last executing test programs: 4.965232792s ago: executing program 2 (id=396): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000001180)={0x0, 0x0, 0x6, "dee6eb642785"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.009571641s ago: executing program 3 (id=410): syz_emit_ethernet(0x3b6, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) 3.903619953s ago: executing program 0 (id=411): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004600)=[{{0x0, 0xfffffffffffffea2, &(0x7f0000000500)=[{&(0x7f0000000580)="e785c01c8a9a5df750a2257528da98d3fa73c160aadedae620b85a24039202278be04d2df1fd288f0fe47c6cceb1eeb6e5222aae01b979c06f90c3e4c11cfee448aea76d84404fa193d76de6a1af857f6052661a5bb3fccce0406106953a1ecb7fc67d28dd8b91a9a5faec23e88486877245c21f4b99130e2a49f76c7a16805dafd1533035e06b768f28e5a2d575d51d05450651fc086744", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="f943c0045145229b34c0791d409910b93aee9dc5be09646832e7159f56b8d8630fe0199e2e2e78a6d4ca87", 0x2b}, {0x0}, {&(0x7f00000003c0)="15ac3dbf328a035374e0b6775046b2c33154e632241cb64f6a69b6e0c6a9abd86dfd345c7b625694aa7daa15888896ed9e95fad15c9400eeec131957075e55f435e9b227e179010af2e0141cc2b935106b5711d665d8478296b7a6222becf3644c0f2aca4cd1f72574852baa8f8021c0eab10a29be79c56629a71ddcf8392aa5682df12a868587e5f35888e7b5ceab0c5abaf4926457e0", 0x97}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000002080)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001d40)="e9949163e8d85204785b6aa49d3cda7516cacccf259c", 0x23}, {0x0}, {0x0, 0x11}], 0x6}}, {{0x0, 0xffffffffffffff7f, &(0x7f00000043c0)=[{&(0x7f0000000640)="785a175358dacb9fb1b9ea78165554eb1c1b5fa5f1f4a05603882447952ba8ec905e2e0418976f2046b76b483db8c8295e7023a8bfee125d29db0552138dc126246b0ce9c44d972d2b3d17b1c910bb430f4cdbf951466c5aa462910c07894ffd6f40950c2531a9d676184e7f2eed0368e8edc9e3c865914a80", 0x1}], 0x1}}], 0x4, 0x20000000) 3.641204373s ago: executing program 0 (id=413): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="d4000000190019a9000000000000000002200000ff02ff000000000008000100ac141412"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2ca) splice(r0, 0x0, r2, 0x0, 0x84ffe0, 0x0) 3.640648781s ago: executing program 3 (id=414): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.850415821s ago: executing program 2 (id=423): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x8}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.68326574s ago: executing program 0 (id=425): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)='0', 0x1) read$char_usb(r1, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 2.613092586s ago: executing program 2 (id=427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000001a80)="091b8cf9e3f1b2f2a3d4cc3617794c5bf624db1aeb4129ce4557692025b75e1d3bebb9f782", 0x25, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/35, 0x23}], 0x1}, 0x0) 2.411150792s ago: executing program 2 (id=429): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x0, "fa02c8098000", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x0, "ea02cefa5c8008535d47000000504fffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2}) close_range(r0, 0xffffffffffffffff, 0x0) 2.325429902s ago: executing program 2 (id=431): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 2.140958226s ago: executing program 2 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10ffff) 2.031056379s ago: executing program 1 (id=435): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) memfd_secret(0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x1e, 0x305}, 0x14}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) 1.911070914s ago: executing program 1 (id=437): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x2, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="9a", 0x1}]) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000e00)={0x50}, 0x50) 1.642819985s ago: executing program 4 (id=439): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={r2, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) 1.54043192s ago: executing program 4 (id=440): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040), 0x4) listen(r0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.502609866s ago: executing program 1 (id=441): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0xfffffffe, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @dev, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00=$', 0x28, 0x3a, 0x0, @remote, @empty, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @private2}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x12, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b688a8", 0x0, 0x739d, 0x0, 0x20}, 0x28) 1.250078902s ago: executing program 3 (id=442): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x52f5, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x100000}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 1.201879605s ago: executing program 1 (id=443): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 1.106053393s ago: executing program 3 (id=444): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = dup(r0) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 891.275113ms ago: executing program 1 (id=445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = gettid() r3 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, &(0x7f0000000040)={r3}) 865.166059ms ago: executing program 1 (id=446): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 643.130464ms ago: executing program 4 (id=447): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) epoll_pwait2(r0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000200)={0x20000006}) 436.904345ms ago: executing program 0 (id=448): r0 = syz_io_uring_setup(0x1361, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}) setreuid(0x0, 0x0) io_uring_enter(r0, 0x2d3c, 0x0, 0x0, 0x0, 0x0) 419.730287ms ago: executing program 4 (id=449): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x2000000000000146, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, 0x0}) 291.69374ms ago: executing program 0 (id=450): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300"], 0x34}}, 0x0) 209.003279ms ago: executing program 4 (id=451): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 127.109094ms ago: executing program 3 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x4, 0x3f}, 0x48) 92.649986ms ago: executing program 0 (id=453): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r1, 0x0, {0x0, 0xff}}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='h', 0x1}, {&(0x7f0000003380)="266aaaa756eef0f0", 0x8}], 0x2) write$binfmt_elf64(r0, &(0x7f0000000940)=ANY=[], 0x7c8) 20.623278ms ago: executing program 4 (id=454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000040)={0x2}, 0x75) 0s ago: executing program 3 (id=455): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x12, @string={0x12, 0x3, "0f4495891bab452e8d0f39d8adcbf68c"}}, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 75.547784][ T5214] cgroup: Unknown subsys name 'net' [ 75.685272][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.402360][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.045815][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.054226][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.062607][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.071756][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.079567][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.088145][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.096608][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.116104][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.117100][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.133396][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.141916][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.142603][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.158319][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.165815][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.167406][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.173111][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.181808][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.195499][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.200291][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.203013][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.210004][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.225444][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.229805][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.241378][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.242462][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.260022][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.267720][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.267845][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.312887][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.327137][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.806497][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 