, 0x10000}, {0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1, {[0xe79, 0xb, 0x47e7, 0x9, 0x51, 0xf, 0x6, 0xa]}}, 0x5c) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) (async) recvmsg$kcm(r2, &(0x7f0000000700)={0x0, 0xfffffffffffffe60, &(0x7f0000000580), 0xb1}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="017c576d7000fcfffffff1b1b301fa6d2cf4", @ANYRES32=r4, @ANYBLOB="18001d801400008006000500e00000000500070054000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="017c576d7000fcfffffff1b1b301fa6d2cf4", @ANYRES32=r4, @ANYBLOB="18001d801400008006000500e00000000500070054000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) 32.949734012s ago: executing program 0 (id=207): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x11, 0x800000003, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000006000006040000000000f93132", 0x39}], 0x1) 32.791937019s ago: executing program 2 (id=208): syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000001100)={0xdf, 0x0, 0x10000}) (async) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0) (async) r2 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x1b9880, 0x118) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) (async, rerun: 32) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r3) ptrace$setopts(0x4201, r3, 0x6, 0x100020) (async, rerun: 64) syz_open_procfs(r3, &(0x7f0000000140)='net/arp\x00') (async, rerun: 64) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x29, r5}) (async) socket(0xf, 0x3, 0xffffffff) (async) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x0, &(0x7f0000000000)=0xfffffffe, 0x4) (async, rerun: 32) ioctl(r7, 0x8916, &(0x7f0000000000)) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) (async) ioctl(r7, 0x8936, &(0x7f0000000000)) (async, rerun: 64) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async, rerun: 64) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r9, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000240)={0x7, 0x80, 0x9}) 32.775384742s ago: executing program 3 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000000000000000300"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 32.622309976s ago: executing program 0 (id=210): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900032473797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 32.556315043s ago: executing program 3 (id=211): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x2000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000001108116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 32.521096642s ago: executing program 0 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000b003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) 32.206270233s ago: executing program 3 (id=213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000c00000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x1000000, 0x0, 0x24004821}, 0x0) 32.20572806s ago: executing program 0 (id=214): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001740)=[{0xf, 0x0, 0x6}], 0x1, 0x0, 0x0, 0x1) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0x96c}, 0x2e, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x19) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0040480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x80, 0x0, 0x0) 32.197931188s ago: executing program 2 (id=215): socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x7c) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000b00000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 31.945055586s ago: executing program 2 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300240000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 31.890128296s ago: executing program 0 (id=217): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, &(0x7f00000021c0), 0x0, 0x1c3}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}, {}, {}, {0x3}, {}, {}, {0xfffffffe}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) r5 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0xffffffff80000001, 0x0, 0x4, r5, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x3000, 0x8, r4, 0x4}) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec010203010902240001000000000904"], 0x0) write(r1, &(0x7f0000000440)="e223fbc7496643d762f652212f1187c10a81da916343f8700e14e0b61215704cab9b3a901530a14465eb0c13b2c193db2c220a7595ce5de59d1880c7f14e4b2fd58a124e4116fb04013693cc2fb2ba4e7807c155d6db7b0553ae6e597c51256b02816728307cca2a3661528842426a29577626e76e28cb486a6fc595ffb772393f704990de5743b1f15b9a04cf2a238c553617b1c6f07b1a8eff849069ca33f96c90540cfea06ac4e94695dd59a0c771e68ebb965c371b4973427160e082363cf195f366f431d2911712d9c74023ecc8cbffbe1f86ffe5e3ce0466f3b7c18f5b6610899d330b61c383e1a46062259e3a2de1787810ff9a5c10e47e0f3a2029e68a7e383b7b36dcbb6190d8b50c0fd40bd6034f61c8815475101aa59a77fb13e7c6a8d22390f7fa9c41b6acbe5e3b3e2055d78c4ccf0896e54b0190954de75e384fad1dd0e774e7569a8718f26c43e0af40c331da55335f884db6e1c0443cdb6a86537b0917054a397e4ef6cd1e40aba5e51ca20aa2834eab4c0d2713865b61ac66e781cf4ac062fe93447ba3c4c5bf1937c544cc9b9d4669839dd1414f307f48c2cc0c8e2c16f7c3ee95d5b3fb596f68bb8d0e86580245a15366f974c7e79f8aed2f80c3da466b131eff85aa0df9a1d919603a09e6c8ec12d51df682dfcd66029b1f01f284629e95c9bfdb903718ce3b4c2e845e8aa6d52bbf0d70f03a31721accc17d8f72517191ed0ea59cc0e06a7a3a68802262668a3d0ec31fcf44b231d7f547a801bac3f4ffa4005737de4cf890c61249bd2b527540c443107c07e30cbef9ce434cd72b5a0fe8f7865c816a933f0d0e28fc62c345d5ccf7dc2f05b290c3d23c8b7a40990ac17e9fd810d2ccfde6eb61e4de4c1076584e5f0408e28e8d57401facb83a43c8b3965921d9d51a368dce715c169ea7a5ff16140b6df20ff595a34a1485e397a247a0176900f40a7ef74f8421e26aa71b4a725cee520420c471e923b63e02232c7b03a6ef3bb63111f6011416efeca68ed582e49484627f32e14962f119602979dd6d7021c6ac025abb39b3d1c8e2007c2c954d4f455a6b113acba13a82fef46abe7255eac99001a259a88757dac78e9be4d35f6e861ff71c5c0f2ecf745434f7a150e78a5ff2307bfdd7b4672f009fa6c2040bf40ef96ea75ea150b07cc98d15f92168a473a1a61e3aa07147534c72886af36606c07dab501ebd464aa4323e7ea765a5ade93ed9bd66c7219d53fc940e1adb243a500ce5b3c38ebe8475d646acb70ffb1e624321afe22ecd6c7cc1d02913b427ee6ec13352863aec42448a85fe40862e0677b1d3be3558d5246ab84220effe81d8ae3cd074054acb8e39e8b4e19a99682a0d92afc6a98e8c2d58c250ce79892aba769717dd77dd82e361af4ea42219fe87594a21996aa78d2f8db6a793fd7a3eb271f62c4a1d884542fddedac46ac26a014b9ec9d3cdc8da2792854496be256bcab1b02f8b9088294b312132a1bae359097c7fc1d035bc4937b63c4046cdbe466a692c5833161cd8a6eb919f357082df9c2c26c7aaf48c25af3a229eb8d5069158dea414c0ebfb1e01baa5bd0376789803c7a1e7258b873d68ac0abc7c8c6a8574f19c70b1b3ae6f235817f094b31b325c199c04767ad5d87cb0c74b8770fa1f77264650e0a9b1711a44a81be0110b3a8370d95572609463e8a407d05acb38635e0c2941969171e3506503c3049f8fd792aa7a39b760672fa9da4a5e0d30f99e700d9b1f0707c93a45679c8b0464d2ab048f90cda5ace83a988209554eba36256c79683fb73cb4bb13122559ef3414e43fa67c75239aa1aa28aca5fa2536c7b0bc056b633bbdf07e192ab6b2c0996415a780e3c2268ca59f1837d7af07249e78de6bfcb2a21998ad6298dfb61db43de00c166b86146cc9eea189ec0ecbcabdd225f79737027695c7a8ad2f8d5d2b2bf05be9df476d697253f8c94940a2d7d5e71e22bebd4334b957b2bde0015ecc74f5e46722176d8867159e23f8beb398be0f405588436317ca8554453ddd45a8d99e9318cc658b801bf9c466b63185d37811fb011b297430a6de071be38578c070e54c9ce5e7a85db20f374cfa12dde0c3ca279e902efd461eeba57f21f7151c2b1700b42e4b0235d435b70638c59eb88cc119c6c2e353e0982a7e23070796d4e93d9c1e4c27750f12d925cb554548edb5ed937b77f17a6e6530e410608794be9ef1be4eb5320dc94a1dd7dc7b842b49c31e8b3e98c039030f8900c8867cd1212325d1288d951c4aa7c73b193f73b398f3ef520343b6a49cb20ceb7f63b0798d35bf1dc4c06b05cb50bd592df1c54b8397f5a20c186bd7f592be851afbeafa8631de649ee48ff3007df00deefd27ce1d13de5e11c0562e8a610e0130c22d2e35785b3b671d3237f03c79c077e4f5b34b3a327d382d8d50879e1cb36924baa7fe6c7bd99ce940b4fb6d0f8b12d85f11e245e4d7e90c979b56cdd6684e3d8ec5f81320e4c3a306a8d21e9b9b6ccba868103ca33e47050ef4b4a7ee795f2218d7a9f30f32f21b3543e84481cf85f362d2ce384749c660e3b8e7f3623e298e5ae4d8c447970eb52e51e29d0f0a2e6e6eb78e5c0fff596dbc39d604908573677fe9fef5c8ae1c0c3e6d223da70b091ed43608468f9f3a6844d2d105bada60722ea7c87d3296ce7866514547dab8907a88e7413ef1c48927fc29f54969e710dfb15eb0983f7685ce3ef87c94aaf65cc9030f98fe0f4a605186a98caee088eda51bdb0bfe20f5ca98d4c3f8780297ed3f8ef8ec079e52d29f20a8cdb7e427ef044121df3c951b5c7f9af6c3da97e5fdaac6927ce68b9e985a2d756d531fcc6b13362c85d8294cf9007a20036b6bf9600df026840854766c07061d725872e0d84a105141afcfbc0aac908e0fad6c553090a8ec4fbbef114d1c9065e9c64c9cb30b6b2243b384e42fae08416bf72bae383b6c3aa8a3ece6283cb27470ce428f2c25838ae3a65dc42da470f20d0bbb97bd38053875bf0f8e70005f1f054dbcca1311b4a91f45e3aeec61dd54e4aa2b862fa5bb1c5cb510ad0dc0f3d5b6762beb19170f478633fd407abb34c57313214563940afb22ce247d0f460742070695737cd89b2433becf37d7f56dd05053e9fac86058b3cefb502338813c7175046382fb9eb81c2dab2562123da4ebf98a111219b450c4b8d4dfa134c7579088815fb1e1e8a44cc35b4a2983274e2df35e600ec993e2543f63373b0c4f2e0482126d9cbc8d3b269fdf43bb939f3ff65aec18e9c4cefe5c8b742c08e997fd172d2c61d579eb38a659cb948bfa8ed18cd2f9515e75131c4e68288a6ef0c64a5f0e415f7aecc601654dc887af892ee485920b6aaf5ad58d93c687e4a5c93c992499fc851bb9d60faf2c85f202aaa5434863871c42be75e483e1678faa0ecf19c44746e85515898a94e1a44d1e623c12d573c681595987cf9da3953256ad37f40bc9039994ade27d09f1ea7d408a4db4297fae119f91510fa36bc35e0aa01cc83fd60a2e496cf707203100911f9c9fd282b850bcf4fd8486fa5b1e70ae8a0e669a35627121f1cb13005df74b656f73bfd4253378bc7ae4f73d4ad2a6ab7a0ad0dadbd3e74db4e56eee525f5801d3e012267c84a95bdb4b85272d3d31155ab4470cae3e1408ee06f0dd99218f8887848dc0f2c4125e7f3f7db48de46a2ce627033edff2c5bd72ac3fa2269274846e6be74dcb7a3bbf87dced856da23ef4