last executing test programs: 6.537401857s ago: executing program 0 (id=193): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0x2) fcntl$addseals(r1, 0x409, 0x8) 6.230009385s ago: executing program 0 (id=199): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x0, "d30f38d1a15892def51090dedbf3cd662e4ba38c52647612d91de4353d68bcfa"}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) 6.006906067s ago: executing program 0 (id=205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, &(0x7f0000000000)={0x3, 0xffffffff, 0x0, 0x0, 0x2}) 3.553736303s ago: executing program 2 (id=220): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010002000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c0099005e5a00003100000008003e00c8"], 0x38}}, 0x0) 3.496423544s ago: executing program 2 (id=221): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 3.451538969s ago: executing program 2 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3d, 0x4, 0x0, 0x0, 0xf4, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x2, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x181cd3cd, 0x696d]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3a}}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x43, 0x0, [{0x0, 0x8, "7f9ba4696412"}, {0x0, 0x7, "a8e578de1c"}, {0x1, 0x4, "d4cf"}, {0x5, 0x4, "de67"}, {0x7, 0x6, "c78ba266"}, {0x6, 0xb, "e039ff8328170f6051"}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x11, "13f49695f1da7c8f952a8e69e80a9d"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @multicast1, @private=0xa010102, @remote]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824d3a86d33d649ba393dc2987eff03845eadc51457e4445c"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000019c40)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @device_b, @from_mac=@broadcast, {0xc, 0x4c}}, 0x8, 0x65, @random=0xfffb, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x8001, 0x5a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xde9, 0x6}}, [{0xdd, 0x30, "ddff9bf38d79866557f7a9004bbaa831f06b7900df77288eaef2442a08d386eb4864a987f0202c9f5512b7de08ed484d"}, {0xdd, 0xb4, "fe3c74bfe3348ffbd3cc35facd345ad3b3e75ab68bd22487e7fd175b24f3c23c5e25102c22677c938f944861f4c4454186075ee8d65b9fe0c33861a9090c3fe738cace95d5c6158352e41eec52ad2ce37f48c4b7cf559671c999b1bf9887eead3b027b8a6178ea6793fa43a2ef06690e160abad7fb0a22280899c134fc1df00d33539f42a09fa1fc589348bdcf24cd22d5a4af084d9ab87870744b1bd864d392ac942e4639757f025229816208440b48b9d0e417"}, {0xdd, 0x15, "e767cc2f27c0ca2897f94667fcf54216bf0fd385af"}, {0xdd, 0x7f, "61bfb88bd0763c7640d3a85fef407286e413d2a9f6d929df09ae77208afbfa6f28a1fd905690cc33b2fd656b11d51157f8f35b9773089a1d9d5a44174befe524b91bc78224a01d341224ebdb964c076815483ddde1f4b452daec3209078c95250ab538532420b9fd6d6d0c23dd8c832d2e4c23359a98d35223ff80a0a3c1d5"}, {0xdd, 0x60, "b71a42dd4fde05eeacd6587e4020b558ce511ea364e70969ed81e11e8d7e5d32f4e233312e0bfd7ddd5d6f98eead0d4c4bbbe2b00afd25bde02d50fcd8e78abecb84527f59b47a6df1c71faaac08a364547a0930340172eb8bac0c469a72a534"}, {0xdd, 0x7d, "a64a105856cead9631b7d544bce02715ac7b02a990d0a93ad34ab6578d866f5027c0069262c6ec1391abf9eeac093e71425bc41e55f1f21093c33af04f6074f1cbd4c7b35e3b85a0ac3ffdd602c6e3395c613e2fb80dd80c001bfdfc840a66366100337bec0973aa5876ba5eaa47d55a89bd9bf9641dfdaa744ba25ba2"}]}, 0x29b) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x20000006}) 2.836986143s ago: executing program 4 (id=226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) writev(r0, 0x0, 0x0) 2.835920252s ago: executing program 0 (id=236): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x5c}}, 0x0) 2.614443981s ago: executing program 0 (id=239): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2aef1852caffdb8e, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0xffffffff}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="a9c76c5e4713a9acd14f0a5b9db03b45c94eefcdabf4c15f76177b35770024272db3bbad31336de9ed49b97ea86fc2b246b601637a267fde27732da496a799294d66d85378dcc886b38a06a9cf55cb6ef920393bef4d82070337f2986bb019d5b8731d91561e8fe71b33404818441bb056572797b873539f4058bbdfaa4615269708e119a8", 0x48}], 0x1}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x0, 0xc8, 0xc8, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1, 0x60}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffb3) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[], 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="8042c935a03289e29be5d86c60546c99", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2, @empty}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0x0, 0x7}) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000002c0)=[{}], 0x1c) 2.472795242s ago: executing program 3 (id=229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfea7) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 2.290190587s ago: executing program 3 (id=230): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9be}]]}, 0x3c}}, 0x0) 2.161501052s ago: executing program 3 (id=231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009d02"]) 2.026535183s ago: executing program 2 (id=232): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.771214764s ago: executing program 0 (id=233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.771098289s ago: executing program 4 (id=234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000004010040"]) 1.770273775s ago: executing program 3 (id=245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000000850000003300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x241d, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 1.561225275s ago: executing program 4 (id=235): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[r2, r2], 0x2}) 1.560628078s ago: executing program 3 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) 1.50318508s ago: executing program 1 (id=237): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) 1.43854361s ago: executing program 4 (id=238): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r0) tgkill(r0, r0, 0x12) 1.344462043s ago: executing program 1 (id=240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x5902}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 1.281486298s ago: executing program 3 (id=241): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x4a, 0x2, 0x0, "0ba7dfad1cfbb5a12e6a2bdee79988d940d2c1aebd746fc04a0026d174932d46"}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r7, 0x0) close$fd_v4l2_buffer(r8) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r9, r8, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r11, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x92}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="0f2374360f01c30f06640fc7348c66baf80cb824ebc089ef66bafc0cedc4e2b191ac7b0100000066b8af000f00d89a0080000048000f01c565a4", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008"]) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)}}], 0x1, 0x0) shutdown(r12, 0x1) setsockopt(r12, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007fa42810d112955a2721010203010902240001000000000904000002ff04730009050a3a2804000000090587020002"], 0x0) 1.135719593s ago: executing program 2 (id=242): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x82002, 0x0) read$proc_mixer(r0, &(0x7f0000000300)=""/218, 0xda) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[], 0xb0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 1.052297712s ago: executing program 1 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x2, 0x4, 0x3b8, 0x200, 0x110, 0x110, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @empty}}}, {{@uncond, 0xbc, 0xec}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x110}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x404) ioctl$KVM_SET_MSRS(r2, 0x5000aea5, &(0x7f0000000080)=ANY=[]) 922.418215ms ago: executing program 2 (id=244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000019840)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x2, [0x72a35bda, 0x1, 0x7fff, 0x6, 0x7, 0x8, 0x1, 0x9, 0x181cd3cd, 0x696d]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x3a}}, {@remote}, {@multicast2}, {@private}, {}, {@broadcast}, {@multicast2}]}, @noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x8, "7f9ba4696412"}, {0x0, 0x7, "a8e578de1c"}, {0x5, 0x5, "de673d"}, {0x7, 0x6, "c78ba266"}, {0x6, 0xb, "e039ff8328170f6051"}, {0x6, 0x2}, {0x6, 0x2}, {0x0, 0x11, "13f49695f1da7c8f952a8e69e80a9d"}]}, @noop, @lsrr={0x83, 0xb, 0x0, [@rand_addr, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @multicast1, @private=0xa010102, @remote]}]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2f996b239c53"}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824d3a86d33d649ba393dc2987eff03845eadc51457e4445c"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000019c40)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @device_b, @from_mac=@broadcast, {0xc, 0x4c}}, 0x8, 0x65, @random=0xfffb, @void, @val={0x2d, 0x1a, {0x300, 0x2, 0x6, 0x0, {0x8001, 0x5a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xde9, 0x6}}, [{0xdd, 0x30, "ddff9bf38d79866557f7a9004bbaa831f06b7900df77288eaef2442a08d386eb4864a987f0202c9f5512b7de08ed484d"}, {0xdd, 0xb4, "fe3c74bfe3348ffbd3cc35facd345ad3b3e75ab68bd22487e7fd175b24f3c23c5e25102c22677c938f944861f4c4454186075ee8d65b9fe0c33861a9090c3fe738cace95d5c6158352e41eec52ad2ce37f48c4b7cf559671c999b1bf9887eead3b027b8a6178ea6793fa43a2ef06690e160abad7fb0a22280899c134fc1df00d33539f42a09fa1fc589348bdcf24cd22d5a4af084d9ab87870744b1bd864d392ac942e4639757f025229816208440b48b9d0e417"}, {0xdd, 0x15, "e767cc2f27c0ca2897f94667fcf54216bf0fd385af"}, {0xdd, 0x7f, "61bfb88bd0763c7640d3a85fef407286e413d2a9f6d929df09ae77208afbfa6f28a1fd905690cc33b2fd656b11d51157f8f35b9773089a1d9d5a44174befe524b91bc78224a01d341224ebdb964c076815483ddde1f4b452daec3209078c95250ab538532420b9fd6d6d0c23dd8c832d2e4c23359a98d35223ff80a0a3c1d5"}, {0xdd, 0x60, "b71a42dd4fde05eeacd6587e4020b558ce511ea364e70969ed81e11e8d7e5d32f4e233312e0bfd7ddd5d6f98eead0d4c4bbbe2b00afd25bde02d50fcd8e78abecb84527f59b47a6df1c71faaac08a364547a0930340172eb8bac0c469a72a534"}, {0xdd, 0x7d, "a64a105856cead9631b7d544bce02715ac7b02a990d0a93ad34ab6578d866f5027c0069262c6ec1391abf9eeac093e71425bc41e55f1f21093c33af04f6074f1cbd4c7b35e3b85a0ac3ffdd602c6e3395c613e2fb80dd80c001bfdfc840a66366100337bec0973aa5876ba5eaa47d55a89bd9bf9641dfdaa744ba25ba2"}]}, 0x29b) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000200)={0x20000006}) 854.205296ms ago: executing program 1 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)={0x1, 0x0, [{0x80000000}]}) 726.983424ms ago: executing program 1 (id=247): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x2aef1852caffdb8e, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0xffffffff}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="a9c76c5e4713a9acd14f0a5b9db03b45c94eefcdabf4c15f76177b35770024272db3bbad31336de9ed49b97ea86fc2b246b601637a267fde27732da496a799294d66d85378dcc886b38a06a9cf55cb6ef920393bef4d82070337f2986bb019d5b8731d91561e8fe71b33404818441bb056572797b873539f4058bbdfaa4615269708e119a8", 0x48}], 0x1}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x4, 0x4, 0x324, 0xffffffff, 0x0, 0xc8, 0xc8, 0xfeffffff, 