80.977669][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 81.049124][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 81.076203][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.085180][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.092880][ T5226] bridge_slave_0: entered allmulticast mode [ 81.101144][ T5226] bridge_slave_0: entered promiscuous mode [ 81.158269][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.165702][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.172910][ T5226] bridge_slave_1: entered allmulticast mode [ 81.180576][ T5226] bridge_slave_1: entered promiscuous mode [ 81.246334][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 81.287756][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.301764][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.442372][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.449763][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.458178][ T5225] bridge_slave_0: entered allmulticast mode [ 81.466428][ T5225] bridge_slave_0: entered promiscuous mode [ 81.473862][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.481174][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.488887][ T5230] bridge_slave_0: entered allmulticast mode [ 81.496662][ T5230] bridge_slave_0: entered promiscuous mode [ 81.510123][ T5226] team0: Port device team_slave_0 added [ 81.516625][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 81.540059][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.547459][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.554777][ T5225] bridge_slave_1: entered allmulticast mode [ 81.561900][ T5225] bridge_slave_1: entered promiscuous mode [ 81.569095][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.577237][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.584546][ T5230] bridge_slave_1: entered allmulticast mode [ 81.591983][ T5230] bridge_slave_1: entered promiscuous mode [ 81.600872][ T5226] team0: Port device team_slave_1 added [ 81.745116][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.752119][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.779046][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.799297][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.806652][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.813860][ T5224] bridge_slave_0: entered allmulticast mode [ 81.822534][ T5224] bridge_slave_0: entered promiscuous mode [ 81.832756][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.845190][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.862172][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.869211][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.895496][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.920005][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.927629][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.935076][ T5224] bridge_slave_1: entered allmulticast mode [ 81.942136][ T5224] bridge_slave_1: entered promiscuous mode [ 81.973679][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.006945][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.071775][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.118458][ T5225] team0: Port device team_slave_0 added [ 82.179346][ T5230] team0: Port device team_slave_0 added [ 82.207134][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.224586][ T5225] team0: Port device team_slave_1 added [ 82.265686][ T5243] Bluetooth: hci1: command tx timeout [ 82.291057][ T5230] team0: Port device team_slave_1 added [ 82.306250][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.313406][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.321313][ T5236] bridge_slave_0: entered allmulticast mode [ 82.330668][ T5236] bridge_slave_0: entered promiscuous mode [ 82.345008][ T5243] Bluetooth: hci3: command tx timeout [ 82.350816][ T54] Bluetooth: hci4: command tx timeout [ 82.356843][ T5238] Bluetooth: hci0: command tx timeout [ 82.418411][ T5226] hsr_slave_0: entered promiscuous mode [ 82.425160][ T54] Bluetooth: hci2: command tx timeout [ 82.432476][ T5226] hsr_slave_1: entered promiscuous mode [ 82.457037][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.464305][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.472185][ T5236] bridge_slave_1: entered allmulticast mode [ 82.480664][ T5236] bridge_slave_1: entered promiscuous mode [ 82.503178][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.514188][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.540744][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.556579][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.563573][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.589874][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.629852][ T5224] team0: Port device team_slave_0 added [ 82.639085][ T5224] team0: Port device team_slave_1 added [ 82.670886][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.678235][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.704346][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.770403][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.777714][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.804389][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.818123][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.832617][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.857332][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.864345][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.890736][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.951111][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.958328][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.984388][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.080871][ T5236] team0: Port device team_slave_0 added [ 83.091970][ T5225] hsr_slave_0: entered promiscuous mode [ 83.100266][ T5225] hsr_slave_1: entered promiscuous mode [ 83.106823][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.114766][ T5225] Cannot create hsr debugfs directory [ 83.152529][ T5230] hsr_slave_0: entered promiscuous mode [ 83.159263][ T5230] hsr_slave_1: entered promiscuous mode [ 83.166470][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.174064][ T5230] Cannot create hsr debugfs directory [ 83.195543][ T5236] team0: Port device team_slave_1 added [ 83.219824][ T5224] hsr_slave_0: entered promiscuous mode [ 83.227043][ T5224] hsr_slave_1: entered promiscuous mode [ 83.233514][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.242151][ T5224] Cannot create hsr debugfs directory [ 83.343610][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.351080][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.377222][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.391477][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.401382][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.430743][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.681850][ T5236] hsr_slave_0: entered promiscuous mode [ 83.690309][ T5236] hsr_slave_1: entered promiscuous mode [ 83.697730][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.705556][ T5236] Cannot create hsr debugfs directory [ 83.844267][ T5226] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.856752][ T5226] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.887812][ T5226] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.899665][ T5226] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.049228][ T5230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.068506][ T5230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.090206][ T5230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.101220][ T5230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.223011][ T5225] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.237502][ T5225] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.263535][ T5225] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.277745][ T5225] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.345020][ T54] Bluetooth: hci1: command tx timeout [ 84.352271][ T5224] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.383857][ T5224] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.397519][ T5224] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.410016][ T5224] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.426287][ T5243] Bluetooth: hci3: command tx timeout [ 84.431775][ T5243] Bluetooth: hci0: command tx timeout [ 84.437524][ T54] Bluetooth: hci4: command tx timeout [ 84.483756][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.505541][ T5243] Bluetooth: hci2: command tx timeout [ 84.565244][ T5236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.575964][ T5236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.603189][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.621204][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.649633][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.657069][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.671801][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.710705][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.717876][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.777532][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.907560][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.921195][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.953875][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.008291][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.015639][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.059647][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.066892][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.113826][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.150923][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.167264][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.174466][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.212423][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.231202][ T2545] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.238467][ T2545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.302235][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.337724][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.371595][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.379440][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.419881][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.443836][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.451135][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.460837][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.468037][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.509757][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.516993][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.780833][ T5226] veth0_vlan: entered promiscuous mode [ 85.804653][ T5226] veth1_vlan: entered promiscuous mode [ 85.840838][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.008637][ T5226] veth0_macvtap: entered promiscuous mode [ 86.040422][ T5226] veth1_macvtap: entered promiscuous mode [ 86.143634][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.184493][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.197692][ T5230] veth0_vlan: entered promiscuous mode [ 86.239717][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.256933][ T5226] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.267598][ T5226] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.277764][ T5226] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.286658][ T5226] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.301708][ T5230] veth1_vlan: entered promiscuous mode [ 86.383438][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.425183][ T5243] Bluetooth: hci1: command tx timeout [ 86.459912][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.488460][ T5225] veth0_vlan: entered promiscuous mode [ 86.505955][ T5243] Bluetooth: hci0: command tx timeout [ 86.511446][ T5243] Bluetooth: hci4: command tx timeout [ 86.517208][ T54] Bluetooth: hci3: command tx timeout [ 86.580310][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.600744][ T5243] Bluetooth: hci2: command tx timeout [ 86.615210][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.642849][ T5225] veth1_vlan: entered promiscuous mode [ 86.709252][ T5230] veth0_macvtap: entered promiscuous mode [ 86.729866][ T5236] veth0_vlan: entered promiscuous mode [ 86.743786][ T5230] veth1_macvtap: entered promiscuous mode [ 86.761464][ T2530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.779019][ T2530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.837945][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.849974][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.862822][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.884467][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.897359][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.911067][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.919820][ T5225] veth0_macvtap: entered promiscuous mode [ 86.933916][ T5236] veth1_vlan: entered promiscuous mode [ 86.954057][ T5230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.964092][ T5230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.976543][ T5230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.986545][ T5230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.001942][ T5225] veth1_macvtap: entered promiscuous mode [ 87.118422][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.146637][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.164806][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.184234][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.198810][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.211160][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.221947][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.232486][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.244057][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.262358][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.324324][ T5225] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.361789][ T5225] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.368376][ T5313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.371977][ T5225] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.399782][ T5225] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.485173][ T5236] veth0_macvtap: entered promiscuous mode [ 87.527998][ T5224] veth0_vlan: entered promiscuous mode [ 87.544586][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.556595][ T5224] veth1_vlan: entered promiscuous mode [ 87.566815][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.576692][ T5236] veth1_macvtap: entered promiscuous mode [ 87.708099][ T5224] veth0_macvtap: entered promiscuous mode [ 87.769910][ T5317] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 87.770670][ T2530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.785140][ T2530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.790012][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.796737][ T5224] veth1_macvtap: entered promiscuous mode [ 87.817123][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.822711][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.828790][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.846620][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.859412][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.869944][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.880660][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.893378][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.968128][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.983163][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.995812][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.007099][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.017651][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.028967][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.039487][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.050396][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.075235][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.118754][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.131586][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.141791][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.152409][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.163292][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.174043][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.193206][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.217925][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.233491][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.242656][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.257807][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.280528][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.303834][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.309535][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.332490][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.337058][ T29] audit: type=1326 audit(1725475523.232:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5323 comm="syz.0.9" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9d717cef9 code=0x0 [ 88.343174][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.379330][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.389398][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.400489][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.410882][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.421558][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.433965][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.492297][ T5224] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.516941][ T5224] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.516982][ T5243] Bluetooth: hci1: command tx timeout [ 88.532002][ T5224] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.540946][ T5224] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.604860][ T5243] Bluetooth: hci4: command tx timeout [ 88.610351][ T5243] Bluetooth: hci3: command tx timeout [ 88.617164][ T5238] Bluetooth: hci0: command tx timeout [ 88.665584][ T5238] Bluetooth: hci2: command tx timeout [ 88.887316][ T2545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.908425][ T2545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.034280][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.059126][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.073516][ T2530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.109583][ T2530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.246065][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.259751][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.378301][ T5344] loop0: detected capacity change from 0 to 7 [ 89.401733][ T5344] Dev loop0: unable to read RDB block 7 [ 89.426446][ T5344] loop0: AHDI p4 [ 89.440212][ T5344] loop0: partition table partially beyond EOD, truncated [ 89.529866][ T5330] syz.2.3 (5330) used greatest stack depth: 17200 bytes left [ 90.239737][ T5371] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 90.964159][ T5396] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 90.973486][ T5392] sctp: [Deprecated]: syz.1.35 (pid 5392) Use of int in maxseg socket option. [ 90.973486][ T5392] Use struct sctp_assoc_value instead [ 90.995182][ T5396] netlink: 9116 bytes leftover after parsing attributes in process `syz.0.33'. [ 91.004246][ T5396] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 91.059329][ T5396] netlink: 185 bytes leftover after parsing attributes in process `syz.0.33'. [ 91.092767][ T5401] netlink: 172 bytes leftover after parsing attributes in process `syz.4.34'. [ 91.451654][ T29] audit: type=1326 audit(1725475526.352:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5409 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d717cef9 code=0x7ffc0000 [ 91.546818][ T29] audit: type=1326 audit(1725475526.392:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5409 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff9d717cef9 code=0x7ffc0000 [ 91.634201][ T29] audit: type=1326 audit(1725475526.392:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5409 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d717cef9 code=0x7ffc0000 [ 91.728386][ T29] audit: type=1326 audit(1725475526.392:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5409 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9d717cef9 code=0x7ffc0000 [ 91.882821][ T5423] netlink: 5288 bytes leftover after parsing attributes in process `syz.2.47'. [ 91.909554][ T5425] process 'syz.4.50' launched './file0' with NULL argv: empty string added [ 91.922350][ T5423] openvswitch: netlink: IP tunnel dst address not specified [ 92.119405][ T5433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 92.168497][ T5433] netlink: 'syz.1.49': attribute type 7 has an invalid length. [ 92.197434][ T25] cfg80211: failed to load regulatory.db [ 92.221544][ T5433] netlink: 'syz.1.49': attribute type 8 has an invalid length. [ 92.280633][ T5433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 92.368163][ T5433] gretap0: entered promiscuous mode [ 92.384220][ T5433] batadv_slave_1: entered promiscuous mode [ 92.693924][ T5453] input: syz1 as /devices/virtual/input/input5 [ 92.706309][ T5279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.919027][ T5279] usb 1-1: Using ep0 maxpacket: 8 [ 92.947508][ T5279] usb 1-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01 [ 92.961217][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.982406][ T5279] usb 1-1: config 0 descriptor?? [ 93.031357][ T5279] usb 1-1: unknown interface protocol 0x3f, assuming v1 [ 93.039546][ T5279] usb 1-1: cannot find UAC_HEADER [ 93.169196][ T5279] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 93.488754][ T5276] usb 1-1: USB disconnect, device number 2 [ 93.644917][ T5478] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.844754][ T5482] tun0: tun_chr_ioctl cmd 1074025675 [ 93.854355][ T5482] tun0: persist enabled [ 93.868924][ T5482] tun0: tun_chr_ioctl cmd 1074025675 [ 93.877592][ T5482] tun0: persist disabled [ 94.262596][ T5496] Bluetooth: MGMT ver 1.23 [ 94.593821][ T25] kernel write not supported for file /snd/seq (pid: 25 comm: kworker/1:0) [ 95.247049][ T5276] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.426572][ T5504] IPVS: You probably need to specify IP address on multicast interface. [ 95.459911][ T5276] usb 2-1: Using ep0 maxpacket: 16 [ 95.466752][ T5504] IPVS: Error connecting to the multicast addr [ 95.510560][ T5276] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 95.534730][ T5276] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 95.574970][ T5276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.604736][ T5276] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 95.635901][ T5276] usb 2-1: config 0 has no interface number 0 [ 95.654878][ T5276] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 95.694686][ T5276] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 95.733809][ T5276] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.783326][ T5276] usb 2-1: config 0 interface 125 has no altsetting 0 [ 95.800078][ T5276] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 95.845069][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.853167][ T5276] usb 2-1: Product: syz [ 95.880781][ T5276] usb 2-1: Manufacturer: syz [ 95.894778][ T5276] usb 2-1: SerialNumber: syz [ 95.911717][ T5276] usb 2-1: config 0 descriptor?? [ 96.232593][ T8] usb 2-1: USB disconnect, device number 2 [ 96.418748][ T29] audit: type=1326 audit(1725475531.322:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5561 comm="syz.3.106" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa1d7cef9 code=0x0 [ 96.704743][ T5319] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.743010][ T5567] bridge0: entered promiscuous mode [ 96.749526][ T5566] bridge0: left promiscuous mode [ 96.922341][ T5319] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 96.942002][ T5319] usb 1-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 96.963599][ T5319] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 97.004895][ T5319] usb 1-1: config 0 has no interface number 0 [ 97.023285][ T5319] usb 1-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 97.045144][ T5319] usb 1-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 97.125312][ T5319] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 97.151894][ T5319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.178679][ T5319] usb 1-1: Product: syz [ 97.189743][ T5319] usb 1-1: Manufacturer: syz [ 97.198979][ T5319] usb 1-1: SerialNumber: syz [ 97.208854][ T5319] usb 1-1: config 0 descriptor?? [ 97.225978][ T5319] cdc_ether 1-1:0.185: skipping garbage [ 97.233155][ T5319] cdc_ether 1-1:0.185: skipping garbage [ 97.270692][ T5579] vlan2: entered promiscuous mode [ 97.312050][ T5319] cdc_ether 1-1:0.185: skipping garbage [ 97.317876][ T5319] usb 1-1: bad CDC descriptors [ 97.323103][ T5579] vlan2: entered allmulticast mode [ 97.323752][ T5319] usb 1-1: unsupported MDLM descriptors [ 97.372099][ T5579] hsr_slave_1: entered allmulticast mode [ 97.497268][ T4677] udevd[4677]: worker [5277] terminated by signal 33 (Unknown signal 33) [ 97.498945][ T25] usb 1-1: USB disconnect, device number 3 [ 97.529756][ T4677] udevd[4677]: worker [5277] failed while handling '/devices/virtual/block/loop2' [ 97.971317][ T5603] vxcan1: tx address claim with dest, not broadcast [ 98.264856][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.474788][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 98.500055][ T8] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 98.523914][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.560089][ T8] usb 2-1: config 0 descriptor?? [ 98.578949][ T8] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 99.410623][ T5280] usb 2-1: USB disconnect, device number 3 [ 99.487283][ T5645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'. [ 99.685948][ T5653] Bluetooth: MGMT ver 1.23 [ 99.692661][ T5653] Bluetooth: hci3: unsupported parameter 64512 [ 99.712450][ T5653] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 100.186294][ T5667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.151'. [ 100.262883][ T5673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.466042][ T5597] block nbd64: NBD_DISCONNECT [ 101.595153][ T5708] bridge0: port 3(macvlan2) entered blocking state [ 101.616068][ T5708] bridge0: port 3(macvlan2) entered disabled state [ 101.622897][ T5708] macvlan2: entered allmulticast mode [ 101.695655][ T5708] macvlan2: entered promiscuous mode [ 103.290007][ T5768] TCP: TCP_TX_DELAY enabled [ 103.324781][ T5319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.546920][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.582256][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.623137][ T5319] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.657063][ T5319] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.685633][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.734102][ T5319] usb 4-1: config 0 descriptor?? [ 104.193382][ T5319] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 104.227167][ T5319] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 104.277858][ T5319] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.565349][ T8] usb 4-1: USB disconnect, device number 2 [ 105.885982][ T5844] trusted_key: syz.3.229 sent an empty control message without MSG_MORE. [ 106.826940][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.242'. [ 106.935261][ T5319] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.126861][ T5319] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 107.141189][ T5319] usb 3-1: config 1 has no interface number 0 [ 107.154875][ T5319] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.193307][ T5319] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 107.277805][ T5319] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 107.314891][ T5319] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 23 [ 107.354470][ T5319] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.381879][ T5319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.403011][ T29] audit: type=1326 audit(1725475542.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5883 comm="syz.3.246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa1d7cef9 code=0x0 [ 107.403246][ T5319] usb 3-1: Product: syz [ 107.456915][ T5319] usb 3-1: Manufacturer: syz [ 107.468239][ T5319] usb 3-1: SerialNumber: syz [ 107.705395][ T5870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.254211][ T5908] hugetlbfs: Invalid gid '0x00000000ffffffff' [ 108.365399][ T5870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.379123][ T5319] cdc_ncm 3-1:1.1: bind() failure [ 108.571022][ T5276] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.628641][ T8] usb 3-1: USB disconnect, device number 2 [ 108.674209][ T5922] input: syz0 as /devices/virtual/input/input7 [ 108.779221][ T5276] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.797125][ T5276] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.832526][ T5276] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.845499][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.863084][ T5276] usb 2-1: SerialNumber: syz [ 109.119031][ T5276] usb 2-1: 0:2 : does not exist [ 109.146384][ T5276] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 109.208623][ T5276] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 109.278211][ T5276] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 109.327969][ T5276] usb 2-1: USB disconnect, device number 4 [ 109.414263][ T5608] udevd[5608]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.448650][ T5924] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 109.565528][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.788592][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 109.806352][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.835927][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.874521][ T8] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 109.923058][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.997041][ T8] usb 5-1: config 0 descriptor?? [ 110.302462][ T1577] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.459134][ T8] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 110.497661][ T8] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 110.514221][ T1577] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.524980][ T8] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 110.541543][ T5965] capability: warning: `syz.0.280' uses deprecated v2 capabilities in a way that may be insecure [ 110.543650][ T1577] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.552753][ T8] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 110.575247][ T5964] Bluetooth: hci3: unsupported parameter 64512 [ 110.581475][ T5964] Bluetooth: hci3: invalid len left 4, exp >= 104 [ 110.592102][ T1577] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.598451][ T8] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 110.602202][ T1577] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.627394][ T1577] usb 4-1: SerialNumber: syz [ 110.635986][ T5965] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 110.661705][ T8] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 110.674743][ T5965] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 110.709537][ T8] usb 5-1: USB disconnect, device number 2 [ 110.887968][ T1577] usb 4-1: 0:2 : does not exist [ 110.961250][ T1577] usb 4-1: USB disconnect, device number 3 [ 111.071347][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.291799][ T5977] dccp_v6_rcv: dropped packet with invalid checksum [ 111.625022][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.828136][ T5998] warning: `syz.3.