b7904c57de05ec43fa6b26cf439643ef5259caa8d10552b5ac61c25f6b1b96401e3a0b2d0eaf23d04d2a982737664bbe58171185bc73f5209182c43337cd8b755b15b082a3b655ad7fdd11b34401595ffb1d2a0216849a56ccb31bf3c90079ed40ea6db9773c7924b046fa2fe94f714b6b7d70ace902915def281464d542ae9fe08f7489f8e43cd50c0ccb0c2d585eea69bfd4daad56a8d5b5fcc735cf81755aab77b5c6dabaa6f59516092afc1a0a7da1e8da202ec5ceb0ae0c993de9a38390830f52882be007a5f99468b2d3539f4453fe9f4096bf502dbc3ecba9b278c2c350df1416425275f346248b4110d70eed543455f79d40018f5054007f055ecd80d49d6f695f3816f84dc2028c64b15dd293f687a644f6efb012f9c8b1436f9e2d874f71f8d533dbcba0e4081b2a00a791ceefc6dd26600e99e36a790050c2d43c85a3761fc61bede1e792e812fbbf7d14a43f9a438e0e65b0820d71d83a28a6229b9542c3ff9ca0542ddc634778bb0223938432d041947e379a95c9db9678f9801b8542b8f2d157a6e779bcf509236111dbf265e74f793e955ddcaa6fa15faf0c215dca9dde47eb56b73305b81f4cc2ffa85fa13575ec593846a4ba75ed5a24aa9a6927b12b5c0e3aa7b62dca3e7bc21f2f55920bd9e8d5052a808ec3d143012953ba98d5a308e042f9cf3e28a1fddd323710b33949ba0ef0d83e61d613b68389f7240e31ca848db574bf4352df5e60a061e6c4ecee0993f144d3ea30c996c7b786db0335e558ffddb702d762d3d3f826b1150f64bce7925b0b1e999500952d8db9d22ea6d0ec1e8045230c9f92c44642a76cf0419902db74bdd41756b43ab335a4f09779497a51601ca9dcb46f7d18f87c663e14c951514cb5ef3bce630ffb215d9eb141806564cc6132bc0141e23752972c0afe2be7f2e828acadf3c39498bc268c75099da526bd736e8fee71fbbfab2a4b60e122799eb809d327ceb9993a02ea15191871ee100a7e40d4a4c45fa690280a1511b3bcbafe63bb1a030dec1ba2afa4df8aef15bee211f58cbc1c2f2d6ae92795462c4cdd953ec0050eaa175889a9ecd68ef4efb0a407e2695ef11e342471d2453df699343cc20dfd2df662efe3b0b36fefcdf5af8d85ac86bd8369da1ab6261b99f43686bb1c82ab89da95974805c62b52b631dbd880975fa96d0e8281c20ec9cbe6d27b6ed545a212fe5f451ae016d5507aaffa2937c0617c07120c472b2b96db6f392b6359e55b20240dab9f47ee5e1347a51cf230bd0b66ce0aa1c911247cd8a18efe4836da330dc3161ebcf50d4bd11919c9d97b10bea8b341a93cfcc1d004170355a9cbe547c917171e5b406c0f5f7dc2cdcb946c1b9f89bcbccd871ce65aacf026ab9f481c6a1cbddfc1156ac307e20b62a2781fb124266efef695158b2e032eab1bbebb652e1bcc3c4fc8b3c5738d17a295c94479255a6c1701e94b214b7a4e28f648c15757b915c9ce8e9984709905d3dcf2efd73ba8b8811e3943bf48d7a3fad90d1470580184932dd54ffbbfa2d4787f8b5bab4d87b8c8ce58b9ff740dc422b417e26d7360f0977aa6d03f94507387ef2e189881705e00a601a403c35a0da13efc22f12a12cec993222e617c346f17e26530472ef31c345cb457521bfbd9012710ca530bfcfb985a9c40ca4dc5c00e436b437ac6d10a59c528e64fe5d3f58d86ae926673e366764e2d933a1a7e68647252a79ab6472f109bc27e80d9b0ce0f83bbd03a7eaf84de1a6c395d66bf11bc87de5c495e4d541076ed2069efefd5f48b4e251375b9be2b25830a1e28d32aec1e8a4ea9d72adb77669b2895e7ed2ccfac68f01232be946f01160363933a8b59a6361d651bb65fa6f1d9a3aa382d530337970df2e528c35b30c218cdaf5d95850ccf9ad08d872fef7c546b95270c7f6ab74090695564df4272ba2f47f464bd69299680405f929515094deb0d362d85b049fd2b468ee45f41b15a7194d0b9099b26eb83df7494ece980ba3ec855b2ba2a336511ba22c48a643a22dfaa084c", 0x1000) 31.789627194s ago: executing program 3 (id=218): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000054c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000280)="81b3", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x20, &(0x7f00000022c0)=[{&(0x7f0000000ac0)="83", 0x1}], 0x1}}], 0x3, 0x4000001) 31.683698638s ago: executing program 2 (id=219): r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x12, @remote}, 0x10, 0x0}, 0xffffffff}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0xff97, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000007000000860c"], 0x20}}], 0x2, 0x0) 31.510201645s ago: executing program 2 (id=220): syz_io_uring_setup(0x3, &(0x7f0000000180)={0x0, 0x289b, 0x10006, 0x1, 0x31f}, &(0x7f0000000000), &(0x7f00000000c0)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000580)={'batadv0\x00', &(0x7f00000005c0)=@ethtool_wolinfo={0x6, 0x1ff, 0xad, "67d077aeb8b9"}}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000140)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) listen(0xffffffffffffffff, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000240)=0x85, 0x4) 31.441064795s ago: executing program 1 (id=221): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x6, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x5000000, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10001, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0x8, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x202, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x2, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x86, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 31.2095837s ago: executing program 3 (id=222): r0 = socket$inet(0x2, 0x3, 0x9) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f00000000c0)={0x2, 0x12, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @private}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000002000007000000860c000000030105"], 0x20}}], 0x2, 0x0) 30.91838463s ago: executing program 3 (id=223): syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) (async) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) socket$inet(0x2, 0x801, 0x0) (async) r2 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r3, 0x0, 0x7ffff000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0x200) connect$nfc_raw(r0, &(0x7f0000000040)={0x27, r1, 0x0, 0x5}, 0x10) 0s ago: executing program 32 (id=217): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000011d000/0x2000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x7, &(0x7f00000021c0), 0x0, 0x1c3}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}, {}, {}, {0x3}, {}, {}, {0xfffffffe}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x80000) r5 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0xffffffff80000001, 0x0, 0x4, r5, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x5000, 0x3000, 0x8, r4, 0x4}) syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec010203010902240001000000000904"], 0x0) write(r1, &(0x7f0000000440)="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", 0x1000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. [ 82.718908][ T5850] cgroup: Unknown subsys name 'net' [ 82.855960][ T5850] cgroup: Unknown subsys name 'cpuset' [ 82.865488][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.498603][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.395124][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.412662][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.420609][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.429416][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.437239][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.556607][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.572457][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.580520][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.589710][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.598211][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.625153][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.654499][ T5181] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.663165][ T5181] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.671040][ T5181] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.694041][ T5181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.702119][ T5181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.727659][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.742639][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.758429][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.771075][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.082856][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 89.251245][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 89.377045][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.385351][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.394164][ T5859] bridge_slave_0: entered allmulticast mode [ 89.402396][ T5859] bridge_slave_0: entered promiscuous mode [ 89.411213][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 89.439940][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.448584][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.455933][ T5859] bridge_slave_1: entered allmulticast mode [ 89.463261][ T5859] bridge_slave_1: entered promiscuous mode [ 89.522330][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 89.576025][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.583356][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.590542][ T5864] bridge_slave_0: entered allmulticast mode [ 89.598607][ T5864] bridge_slave_0: entered promiscuous mode [ 89.608941][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.622762][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.664927][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.672281][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.679462][ T5864] bridge_slave_1: entered allmulticast mode [ 89.688267][ T5864] bridge_slave_1: entered promiscuous mode [ 89.754883][ T5859] team0: Port device team_slave_0 added [ 89.764542][ T5859] team0: Port device team_slave_1 added [ 89.819811][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.827128][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.834881][ T5867] bridge_slave_0: entered allmulticast mode [ 89.843105][ T5867] bridge_slave_0: entered promiscuous mode [ 89.853631][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.881234][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.889040][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.896589][ T5867] bridge_slave_1: entered allmulticast mode [ 