last executing test programs: 11.970543287s ago: executing program 0 (id=2519): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x0, 0xc, 0x3, 0x2], 0x1, &(0x7f0000000100)=[{}], 0x0, [{}]}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, 0x0, 0x0) 11.738032487s ago: executing program 0 (id=2521): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x5efe) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r7}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @host, 0x2, 0x0, 0x5, 0x0, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @any, 0x0, 0x0, 0x7}) close_range(r2, 0xffffffffffffffff, 0x0) 11.219148321s ago: executing program 0 (id=2523): syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000c40)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='/dev/ptmx\x00', 0xfffffffffffffffd) r4 = fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 10.310719718s ago: executing program 0 (id=2525): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000700000001000100090000000100", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000000140)) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={&(0x7f0000000440)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/102, 0x66}, 0x10020) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021020000000000004bc311ec8500000075000000a7"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 9.593882988s ago: executing program 0 (id=2528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x0) eventfd(0x0) eventfd(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r4, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@pci={{0x10}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x100, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000013}, 0x4000000) 6.318923126s ago: executing program 0 (id=2538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'veth1_virt_wifi\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x20, 0xba, "dcd86cf29ce9d276380e81852c95d951bbf6d6193966028d017ad509e930b30cee64110a0afed516efb548df6e5404afba7fcb1b244698af9a631b181854308c449cc85312adaefd009c2eebc0ca149ebc83aea091b0e1430fb4c9351997bce5f7870acc3eaed631d934bb762feaf751d75f8727bfe1adac10d35a12ad41665035c18c8932aaaa05f5f17cb809dfc605913fecbe5147da71b2c4f066bee8dbe3bc29763e6bac04244687d70c77b1f9d36496b5649b1d13ef727a"}}) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xb) r3 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) 6.222562953s ago: executing program 4 (id=2540): add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r0 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.246036346s ago: executing program 4 (id=2542): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 5.111932638s ago: executing program 4 (id=2543): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000016110640000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.534468721s ago: executing program 2 (id=2552): r0 = socket(0x2c, 0xade0d668f5a4bdb3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) shutdown(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaae27867fe40af4d2060116001506100002ffffffffffff73385b8d9872234d9c0a9586f1fc7e5646f9cc022a52d61b18a4"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) write$uinput_user_dev(r5, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x3ff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a6e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c6, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x49, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="180000002a00090000000000070000000400002cd9a22f3753640cb20f09eb2560071e1cf1f528c66448da7cbca24b9de2fc105f79fba2d4ee6f30403a77ce4d6e1ae121cbab17291db5210c5b0a68170564dbd560ca5c20a42b32d815d4e9cfcdaf11ff08eea4eb12b8f8e909bf4d89c9f3237bab3ae6cdc7d080548f2e73d0d3f0471bd0b820714e0129ce0f3cc2b109056da7c657ce7d9f2defe5c6e7954a3745d654885d89a92cfcc2271cf77fd484380000"], 0x18}, 0x1, 0x3000000}, 0x20000080) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x30, 0xffffffffffffffff, 0x4d0f1000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d"], 0x24) 3.482014166s ago: executing program 1 (id=2553): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 3.400279952s ago: executing program 1 (id=2554): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x0, 0xc, 0x3, 0x2], 0x1, &(0x7f0000000100)=[{}], 0x0, [{}]}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.160962963s ago: executing program 1 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 3.082740239s ago: executing program 2 (id=2558): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @remote}], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}) keyctl$set_timeout(0xf, 0x0, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r10, @ANYRES8=r2, @ANYRES64=r4], 0x34}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x4c, r7, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sendmsg$sock(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003440), 0x0, 0x0, 0x0, 0xf000000}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0xc2, 0x1f8) 3.049878932s ago: executing program 1 (id=2559): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000000080)="bb", 0x1}], 0x1}}], 0x1, 0x410) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000014000905000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000200ac14149708000400ac1414aa"], 0x28}}, 0x0) 2.785392784s ago: executing program 3 (id=2562): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYRES64=r1, @ANYBLOB="b94d04929c6cec665808ea500ca9c7efb2e145a16f279a9dff0b90ede2d7cd9043ba72bb53840400000000000000dab56b53fd8df5de58d15457e83a95ca9cc3738a315256466d78d30660f6f94103b3ed8a895de664faaad6b838b0dc3942473bacaca37887062b78e27db4061a645056c4f5374f8853207c59e9eabcf1ee4aa5086ff9f2213128da7072337fff9c70b61e18177e1e130700000000", @ANYRESHEX=r0, @ANYBLOB="abdacfea5e26cbb537895023c258858ceb5d9e8c48821140d53ad94a466732a39a5823f34764c38a75bd91e6f23392cf91278df4174af75c52e1e9c8dccfc3d6845bc60fc5423eb705c3e55caadee5fd760d5f52f82997fabfa53fbd1be595dd8efd07ee910d757143de6da9012b26b748ce33f448175e77a90b432bc44eb9c0f0a5dfc12e34a82a9e3446c383fd60443a6439d89292dd91d469e069e3a4239a6a065e6160e26f3be7ab253676b159002d3255", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES8=r0], 0x3}, 0x1, 0x0, 0x0, 0x48840}, 0x4000001) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) 2.440697413s ago: executing program 4 (id=2563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd(0x0) eventfd(0x0) eventfd(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r4, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@pci={{0x10}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)={0x100, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000013}, 0x4000000) 2.162728397s ago: executing program 1 (id=2564): openat$autofs(0xffffff9c, &(0x7f0000000000), 0x200142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x50}}, 