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.863026][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.881281][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.941009][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.951438][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.960804][ T8] usb 2-1: Product: syz [ 111.978528][ T8] usb 2-1: Manufacturer: syz [ 111.989202][ T8] usb 2-1: SerialNumber: syz [ 112.020907][ T8] cdc_ncm 2-1:1.0: skipping garbage [ 112.320763][ T6009] Bluetooth: hci3: unsupported parameter 65535 [ 112.329592][ T6009] Bluetooth: hci3: invalid length 1, exp 2 for type 16 [ 113.078609][ T8] cdc_ncm 2-1:1.0: bind() failure [ 113.089985][ T8] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 113.125385][ T8] cdc_ncm 2-1:1.1: bind() failure [ 113.158250][ T8] usb 2-1: USB disconnect, device number 5 [ 113.249182][ T6037] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 113.268375][ T6037] netlink: 'syz.4.312': attribute type 3 has an invalid length. [ 113.278507][ T6037] netlink: 11386 bytes leftover after parsing attributes in process `syz.4.312'. [ 113.974261][ T6064] loop8: detected capacity change from 0 to 6 [ 114.038935][ T6064] Dev loop8: unable to read RDB block 6 [ 114.050916][ T6064] loop8: unable to read partition table [ 114.065189][ T6064] loop8: partition table beyond EOD, truncated [ 114.103327][ T6064] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 114.103327][ T6064] ) failed (rc=-5) [ 114.754949][ T5279] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.986413][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 115.028889][ T5279] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 115.062931][ T6113] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 115.074773][ T5279] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.098156][ T5279] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.130251][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.171639][ T5279] usbtmc 4-1:16.0: bulk endpoints not found [ 115.285812][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.513975][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.543875][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 115.567173][ T25] usb 5-1: config 1 has no interface number 0 [ 115.582785][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.624761][ T25] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 115.665834][ T25] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.708969][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.726697][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.761762][ T25] usb 5-1: Product: syz [ 115.782167][ T25] usb 5-1: Manufacturer: syz [ 115.801627][ T25] usb 5-1: SerialNumber: syz [ 115.936526][ T6143] Zero length message leads to an empty skb [ 116.480105][ T6158] netlink: 'syz.1.351': attribute type 10 has an invalid length. [ 116.492129][ T6158] macvlan0: entered promiscuous mode [ 116.525567][ T6158] macvlan0: entered allmulticast mode [ 116.564162][ T6158] veth1_vlan: entered allmulticast mode [ 116.615156][ T6158] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 116.717915][ T25] cdc_ncm 5-1:1.1: bind() failure [ 116.980549][ T5280] usb 5-1: USB disconnect, device number 3 [ 117.164410][ T6153] netlink: 96 bytes leftover after parsing attributes in process `syz.2.349'. [ 117.194984][ T5279] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.375010][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 117.397322][ T5279] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.432020][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.434736][ T5319] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.443640][ T5279] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.478269][ T5279] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.496324][ T5279] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.511911][ T25] usb 4-1: USB disconnect, device number 4 [ 117.518820][ T5279] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.537552][ T5279] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.593779][ T5279] usb 2-1: Manufacturer: syz [ 117.621934][ T5279] usb 2-1: config 0 descriptor?? [ 117.678255][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.704859][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.731435][ T5319] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 117.734726][ T6178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.360'. [ 117.744536][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.811138][ T5319] usb 1-1: config 0 descriptor?? [ 118.049480][ T5279] rc_core: IR keymap rc-hauppauge not found [ 118.065152][ T5279] Registered IR keymap rc-empty [ 118.075621][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.115252][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.159443][ T5279] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 118.235393][ T5279] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 118.260178][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.295092][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.295683][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.350554][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.366326][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.378377][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.397933][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.412101][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.419291][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.442108][ T5319] a4tech 0003:09DA:022B.0003: unknown main item tag 0x0 [ 118.455116][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.486051][ T5319] a4tech 0003:09DA:022B.0003: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.0-1/input0 [ 118.522345][ T5319] usb 1-1: USB disconnect, device number 4 [ 118.535045][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.584827][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.635496][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.667997][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.715210][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.774906][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.825388][ T5279] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.868923][ T5279] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 118.877169][ T5279] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.892897][ T5279] usb 2-1: USB disconnect, device number 6 [ 119.075115][ T5319] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.118102][ T6215] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 119.299586][ T5319] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.321300][ T5319] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.354712][ T5319] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.389026][ T5319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.433536][ T6209] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.477692][ T5319] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.976959][ T5319] usb 3-1: USB disconnect, device number 3 [ 121.321149][ T6251] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 121.462283][ T6258] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 121.470674][ T6258] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.392'. [ 121.508921][ T5319] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.557250][ T6260] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 121.744897][ T5319] usb 1-1: Using ep0 maxpacket: 8 [ 121.762953][ T5319] usb 1-1: config 0 has no interfaces? [ 121.778053][ T5319] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 121.790061][ T5319] usb 1-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 121.803048][ T5319] usb 1-1: Manufacturer: syz [ 121.832652][ T5319] usb 1-1: config 0 descriptor?? [ 122.085789][ T5319] usb 1-1: USB disconnect, device number 5 [ 122.095589][ T5276] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.157975][ T29] audit: type=1326 audit(1725475557.062:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6278 comm="syz.1.402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25b0d7cef9 code=0x0 [ 122.285772][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 122.314821][ T5276] usb 3-1: Using ep0 maxpacket: 8 [ 122.337549][ T5276] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 122.374869][ T5276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.393725][ T5276] usb 3-1: Product: syz [ 122.403485][ T5276] usb 3-1: Manufacturer: syz [ 122.408646][ T5276] usb 3-1: SerialNumber: syz [ 122.425629][ T5276] usb 3-1: config 0 descriptor?? [ 122.698414][ T5276] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 123.129872][ T5276] usb write operation failed. (-71) [ 123.166356][ T5276] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.197573][ T6310] netlink: 140 bytes leftover after parsing attributes in process `syz.0.413'. [ 123.205445][ T5276] dvbdev: DVB: registering new adapter (Terratec H7) [ 123.224261][ T5276] usb 3-1: media controller created [ 123.247170][ T5276] usb read operation failed. (-71) [ 123.256379][ T5276] usb write operation failed. (-71) [ 123.301454][ T5276] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 123.353239][ T5276] usb 3-1: USB disconnect, device number 4 [ 123.424759][ T5319] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.471779][ T6316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 123.634985][ T5319] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 123.654871][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.678637][ T5319] usb 4-1: Product: syz [ 123.687247][ T5319] usb 4-1: Manufacturer: syz [ 123.692918][ T5319] usb 4-1: SerialNumber: syz [ 123.703874][ T5319] usb 4-1: config 0 descriptor?? [ 123.712478][ T5319] ch341 4-1:0.0: ch341-uart converter detected [ 124.364756][ T1577] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.387895][ T6344] input: syz1 as /devices/virtual/input/input9 [ 124.560459][ T1577] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 124.593405][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.611573][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.649499][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.666109][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.676475][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.698428][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.719981][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.738988][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.757593][ T5319] ch341-uart ttyUSB0: failed to read break control: -71 [ 124.767872][ T5319] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 124.777457][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.787886][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.799920][ T5319] usb 4-1: USB disconnect, device number 5 [ 124.812634][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.836497][ T5319] ch341 4-1:0.0: device disconnected [ 124.844543][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.874916][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.892109][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.907690][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.924183][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.939170][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.953317][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.962653][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.972116][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.983550][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.992116][ T1577] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.004210][ T1577] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.016405][ T1577] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.028120][ T1577] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 125.037930][ T1577] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 125.046607][ T1577] usb 1-1: Product: syz [ 125.051360][ T1577] usb 1-1: Manufacturer: syz [ 125.057244][ T1577] usb 1-1: SerialNumber: syz [ 125.073145][ T1577] usb 1-1: config 0 descriptor?? [ 125.095030][ T1577] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.407673][ C1] usb 1-1: yurex_control_callback - control failed: -71 [ 125.408307][ T5279] usb 1-1: USB disconnect, device number 6 [ 125.456532][ T5279] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 125.553854][ T6377] macsec0: entered promiscuous mode [ 125.588094][ T6377] veth1_macvtap: left promiscuous mode [ 125.640099][ T6377] macsec0 (unregistering): left promiscuous mode [ 126.049213][ T29] audit: type=1326 audit(1725475560.952:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.072652][ T29] audit: type=1326 audit(1725475560.952:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.093940][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.100406][ T29] audit: type=1326 audit(1725475560.952:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.125003][ T1577] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.137793][ T29] audit: type=1326 audit(1725475560.952:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.159195][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.177288][ T29] audit: type=1326 audit(1725475560.952:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.224113][ T29] audit: type=1326 audit(1725475560.952:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.249631][ T29] audit: type=1326 audit(1725475560.952:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.293958][ T29] audit: type=1326 audit(1725475560.952:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.316938][ T29] audit: type=1326 audit(1725475560.952:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd549f7cef9 code=0x7ffc0000 [ 126.360814][ T1577] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 126.388492][ T1577] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 126.398965][ T1577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.414694][ T1577] usb 2-1: SerialNumber: syz [ 127.034724][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.986090][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880125bcc00: rx timeout, send abort [ 127.997209][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880125bcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.277484][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880125bd800: rx timeout, send abort [ 129.286289][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880125bd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 132.295236][ T8] usb 4-1: device descriptor read/64, error -110 [ 132.594719][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.844739][ T8] usb 4-1: device descriptor read/64, error -32 [ 132.966264][ T8] usb usb4-port1: attempt power cycle [ 133.185585][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.192732][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.275013][ T1577] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -32 [ 133.456924][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.566914][ T8] usb 4-1: device descriptor read/8, error -32 [ 133.697257][ T8] raw-gadget.1 gadget.3: failed to queue reset event [ 133.835586][ T8] raw-gadget.1 gadget.3: failed to queue resume event [ 133.964691][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 134.093046][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 134.100391][ T8] usb 4-1: device descriptor read/8, error -32 [ 134.237349][ T8] raw-gadget.1 gadget.3: failed to queue suspend event [ 134.275760][ T8] usb usb4-port1: unable to enumerate USB device [ 140.421784][ T58] usb 2-1: USB disconnect, device number 7 [ 142.855426][ T6401] raw-gadget.1 gadget.3: failed to queue disconnect event [ 194.615310][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.621688][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.024704][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 207.024883][ T4615] Bluetooth: hci2: command 0x0406 tx timeout [ 207.030781][ T5245] Bluetooth: hci1: command 0x0406 tx timeout [ 207.038085][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 217.154693][ T5238] Bluetooth: hci4: command 0x0406 tx timeout [ 256.057306][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.063774][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.344924][ T30] INFO: task syz.2.434:6351 blocked for more than 143 seconds. [ 280.352557][ T30] Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 280.474743][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.483503][ T30] task:syz.2.434 state:D stack:24672 pid:6351 tgid:6351 ppid:5225 flags:0x00000000 [ 280.654611][ T30] Call Trace: [ 280.657957][ T30] [ 280.660923][ T30] __schedule+0x17ae/0x4a10 [ 280.744631][ T30] ? __pfx___schedule+0x10/0x10 [ 280.749592][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.854812][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 280.860375][ T30] ? schedule+0x90/0x320 [ 280.954605][ T30] schedule+0x14b/0x320 [ 280.958859][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.964361][ T30] __mutex_lock+0x6a4/0xd70 [ 281.084615][ T30] ? __mutex_lock+0x527/0xd70 [ 281.089378][ T30] ? pipe_release+0x4e/0x330 [ 281.094005][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 281.215234][ T30] ? __pfx___might_resched+0x10/0x10 [ 281.220619][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 281.304778][ T30] pipe_release+0x4e/0x330 [ 281.309275][ T30] ? __pfx_pipe_release+0x10/0x10 [ 281.314338][ T30] __fput+0x24a/0x8a0 [ 281.434704][ T30] task_work_run+0x24f/0x310 [ 281.439392][ T30] ? __pfx_task_work_run+0x10/0x10 [ 281.506981][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 281.512790][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 281.623117][ T30] do_syscall_64+0x100/0x230 [ 281.654776][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.659543][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.762407][ T30] RIP: 0033:0x7f4abeb7cef9 [ 281.814616][ T30] RSP: 002b:00007ffdc2e1dd28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 281.823120][ T30] RAX: 0000000000000000 RBX: 00007f4abed37a80 RCX: 00007f4abeb7cef9 [ 281.964629][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 281.972679][ T30] RBP: 00007f4abed37a80 R08: 0000000000000006 R09: 00007ffdc2e1e01f [ 282.093668][ T30] R10: 00000000005fc968 R11: 0000000000000246 R12: 000000000001e9dd [ 282.180437][ T30] R13: 00007ffdc2e1de30 R14: 0000000000000032 R15: ffffffffffffffff [ 282.264777][ T30] [ 282.267900][ T30] [ 282.267900][ T30] Showing all locks held in the system: [ 282.364599][ T30] 1 lock held by khungtaskd/30: [ 282.369531][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 282.484621][ T30] 2 locks held by getty/4985: [ 282.489378][ T30] #0: ffff8880309140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 282.614615][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 282.714674][ T30] 2 locks held by syz-executor/5226: [ 282.721585][ T30] 1 lock held by syz.2.434/6351: [ 282.820504][ T30] #0: ffff88803254f868 (&pipe->mutex){+.