89.904231][ T5867] bridge_slave_1: entered promiscuous mode [ 89.913102][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.947875][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.955132][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.981820][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.036623][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.044357][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.070765][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.095629][ T5864] team0: Port device team_slave_0 added [ 90.104626][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.113954][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.121151][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.129088][ T5869] bridge_slave_0: entered allmulticast mode [ 90.137605][ T5869] bridge_slave_0: entered promiscuous mode [ 90.152714][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.159872][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.167649][ T5869] bridge_slave_1: entered allmulticast mode [ 90.175067][ T5869] bridge_slave_1: entered promiscuous mode [ 90.183316][ T5864] team0: Port device team_slave_1 added [ 90.191478][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.231027][ T5867] team0: Port device team_slave_0 added [ 90.275295][ T5867] team0: Port device team_slave_1 added [ 90.343744][ T5859] hsr_slave_0: entered promiscuous mode [ 90.350322][ T5859] hsr_slave_1: entered promiscuous mode [ 90.360274][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.370873][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.378134][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.404598][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.429731][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.436967][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.463041][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.476416][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.486762][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.493958][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.520304][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.532538][ T5862] Bluetooth: hci0: command tx timeout [ 90.547393][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.554460][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.580491][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.642084][ T5869] team0: Port device team_slave_0 added [ 90.687906][ T5869] team0: Port device team_slave_1 added [ 90.702229][ T5862] Bluetooth: hci1: command tx timeout [ 90.716033][ T5864] hsr_slave_0: entered promiscuous mode [ 90.723668][ T5864] hsr_slave_1: entered promiscuous mode [ 90.729886][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 90.736438][ T5864] Cannot create hsr debugfs directory [ 90.771872][ T5862] Bluetooth: hci2: command tx timeout [ 90.803295][ T5867] hsr_slave_0: entered promiscuous mode [ 90.809911][ T5867] hsr_slave_1: entered promiscuous mode [ 90.816273][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 90.822073][ T5867] Cannot create hsr debugfs directory [ 90.852592][ T5862] Bluetooth: hci3: command tx timeout [ 90.879623][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.886711][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.912735][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.925125][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.932227][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.958493][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.121054][ T5869] hsr_slave_0: entered promiscuous mode [ 91.127639][ T5869] hsr_slave_1: entered promiscuous mode [ 91.134192][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 91.139951][ T5869] Cannot create hsr debugfs directory [ 91.367892][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.399220][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.431857][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.461347][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.543854][ T5864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.563481][ T5864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.577026][ T5864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.597235][ T5864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.662680][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.685515][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.717013][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.733321][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.816552][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.827773][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.852588][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.864520][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.939617][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.984311][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.995532][ T938] cfg80211: failed to load regulatory.db [ 92.038481][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.066225][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.073531][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.089591][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.100566][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.107763][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.158426][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.165619][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.193730][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.200851][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.233165][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.269488][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.287823][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.320346][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.338349][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.345708][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.389251][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.396499][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.414040][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.421232][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.459618][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.466819][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.510858][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.614520][ T5862] Bluetooth: hci0: command tx timeout [ 92.658405][ T5869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.698408][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.776244][ T5862] Bluetooth: hci1: command tx timeout [ 92.827890][ T5859] veth0_vlan: entered promiscuous mode [ 92.856632][ T5862] Bluetooth: hci2: command tx timeout [ 92.882491][ T5859] veth1_vlan: entered promiscuous mode [ 92.935156][ T5862] Bluetooth: hci3: command tx timeout [ 92.984492][ T5859] veth0_macvtap: entered promiscuous mode [ 92.998726][ T5859] veth1_macvtap: entered promiscuous mode [ 93.044241][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.059990][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.087388][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.111312][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.128452][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.166780][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177030][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.188662][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.211344][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.277279][ T5867] veth0_vlan: entered promiscuous mode [ 93.285108][ T5864] veth0_vlan: entered promiscuous mode [ 93.307829][ T5867] veth1_vlan: entered promiscuous mode [ 93.330421][ T5864] veth1_vlan: entered promiscuous mode [ 93.375220][ T5869] veth0_vlan: entered promiscuous mode [ 93.405825][ T5869] veth1_vlan: entered promiscuous mode [ 93.435579][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.454276][ T5867] veth0_macvtap: entered promiscuous mode [ 93.460679][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.504247][ T5869] veth0_macvtap: entered promiscuous mode [ 93.511575][ T5867] veth1_macvtap: entered promiscuous mode [ 93.538485][ T5869] veth1_macvtap: entered promiscuous mode [ 93.567094][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.578374][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.588305][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.602893][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.626000][ T5864] veth0_macvtap: entered promiscuous mode [ 93.638393][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.659663][ T5864] veth1_macvtap: entered promiscuous mode [ 93.686271][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.694998][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.716636][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.747834][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.784268][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.798137][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.835426][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860141][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869494][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.880240][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.890936][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.905088][ T5949] 9pnet_fd: p9_fd_create_tcp (5949): problem binding to privport [ 