0x0) r2 = dup(r0) write$binfmt_misc(r2, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x801) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r3, 0x3) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) 1.915494868s ago: executing program 3 (id=2565): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = dup(r0) ioctl$PPPIOCCONNECT(r1, 0x40047435, &(0x7f00000002c0)=0x2) 1.851362294s ago: executing program 3 (id=2566): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) pipe(&(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000080)) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x43d4, &(0x7f0000000340), &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x48e9, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x0, 0xc, 0x3, 0x2], 0x1, &(0x7f0000000100)=[{}], 0x0, [{}]}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) 1.783322609s ago: executing program 3 (id=2567): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000019640)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f00000195c0)="71b4bc8a602d41f92c4cd2f12f4690918da8509a8d26c601522d92fe55a03afae74cfcd720acf8a69e6a351139d59c6b45a78a4d9daafc6c0ade6b87995f6cee33d7973b8cdbba6f5379bbfc9579697b5581ca99c1608fb917f443643263eb9fae7cfe729b0e20f20e2b9c099ba3470000000000", 0x74}], 0x2}, 0x9b63dc011d60699e) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x121402) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r4, r3, &(0x7f0000002700)=0x1, 0x8) 1.18177372s ago: executing program 1 (id=2568): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x6, 0x7, r2, 0x0, 0x0, 0x0, 0x10042}) socketpair(0x1, 0x3, 0x80000, &(0x7f0000000400)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x2, {0x1c, 0x0, 0x0, r6, 0x0, 0x29, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r6}]}, 0x24}}, 0x0) r7 = syz_open_dev$dri(&(0x7f00000005c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r7, 0xc04064aa, &(0x7f0000000300)={&(0x7f0000000000), &(0x7f0000000680), r9}) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000040), 0x4) socket(0x10, 0x803, 0x0) unshare(0x62040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00"], 0x24}}, 0x0) 1.082493888s ago: executing program 2 (id=2569): r0 = socket(0x2c, 0xade0d668f5a4bdb3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0, 0x0) rmdir(0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x1, 0x2) shutdown(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaae27867fe40af4d2060116001506100002ffffffffffff73385b8d9872234d9c0a9586f1fc7e5646f9cc022a52d61b18a4"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) write$uinput_user_dev(r4, &(0x7f0000000a80)={'syz1\x00', {0x0, 0x0, 0x0, 0x3ff}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a6e], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c6, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0xa]}, 0x45c) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x49, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="180000002a00090000000000070000000400002cd9a22f3753640cb20f09eb2560071e1cf1f528c66448da7cbca24b9de2fc105f79fba2d4ee6f30403a77ce4d6e1ae121cbab17291db5210c5b0a68170564dbd560ca5c20a42b32d815d4e9cfcdaf11ff08eea4eb12b8f8e909bf4d89c9f3237bab3ae6cdc7d080548f2e73d0d3f0471bd0b820714e0129ce0f3cc2b109056da7c657ce7d9f2defe5c6e7954a3745d654885d89a92cfcc2271cf77fd484380000"], 0x18}, 0x1, 0x3000000}, 0x20000080) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x30, 0xffffffffffffffff, 0x4d0f1000) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e751d"], 0x24) 565.509342ms ago: executing program 2 (id=2570): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 522.439146ms ago: executing program 4 (id=2571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 311.461573ms ago: executing program 3 (id=2572): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=[@dontfrag={{0x14}}], 0x18}}], 0x1, 0x5efe) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r6}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @host, 0x2, 0x0, 0x5, 0x0, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @any, 0x0, 0x0, 0x7}) close_range(r2, 0xffffffffffffffff, 0x0) 261.624688ms ago: executing program 4 (id=2573): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) syz_usb_control_io$hid(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstat(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000016110640000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 209.449622ms ago: executing program 3 (id=2574): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b", 0x40}], 0x1}}], 0x1, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x9000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 145.484218ms ago: executing program 2 (id=2575): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000016c0)=""/175, 0x0}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 0s ago: executing program 2 (id=2576): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYRES64=r1, @ANYBLOB="b94d04929c6cec665808ea500ca9c7efb2e145a16f279a9dff0b90ede2d7cd9043ba72bb53840400000000000000dab56b53fd8df5de58d15457e83a95ca9cc3738a315256466d78d30660f6f94103b3ed8a895de664faaad6b838b0dc3942473bacaca37887062b78e27db4061a645056c4f5374f8853207c59e9eabcf1ee4aa5086ff9f2213128da7072337fff9c70b61e18177e1e130700000000", @ANYRESHEX=r0, @ANYBLOB="abdacfea5e26cbb537895023c258858ceb5d9e8c48821140d53ad94a466732a39a5823f34764c38a75bd91e6f23392cf91278df4174af75c52e1e9c8dccfc3d6845bc60fc5423eb705c3e55caadee5fd760d5f52f82997fabfa53fbd1be595dd8efd07ee910d757143de6da9012b26b748ce33f448175e77a90b432bc44eb9c0f0a5dfc12e34a82a9e3446c383fd60443a6439d89292dd91d469e069e3a4239a6a065e6160e26f3be7ab253676b159002d3255", @ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRES8=r0], 0x3}, 0x1, 0x0, 0x0, 0x48840}, 0x4000001) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x4a0, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'team_slave_0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'hsr0\x00', {0x4000000000000, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@unspec=@helper={{0x48}, {0x0, 'snmp\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8) kernel console output (not intermixed with test programs): r0' with parent 'hsr' already present! [ 364.104237][ T9866] Cannot create hsr debugfs directory [ 364.140880][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.150288][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.166012][ T7448] Bluetooth: hci0: command 0x0409 tx timeout [ 364.176209][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.257193][ T9864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.342822][ T9864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.353362][ T9864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.411417][ T9864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.582870][ T9849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.659585][ T9864] device hsr_slave_0 entered promiscuous mode [ 364.677027][ T9864] device hsr_slave_1 entered promiscuous mode [ 364.706577][ T9864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.714156][ T9864] Cannot create hsr debugfs directory [ 364.749433][ T9849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.783985][ T9849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.877363][ T9849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.026604][ T9923] nbd0: detected capacity change from 0 to 22 [ 365.126721][ T7448] Bluetooth: hci3: command 0x041b tx timeout [ 365.287075][ T144] device hsr_slave_0 left promiscuous mode [ 365.303362][ T144] device hsr_slave_1 left promiscuous mode [ 365.327058][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.342587][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.365339][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.389268][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.415082][ T144] device bridge_slave_1 left promiscuous mode [ 365.428108][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.447543][ T144] device bridge_slave_0 left promiscuous mode [ 365.453911][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.513097][ T144] device veth1_macvtap left promiscuous mode [ 365.528074][ T144] device veth0_macvtap left promiscuous mode [ 365.541044][ T144] device veth1_vlan left promiscuous mode [ 365.557255][ T144] device veth0_vlan left promiscuous mode [ 365.670428][ T3584] block nbd0: Receive control failed (result -104) [ 366.006195][ T7300] Bluetooth: hci7: command 0x041b tx timeout [ 366.065871][ T3619] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 366.245904][ T3620] Bluetooth: hci0: command 0x041b tx timeout [ 366.306062][ T3619] usb 3-1: Using ep0 maxpacket: 8 [ 366.426753][ T3619] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 366.447538][ T3619] usb 3-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.461179][ T3619] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 366.471024][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.514872][ T144] team0 (unregistering): Port device team_slave_1 removed [ 366.529245][ T144] team0 (unregistering): Port device team_slave_0 removed [ 366.531172][ T3619] usbhid 3-1:64.0: couldn't find an input interrupt endpoint [ 366.548833][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.566167][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.636557][ T144] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 366.645220][ T144] bond0 (unregistering): Released all slaves [ 366.747963][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.777765][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.788035][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.802019][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.826782][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.838893][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.847592][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.854656][ T5642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.865150][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.876659][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.884988][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.892067][ T5642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.901091][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.910139][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.919103][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.929567][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.941150][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.950424][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.027616][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.047971][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.066566][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.079101][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.111750][ T9849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.165117][ T9849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.175326][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.185424][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.215849][ T3618] Bluetooth: hci3: command 0x040f tx timeout [ 367.532021][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.548565][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.559455][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.737155][ T9866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 367.756982][ T9866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 367.818363][ T9866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 367.840950][ T9864] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.875347][ T9866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 367.918397][ T9864] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.966512][ T9864] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.034944][ T9864] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.089986][ T7300] Bluetooth: hci7: command 0x040f tx timeout [ 368.107899][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.116971][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.160303][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.169715][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.179694][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.188861][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.213056][ T9849] device veth0_vlan entered promiscuous mode [ 368.267987][ T9849] device veth1_vlan entered promiscuous mode [ 368.316491][ T9866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.326659][ T7300] Bluetooth: hci0: command 0x040f tx timeout [ 368.366537][ T9866] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.382552][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 368.401129][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 368.421823][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 368.435022][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 368.453153][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.464145][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.486252][ T9849] device veth0_macvtap entered promiscuous mode [ 368.518929][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 368.528065][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.547460][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.564943][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.572096][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.593701][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.603930][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.623135][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.630283][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.669867][ T9849] device veth1_macvtap entered promiscuous mode [ 368.678050][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 368.713885][ T7300] usb 3-1: USB disconnect, device number 32 [ 368.741223][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.786482][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.807068][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.823072][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.849743][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.859817][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.872257][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.887968][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.897437][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.913749][ T9864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.935448][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.004419][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.015230][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.029247][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.048666][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.060578][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.075198][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.093183][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 369.105938][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 369.120062][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.139940][ T9866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.169180][ T9864] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.190136][ T9989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1884'. [ 369.214655][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 369.226970][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.246238][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.279917][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.288487][ T3619] Bluetooth: hci3: command 0x0419 tx timeout [ 369.297428][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.309912][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.325222][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.345366][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.365469][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.386653][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.404930][ T9849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.425398][ T9849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.447049][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.485464][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 369.509732][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.519099][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.541926][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.558776][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.565904][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.584405][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 369.602664][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 369.614980][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.622125][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.654377][ T9849] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.667692][ T9849] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.685866][ T9849] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.694583][ T9849] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.833350][ T9866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.884672][ T9866] device veth0_vlan entered promiscuous mode [ 369.914059][ T9866] device veth1_vlan entered promiscuous mode [ 369.957453][ T9866] device veth0_macvtap entered promiscuous mode [ 369.977931][ T9866] device veth1_macvtap entered promiscuous mode [ 370.005595][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.042083][T10000] loop2: detected capacity change from 0 to 128 [ 370.047429][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.061466][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.072231][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.082292][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.092973][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.103018][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.113505][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.124793][ T9866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.158463][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.166936][ T3624] Bluetooth: hci7: command 0x0419 tx timeout [ 370.178297][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 370.277272][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.286815][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.306646][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.326044][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.334581][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.345832][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.354067][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.364035][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.372975][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.384006][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.392171][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.401199][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.409552][ T3613] Bluetooth: hci0: command 0x0419 tx timeout [ 370.415338][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.746291][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.812853][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.857340][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.062795][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.074934][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.096483][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.126161][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.146928][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.156840][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.167392][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.177263][ T9866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.187720][ T9866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.199233][ T9866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.214963][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.223369][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.231454][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.239925][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.248521][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 