0xffffffff, 0x25c, 0x25c, 0x25c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [], [], 'batadv_slave_0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1, 0x60}, 0x2f2, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [], [], 'hsr0\x00', 'veth0_macvtap\x00'}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0xffb3) recvmsg(r1, &(0x7f0000008ac0)={0x0, 0x0, &(0x7f0000006380)=[{&(0x7f0000009140)=""/132, 0x84}], 0x1}, 0x102) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968681004d0086dd600a843500580600fe2800000000000000000000000000aafe8000000000000000000000000000aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000180)="8042c935a03289e29be5d86c60546c99", 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2, @empty}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000180)={0x0, 0x7}) ftruncate(0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000002c0)=[{}], 0x1c) 472.507315ms ago: executing program 4 (id=249): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffe}, 0x1c) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) 51.169665ms ago: executing program 4 (id=250): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="67a818beb2c030ce59945b", 0xb}, {&(0x7f0000000300), 0x400000}, {0x0}], 0x3) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) 0s ago: executing program 1 (id=251): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x63660000) mmap(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x12, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000300)={0x17c04, 0xffffffffffffffff, 0xc900, 0x6780, 0x1000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 51.529451][ T5221] cgroup: Unknown subsys name 'net' [ 51.677238][ T5221] cgroup: Unknown subsys name 'cpuset' [ 51.684940][ T5221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.905384][ T5221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.938974][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.975269][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.982546][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.992917][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.001405][ T5242] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.009640][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.015102][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.025990][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.033722][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.042315][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.047311][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.049724][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.057552][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.071633][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.071684][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.079734][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.093921][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.094147][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.102207][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.110510][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.117285][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.125026][ T5245] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.130199][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.137482][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.143022][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.150495][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.158227][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.172546][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.180432][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.196775][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.555778][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 55.735571][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 55.761832][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 55.787962][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.797160][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.804779][ T5249] bridge_slave_0: entered allmulticast mode [ 55.811460][ T5249] bridge_slave_0: entered promiscuous mode [ 55.825745][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 55.843661][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 55.853079][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.860419][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.868127][ T5249] bridge_slave_1: entered allmulticast mode [ 55.875198][ T5249] bridge_slave_1: entered promiscuous mode [ 55.984688][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.022353][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.083127][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.091020][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.099188][ T5252] bridge_slave_0: entered allmulticast mode [ 56.106001][ T5252] bridge_slave_0: entered promiscuous mode [ 56.113103][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.120430][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.127891][ T5250] bridge_slave_0: entered allmulticast mode [ 56.135220][ T5250] bridge_slave_0: entered promiscuous mode [ 56.145774][ T5249] team0: Port device team_slave_0 added [ 56.172196][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.179586][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.187052][ T5252] bridge_slave_1: entered allmulticast mode [ 56.193603][ T5252] bridge_slave_1: entered promiscuous mode [ 56.208586][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.216189][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.223323][ T5250] bridge_slave_1: entered allmulticast mode [ 56.230447][ T5250] bridge_slave_1: entered promiscuous mode [ 56.247574][ T5249] team0: Port device team_slave_1 added [ 56.253428][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.260752][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.267985][ T5248] bridge_slave_0: entered allmulticast mode [ 56.274881][ T5248] bridge_slave_0: entered promiscuous mode [ 56.281832][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.290249][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.297601][ T5246] bridge_slave_0: entered allmulticast mode [ 56.304381][ T5246] bridge_slave_0: entered promiscuous mode [ 56.341892][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.349048][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.356271][ T5248] bridge_slave_1: entered allmulticast mode [ 56.362809][ T5248] bridge_slave_1: entered promiscuous mode [ 56.376689][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383791][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.391330][ T5246] bridge_slave_1: entered allmulticast mode [ 56.398271][ T5246] bridge_slave_1: entered promiscuous mode [ 56.414697][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.426100][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.437057][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.444021][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.470957][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.498603][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.512147][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.521802][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.530126][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.556871][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.569997][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.586995][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.598392][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.630924][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.671761][ T5252] team0: Port device team_slave_0 added [ 56.692404][ T5250] team0: Port device team_slave_0 added [ 56.701598][ T5248] team0: Port device team_slave_0 added [ 56.710167][ T5248] team0: Port device team_slave_1 added [ 56.725893][ T5252] team0: Port device team_slave_1 added [ 56.733270][ T5250] team0: Port device team_slave_1 added [ 56.765014][ T5246] team0: Port device team_slave_0 added [ 56.786715][ T5249] hsr_slave_0: entered promiscuous mode [ 56.793364][ T5249] hsr_slave_1: entered promiscuous mode [ 56.809733][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.817018][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.843627][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.857206][ T5246] team0: Port device team_slave_1 added [ 56.884598][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.891569][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.918296][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.930256][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.937483][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.963493][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.987812][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.994966][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.021353][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.040979][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.048114][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.074379][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.099920][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.106931][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.132975][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.145106][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.152049][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.179059][ T53] Bluetooth: hci1: command tx timeout [ 57.184812][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.215845][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.222821][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.249587][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.249972][ T5233] Bluetooth: hci2: command tx timeout [ 57.260166][ T5244] Bluetooth: hci0: command tx timeout [ 57.265797][ T4620] Bluetooth: hci4: command tx timeout [ 57.276655][ T53] Bluetooth: hci3: command tx timeout [ 57.300917][ T5248] hsr_slave_0: entered promiscuous mode [ 57.308488][ T5248] hsr_slave_1: entered promiscuous mode [ 57.315132][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.322958][ T5248] Cannot create hsr debugfs directory [ 57.362824][ T5250] hsr_slave_0: entered promiscuous mode [ 57.369401][ T5250] hsr_slave_1: entered promiscuous mode [ 57.376149][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.383717][ T5250] Cannot create hsr debugfs directory [ 57.404336][ T5246] hsr_slave_0: entered promiscuous mode [ 57.410926][ T5246] hsr_slave_1: entered promiscuous mode [ 57.417662][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.425292][ T5246] Cannot create hsr debugfs directory [ 57.478128][ T5252] hsr_slave_0: entered promiscuous mode [ 57.484992][ T5252] hsr_slave_1: entered promiscuous mode [ 57.490935][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.498712][ T5252] Cannot create hsr debugfs directory [ 57.772811][ T5249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.799374][ T5249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.818119][ T5249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.840684][ T5249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.863435][ T5248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.882295][ T5248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.891440][ T5248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.910410][ T5248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.964790][ T5246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.977311][ T5246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.992363][ T5246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.005630][ T5246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.077142][ T5252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.098168][ T5252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.108700][ T5252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.121437][ T5252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.177580][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.197318][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.232539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.239819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.250680][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.257790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.322630][ T5250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.345453][ T5250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.357137][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.370074][ T5250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.381569][ T5250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.403721][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.444191][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.476103][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.483732][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.507419][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.514581][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.529048][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.549103][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.570467][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.577599][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.593995][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.622356][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.629488][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.654932][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.689233][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.696399][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.742008][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.749122][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.802018][ T5249] veth0_vlan: entered promiscuous mode [ 58.811954][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.848898][ T5249] veth1_vlan: entered promiscuous mode [ 58.863787][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.901680][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.919372][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.926500][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.948335][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.955480][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.982533][ T5248] veth0_vlan: entered promiscuous mode [ 59.002631][ T5248] veth1_vlan: entered promiscuous mode [ 59.022640][ T5249] veth0_macvtap: entered promiscuous mode [ 59.046533][ T5249] veth1_macvtap: entered promiscuous mode [ 59.076582][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.112970][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.122289][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.141861][ T5250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.153780][ T5250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.183136][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.216722][ T5249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.225927][ T5249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.236260][ T5249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.245386][ T5249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.254323][ T4620] Bluetooth: hci1: command tx timeout [ 59.263779][ T5248] veth0_macvtap: entered promiscuous mode [ 59.283653][ T5248] veth1_macvtap: entered promiscuous mode [ 59.318638][ T5246] veth0_vlan: entered promiscuous mode [ 59.324900][ T4620] Bluetooth: hci4: command tx timeout [ 59.330332][ T5233] Bluetooth: hci2: command tx timeout [ 59.336237][ T53] Bluetooth: hci3: command tx timeout [ 59.341663][ T53] Bluetooth: hci0: command tx timeout [ 59.359376][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.398752][ T5246] veth1_vlan: entered promiscuous mode [ 59.427653][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.439922][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.451642][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.462949][ T5252] veth0_vlan: entered promiscuous mode [ 59.491037][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.501822][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.513306][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.524931][ T5252] veth1_vlan: entered promiscuous mode [ 59.551531][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.563106][ T3331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.569949][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.572637][ T3331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.582926][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.597755][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.642093][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.652413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.679635][ T5250] veth0_vlan: entered promiscuous mode [ 59.695065][ T5246] veth0_macvtap: entered promiscuous mode [ 59.703793][ T5246] veth1_macvtap: entered promiscuous mode [ 59.741121][ T5252] veth0_macvtap: entered promiscuous mode [ 59.766920][ T5249] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.788871][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.799749][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.810532][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.827033][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.839145][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.850070][ T5250] veth1_vlan: entered promiscuous mode [ 59.860459][ T5252] veth1_macvtap: entered promiscuous mode [ 59.883682][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.896189][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.906670][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.917507][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.928830][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.967329][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.978197][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.988411][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.999080][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.009100][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.019581][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.030691][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.041598][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.043157][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.061033][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.071066][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.081577][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.091483][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.097344][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.101969][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.120517][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.152503][ T5252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.161758][ T5252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.170587][ T5252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.179487][ T5252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.205174][ T5246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.215216][ T5246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.223954][ T5246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.233264][ T5246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.255230][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.259403][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.271636][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.322855][ T5250] veth0_macvtap: entered promiscuous mode [ 60.339868][ T5250] veth1_macvtap: entered promiscuous mode [ 60.389640][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.401923][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.439020][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.473790][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.475930][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.494733][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.499923][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.504987][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.534567][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.535429][ T5289] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 60.547574][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.569489][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.587981][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.618589][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.654593][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.669521][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.681266][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.703984][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.734427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.749649][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.780496][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.800823][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.821571][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.841711][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.874129][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.876275][ T8] usb 5-1: USB disconnect, device number 2 [ 60.895000][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.924552][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.948085][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.995633][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.996432][ T5250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.003467][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.025798][ T5250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.034976][ T5250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.043672][ T5250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.061922][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.070360][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.224216][ T5284] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.234661][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.280008][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.327806][ T53] Bluetooth: hci1: command tx timeout [ 61.379451][ T3331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.391140][ T3331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.405027][ T53] Bluetooth: hci0: command tx timeout [ 61.411030][ T53] Bluetooth: hci4: command tx timeout [ 61.411657][ T4620] Bluetooth: hci2: command tx timeout [ 61.416965][ T53] Bluetooth: hci3: command tx timeout [ 61.433033][ T5284] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 61.445914][ T5284] usb 3-1: config 1 has no interface number 0 [ 61.454666][ T5284] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.493202][ T5284] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 61.521365][ T5284] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 61.542817][ T5284] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 61.568527][ T5284] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 61.577993][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.586549][ T5284] usb 3-1: Product: syz [ 61.590736][ T5284] usb 3-1: Manufacturer: syz [ 61.595913][ T5284] usb 3-1: SerialNumber: syz [ 61.614994][ T5287] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.647831][ T5308] tipc: Started in network mode [ 61.652902][ T5308] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 61.661450][ T5308] tipc: Enabled bearer , priority 0 [ 61.672815][ T5308] tipc: Enabled bearer , priority 0 [ 61.786344][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.799431][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.816088][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.841382][ T5287] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.851826][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.855188][ T5298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 61.875529][ T5312] syzkaller1: entered promiscuous mode [ 61.881827][ T5312] syzkaller1: entered allmulticast mode [ 61.926129][ T5287] usb 2-1: config 0 descriptor?? [ 61.973851][ T5314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.172581][ T5317] capability: warning: `syz.4.12' uses 32-bit capabilities (legacy support in use) [ 62.367503][ T5287] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 62.439123][ T5287] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 62.554519][ T5298] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.591258][ T5284] cdc_ncm 3-1:1.1: bind() failure [ 62.789697][ T8] tipc: Node number set to 10136234 [ 62.953409][ T5284] usb 3-1: USB disconnect, device number 2 [ 63.125578][ T5349] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 63.144503][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.278418][ T5351] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 63.294384][ T5285] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.304290][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 63.315121][ T8] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 63.329674][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.341557][ T8] usb 1-1: Product: syz [ 63.346248][ T8] usb 1-1: Manufacturer: syz [ 63.351186][ T8] usb 1-1: SerialNumber: syz [ 63.358122][ T8] usb 1-1: config 0 descriptor?? [ 63.367425][ T8] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 63.415776][ T53] Bluetooth: hci1: command tx timeout [ 63.442410][ T5353] netlink: 'syz.4.28': attribute type 3 has an invalid length. [ 63.451790][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 63.462201][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 63.470551][ T5285] usb 4-1: config 107 has an invalid interface number: 29 but max is 0 [ 63.479025][ T5285] usb 4-1: config 107 has no interface number 0 [ 63.487315][ T53] Bluetooth: hci2: command tx timeout [ 63.487332][ T5233] Bluetooth: hci4: command tx timeout [ 63.493384][ T4620] Bluetooth: hci0: command tx timeout [ 63.498260][ T5244] Bluetooth: hci3: command tx timeout [ 63.504188][ T5285] usb 4-1: config 107 interface 29 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 63.546429][ T5285] usb 4-1: config 107 interface 29 has no altsetting 0 [ 63.604948][ T5285] usb 4-1: New USB device found, idVendor=07ca, idProduct=a807, bcdDevice=87.10 [ 63.623350][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.631728][ T5285] usb 4-1: Product: syz [ 63.637810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 63.646691][ T5285] usb 4-1: Manufacturer: syz [ 63.651353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.659985][ T5285] usb 4-1: SerialNumber: syz [ 63.739660][ T5357] netlink: 'syz.2.30': attribute type 29 has an invalid length. [ 63.754439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.762947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.815404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.823928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.854418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 63.863508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #341!!! [ 63.904300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 63.933191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.255045][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.360959][ T5285] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in warm state. [ 64.384614][ T5285] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 64.400121][ T5290] usb 1-1: USB disconnect, device number 2 [ 64.400801][ T5285] dvbdev: DVB: registering new adapter (AVerMedia AVerTV DVB-T Volar) [ 64.423226][ T5285] usb 4-1: media controller created [ 64.438516][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.440792][ T5285] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 64.461348][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.475169][ T9] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 64.487188][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.525289][ T5285] DVB: Unable to find symbol dib7000p_attach() [ 64.533079][ T9] usb 3-1: config 0 descriptor?? [ 64.539076][ T5285] dvb-usb: no frontend was attached by 'AVerMedia AVerTV DVB-T Volar' [ 64.604778][ T5285] rc_core: IR keymap rc-dib0700-rc5 not found [ 64.619236][ T5284] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 64.627836][ T5285] Registered IR keymap rc-empty [ 64.633124][ T5285] dvb-usb: could not initialize remote control. [ 64.642029][ T5285] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully initialized and connected. [ 64.653597][ T5284] usb 2-1: device reset changed ep0 maxpacket size! [ 64.662262][ T5285] dib0700: There's no endpoint for remote controller [ 64.675270][ T937] usb 2-1: USB disconnect, device number 2 [ 64.894342][ T937] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 64.943415][ T5285] usb 4-1: USB disconnect, device number 2 [ 64.983814][ T5285] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully deinitialized and disconnected. [ 65.054588][ T937] usb 2-1: Using ep0 maxpacket: 8 [ 65.074260][ T937] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 65.082508][ T937] usb 2-1: config 0 has no interface number 0 [ 65.099389][ T5291] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 65.120573][ T937] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 65.132855][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.143308][ T937] usb 2-1: Product: syz [ 65.147641][ T937] usb 2-1: Manufacturer: syz [ 65.152327][ T937] usb 2-1: SerialNumber: syz [ 65.160255][ T937] usb 2-1: config 0 descriptor?? [ 65.175831][ T937] radio-usb-si4713 2-1:0.128: Si4713 development board discovered: (10C4:8244) [ 65.255076][ T5291] usb 5-1: Using ep0 maxpacket: 8 [ 65.263005][ T5291] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 65.275943][ T5291] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 65.286754][ T5291] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.296747][ T5291] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.310047][ T5291] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.335498][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.572500][ T5291] usb 5-1: GET_CAPABILITIES returned 0 [ 65.578274][ T5291] usbtmc 5-1:16.0: can't read capabilities [ 65.610945][ T5290] usb 3-1: USB disconnect, device number 3 [ 65.716492][ T5399] syzkaller1: entered promiscuous mode [ 65.722126][ T5399] syzkaller1: entered allmulticast mode [ 65.803559][ T5285] usb 5-1: USB disconnect, device number 3 [ 66.015488][ T937] radio-usb-si4713 2-1:0.128: probe with driver radio-usb-si4713 failed with error -71 [ 66.029274][ T937] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 66.041979][ T937] usb 2-1: USB disconnect, device number 3 [ 66.397497][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.406157][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.413583][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.421853][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.429364][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.436983][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.445413][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.453797][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.461540][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.469309][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.477118][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.485016][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.492451][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.500038][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.508126][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.516331][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.523757][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.532797][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.541256][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549522][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549569][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549596][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549623][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549651][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549677][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549704][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549729][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549756][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549783][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549809][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549836][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.549862][ T5291] hid-generic 0000:04AD:0000.0003: unknown main item tag 0x0 [ 66.573914][ T5291] hid-generic 0000:04AD:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 66.707614][ T5291] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 66.827268][ T937] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.870030][ T5291] usb 3-1: Using ep0 maxpacket: 16 [ 66.877089][ T5291] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 66.894212][ T5291] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 66.918440][ T5291] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 66.932489][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.955242][ T5291] usb 3-1: Product: syz [ 66.959514][ T5291] usb 3-1: Manufacturer: syz [ 66.974311][ T5291] usb 3-1: SerialNumber: syz [ 66.989979][ T5291] usb 3-1: config 0 descriptor?? [ 67.013793][ T5412] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 67.023113][ T937] usb 4-1: config 0 has no interfaces? [ 67.029022][ T937] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 67.045096][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.060684][ T5291] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 67.080829][ T937] usb 4-1: config 0 descriptor?? [ 67.162533][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 67.310050][ T5285] usb 3-1: USB disconnect, device number 4 [ 67.330884][ T5291] usb 4-1: USB disconnect, device number 3 [ 67.444420][ T937] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.614310][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 67.621056][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.634212][ T937] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.647473][ T937] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.656851][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.668694][ T937] usb 5-1: config 0 descriptor?? [ 68.071509][ T5447] dccp_v6_rcv: dropped packet with invalid checksum [ 68.145988][ T937] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 68.186354][ T937] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input7 [ 68.296758][ T937] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 68.322603][ T5284] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.487559][ T5291] usb 5-1: USB disconnect, device number 4 [ 68.515987][ T5284] usb 2-1: Using ep0 maxpacket: 16 [ 68.526317][ T5284] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 68.553875][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 68.608580][ T5284] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.618511][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.626693][ T5284] usb 2-1: Product: syz [ 68.630917][ T5284] usb 2-1: Manufacturer: syz [ 68.635645][ T5284] usb 2-1: SerialNumber: syz [ 68.657396][ T5284] usb 2-1: config 0 descriptor?? [ 68.671838][ T5284] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.681582][ T5284] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 68.701676][ T5471] syzkaller1: entered promiscuous mode [ 68.708189][ T5471] syzkaller1: entered allmulticast mode [ 69.310666][ T5284] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 69.318188][ T5284] em28xx 2-1:0.0: Config register raw data: 0x41 [ 69.530998][ T5285] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.569747][ T937] usb 2-1: USB disconnect, device number 4 [ 69.582075][ T937] em28xx 2-1:0.0: Disconnecting em28xx [ 69.595965][ T937] em28xx 2-1:0.0: Freeing device [ 69.665728][ T5283] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.714238][ T5285] usb 5-1: Using ep0 maxpacket: 16 [ 69.740755][ T5285] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 69.750828][ T5285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.764138][ T5285] usb 5-1: Product: syz [ 69.770614][ T5285] usb 5-1: Manufacturer: syz [ 69.778354][ T5285] usb 5-1: SerialNumber: syz [ 69.791694][ T5285] usb 5-1: config 0 descriptor?? [ 69.824240][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 69.833349][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 69.848808][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 69.860339][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 69.870813][ T5283] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 69.881489][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 69.893185][ T5283] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 69.903016][ T5283] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 69.912317][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.922825][ T5283] usb 1-1: config 0 descriptor?? [ 69.928876][ T5499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 69.946886][ T4620] Bluetooth: hci5: urb ffff888145bf8e00 submission failed (90) [ 70.195361][ T5284] usb 1-1: USB disconnect, device number 3 [ 70.228076][ T5492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.258303][ T5492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.274429][ T5285] usb 5-1: Cannot retrieve CPort count: -71 [ 70.303529][ T5285] usb 5-1: Cannot retrieve CPort count: -71 [ 70.311287][ T5285] es2_ap_driver 5-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 70.323197][ T5285] usb 5-1: USB disconnect, device number 5 [ 70.474227][ T5283] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.634579][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 70.646250][ T5283] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 70.667283][ T5283] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.682285][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 70.692829][ T5283] usb 4-1: SerialNumber: syz [ 70.710778][ T5283] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 70.804615][ T5285] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 70.964693][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 71.002056][ T5285] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 71.028935][ T5285] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.038925][ T5285] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 71.049374][ T5285] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 71.059704][ T5285] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.072864][ T5285] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.082040][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.132360][ T5506] raw-gadget.2 gadget.3: fail, usb_ep_set_halt returned -11 [ 71.150802][ T937] usb 4-1: USB disconnect, device number 4 [ 71.320731][ T5285] usb 3-1: usb_control_msg returned -32 [ 71.337094][ T5285] usbtmc 3-1:16.0: can't read capabilities [ 71.345354][ T5541] vivid-003: disconnect [ 71.364387][ T5291] vivid-003: reconnect [ 71.584216][ T5283] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.650095][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.657852][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.684534][ T5285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 71.708001][ T5240] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 71.745681][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.764357][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.782024][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.793782][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.815905][ T5283] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.832263][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.842787][ T5283] usb 5-1: config 0 descriptor?? [ 71.865818][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 71.877608][ T5240] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 71.904681][ T5285] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 71.921260][ T5240] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.935794][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.944630][ T5285] usb 1-1: Product: syz [ 71.949209][ T5285] usb 1-1: Manufacturer: syz [ 71.954881][ T5285] usb 1-1: SerialNumber: syz [ 71.961790][ T5240] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.974963][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.993393][ T5285] usb 1-1: config 0 descriptor?? [ 72.001120][ T5240] usb 2-1: SerialNumber: syz [ 72.012620][ T5547] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 72.204539][ T5556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.228761][ T5285] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 72.255422][ T5556] netlink: 'syz.3.109': attribute type 62 has an invalid length. [ 72.263827][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 72.283168][ T5283] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 72.294875][ T5240] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 72.338580][ T5240] usb 2-1: USB disconnect, device number 5 [ 72.345377][ T5283] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 72.404566][ T5283] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 72.532601][ T5283] usb 5-1: USB disconnect, device number 6 [ 72.779201][ T937] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 72.934239][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 72.940806][ T937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.949204][ T937] usb 4-1: config 0 has no interface number 0 [ 72.962395][ T937] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 72.984194][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.992219][ T937] usb 4-1: Product: syz [ 73.001000][ T937] usb 4-1: Manufacturer: syz [ 73.005845][ T937] usb 4-1: SerialNumber: syz [ 73.025207][ T937] usb 4-1: config 0 descriptor?? [ 73.039375][ T937] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 73.045289][ T5285] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 73.064795][ T5285] usb 1-1: USB disconnect, device number 4 [ 73.355017][ T5240] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 73.450574][ T5576] [U] DEV/TTYS3 [ 73.454184][ T5576] [U] [ 73.456904][ T5576] [U] [ 73.459572][ T5576] [U] [ 73.465771][ T5576] [U] [ 73.468501][ T5576] [U] [ 73.471187][ T5576] [U] [ 73.473878][ T5576] [U] [ 73.477019][ T5576] [U] [ 73.479729][ T5576] [U] [ 73.482438][ T5576] [U] [ 73.492066][ T5575] [U] [ 73.506001][ T5240] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 73.526840][ T5240] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 73.555310][ T5240] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 73.572294][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 73.582063][ T5240] usb 2-1: SerialNumber: syz [ 73.629784][ T5291] usb 3-1: USB disconnect, device number 5 [ 73.723976][ T5582] loop0: detected capacity change from 0 to 7 [ 73.735783][ T5582] Dev loop0: unable to read RDB block 7 [ 73.741532][ T5582] loop0: AHDI p2 [ 73.745771][ T5582] loop0: partition table partially beyond EOD, truncated [ 73.832477][ T5240] usb 2-1: 0:2 : does not exist [ 73.837719][ T5584] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.844247][ T5283] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 73.883592][ T5240] usb 2-1: USB disconnect, device number 6 [ 73.926481][ T5432] udevd[5432]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.024171][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 74.033777][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 74.046655][ T5283] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 74.054974][ T5291] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 74.075120][ T5283] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 74.085117][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.085319][ T937] gspca_spca1528: reg_w err -71 [ 74.093178][ T5283] usb 5-1: Product: syz [ 74.099712][ T937] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 74.120904][ T937] usb 4-1: USB disconnect, device number 5 [ 74.126612][ T5283] usb 5-1: Manufacturer: syz [ 74.137644][ T5283] usb 5-1: SerialNumber: syz [ 74.157739][ T5283] usb 5-1: config 0 descriptor?? [ 74.163583][ T5578] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 74.176310][ T5283] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 74.234231][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 74.250590][ T5291] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 74.265667][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.275513][ T5291] usb 3-1: Product: syz [ 74.279965][ T5291] usb 3-1: Manufacturer: syz [ 74.287668][ T5291] usb 3-1: SerialNumber: syz [ 74.314195][ T5291] usb 3-1: config 0 descriptor?? [ 74.545384][ T5291] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 74.629462][ T937] usb 5-1: USB disconnect, device number 7 [ 74.923130][ T5604] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 74.943959][ T5604] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.074978][ T5607] tipc: Started in network mode [ 75.080032][ T5607] tipc: Node identity 7f000001, cluster identity 4711 [ 75.105828][ T5607] tipc: Enabled bearer , priority 10 [ 75.381922][ T5291] usb write operation failed. (-71) [ 75.417566][ T5291] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 75.434829][ T5291] dvbdev: DVB: registering new adapter (Terratec H7) [ 75.441586][ T5291] usb 3-1: media controller created [ 75.454361][ T5291] usb read operation failed. (-71) [ 75.464188][ T5291] usb write operation failed. (-71) [ 75.480989][ T5291] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 75.592839][ T5291] usb 3-1: USB disconnect, device number 6 [ 75.940391][ T5641] ALSA: mixer_oss: invalid OSS volume '' [ 76.046478][ T29] audit: type=1326 audit(1727508741.852:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5636 comm="syz.0.141" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x0 [ 76.141708][ T5648] vxcan1: entered allmulticast mode [ 76.157815][ T5648] vxcan1: left allmulticast mode [ 76.235057][ T5290] tipc: Node number set to 2130706433 [ 76.454497][ T5667] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.152'. [ 76.556810][ T5290] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 76.734250][ T5290] usb 5-1: Using ep0 maxpacket: 8 [ 76.747803][ T5290] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 76.777152][ T5290] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 76.788109][ T80] cfg80211: failed to load regulatory.db [ 76.801148][ T5290] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 76.822406][ T5290] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 76.834468][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 76.846000][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 76.857727][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 76.865997][ T5283] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.897714][ T5290] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 76.906631][ T5290] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 76.914044][ T5290] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 76.944736][ T5290] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 76.968429][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 76.985918][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 77.000378][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.021720][ T5290] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 77.053056][ T5290] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 77.065020][ T5290] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 77.078942][ T5290] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 77.094166][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 77.112053][ T5283] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 77.121635][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.141895][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 77.153328][ T5283] usb 4-1: Product: syz [ 77.153352][ T5283] usb 4-1: Manufacturer: syz [ 77.153368][ T5283] usb 4-1: SerialNumber: syz [ 77.170530][ T5283] usb 4-1: config 0 descriptor?? [ 77.188093][ T5283] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 77.197580][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 77.224724][ T5290] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 77.243571][ T5290] usb 5-1: string descriptor 0 read error: -22 [ 77.253880][ T5290] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 77.269583][ T5290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.283563][ T5695] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 77.334227][ T5290] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 77.402633][ T5283] gp8psk: usb in 128 operation failed. [ 77.413297][ T5283] gp8psk: usb in 137 operation failed. [ 77.435879][ T5283] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 77.446484][ T5283] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 77.472962][ T5283] usb 4-1: media controller created [ 77.550510][ T5283] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 77.599273][ T5283] gp8psk_fe: Frontend revision 1 attached [ 77.617894][ T5283] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 77.648810][ T5283] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 77.944448][ T5283] gp8psk: usb in 137 operation failed. [ 77.954952][ T5283] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 77.984322][ T5283] gp8psk: found Genpix USB device pID = 201 (hex) [ 78.004225][ T5283] usb 4-1: USB disconnect, device number 6 [ 78.125416][ T5283] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 78.438209][ T29] audit: type=1326 audit(1727508744.232:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.1.173" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f25579 code=0x0 [ 79.845064][ T5287] usb 5-1: USB disconnect, device number 8 [ 80.105664][ T5283] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 80.284304][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 80.291454][ T5283] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.302872][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.313460][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.333683][ T80] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.341563][ T5283] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.344156][ T5290] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 80.357307][ T5283] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.372042][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.484269][ T5287] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 80.506089][ T80] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 80.518325][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 80.524296][ T5290] usb 3-1: Using ep0 maxpacket: 16 [ 80.530339][ T80] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 80.546726][ T80] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 80.555922][ T5290] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 80.560087][ T80] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 80.578609][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.580605][ T80] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.592089][ T5290] usb 3-1: Product: syz [ 80.599563][ T5290] usb 3-1: Manufacturer: syz [ 80.602078][ T5283] usb 4-1: GET_CAPABILITIES returned 0 [ 80.614706][ T5290] usb 3-1: SerialNumber: syz [ 80.618316][ T80] usb 1-1: config 0 descriptor?? [ 80.623021][ T5290] usb 3-1: config 0 descriptor?? [ 80.624987][ T5283] usbtmc 4-1:16.0: can't read capabilities [ 80.655741][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 80.670118][ T5287] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 80.679499][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.688813][ T5287] usb 2-1: Product: syz [ 80.693254][ T5287] usb 2-1: Manufacturer: syz [ 80.698000][ T5287] usb 2-1: SerialNumber: syz [ 80.706585][ T5287] usb 2-1: config 0 descriptor?? [ 80.804206][ T5291] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.908955][ T937] usb 4-1: USB disconnect, device number 7 [ 80.931819][ T5287] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.964430][ T5291] usb 5-1: Using ep0 maxpacket: 16 [ 80.973368][ T5291] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.981658][ T5291] usb 5-1: config 0 has no interface number 0 [ 80.991733][ T5291] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 81.002105][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.012388][ T5291] usb 5-1: Product: syz [ 81.016755][ T5291] usb 5-1: Manufacturer: syz [ 81.021591][ T5291] usb 5-1: SerialNumber: syz [ 81.036188][ T5291] usb 5-1: config 0 descriptor?? [ 81.045701][ T5291] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 81.053288][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.056006][ T80] plantronics 0003:047F:FFFF.0006: ignoring exceeding usage max [ 81.077400][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.080222][ T80] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 81.092656][ T5290] usb 3-1: Cannot retrieve CPort count: -71 [ 81.100046][ T5290] usb 3-1: Cannot retrieve CPort count: -71 [ 81.107130][ T5290] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 81.113192][ T80] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 81.120089][ T5290] usb 3-1: USB disconnect, device number 7 [ 81.704319][ T937] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 81.741737][ T5287] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 81.753372][ T5287] usb 2-1: USB disconnect, device number 7 [ 81.877609][ T937] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 81.894294][ T937] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 81.910685][ T937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.920190][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.934124][ T937] usb 4-1: SerialNumber: syz [ 81.942426][ T5811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 82.080678][ T5291] gspca_spca1528: reg_w err -71 [ 82.098169][ T5291] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 82.118150][ T5291] usb 5-1: USB disconnect, device number 9 [ 82.178458][ T937] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 82.205986][ T5822] vivid-000: disconnect [ 82.219126][ T937] usb 4-1: USB disconnect, device number 8 [ 82.257626][ T5290] vivid-000: reconnect [ 82.503692][ T5831] netlink: 'syz.2.220': attribute type 62 has an invalid length. [ 82.511844][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 82.605806][ T5287] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 82.621346][ T29] audit: type=1326 audit(1727508748.422:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.653878][ T29] audit: type=1326 audit(1727508748.422:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.698937][ T29] audit: type=1326 audit(1727508748.422:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.720999][ T29] audit: type=1326 audit(1727508748.422:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.743175][ T29] audit: type=1326 audit(1727508748.422:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.772889][ T29] audit: type=1326 audit(1727508748.452:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.796783][ T5287] usb 2-1: Using ep0 maxpacket: 8 [ 82.827425][ T29] audit: type=1326 audit(1727508748.452:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.849632][ T5287] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 82.852057][ T5839] loop0: detected capacity change from 0 to 7 [ 82.859044][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.859074][ T5287] usb 2-1: Product: syz [ 82.859089][ T5287] usb 2-1: Manufacturer: syz [ 82.859104][ T5287] usb 2-1: SerialNumber: syz [ 82.860082][ T29] audit: type=1326 audit(1727508748.482:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.916838][ T5287] usb 2-1: config 0 descriptor?? [ 82.932977][ T5836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.978482][ T5839] Dev loop0: unable to read RDB block 7 [ 82.986312][ T29] audit: type=1326 audit(1727508748.482:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 82.993151][ T5844] netlink: 'syz.3.225': attribute type 15 has an invalid length. [ 83.010320][ T5839] loop0: AHDI p2 [ 83.028735][ T5839] loop0: partition table partially beyond EOD, truncated [ 83.041510][ T29] audit: type=1326 audit(1727508748.482:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5834 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=40000003 syscall=441 compat=1 ip=0xf73ad579 code=0x7ffc0000 [ 83.044050][ T5844] netlink: 666 bytes leftover after parsing attributes in process `syz.3.225'. [ 83.090271][ T5836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.093656][ T4683] Dev loop0: unable to read RDB block 7 [ 83.107587][ T4683] loop0: AHDI p2 [ 83.111305][ T4683] loop0: partition table partially beyond EOD, truncated [ 83.124453][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 83.136324][ T5287] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 83.251427][ T5291] usb 1-1: USB disconnect, device number 5 [ 83.297474][ T5849] tipc: Started in network mode [ 83.307243][ T5849] tipc: Node identity 7f000001, cluster identity 4711 [ 83.328767][ T5849] tipc: Enabled bearer , priority 10 [ 83.490822][ T5853] capability: warning: `syz.0.239' uses deprecated v2 capabilities in a way that may be insecure [ 83.825759][ T5853] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 83.950652][ T5287] usb write operation failed. (-71) [ 83.965111][ T5287] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 83.986649][ T5287] dvbdev: DVB: registering new adapter (Terratec H7) [ 83.993602][ T5287] usb 2-1: media controller created [ 84.003952][ T5287] usb read operation failed. (-71) [ 84.019975][ T5287] usb write operation failed. (-71) [ 84.052788][ T5287] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 84.071869][ T5287] usb 2-1: USB disconnect, device number 8 [ 84.324248][ T5291] tipc: Node number set to 2130706433 [ 84.589521][ T5885] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 84.606439][ T5885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.634501][ T5287] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.795975][ T5287] usb 1-1: Using ep0 maxpacket: 16 [ 84.806174][ T5287] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.820650][ T5287] usb 1-1: config 0 has no interface number 0 [ 84.840304][ T5287] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 84.859298][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.871550][ T5287] usb 1-1: Product: syz [ 84.878732][ T5287] usb 1-1: Manufacturer: syz [ 84.883711][ T5287] usb 1-1: SerialNumber: syz [ 84.917884][ T5287] usb 1-1: config 0 descriptor?? [ 84.953256][ T5287] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 85.060005][ T5897] ALSA: mixer_oss: invalid OSS volume '' [ 85.314697][ T5283] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 85.351233][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.474314][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 85.482483][ T5907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.487487][ T5283] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1064, setting to 1024 [ 85.512864][ T5283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 85.529693][ T5283] usb 4-1: New USB device found, idVendor=12d1, idProduct=5a95, bcdDevice=21.27 [ 85.539942][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.552276][ T5283] usb 4-1: Product: syz [ 85.558478][ T5283] usb 4-1: Manufacturer: syz [ 85.573650][ T5283] usb 4-1: SerialNumber: syz [ 85.582073][ T5283] usb 4-1: config 0 descriptor?? [ 85.598293][ T5894] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 85.617229][ T5283] option 4-1:0.0: GSM modem (1-port) converter detected [ 85.633212][ T5283] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 85.653610][ T5911] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 85.905791][ T5290] usb 4-1: USB disconnect, device number 9 [ 85.941290][ T5290] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 86.012476][ T5290] option 4-1:0.0: device disconnected [ 88.309129][ T5287] gspca_spca1528: reg_w err -71 [ 88.321738][ T5287] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 90.644105][ C0] sched: DL replenish lagged too much [ 109.903471][ T5287] usb 1-1: USB disconnect, device number 6 [ 218.785077][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.791467][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.090825][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.104279][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.844336][ T30] INFO: task kworker/1:6:5285 blocked for more than 140 seconds. [ 240.852324][ T30] Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 241.070027][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 241.074308][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 241.076156][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 241.090966][ T5235] Bluetooth: hci0: command tx timeout [ 241.097068][ T5235] Bluetooth: hci2: command tx timeout [ 241.102498][ T5235] Bluetooth: hci4: command tx timeout [ 241.134312][ T30] task:kworker/1:6 state:D stack:19992 pid:5285 tgid:5285 ppid:2 flags:0x00004000 [ 241.824370][ T30] Workqueue: events_power_efficient crda_timeout_work [ 241.831242][ T30] Call Trace: [ 243.244279][ T30] [ 243.247286][ T30] __schedule+0x1895/0x4b30 [ 243.251889][ T30] ? __pfx___schedule+0x10/0x10 [ 243.324327][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 243.330398][ T30] ? __pfx_lock_release+0x10/0x10 [ 243.394267][ T30] ? kick_pool+0x45c/0x620 [ 243.398769][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.404011][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 243.550640][ T30] ? schedule+0x90/0x320 [ 243.585193][ T30] schedule+0x14b/0x320 [ 243.589423][ T30] schedule_preempt_disabled+0x13/0x30 [ 243.620245][ T30] __mutex_lock+0x6a7/0xd70 [ 243.634193][ T30] ? __mutex_lock+0x52a/0xd70 [ 243.638979][ T30] ? crda_timeout_work+0x15/0x50 [ 243.643940][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 243.664160][ T30] ? process_scheduled_works+0x976/0x1850 [ 243.672577][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.687917][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.708652][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.724326][ T30] crda_timeout_work+0x15/0x50 [ 243.728577][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 SYZFAIL: failed to send rpc fd=3 want=752 sent=0 n=-1 (errno 32: Broken pipe) [ 243.729303][ T30] process_scheduled_works+0xa63/0x1850 [ 243.736972][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 243.750732][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.772705][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 243.820248][ T30] ? assign_work+0x364/0x3d0 [ 243.829812][ T30] worker_thread+0x870/0xd30 [ 243.842581][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 243.848623][ T30] ? __kthread_parkme+0x169/0x1d0 [ 243.853693][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.859138][ T30] kthread+0x2f0/0x390 [ 243.863236][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.868613][ T30] ? __pfx_kthread+0x10/0x10 [ 243.873234][ T30] ret_from_fork+0x4b/0x80 [ 243.877747][ T30] ? __pfx_kthread+0x10/0x10 [ 243.882361][ T30] ret_from_fork_asm+0x1a/0x30 [ 243.887255][ T30] [ 243.890342][ T30] [ 243.890342][ T30] Showing all locks held in the system: [ 243.898334][ T30] 1 lock held by khungtaskd/30: [ 243.903204][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 243.914328][ T30] 3 locks held by kworker/u8:3/51: [ 243.919560][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 243.931428][ T30] #1: ffffc90000bc7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 243.943959][ T30] #2: ffff888074a10768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 243.954234][ T30] 4 locks held by kworker/u9:0/53: [ 243.959757][ T30] #0: ffff88802cfcf148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 243.970813][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 243.983554][ T30] #2: ffff88802adc4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 243.993539][ T30] #3: ffff88802adc4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 244.003352][ T30] 3 locks held by kworker/u8:4/64: [ 244.008514][ T30] 3 locks held by kworker/1:1/80: [ 244.013639][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.026143][ T30] #1: ffffc900020cfd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.037316][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 244.047478][ T30] 3 locks held by kworker/R-ipv6_/2725: [ 244.053135][ T30] #0: ffff88814bf6c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.065050][ T30] #1: ffffc900099f7c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.079011][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 244.088736][ T30] 4 locks held by kworker/u8:7/3331: [ 244.094196][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.106010][ T30] #1: ffffc9000aac7d00 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.118873][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 244.128819][ T30] #3: ffffffff8e9ed808 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xd7/0x260 [ 244.139760][ T30] 6 locks held by kworker/u9:1/4620: [ 244.145162][ T30] #0: ffff88807f049148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.156077][ T30] #1: ffffc9000df8fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.168950][ T30] #2: ffff888029458d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 244.179113][ T30] #3: ffff888029458078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 244.188897][ T30] #4: ffffffff8fe3dc68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 244.198785][ T30] #5: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 244.209979][ T30] 1 lock held by klogd/4672: [ 244.214622][ T30] 2 locks held by getty/4988: [ 244.219308][ T30] #0: ffff88802e4e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 244.229207][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 244.239451][ T30] 5 locks held by kworker/u9:2/5233: [ 244.244836][ T30] #0: ffff88802cfce148 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.255758][ T30] #1: ffffc90003b97d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.268631][ T30] #2: ffff88802adc0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 244.278795][ T30] #3: ffff88802adc0078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 244.288713][ T30] #4: ffffffff8fe3dc68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 