93.925198][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.977994][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.005759][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.016845][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.027521][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055783][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.083160][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.129515][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.153352][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.191938][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.215393][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.316051][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.332838][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.413501][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.428597][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.546955][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.571278][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.692330][ T5862] Bluetooth: hci0: command tx timeout [ 94.852467][ T5862] Bluetooth: hci1: command tx timeout [ 94.893077][ T5955] tmpfs: Bad value for 'size' [ 94.932338][ T5862] Bluetooth: hci2: command tx timeout [ 95.012100][ T5862] Bluetooth: hci3: command tx timeout [ 95.035235][ T5973] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 95.222450][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.393739][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 95.410500][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.442358][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 95.462945][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.497669][ T24] usb 3-1: config 0 descriptor?? [ 95.571529][ T5994] netlink: 168 bytes leftover after parsing attributes in process `syz.3.20'. [ 95.582739][ T5931] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 95.716339][ T5971] netlink: 763 bytes leftover after parsing attributes in process `syz.2.10'. [ 95.746895][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.773977][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 95.788154][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 95.827821][ T5931] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 95.851764][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.870076][ T5931] usb 1-1: Product: syz [ 95.882640][ T5931] usb 1-1: Manufacturer: syz [ 95.887303][ T5931] usb 1-1: SerialNumber: syz [ 95.911307][ T5931] usb 1-1: config 0 descriptor?? [ 95.930041][ T5931] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 95.942523][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.979772][ T24] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 96.125485][ T5931] usb 1-1: USB disconnect, device number 2 [ 96.176646][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.187932][ T44] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.200096][ T44] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.210379][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.220686][ T44] usb 2-1: SerialNumber: syz [ 96.263064][ T5959] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.421811][ T5959] usb 4-1: Using ep0 maxpacket: 32 [ 96.428940][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.447758][ T44] usb 2-1: 0:2 : does not exist [ 96.453520][ T5959] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 96.464077][ T5959] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 96.487986][ T5959] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 96.498979][ T44] usb 2-1: USB disconnect, device number 2 [ 96.507241][ T5959] usb 4-1: config 128 has no interface number 0 [ 96.515188][ T5959] usb 4-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.530549][ T5959] usb 4-1: config 128 interface 127 has no altsetting 0 [ 96.556730][ T5959] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 96.570380][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.579450][ T5959] usb 4-1: Product: syz [ 96.586901][ T5959] usb 4-1: Manufacturer: syz [ 96.591659][ T5959] usb 4-1: SerialNumber: syz [ 96.772051][ T5862] Bluetooth: hci0: command tx timeout [ 96.820056][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.837564][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.879785][ T5959] usb 4-1: USB disconnect, device number 2 [ 96.917476][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.933596][ T5862] Bluetooth: hci1: command tx timeout [ 97.012344][ T5862] Bluetooth: hci2: command tx timeout [ 97.075929][ T6016] input: syz1 as /devices/virtual/input/input5 [ 97.092432][ T5862] Bluetooth: hci3: command tx timeout [ 97.136352][ T6018] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 97.136409][ T6018] netlink: 'syz.0.28': attribute type 3 has an invalid length. [ 97.161164][ T6018] netlink: 224 bytes leftover after parsing attributes in process `syz.0.28'. [ 97.295340][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 97.500642][ T6031] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 97.507366][ T6031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.518761][ T6031] vhci_hcd vhci_hcd.0: Device attached [ 97.640133][ T6038] fuse: Bad value for 'rootmode' [ 97.692096][ T5959] vhci_hcd: vhci_device speed not set [ 97.761804][ T5959] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 97.770231][ T6043] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.020618][ T1211] usb 3-1: USB disconnect, device number 2 [ 98.355684][ T6032] vhci_hcd: connection reset by peer [ 98.356113][ T6062] binder: BINDER_SET_CONTEXT_MGR already set [ 98.380599][ T60] vhci_hcd: stop threads [ 98.394325][ T6062] binder: 6061:6062 ioctl 4018620d 200000004a80 returned -16 [ 98.406403][ T60] vhci_hcd: release socket [ 98.412255][ T60] vhci_hcd: disconnect device [ 98.513808][ T6067] netlink: 'syz.1.47': attribute type 4 has an invalid length. [ 98.606808][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.637992][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.647410][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.655366][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.664846][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.672939][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.680896][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.689207][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.691889][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.700132][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.712997][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 98.736044][ T5865] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.878411][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 98.912255][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 98.951830][ T5931] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 98.971362][ T5931] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 98.984376][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 99.010603][ T5931] usb 1-1: Product: syz [ 99.025919][ T5931] usb 1-1: Manufacturer: syz [ 99.040838][ T5931] usb 1-1: SerialNumber: syz [ 99.160594][ T6087] netlink: 168 bytes leftover after parsing attributes in process `syz.2.56'. [ 99.259386][ T5931] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 99.302708][ T5931] visor 1-1:1.0: probe with driver visor failed with error -71 [ 99.338135][ T5931] usb 1-1: USB disconnect, device number 3 [ 99.544574][ T6105] input: syz1 as /devices/virtual/input/input6 [ 99.742694][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.930138][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.942432][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.954107][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.978825][ T9] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 99.996921][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.007325][ T9] usb 3-1: config 0 descriptor?? [ 100.024447][ T6126] fuse: Bad value for 'rootmode' [ 100.053691][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.221403][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 100.233451][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.248819][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.259927][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.273725][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.307698][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.322474][ T44] usb 2-1: config 0 descriptor?? [ 100.446880][ T9] dragonrise 0003:0079:0011.0003: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.2-1/input0 [ 100.472184][ T5931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.546880][ T44] microsoft 0003:045E:07DA.0004: item fetching failed at offset 11/34 [ 100.592940][ T44] microsoft 0003:045E:07DA.0004: parse failed [ 100.622973][ T44] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 100.637116][ T5903] usb 3-1: USB disconnect, device number 3 [ 100.671848][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 100.679848][ T5931] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 100.689853][ T44] usb 2-1: USB disconnect, device number 3 [ 100.693198][ T5931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 100.753307][ T5931] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.792706][ T5931] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.820640][ T5931] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.836377][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.058084][ T5931] usb 1-1: GET_CAPABILITIES returned 0 [ 101.063817][ T5931] usbtmc 1-1:16.0: can't read capabilities [ 101.231912][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.257048][ T6176] netlink: 'syz.2.81': attribute type 4 has an invalid length. [ 101.393985][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.410204][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.423821][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.434355][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 101.445746][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 101.459812][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.469037][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.477162][ T9] usb 2-1: Product: syz [ 101.481409][ T9] usb 2-1: Manufacturer: syz [ 101.499866][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 101.517784][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 101.535762][ T9] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 101.542214][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 101.924258][ T6195] netlink: 168 bytes leftover after parsing attributes in process `syz.2.90'. [ 101.984447][ T6197] overlayfs: failed to resolve './file1': -2 [ 102.082919][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.146698][ T6204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.241895][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 102.250243][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.261415][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.263912][ T6200] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -71 [ 102.271269][ T44] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 102.287994][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.298431][ T44] usb 4-1: config 0 descriptor?? [ 102.401877][ T1211] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.562146][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 102.569788][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 102.577885][ T1211] usb 3-1: can't read configurations, error -61 [ 102.588740][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 102.601841][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.624250][ T44] usb 4-1: USB disconnect, device number 3 [ 102.649594][ T6209] input: syz1 as /devices/virtual/input/input7 [ 102.712902][ T1211] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.871918][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 102.879543][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 102.887351][ T1211] usb 3-1: can't read configurations, error -61 [ 102.894030][ T1211] usb usb3-port1: attempt power cycle [ 102.921866][ T5959] vhci_hcd: vhci_device speed not set [ 102.984555][ T9] usb 1-1: USB disconnect, device number 4 [ 103.038886][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.98'. [ 103.092980][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.232412][ T1211] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.252656][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 103.260191][ T44] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 103.270122][ T44] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 103.273296][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 103.280325][ T44] usb 4-1: config 0 has no interface number 0 [ 103.287015][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 103.289655][ T44] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.297887][ T1211] usb 3-1: can't read configurations, error -61 [ 103.317059][ T44] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 103.328719][ T44] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 103.341454][ T44] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 103.350772][ T44] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 103.358874][ T44] usb 4-1: Product: syz [ 103.366058][ T44] usb 4-1: config 0 descriptor?? [ 103.373239][ T6213] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 103.378464][ T6225] fuse: Bad value for 'rootmode' [ 103.441847][ T1211] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.463493][ T1211] usb 3-1: Using ep0 maxpacket: 16 [ 103.478831][ T1211] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 103.486523][ T1211] usb 3-1: can't read configurations, error -61 [ 103.496464][ T1211] usb usb3-port1: unable to enumerate USB device [ 103.701813][ T5917] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.853832][ T5917] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 103.862177][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.872479][ T5917] usb 1-1: config 0 has no interface number 0 [ 103.880125][ T5917] usb 1-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 103.894679][ T5917] usb 1-1: config 0 interface 25 has no altsetting 0 [ 103.904022][ T5917] usb 1-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 103.913145][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.921153][ T5917] usb 1-1: Product: syz [ 103.925419][ T5917] usb 1-1: Manufacturer: syz [ 103.930049][ T5917] usb 1-1: SerialNumber: syz [ 103.938356][ T5917] usb 1-1: config 0 descriptor?? [ 103.946896][ T5917] uvcvideo 1-1:0.25: Found Unit with invalid ID 0 [ 103.997757][ T44] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input8 [ 104.003208][ T1211] usb 2-1: USB disconnect, device number 4 [ 104.156400][ T6227] syz.0.103 uses obsolete (PF_INET,SOCK_PACKET) [ 104.461912][ T5917] uvcvideo 1-1:0.25: Found UVC 0.00 device syz (1b3b:2951) [ 104.469211][ T5917] uvcvideo 1-1:0.25: No valid video chain found. [ 104.485632][ T5917] usb 1-1: USB disconnect, device number 5 [ 105.012412][ T5917] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 105.080997][ T6253] netlink: 'syz.0.114': attribute type 4 has an invalid length. [ 105.174688][ T5917] usb 2-1: config 7 has an invalid interface number: 30 but max is 0 [ 105.199532][ T5917] usb 2-1: config 7 has no interface number 0 [ 105.211900][ T5917] usb 2-1: config 7 interface 30 has no altsetting 0 [ 105.230534][ T5917] usb 2-1: string descriptor 0 read error: -22 [ 105.249088][ T5917] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=10.9c [ 105.281864][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.346034][ T5917] usb_ehset_test 2-1:7.30: probe with driver usb_ehset_test failed with error -32 [ 105.396916][ T6265] overlayfs: empty lowerdir [ 105.530274][ T5917] usb 2-1: USB disconnect, device number 5 [ 105.671534][ T6275] netlink: 168 bytes leftover after parsing attributes in process `syz.0.123'. [ 105.768801][ T6279] netlink: 830 bytes leftover after parsing attributes in process `syz.0.124'. [ 105.845993][ T5917] usb 4-1: USB disconnect, device number 4 [ 105.846056][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 106.042834][ T6291] input: syz1 as /devices/virtual/input/input9 [ 106.258674][ T6296] netlink: 28 bytes leftover after parsing attributes in process `syz.2.131'. [ 106.532670][ T5930] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.658300][ T6310] fuse: Bad value for 'rootmode' [ 106.682513][ T5930] usb 2-1: device descriptor read/64, error -71 [ 106.953255][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.104830][ T5930] usb 2-1: device descriptor read/64, error -71 [ 107.210862][ T6335] netlink: 'syz.3.146': attribute type 4 has an invalid length. [ 107.224349][ T5930] usb usb2-port1: attempt power cycle [ 107.576864][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.610788][ T6345] veth1_macvtap: mtu less than device minimum [ 107.621825][ T5930] usb 2-1: device descriptor read/8, error -71 [ 107.740318][ T6351] netlink: 168 bytes leftover after parsing attributes in process `syz.3.153'. [ 107.863410][ T5930] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.893760][ T5930] usb 2-1: device descriptor read/8, error -71 [ 107.920109][ T6360] netlink: 'syz.2.157': attribute type 46 has an invalid length. [ 108.013669][ T5930] usb usb2-port1: unable to enumerate USB device [ 108.040288][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.131525][ T6369] input: syz1 as /devices/virtual/input/input10 [ 108.212586][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 108.233874][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 108.247108][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'. [ 108.252914][ T9] usb 1-1: config 179 has no interface number 0 [ 108.265868][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 108.277483][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 108.294291][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 108.313179][ T9] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.323703][ T9] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 108.339937][ T9] usb 1-1: config 179 interface 65 has no altsetting 0 [ 108.348222][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 108.357610][ T5930] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 108.365257][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.396012][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input11 [ 108.502067][ T5930] usb 4-1: device descriptor read/64, error -71 [ 108.561956][ T44] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 108.607854][ T5917] usb 1-1: USB disconnect, device number 6 [ 108.608451][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 108.715568][ T44] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 253, using maximum allowed: 30 [ 108.726724][ T44] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.742230][ T44] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 108.756067][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.763144][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 108.774034][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.792333][ T44] usb 3-1: config 0 descriptor?? [ 108.837618][ T5930] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 109.019993][ T44] kye 0003:0458:5014.