371.260069][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.297709][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.307540][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.316674][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.325295][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.334662][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.344124][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.364011][ T9864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 371.393450][ T9864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 371.422008][ T9866] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.441432][ T9866] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.463609][ T9866] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.473632][ T9866] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.492448][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 371.502756][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 371.512424][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 371.521858][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 371.578869][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 371.608027][ T3757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.635113][ T3757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.707779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.764488][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.786281][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.801925][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 371.862252][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 371.867215][T10014] loop4: detected capacity change from 0 to 64 [ 371.893694][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.911246][ T9864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.924363][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.934944][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.963763][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.983234][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 371.993173][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 372.039659][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 372.049321][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 372.061764][ T9864] device veth0_vlan entered promiscuous mode [ 372.070828][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 372.092957][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 372.117857][ T9864] device veth1_vlan entered promiscuous mode [ 372.180029][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 372.194064][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 372.205163][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 372.214479][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 372.246432][ T13] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 372.268173][ T9864] device veth0_macvtap entered promiscuous mode [ 372.300643][ T9864] device veth1_macvtap entered promiscuous mode [ 372.341426][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.363701][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.375367][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.399113][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.447965][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.465154][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.483970][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.499557][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.513994][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.531550][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.542484][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 372.554974][ T9864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.566954][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 372.583707][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 372.600324][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.618022][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.631335][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.642737][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.654125][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.665270][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.676050][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.687400][ T3618] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 372.695441][ T13] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 372.706361][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.717679][ T13] usb 3-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.732388][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.744266][ T13] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 372.753622][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.764349][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.772971][ T9864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.793592][ T9864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.806448][ T9864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.816224][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.837235][ T13] usbhid 3-1:64.0: couldn't find an input interrupt endpoint [ 372.863244][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.875395][ T9864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.885155][ T9864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.895366][ T9864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.907312][ T9864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.976071][ T3618] usb 5-1: Using ep0 maxpacket: 32 [ 373.068692][T10030] bridge0: port 3(syz_tun) entered blocking state [ 373.075332][T10030] bridge0: port 3(syz_tun) entered disabled state [ 373.084835][T10030] device syz_tun entered promiscuous mode [ 373.093334][T10030] bridge0: port 3(syz_tun) entered blocking state [ 373.100406][T10030] bridge0: port 3(syz_tun) entered forwarding state [ 373.171711][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.186420][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.219504][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 373.235324][T10034] loop1: detected capacity change from 0 to 1024 [ 373.248571][ T3819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.260484][ T3819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.273626][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.296280][ T3618] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 373.306413][ T3618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.334005][ T3618] usb 5-1: Product: syz [ 373.343702][ T3618] usb 5-1: Manufacturer: syz [ 373.362606][ T3618] usb 5-1: SerialNumber: syz [ 373.373007][ T3618] usb 5-1: config 0 descriptor?? [ 373.543122][ T3618] cdc_ether 5-1:0.0: More than one union descriptor, skipping ... [ 373.555765][ T3618] usb 5-1: bad CDC descriptors [ 373.565551][ T3618] usb 5-1: unsupported MDLM descriptors [ 373.851636][ T3613] usb 5-1: USB disconnect, device number 41 [ 374.372207][ T3634] hfsplus: b-tree write