244.298636][ T30] 3 locks held by kworker/u9:4/5238: [ 244.303955][ T30] #0: ffff88815321e948 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.315051][ T30] #1: ffffc90003c17d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.327311][ T30] #2: ffff88807b830d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 244.336884][ T30] 4 locks held by kworker/1:3/5240: [ 244.342105][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.353194][ T30] #1: ffffc90003ae7d00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.363175][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x8d0 [ 244.372064][ T30] #3: ffff888074a10768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_process_self_managed_hints+0xb9/0x1a0 [ 244.383322][ T30] 5 locks held by kworker/u9:6/5243: [ 244.388695][ T30] #0: ffff88802cfc9148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.399629][ T30] #1: ffffc90003c97d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.412390][ T30] #2: ffff888028bd8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 244.422357][ T30] #3: ffff888028bd8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 244.432155][ T30] #4: ffffffff8fe3dc68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 244.442080][ T30] 5 locks held by kworker/u9:7/5244: [ 244.447714][ T30] #0: ffff888141b8f148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.458713][ T30] #1: ffffc90003ca7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.471537][ T30] #2: ffff888029ae4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 244.481747][ T30] #3: ffff888029ae4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 244.491593][ T30] #4: ffffffff8fe3dc68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 244.501492][ T30] 4 locks held by syz-executor/5249: [ 244.506886][ T30] 2 locks held by kworker/1:4/5283: [ 244.512100][ T30] 3 locks held by kworker/1:6/5285: [ 244.517418][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 244.529991][ T30] #1: ffffc90004067d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 244.540987][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 244.550359][ T30] 1 lock held by syz.0.61/5438: [ 244.555293][ T30] #0: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 244.566302][ T30] 1 lock held by dhcpcd/5919: [ 244.571003][ T30] #0: ffff8880952e0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 244.581045][ T30] 1 lock held by dhcpcd/5920: [ 244.585996][ T30] #0: ffff8880952e6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 244.595831][ T30] 1 lock held by dhcpcd/5921: [ 244.600531][ T30] #0: ffff8880216e6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 244.610451][ T30] 1 lock held by dhcpcd/5922: [ 244.615218][ T30] #0: ffff88807445c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 244.625049][ T30] 1 lock held by dhcpcd/5923: [ 244.629740][ T30] #0: ffff888029434258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 244.639548][ T30] 1 lock held by dhcpcd/5925: [ 244.644295][ T30] #0: ffff8880294f2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 244.654204][ T30] [ 244.656554][ T30] ============================================= [ 244.656554][ T30] [ 244.665067][ T30] NMI backtrace for cpu 1 [ 244.669413][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 244.679598][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.689688][ T30] Call Trace: [ 244.692983][ T30] [ 244.695934][ T30] dump_stack_lvl+0x241/0x360 [ 244.700645][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.705906][ T30] ? __pfx__printk+0x10/0x10 [ 244.710585][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 244.715541][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 244.721000][ T30] ? _printk+0xd5/0x120 [ 244.725179][ T30] ? __pfx__printk+0x10/0x10 [ 244.729856][ T30] ? __wake_up_klogd+0xcc/0x110 [ 244.734706][ T30] ? __pfx__printk+0x10/0x10 [ 244.739296][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 244.744319][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 244.750297][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 244.756365][ T30] watchdog+0xff4/0x1040 [ 244.760604][ T30] ? watchdog+0x1ea/0x1040 [ 244.765026][ T30] ? __pfx_watchdog+0x10/0x10 [ 244.769698][ T30] kthread+0x2f0/0x390 [ 244.773849][ T30] ? __pfx_watchdog+0x10/0x10 [ 244.778523][ T30] ? __pfx_kthread+0x10/0x10 [ 244.783111][ T30] ret_from_fork+0x4b/0x80 [ 244.787527][ T30] ? __pfx_kthread+0x10/0x10 [ 244.792110][ T30] ret_from_fork_asm+0x1a/0x30 [ 244.796878][ T30] [ 244.800568][ T30] Sending NMI from CPU 1 to CPUs 0: [ 244.806182][ C0] NMI backtrace for cpu 0 [ 244.806195][ C0] CPU: 0 UID: 0 PID: 5296 Comm: syz.2.6 Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 244.806214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.806224][ C0] RIP: 0010:__list_del_entry_valid_or_report+0xad/0x140 [ 244.806252][ C0] Code: e8 78 6f 3c fd 48 8b 13 4c 39 fa 75 78 49 8d 5e 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 56 6f 3c fd 48 8b 13 <4c> 39 fa 75 6b b0 01 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 c7 [ 244.806271][ C0] RSP: 0018:ffffc900041074f8 EFLAGS: 00000246 [ 244.806286][ C0] RAX: 1ffff1100ee52ce8 RBX: ffff888077296740 RCX: 0000000000000001 [ 244.806298][ C0] RDX: ffff88805dfc71d8 RSI: 0000000000000004 RDI: ffff88805dfc71e0 [ 244.806309][ C0] RBP: ffffc90004107660 R08: 0000000000000003 R09: fffff52000820e94 [ 244.806320][ C0] R10: dffffc0000000000 R11: fffff52000820e94 R12: dffffc0000000000 [ 244.806332][ C0] R13: ffff88805dfc71d8 R14: ffff888077296738 R15: ffff88805dfc71d8 [ 244.806345][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 244.806358][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 244.806370][ C0] CR2: 00000000f7f86e40 CR3: 0000000060f82000 CR4: 00000000003506f0 [ 244.806384][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.806393][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.806403][ C0] Call Trace: [ 244.806409][ C0] [ 244.806415][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 244.806434][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 244.806458][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 244.806475][ C0] ? nmi_handle+0x2a/0x5a0 [ 244.806497][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 244.806517][ C0] ? nmi_handle+0x14f/0x5a0 [ 244.806531][ C0] ? nmi_handle+0x2a/0x5a0 [ 244.806547][ C0] ? __list_del_entry_valid_or_report+0xad/0x140 [ 244.806568][ C0] ? default_do_nmi+0x63/0x160 [ 244.806586][ C0] ? exc_nmi+0x123/0x1f0 [ 244.806619][ C0] ? end_repeat_nmi+0xf/0x53 [ 244.806647][ C0] ? __list_del_entry_valid_or_report+0xad/0x140 [ 244.806669][ C0] ? __list_del_entry_valid_or_report+0xad/0x140 [ 244.806690][ C0] ? __list_del_entry_valid_or_report+0xad/0x140 [ 244.806711][ C0] [ 244.806716][ C0] [ 244.806723][ C0] evict+0x1d6/0x9b0 [ 244.806747][ C0] ? __pfx_evict+0x10/0x10 [ 244.806774][ C0] ? _raw_spin_unlock+0x28/0x50 [ 244.806795][ C0] ? iput+0x713/0xa50 [ 244.806814][ C0] __dentry_kill+0x20d/0x630 [ 244.806834][ C0] ? shrink_kill+0x8d/0x2c0 [ 244.806853][ C0] shrink_kill+0xa9/0x2c0 [ 244.806871][ C0] shrink_dentry_list+0x2c0/0x5b0 [ 244.806892][ C0] shrink_dcache_parent+0xcb/0x3b0 [ 244.806915][ C0] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 244.806941][ C0] do_one_tree+0x23/0xe0 [ 244.806961][ C0] shrink_dcache_for_umount+0xb4/0x180 [ 244.806982][ C0] generic_shutdown_super+0x6a/0x2d0 [ 244.807004][ C0] kill_anon_super+0x3b/0x70 [ 244.807025][ C0] proc_kill_sb+0x8d/0xd0 [ 244.807042][ C0] deactivate_locked_super+0xc4/0x130 [ 244.807063][ C0] cleanup_mnt+0x41f/0x4b0 [ 244.807084][ C0] task_work_run+0x24f/0x310 [ 244.807100][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 244.807126][ C0] ? __pfx_task_work_run+0x10/0x10 [ 244.807142][ C0] ? do_exit+0xa2a/0x28e0 [ 244.807156][ C0] ? kmem_cache_free+0x1a2/0x420 [ 244.807176][ C0] ? do_exit+0xa2a/0x28e0 [ 244.807192][ C0] do_exit+0xa2f/0x28e0 [ 244.807210][ C0] ? __pfx_do_exit+0x10/0x10 [ 244.807227][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.807251][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.807275][ C0] do_group_exit+0x207/0x2c0 [ 244.807289][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.807309][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 244.807331][ C0] get_signal+0x16a3/0x1740 [ 244.807348][ C0] ? do_nanosleep+0x80/0x600 [ 244.807372][ C0] ? __pfx_get_signal+0x10/0x10 [ 244.807389][ C0] ? hrtimer_nanosleep+0x331/0x3f0 [ 244.807409][ C0] arch_do_signal_or_restart+0x96/0x860 [ 244.807430][ C0] ? __pfx_get_old_timespec32+0x10/0x10 [ 244.807451][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.807474][ C0] ? __se_sys_clock_nanosleep_time32+0x32d/0x3c0 [ 244.807499][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 244.807521][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 244.807544][ C0] __do_fast_syscall_32+0xc4/0x110 [ 244.807559][ C0] ? exc_page_fault+0x590/0x8c0 [ 244.807581][ C0] do_fast_syscall_32+0x34/0x80 [ 244.807595][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.807611][ C0] RIP: 0023:0xf73ad579 [ 244.807628][ C0] Code: Unable to access opcode bytes at 0xf73ad54f. [ 244.807635][ C0] RSP: 002b:00000000f5696470 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 244.807651][ C0] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 244.807661][ C0] RDX: 00000000f56964a4 RSI: 00000000f569649c RDI: 00000000f56964a4 [ 244.807672][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.807682][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.807691][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.807707][ C0] [ 244.808207][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 245.318078][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 245.328227][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.338273][ T30] Call Trace: [ 245.341551][ T30] [ 245.344475][ T30] dump_stack_lvl+0x241/0x360 [ 245.349160][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.354364][ T30] ? __pfx__printk+0x10/0x10 [ 245.358948][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.364931][ T30] ? vscnprintf+0x5d/0x90 [ 245.369265][ T30] panic+0x349/0x880 [ 245.373158][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 245.379307][ T30] ? __pfx_panic+0x10/0x10 [ 245.383721][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 245.389093][ T30] ? __irq_work_queue_local+0x137/0x410 [ 245.395103][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 245.400476][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 245.406623][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 245.412773][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 245.418920][ T30] watchdog+0x1033/0x1040 [ 245.423248][ T30] ? watchdog+0x1ea/0x1040 [ 245.427662][ T30] ? __pfx_watchdog+0x10/0x10 [ 245.432334][ T30] kthread+0x2f0/0x390 [ 245.436395][ T30] ? __pfx_watchdog+0x10/0x10 [ 245.441066][ T30] ? __pfx_kthread+0x10/0x10 [ 245.445648][ T30] ret_from_fork+0x4b/0x80 [ 245.450060][ T30] ? __pfx_kthread+0x10/0x10 [ 245.454642][ T30] ret_from_fork_asm+0x1a/0x30 [ 245.459409][ T30] [ 245.462777][ T30] Kernel Offset: disabled [ 245.467100][ T30] Rebooting in 86400 seconds..