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 109.028427][ T5930] usb 4-1: device descriptor read/64, error -71 [ 109.037037][ T44] hid_parser_main: 34 callbacks suppressed [ 109.037058][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.037105][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.037133][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.037161][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.037188][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.037215][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.037243][ T44] kye 0003:0458:5014.0005: unknown main item tag 0x0 [ 109.053764][ T44] kye 0003:0458:5014.0005: hidraw0: USB HID v0.03 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 109.171873][ T44] kye 0003:0458:5014.0005: tablet-enabling feature report not found [ 109.179927][ T44] kye 0003:0458:5014.0005: tablet enabling failed [ 109.306112][ T44] usb 3-1: USB disconnect, device number 8 [ 109.516032][ T5930] usb usb4-port1: attempt power cycle [ 109.591908][ T6382] warning: `syz.0.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.950173][ T5930] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 110.029794][ T5930] usb 4-1: device descriptor read/8, error -71 [ 110.131763][ T5959] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.281130][ T6396] tmpfs: Bad value for 'mpol' [ 110.306312][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 110.321977][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.364724][ T5959] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 110.365788][ T5930] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 110.401076][ T5959] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.410755][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.452118][ T5959] usb 3-1: Product: syz [ 110.457050][ T5959] usb 3-1: Manufacturer: syz [ 110.470863][ T5959] usb 3-1: SerialNumber: syz [ 110.589430][ T5930] usb 4-1: device descriptor read/8, error -71 [ 110.716124][ T6388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 110.751559][ T5930] usb usb4-port1: unable to enumerate USB device [ 111.096067][ T6411] netlink: 'syz.1.177': attribute type 4 has an invalid length. [ 111.257204][ T6416] ======================================================= [ 111.257204][ T6416] WARNING: The mand mount option has been deprecated and [ 111.257204][ T6416] and is ignored by this kernel. Remove the mand [ 111.257204][ T6416] option from the mount to silence this warning. [ 111.257204][ T6416] ======================================================= [ 111.378427][ T6388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.605630][ T6388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.638219][ T6388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.707862][ T5959] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 111.731506][ T5959] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 111.751622][ T5959] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 111.886109][ T6428] netlink: 168 bytes leftover after parsing attributes in process `syz.1.183'. [ 111.918474][ T5959] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 112.030514][ T5959] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 112.085615][ T5959] usb 3-1: USB disconnect, device number 9 [ 112.113209][ T5959] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 112.991874][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 113.120404][ T6445] netlink: 10 bytes leftover after parsing attributes in process `syz.3.190'. [ 113.170133][ T6447] input: syz1 as /devices/virtual/input/input12 [ 113.181790][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 113.183716][ T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.183746][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.187026][ T44] usb 3-1: config 0 descriptor?? [ 113.490459][ T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 113.532333][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.575950][ T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 113.606419][ T44] usb 3-1: media controller created [ 113.664194][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.491724][ T6455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.510216][ T6455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.621070][ T44] az6027: usb out operation failed. (-71) [ 114.643076][ T44] stb0899_attach: Driver disabled by Kconfig [ 114.649165][ T44] az6027: no front-end attached [ 114.649165][ T44] [ 114.658585][ T44] az6027: usb out operation failed. (-71) [ 114.665268][ T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.677964][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 114.698235][ T44] dvb-usb: schedule remote query interval to 400 msecs. [ 114.711904][ T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.738932][ T44] usb 3-1: USB disconnect, device number 10 [ 114.863314][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.285370][ T6457] process 'syz.2.193' launched './file0' with NULL argv: empty string added [ 115.311102][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.2.193'. [ 115.347640][ T6457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.193'. [ 116.875779][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.192'. [ 117.311943][ T5959] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.497681][ T5959] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 117.543946][ T5959] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 117.575405][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.627980][ T5959] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 117.830804][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.874017][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.916208][ T6488] netlink: 'syz.0.207': attribute type 4 has an invalid length. [ 118.379875][ T6502] xt_l2tp: invalid flags combination: 8 [ 118.697428][ T5959] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 118.741744][ T5959] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 118.773938][ T5959] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 118.814452][ T5959] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 118.878722][ T5959] usb 2-1: USB disconnect, device number 10 [ 119.375127][ T5959] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.445405][ T6524] input: syz1 as /devices/virtual/input/input14 [ 119.571961][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 119.592476][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.592649][ T5903] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.597954][ T5959] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 119.598007][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.598027][ T5959] usb 1-1: Product: syz [ 119.598043][ T5959] usb 1-1: Manufacturer: syz [ 119.598058][ T5959] usb 1-1: SerialNumber: syz [ 119.601893][ T5959] usb 1-1: config 0 descriptor?? [ 119.610084][ T5959] cypress_m8 1-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 119.629961][ T5959] nokiaca42v2 ttyUSB0: required endpoint is missing [ 119.773880][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 119.798057][ T5903] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 119.798111][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.798139][ T5903] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.798165][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.798191][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.799256][ T5903] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 119.799300][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.799328][ T5903] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.799353][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.799379][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.800334][ T5903] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 119.800385][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 119.800414][ T5903] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.800440][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.800467][ T5903] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 119.834598][ T5903] usb 3-1: string descriptor 0 read error: -22 [ 119.834751][ T5903] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.834776][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.852955][ T5959] usb 1-1: USB disconnect, device number 7 [ 119.855280][ T5959] cypress_m8 1-1:0.0: device disconnected [ 119.904877][ T5903] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 124.061725][ C0] sched: DL replenish lagged too much [ 134.291801][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.305806][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.545496][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.559378][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.151459][ T24] usb 3-1: USB disconnect, device number 12 [ 213.370271][ T5181] Bluetooth: hci2: command 0x0406 tx timeout [ 213.370363][ T5181] Bluetooth: hci0: command 0x0406 tx timeout [ 213.370407][ T5181] Bluetooth: hci1: command 0x0406 tx timeout [ 256.311513][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.328149][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.074380][ T31] INFO: task kworker/1:3:5865 blocked for more than 140 seconds. [ 