err: -5, ino 4 [ 374.516407][T10052] loop4: detected capacity change from 0 to 64 [ 374.537008][T10053] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 374.565972][ T3613] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 374.772321][T10059] loop4: detected capacity change from 0 to 128 [ 374.793271][T10059] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 374.804576][T10059] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 374.837919][ T3613] usb 4-1: Using ep0 maxpacket: 8 [ 374.927323][ T3615] usb 3-1: USB disconnect, device number 33 [ 375.250799][ T3613] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 375.262815][ T3613] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 375.273409][ T3613] usb 4-1: config 179 has no interface number 0 [ 375.279852][ T3613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 375.292585][ T3613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 375.304857][ T3613] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 375.319769][ T3613] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 375.328949][ T3613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.357577][T10048] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 376.162678][ T3613] usb 4-1: USB disconnect, device number 21 [ 376.926652][T10069] chnl_net:caif_netlink_parms(): no params data found [ 377.153478][T10095] loop1: detected capacity change from 0 to 64 [ 377.192921][T10069] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.242422][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.275901][T10069] device bridge_slave_0 entered promiscuous mode [ 377.286015][ T1312] Bluetooth: hci2: command 0x0409 tx timeout [ 377.348667][T10069] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.389400][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.449992][T10069] device bridge_slave_1 entered promiscuous mode [ 377.582108][T10069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.652819][T10069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.806665][T10069] team0: Port device team_slave_0 added [ 377.848371][T10069] team0: Port device team_slave_1 added [ 377.962163][T10069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.976883][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.015361][T10069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.035853][T10069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.115980][ T3613] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 378.487734][ T1393] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.494365][ T1393] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.685729][T10069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.794390][T10069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.741093][T10114] fuse: Unknown parameter '‚yûû®„h"}|6ÑAðëCÀ×|u²O!îÊÔTylÌ4Âs€Á{ž»Øu²ˆW7ÇÛ#Ó¾WÔ@"v‡D§7¤Á'Pð‰p¥Lý:;û~ÖçíS›f"PAuè³TQ݆Kø”p°°ÌRjyRv98žÊ·WŒEz‰h©ìúÛà' [ 379.822390][T10116] loop4: detected capacity change from 0 to 40427 [ 379.838393][ T1312] Bluetooth: hci2: command 0x041b tx timeout [ 379.885915][ T3613] usb 3-1: Using ep0 maxpacket: 8 [ 379.921770][T10116] F2FS-fs (loop4): invalid crc value [ 379.954810][T10116] F2FS-fs (loop4): Found nat_bits in checkpoint [ 379.992949][T10116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 380.007395][ T3613] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 380.027568][T10069] device hsr_slave_0 entered promiscuous mode [ 380.039503][ T3613] usb 3-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.101072][ T3613] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 380.116019][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.169118][T10069] device hsr_slave_1 entered promiscuous mode [ 380.182199][ T26] audit: type=1326 audit(1729217048.645:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 380.187919][ T3613] usbhid 3-1:64.0: couldn't find an input interrupt endpoint [ 380.262067][T10069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.311936][ T26] audit: type=1326 audit(1729217048.675:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 380.334278][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.371329][T10069] Cannot create hsr debugfs directory [ 380.434671][T10110] Process accounting resumed [ 380.621491][ T26] audit: type=1326 audit(1729217048.715:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 380.988587][ T26] audit: type=1326 audit(1729217048.715:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 381.139090][ T26] audit: type=1326 audit(1729217048.725:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 381.171816][ T26] audit: type=1326 audit(1729217048.755:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 381.247799][ T26] audit: type=1326 audit(1729217048.755:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 381.270262][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.548764][T10069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.621461][ T26] audit: type=1326 audit(1729217048.755:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 381.826721][ T3613] usb 3-1: USB disconnect, device number 34 [ 382.233802][ T3618] Bluetooth: hci2: command 0x040f tx timeout [ 382.327131][ T150] block nbd3: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 30 seconds [ 382.347973][T10069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.361209][ T26] audit: type=1326 audit(1729217048.805:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 382.383577][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.461580][ T26] audit: type=1326 audit(1729217048.805:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10109 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd063fdff9 code=0x7ffc0000 [ 382.524253][T10069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.624115][T10069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.670768][T10145] loop4: detected capacity change from 0 to 128 [ 382.773961][T10145] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 382.785001][T10145] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 382.817172][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.020310][T10069] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.058390][T10069] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.104007][T10069] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.150547][T10069] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.417052][T10069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.488288][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 383.517433][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 383.560284][T10069] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.597710][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.635060][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.668920][T10137] loop2: detected capacity change from 