+.}-{3:3}, at: pipe_release+0x4e/0x330 [ 282.905258][ T30] 3 locks held by syz.2.434/6352: [ 282.910371][ T30] #0: ffff88803254f868 (&pipe->mutex){+.+.}-{3:3}, at: splice_file_to_pipe+0x2e/0x500 [ 283.065095][ T30] #1: ffff8880288190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 283.134645][ T30] #2: ffffc900172a72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 283.224833][ T30] [ 283.227219][ T30] ============================================= [ 283.227219][ T30] [ 283.336238][ T30] NMI backtrace for cpu 0 [ 283.340660][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 283.351210][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 283.361308][ T30] Call Trace: [ 283.364617][ T30] [ 283.367567][ T30] dump_stack_lvl+0x241/0x360 [ 283.372293][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.377533][ T30] ? __pfx__printk+0x10/0x10 [ 283.382163][ T30] ? vprintk_emit+0x667/0x7c0 [ 283.386889][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 283.391958][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 283.396948][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.402444][ T30] ? _printk+0xd5/0x120 [ 283.406650][ T30] ? __pfx__printk+0x10/0x10 [ 283.411291][ T30] ? __wake_up_klogd+0xcc/0x110 [ 283.416193][ T30] ? __pfx__printk+0x10/0x10 [ 283.420819][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 283.425879][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.431903][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 283.437934][ T30] watchdog+0xff4/0x1040 [ 283.442226][ T30] ? watchdog+0x1ea/0x1040 [ 283.446693][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.451443][ T30] kthread+0x2f0/0x390 [ 283.455561][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.460278][ T30] ? __pfx_kthread+0x10/0x10 [ 283.464914][ T30] ret_from_fork+0x4b/0x80 [ 283.469371][ T30] ? __pfx_kthread+0x10/0x10 [ 283.474005][ T30] ret_from_fork_asm+0x1a/0x30 [ 283.478834][ T30] [ 283.483396][ T30] Sending NMI from CPU 0 to CPUs 1: [ 283.489446][ C1] NMI backtrace for cpu 1 [ 283.489461][ C1] CPU: 1 UID: 101 PID: 5039 Comm: dhcpcd Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 283.489482][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 283.489492][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x5/0x780 [ 283.489524][ C1] Code: 1e 88 00 e9 43 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <48> 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 00 [ 283.489539][ C1] RSP: 0018:ffffc900033cfc58 EFLAGS: 00000002 [ 283.489555][ C1] RAX: 0000000000000001 RBX: ffff888028d3ca00 RCX: ffffffff819aefdc [ 283.489569][ C1] RDX: 0000000000000000 RSI: ffffffff8c3fb920 RDI: ffffffff8c3fb8e0 [ 283.489581][ C1] RBP: ffffc900033cfdb0 R08: ffffffff8ff742ef R09: 1ffffffff1fee85d [ 283.489594][ C1] R10: dffffc0000000000 R11: fffffbfff1fee85e R12: 0000000000000011 [ 283.489607][ C1] R13: 1ffff110051a7993 R14: ffff888028d3cc98 R15: ffff888028d3ca00 [ 283.489620][ C1] FS: 00007f67501e2740(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 283.489636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.489649][ C1] CR2: 00007fff4732c568 CR3: 000000002759e000 CR4: 00000000003506f0 [ 283.489665][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.489675][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.489685][ C1] Call Trace: [ 283.489692][ C1] [ 283.489699][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 283.489724][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 283.489750][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.489773][ C1] ? nmi_handle+0x2a/0x5a0 [ 283.489800][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 283.489822][ C1] ? nmi_handle+0x14f/0x5a0 [ 283.489839][ C1] ? nmi_handle+0x2a/0x5a0 [ 283.489856][ C1] ? lockdep_hardirqs_on_prepare+0x5/0x780 [ 283.489880][ C1] ? default_do_nmi+0x63/0x160 [ 283.489905][ C1] ? exc_nmi+0x123/0x1f0 [ 283.489927][ C1] ? end_repeat_nmi+0xf/0x53 [ 283.489955][ C1] ? trace_irq_enable+0x2c/0x120 [ 283.489978][ C1] ? lockdep_hardirqs_on_prepare+0x5/0x780 [ 283.490002][ C1] ? lockdep_hardirqs_on_prepare+0x5/0x780 [ 283.490027][ C1] ? lockdep_hardirqs_on_prepare+0x5/0x780 [ 283.490051][ C1] [ 283.490057][ C1] [ 283.490063][ C1] trace_hardirqs_on+0x28/0x40 [ 283.490084][ C1] _raw_spin_unlock_irq+0x23/0x50 [ 283.490111][ C1] get_signal+0x14dd/0x1740 [ 283.490142][ C1] ? __pfx_get_signal+0x10/0x10 [ 283.490168][ C1] arch_do_signal_or_restart+0x96/0x860 [ 283.490213][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 283.490236][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.490268][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 283.490289][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 283.490310][ C1] do_syscall_64+0x100/0x230 [ 283.490329][ C1] ? clear_bhb_loop+0x35/0x90 [ 283.490353][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.490374][ C1] RIP: 0033:0x7f67502afad5 [ 283.490388][ C1] Code: 85 d2 74 0d 0f 10 02 48 8d 54 24 20 0f 11 44 24 20 64 8b 04 25 18 00 00 00 85 c0 75 27 41 b8 08 00 00 00 b8 0f 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 75 48 8b 15 24 73 0d 00 f7 d8 64 89 02 48 83 [ 283.490407][ C1] RSP: 002b:00007ffc69e618f0 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 283.490424][ C1] RAX: fffffffffffffdfe RBX: 000055f073d8de20 RCX: 00007f67502afad5 [ 283.490437][ C1] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000055f073da2690 [ 283.490448][ C1] RBP: 00007ffc69e61c40 R08: 0000000000000008 R09: 0000000000000000 [ 283.490459][ C1] R10: 00007ffc69e61c40 R11: 0000000000000246 R12: 0000000000000000 [ 283.490470][ C1] R13: 000055f043ac7610 R14: 00000000ffffffff R15: 0000000000000000 [ 283.490492][ C1] [ 284.294608][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 284.301550][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 284.312105][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 284.322205][ T30] Call Trace: [ 284.325518][ T30] [ 284.328473][ T30] dump_stack_lvl+0x241/0x360 [ 284.333190][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.338434][ T30] ? __pfx__printk+0x10/0x10 [ 284.343053][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 284.349093][ T30] ? vscnprintf+0x5d/0x90 [ 284.353494][ T30] panic+0x349/0x860 [ 284.357456][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 284.363665][ T30] ? __pfx_panic+0x10/0x10 [ 284.368122][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 284.373660][ T30] ? __irq_work_queue_local+0x137/0x410 [ 284.379263][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 284.384677][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 284.390874][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 284.397077][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 284.403278][ T30] watchdog+0x1033/0x1040 [ 284.407660][ T30] ? watchdog+0x1ea/0x1040 [ 284.412124][ T30] ? __pfx_watchdog+0x10/0x10 [ 284.416847][ T30] kthread+0x2f0/0x390 [ 284.420964][ T30] ? __pfx_watchdog+0x10/0x10 [ 284.425686][ T30] ? __pfx_kthread+0x10/0x10 [ 284.430328][ T30] ret_from_fork+0x4b/0x80 [ 284.434788][ T30] ? __pfx_kthread+0x10/0x10 [ 284.439419][ T30] ret_from_fork_asm+0x1a/0x30 [ 284.444431][ T30] [ 284.447750][ T30] Kernel Offset: disabled [ 284.452095][ T30] Rebooting in 86400 seconds..