287.074424][ T31] Not tainted syzkaller #0 [ 287.074437][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.074447][ T31] task:kworker/1:3 state:D stack:24200 pid:5865 tgid:5865 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 287.074515][ T31] Workqueue: events reg_todo [ 287.074566][ T31] Call Trace: [ 287.074575][ T31] [ 287.074590][ T31] __schedule+0x1798/0x4cc0 [ 287.074629][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.074663][ T31] ? __pfx___schedule+0x10/0x10 [ 287.074701][ T31] ? schedule+0x91/0x360 [ 287.074727][ T31] schedule+0x165/0x360 [ 287.074751][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.074773][ T31] __mutex_lock+0x7e6/0x1350 [ 287.074803][ T31] ? __mutex_lock+0x5bb/0x1350 [ 287.074833][ T31] ? reg_process_self_managed_hints+0xaf/0x1c0 [ 287.074865][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.074890][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.074924][ T31] ? __local_bh_enable_ip+0x13e/0x1c0 [ 287.074951][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.074983][ T31] reg_process_self_managed_hints+0xaf/0x1c0 [ 287.075014][ T31] reg_todo+0x78d/0x890 [ 287.075043][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.075063][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.075088][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.075116][ T31] process_scheduled_works+0xae1/0x17b0 [ 287.075172][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.075225][ T31] worker_thread+0x8a0/0xda0 [ 287.075279][ T31] kthread+0x711/0x8a0 [ 287.075313][ T31] ? __pfx_worker_thread+0x10/0x10 [ 287.075339][ T31] ? __pfx_kthread+0x10/0x10 [ 287.075372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.075393][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.075414][ T31] ? __pfx_kthread+0x10/0x10 [ 287.075446][ T31] ret_from_fork+0x4bc/0x870 [ 287.075474][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.075507][ T31] ? __switch_to_asm+0x39/0x70 [ 287.075529][ T31] ? __switch_to_asm+0x33/0x70 [ 287.075550][ T31] ? __pfx_kthread+0x10/0x10 [ 287.075582][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.075624][ T31] [ 287.075652][ T31] INFO: task kworker/0:4:5931 blocked for more than 161 seconds. [ 287.075667][ T31] Not tainted syzkaller #0 [ 287.075678][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.075689][ T31] task:kworker/0:4 state:D stack:22776 pid:5931 tgid:5931 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 287.075745][ T31] Workqueue: events console_callback [ 287.075778][ T31] Call Trace: [ 287.075786][ T31] [ 287.075800][ T31] __schedule+0x1798/0x4cc0 [ 287.075835][ T31] ? do_raw_spin_lock+0x121/0x290 [ 287.093373][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 287.093424][ T31] ? __pfx___schedule+0x10/0x10 [ 287.093468][ T31] ? schedule+0x91/0x360 [ 287.093494][ T31] schedule+0x165/0x360 [ 287.093519][ T31] schedule_timeout+0x9a/0x270 [ 287.093551][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 287.093596][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.093617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.093644][ T31] __down_common+0x319/0x6a0 [ 287.093683][ T31] ? __pfx___down_common+0x10/0x10 [ 287.093708][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 287.093744][ T31] down+0x80/0xd0 [ 287.093767][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.093797][ T31] console_lock+0x58/0x90 [ 287.093825][ T31] console_callback+0x69/0x440 [ 287.093858][ T31] ? __pfx_console_callback+0x10/0x10 [ 287.093893][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.093913][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.093939][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.093967][ T31] process_scheduled_works+0xae1/0x17b0 [ 287.094025][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.094072][ T31] worker_thread+0x8a0/0xda0 [ 287.094127][ T31] kthread+0x711/0x8a0 [ 287.094163][ T31] ? __pfx_worker_thread+0x10/0x10 [ 287.094196][ T31] ? __pfx_kthread+0x10/0x10 [ 287.094230][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.094251][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.094273][ T31] ? __pfx_kthread+0x10/0x10 [ 287.094305][ T31] ret_from_fork+0x4bc/0x870 [ 287.094346][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.094379][ T31] ? __switch_to_asm+0x39/0x70 [ 287.094401][ T31] ? __switch_to_asm+0x33/0x70 [ 287.094422][ T31] ? __pfx_kthread+0x10/0x10 [ 287.094451][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.094493][ T31] [ 287.094518][ T31] [ 287.094518][ T31] Showing all locks held in the system: [ 287.094527][ T31] 1 lock held by kthreadd/2: [ 287.094542][ T31] 3 locks held by kworker/u8:0/12: [ 287.094555][ T31] 3 locks held by kworker/u8:1/13: [ 287.094567][ T31] 1 lock held by kworker/R-mm_pe/14: [ 287.094581][ T31] 6 locks held by kworker/1:0/24: [ 287.094593][ T31] 1 lock held by khungtaskd/31: [ 287.094605][ T31] #0: ffffffff8e53d360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 287.094670][ T31] 3 locks held by kworker/u8:2/36: [ 287.094682][ T31] 3 locks held by kworker/u8:3/37: [ 287.094695][ T31] 3 locks held by kworker/1:1/44: [ 287.094707][ T31] #0: ffff88813ff02948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.094767][ T31] #1: ffffc90000b47ba0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.094825][ T31] #2: ffffffff8f959e08 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 287.094888][ T31] 7 locks held by kworker/u9:0/52: [ 287.094901][ T31] #0: ffff88802832e148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.094958][ T31] #1: ffffc90000bd7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.095017][ T31] #2: ffff888032c38dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 287.095070][ T31] #3: ffff888032c380b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 287.095130][ T31] #4: ffffffff8fabe6c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 287.095237][ T31] #5: ffff8880296d4b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 287.095305][ T31] #6: ffffffff8e542df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 287.095370][ T31] 3 locks held by kworker/u8:4/60: [ 287.095388][ T31] 3 locks held by kworker/1:2/938: [ 287.095402][ T31] 3 locks held by kworker/u8:5/1038: [ 287.095416][ T31] 3 locks held by kworker/u8:6/1165: [ 287.095440][ T31] 3 locks held by kworker/R-ipv6_/3200: [ 287.095453][ T31] #0: ffff88802faf0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.095513][ T31] #1: ffffc9000ba97b80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.095582][ T31] #2: ffffffff8f959e08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 287.095638][ T31] 6 locks held by kworker/R-bat_e/3424: [ 287.095653][ T31] 2 locks held by udevd/5231: [ 287.095665][ T31] 1 lock held by dhcpcd/5525: [ 287.095677][ T31] 4 locks held by dhcpcd/5526: [ 287.095689][ T31] 2 locks held by crond/5606: [ 287.095702][ T31] 2 locks held by getty/5625: [ 287.095713][ T31] #0: ffff88814db080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 287.095777][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 287.095837][ T31] 5 locks held by kworker/u9:2/5862: [ 287.095850][ T31] #0: ffff8880270d0148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.095908][ T31] #1: ffffc90003ad7ba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.095967][ T31] #2: ffff888032e98dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 287.096019][ T31] #3: ffff888032e980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 287.096078][ T31] #4: ffffffff8fabe6c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 287.096138][ T31] 5 locks held by syz-executor/5864: [ 287.096151][ T31] 4 locks held by kworker/1:3/5865: [ 287.096163][ T31] #0: ffff88813ff01948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.096254][ T31] #1: ffffc90004037ba0 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.096312][ T31] #2: ffffffff8f959e08 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0x890 [ 287.096372][ T31] #3: ffff8880307b0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xaf/0x1c0 [ 287.096435][ T31] 3 locks held by syz-executor/5869: [ 287.096448][ T31] 5 locks held by kworker/u9:3/5872: [ 287.096460][ T31] #0: ffff8880270d4948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.096519][ T31] #1: ffffc900040afba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.096578][ T31] #2: ffff88802f9fcdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 287.096631][ T31] #3: ffff88802f9fc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 287.096690][ T31] #4: ffffffff8fabe6c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 287.096750][ T31] 5 locks held by kworker/u9:4/5873: [ 287.096766][ T31] 1 lock held by kworker/R-wg-cr/5894: [ 287.096779][ T31] 3 locks held by kworker/1:4/5903: [ 287.096791][ T31] #0: ffff88813ff02948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.096851][ T31] #1: ffffc9000426fba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.096910][ T31] #2: ffffffff8f959e08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 287.096974][ T31] 2 locks held by kworker/0:4/5931: [ 287.096986][ T31] #0: ffff88813ff01948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 287.097044][ T31] #1: ffffc9000449fba0 (console_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 287.097121][ T31] 2 locks held by kworker/0:5/5985: [ 287.097134][ T31] 6 locks held by syz.1.221/6524: [ 287.097147][ T31] 3 locks held by kworker/u8:7/6533: [ 287.097160][ T31] 4 locks held by kworker/u8:8/6534: [ 287.097173][ T31] 3 locks held by