0 to 40427 [ 383.679848][ T3757] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.686989][ T3757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.730792][T10137] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 383.744329][T10137] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 383.763216][T10137] F2FS-fs (loop2): invalid crc value [ 383.786388][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.812898][T10137] F2FS-fs (loop2): Found nat_bits in checkpoint [ 383.817341][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.877560][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.920726][T10137] F2FS-fs (loop2): Start checkpoint disabled! [ 383.928633][ T3757] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.935767][ T3757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.948783][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.973869][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.064072][T10137] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 384.072170][T10137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 384.148201][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.218256][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.241247][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.279060][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.327631][ T3613] Bluetooth: hci2: command 0x0419 tx timeout [ 384.344612][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.383556][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.435949][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.506490][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.539337][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.563965][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.627765][T10164] input: syz1 as /devices/virtual/input/input22 [ 385.738219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.754013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.808487][ T3622] attempt to access beyond end of device [ 385.808487][ T3622] loop2: rw=2049, want=40968, limit=40427 [ 385.831779][T10069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.874914][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.903330][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.029206][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.038341][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.070820][T10069] device veth0_vlan entered promiscuous mode [ 386.081773][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.094302][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.120658][T10069] device veth1_vlan entered promiscuous mode [ 386.286972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 386.301651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.328220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.355580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.382737][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1940'. [ 386.413554][T10069] device veth0_macvtap entered promiscuous mode [ 386.435667][T10194] device bridge_slave_1 left promiscuous mode [ 386.442152][T10194] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.482095][T10069] device veth1_macvtap entered promiscuous mode [ 386.668356][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.885700][ T23] Bluetooth: hci2: command 0x0405 tx timeout [ 386.918931][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.960332][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.015232][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.051927][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.102460][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.112723][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.125028][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.145316][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.157467][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.169578][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.184136][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.198600][T10069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.228768][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.238771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.251109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.266380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.282000][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.293447][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.304530][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.317560][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.327773][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.346249][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.386163][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.397172][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.425759][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.463059][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.501767][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.542812][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.553865][T10069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.573853][T10069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.644326][T10069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.672648][T10069] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.748792][T10069] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.794148][T10069] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.804282][T10069] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.830373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.856458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 388.197455][T10230] loop4: detected capacity change from 0 to 128 [ 388.216196][ T3819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.245922][ T3819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.310405][ T3819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.444274][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.484690][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.163095][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.230734][T10251] autofs4:pid:10251:autofs_fill_super: called with bogus options [ 390.244666][T10251] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 391.079192][T10268] loop1: detected capacity change from 0 to 128 [ 391.126095][ T3616] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 391.308377][T10277] loop3: detected capacity change from 0 to 256 [ 391.385851][ T3616] usb 5-1: Using ep0 maxpacket: 8 [ 391.696811][ T3616] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 391.759040][ T3616] usb 5-1: config 179 has no interface number 0 [ 391.824626][ T3616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 392.115798][ T3616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 