syz-executor/6537: [ 287.097193][ T31] [ 287.097200][ T31] ============================================= [ 287.097200][ T31] [ 287.097222][ T31] NMI backtrace for cpu 1 [ 287.097244][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 287.097265][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.097277][ T31] Call Trace: [ 287.097284][ T31] [ 287.097293][ T31] dump_stack_lvl+0x189/0x250 [ 287.097317][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.097337][ T31] ? __pfx__printk+0x10/0x10 [ 287.097378][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 287.097410][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 287.097442][ T31] ? __pfx__printk+0x10/0x10 [ 287.097475][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 287.097499][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 287.097531][ T31] watchdog+0xf60/0xfa0 [ 287.097559][ T31] ? watchdog+0x1e2/0xfa0 [ 287.097586][ T31] kthread+0x711/0x8a0 [ 287.097631][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.097650][ T31] ? __pfx_kthread+0x10/0x10 [ 287.097681][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.097699][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.097718][ T31] ? __pfx_kthread+0x10/0x10 [ 287.097747][ T31] ret_from_fork+0x4bc/0x870 [ 287.097772][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.097802][ T31] ? __switch_to_asm+0x39/0x70 [ 287.097821][ T31] ? __switch_to_asm+0x33/0x70 [ 287.097840][ T31] ? __pfx_kthread+0x10/0x10 [ 287.097869][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.097907][ T31] [ 287.097915][ T31] Sending NMI from CPU 1 to CPUs 0: [ 287.097949][ C0] NMI backtrace for cpu 0 [ 287.097966][ C0] CPU: 0 UID: 0 PID: 3424 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 287.097985][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.097995][ C0] Workqueue: bat_events batadv_tt_purge [ 287.098011][ C0] RIP: 0010:unwind_next_frame+0x348/0x2390 [ 287.098035][ C0] Code: 48 81 fb 44 9a f3 8f 0f 83 48 11 00 00 48 c7 c0 44 9a f3 8f 49 29 c5 48 c7 c6 1c a4 6d 90 49 c1 fd 02 4a 8d 14 6d 00 00 00 00 <4c> 01 ea 48 01 d2 48 01 f2 48 bd 00 00 00 00 00 fc ff df 0f 84 37 [ 287.098049][ C0] RSP: 0018:ffffc90000006d78 EFLAGS: 00000246 [ 287.098062][ C0] RAX: ffffffff905802bc RBX: ffffffff905802c0 RCX: ffffffff905802c4 [ 287.098075][ C0] RDX: 0000000000000000 RSI: ffffffff910440d6 RDI: ffffffff8c050ea0 [ 287.098086][ C0] RBP: ffffffff905802c4 R08: 0000000000000001 R09: ffffffff8173fd25 [ 287.098097][ C0] R10: ffffc90000006e98 R11: ffffffff81ac9640 R12: ffffffff89c7c3ab [ 287.098109][ C0] R13: 0000000000000000 R14: ffffc90000006e48 R15: ffffffff905802c0 [ 287.098120][ C0] FS: 0000000000000000(0000) GS:ffff88812579c000(0000) knlGS:0000000000000000 [ 287.098133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.098144][ C0] CR2: 00007ffff4ed286c CR3: 0000000054816000 CR4: 00000000003526f0 [ 287.098158][ C0] Call Trace: [ 287.098163][ C0] [ 287.098173][ C0] ? unwind_next_frame+0xa5/0x2390 [ 287.098195][ C0] ? nft_do_chain+0x40c/0x1920 [ 287.098221][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.098246][ C0] arch_stack_walk+0x11c/0x150 [ 287.098270][ C0] ? nft_do_chain+0x40c/0x1920 [ 287.098294][ C0] stack_trace_save+0x9c/0xe0 [ 287.098316][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 287.098338][ C0] ? __kasan_save_free_info+0x46/0x50 [ 287.098355][ C0] ? consume_skb+0x9e/0xf0 [ 287.098373][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 287.098397][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 287.098422][ C0] ? __lock_acquire+0xab9/0xd20 [ 287.098446][ C0] kasan_save_track+0x3e/0x80 [ 287.098464][ C0] ? kasan_save_track+0x3e/0x80 [ 287.098481][ C0] ? __kasan_save_free_info+0x46/0x50 [ 287.098496][ C0] ? __kasan_slab_free+0x5c/0x80 [ 287.098514][ C0] ? kmem_cache_free+0x19b/0x690 [ 287.098532][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 287.098555][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 287.098577][ C0] ? nft_do_chain+0x40c/0x1920 [ 287.098622][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 287.098645][ C0] __kasan_save_free_info+0x46/0x50 [ 287.098660][ C0] __kasan_slab_free+0x5c/0x80 [ 287.098680][ C0] kmem_cache_free+0x19b/0x690 [ 287.098703][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 287.098729][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 287.098754][ C0] ? nf_ip_checksum+0x13c/0x510 [ 287.098780][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 287.098807][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 287.098832][ C0] ? queue_work_on+0x115/0x270 [ 287.098857][ C0] nft_do_chain+0x40c/0x1920 [ 287.098879][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 287.098903][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.098921][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 287.098942][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 287.098980][ C0] nft_do_chain_inet+0x25d/0x340 [ 287.099003][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 287.099041][ C0] ? __lock_acquire+0xab9/0xd20 [ 287.099061][ C0] ? NF_HOOK+0x9a/0x3a0 [ 287.099079][ C0] ? NF_HOOK+0x9a/0x3a0 [ 287.099114][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 287.099139][ C0] nf_hook_slow+0xc5/0x220 [ 287.099161][ C0] NF_HOOK+0x206/0x3a0 [ 287.099180][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 287.099199][ C0] ? NF_HOOK+0x9a/0x3a0 [ 287.099216][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 287.099235][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 287.099260][ C0] ip6_input+0x16a/0x270 [ 287.099277][ C0] ? ip6_input+0x23/0x270 [ 287.099297][ C0] NF_HOOK+0x30c/0x3a0 [ 287.099313][ C0] ? skb_orphan+0xaf/0xd0 [ 287.099332][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 287.099349][ C0] ? NF_HOOK+0x9a/0x3a0 [ 287.099366][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 287.099385][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 287.099408][ C0] __netif_receive_skb+0xd3/0x380 [ 287.099427][ C0] ? process_backlog+0x2d5/0x14f0 [ 287.099452][ C0] process_backlog+0x60e/0x14f0 [ 287.099469][ C0] ? __lock_acquire+0xab9/0xd20 [ 287.099494][ C0] ? __pfx_process_backlog+0x10/0x10 [ 287.099517][ C0] __napi_poll+0xc7/0x360 [ 287.099532][ C0] ? net_rx_action+0x46d/0xe30 [ 287.099551][ C0] net_rx_action+0x707/0xe30 [ 287.099569][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.099593][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 287.099629][ C0] handle_softirqs+0x286/0x870 [ 287.099657][ C0] ? do_softirq+0xec/0x180 [ 287.099678][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 287.099700][ C0] ? batadv_tt_purge+0x4d1/0x9e0 [ 287.099716][ C0] do_softirq+0xec/0x180 [ 287.099734][ C0] [ 287.099739][ C0] [ 287.099745][ C0] ? __pfx_do_softirq+0x10/0x10 [ 287.099769][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 287.099787][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 287.099807][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.099827][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 287.099852][ C0] ? batadv_tt_purge+0x4d1/0x9e0 [ 287.099868][ C0] batadv_tt_purge+0x4d1/0x9e0 [ 287.099886][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 287.099907][ C0] process_scheduled_works+0xae1/0x17b0 [ 287.099941][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.099966][ C0] ? assign_work+0x381/0x410 [ 287.099987][ C0] rescuer_thread+0x53c/0xdd0 [ 287.100011][ C0] ? rescuer_thread+0xbb/0xdd0 [ 287.100042][ C0] kthread+0x711/0x8a0 [ 287.100067][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 287.100088][ C0] ? __pfx_kthread+0x10/0x10 [ 287.100113][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.100128][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.100144][ C0] ? __pfx_kthread+0x10/0x10 [ 287.100168][ C0] ret_from_fork+0x4bc/0x870 [ 287.100200][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 287.100222][ C0] ? __switch_to_asm+0x39/0x70 [ 287.100238][ C0] ? __switch_to_asm+0x33/0x70 [ 287.100254][ C0] ? __pfx_kthread+0x10/0x10 [ 287.100277][ C0] ret_from_fork_asm+0x1a/0x30 [ 287.100303][ C0] [ 287.100947][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 287.100962][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 287.100985][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.100996][ T31] Call Trace: [ 287.101004][ T31] [ 287.101013][ T31] dump_stack_lvl+0x99/0x250 [ 287.101033][ T31] ? __asan_memcpy+0x40/0x70 [ 287.101056][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.101074][ T31] ? __pfx__printk+0x10/0x10 [ 287.101116][ T31] vpanic+0x237/0x6d0 [ 287.101140][ T31] ? __pfx_vpanic+0x10/0x10 [ 287.101174][ T31] panic+0xb9/0xc0 [ 287.101205][ T31] ? __pfx_panic+0x10/0x10 [ 287.101232][ T31] ? irq_work_queue+0xc3/0x140 [ 287.101257][ T31] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 287.101288][ T31] watchdog+0xf9f/0xfa0 [ 287.101315][ T31] ? watchdog+0x1e2/0xfa0 [ 287.101343][ T31] kthread+0x711/0x8a0 [ 287.101375][ T31] ? __pfx_watchdog+0x10/0x10 [ 287.101395][ T31] ? __pfx_kthread+0x10/0x10 [ 287.101426][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.101446][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.101465][ T31] ? __pfx_kthread+0x10/0x10 [ 287.101496][ T31] ret_from_fork+0x4bc/0x870 [ 287.101522][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.101572][ T31] ? __switch_to_asm+0x39/0x70 [ 287.101593][ T31] ? __switch_to_asm+0x33/0x70 [ 287.101620][ T31] ? __pfx_kthread+0x10/0x10 [ 287.101649][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.101690][ T31] [ 287.102036][ T31] Kernel Offset: disabled