392.137675][ T3616] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 392.148258][ T3616] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 392.286618][T10285] loop2: detected capacity change from 0 to 512 [ 392.301566][ T3616] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 392.310740][ T3616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.437331][T10255] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 392.845469][ T3616] usb 5-1: USB disconnect, device number 42 [ 392.943744][T10285] EXT4-fs (loop2): Test dummy encryption mode enabled [ 394.836515][T10323] loop2: detected capacity change from 0 to 512 [ 394.904012][T10323] EXT4-fs (loop2): Ignoring removed oldalloc option [ 394.955106][T10323] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1983: Parent and EA inode have the same ino 15 [ 394.993938][T10323] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1983: Parent and EA inode have the same ino 15 [ 395.023312][T10323] EXT4-fs (loop2): 1 orphan inode deleted [ 395.031407][T10305] bridge0: port 3(syz_tun) entered disabled state [ 395.058493][T10323] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,bsdgroups,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 395.123269][T10305] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.126747][ T150] block nbd0: Possible stuck request ffff888020dde400: control (read@0,4096B). Runtime 30 seconds [ 395.130692][T10305] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.776232][T10331] loop2: detected capacity change from 0 to 16 [ 395.911969][T10331] erofs: (device loop2): mounted with root inode @ nid 36. [ 396.031798][T10331] input: syz0 as /devices/virtual/input/input25 [ 396.670279][T10305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.758092][T10305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.905868][ T7300] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 398.156112][ T7300] usb 4-1: Using ep0 maxpacket: 8 [ 398.276206][ T7300] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 398.293506][ T7300] usb 4-1: config 179 has no interface number 0 [ 398.325284][ T7300] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 398.391964][ T7300] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 398.450509][ T7300] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 398.504681][ T7300] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 398.557875][ T7300] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 398.639288][ T7300] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 398.648822][ T7300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.686060][T10341] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 398.728279][ T7300] xpad: probe of 4-1:179.65 failed with error -5 [ 398.781094][T10353] loop2: detected capacity change from 0 to 512 [ 398.793112][T10305] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.802297][T10305] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.811576][T10305] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.820563][T10305] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.928286][T10353] EXT4-fs (loop2): 1 orphan inode deleted [ 398.931913][ T13] usb 4-1: USB disconnect, device number 22 [ 398.934565][T10353] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,errors=remount-ro,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 398.963789][T10319] netlink: 'syz.4.1981': attribute type 21 has an invalid length. [ 398.985836][T10353] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.110030][T10362] loop4: detected capacity change from 0 to 128 [ 399.551577][T10366] ptrace attach of "./syz-executor exec"[10367] was attempted by "./syz-executor exec"[10366] [ 401.889800][ T3618] Bluetooth: hci5: command 0x0406 tx timeout [ 402.238691][T10388] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 402.266919][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 402.380423][T10386] device bridge_slave_1 left promiscuous mode [ 402.442948][T10386] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.488197][T10386] bridge1: port 1(bridge_slave_1) entered blocking state [ 402.535223][T10386] bridge1: port 1(bridge_slave_1) entered disabled state [ 402.561176][T10393] cgroup2: Unknown parameter 'pids_localevents' [ 402.585399][T10386] device bridge_slave_1 entered promiscuous mode [ 402.967656][T10395] netlink: 'syz.2.2006': attribute type 21 has an invalid length. [ 403.490742][T10407] loop2: detected capacity change from 0 to 128 [ 406.604905][T10428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2017'. [ 406.916945][T10445] netlink: 'syz.2.2020': attribute type 21 has an invalid length. [ 410.428909][ T3634] tipc: Disabling bearer [ 410.455521][ T3634] tipc: Left network mode [ 410.526669][T10469] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 410.937784][T10477] loop3: detected capacity change from 0 to 4096 [ 411.449409][T10477] __ntfs_error: 12 callbacks suppressed [ 411.449427][T10477] ntfs: (device loop3): parse_options(): Unrecognized mount option erro\s. [ 411.463828][T10477] ntfs: (device loop3): parse_options(): Unrecognized mount option utf. [ 411.485839][T10477] ntfs: (device loop3): parse_options(): Unrecognized mount option fmaskóÀ®±00000007777777777. [ 411.519090][T10477] ntfs: (device loop3): parse_options(): The gid option requires an argument. [ 411.861066][ T3634] device bridge_slave_1 left promiscuous mode [ 411.884482][ T3634] bridge3: port 1(bridge_slave_1) entered disabled state [ 411.962528][ T3634] device hsr_slave_0 left promiscuous mode [ 411.997984][ T3634] device hsr_slave_1 left promiscuous mode [ 412.096391][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.103891][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.142877][ T3634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.165314][ T3634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.180630][ T3634] bridge0: port 3(hsr0) entered disabled state [ 412.193203][ T3634] device bridge_slave_0 left promiscuous mode [ 412.203703][ T3634] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.267742][ T3634] device veth1_macvtap left promiscuous mode [ 412.326748][ T3634] device veth0_macvtap left promiscuous mode [ 412.347351][ T3634] device veth1_vlan left promiscuous mode [ 412.407877][ T150] block nbd3: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 60 seconds [ 412.451760][T10498] input: syz1 as /devices/virtual/input/input26 [ 412.458405][ T3634] device veth0_vlan left promiscuous mode [ 413.625395][T10490] loop1: detected capacity change from 0 to 32768 [ 413.731004][T10490] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 413.783409][T10511] loop2: detected capacity change from 0 to 64 [ 413.787428][T10490] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 413.977004][ T3634] bond1 (unregistering): (slave bond2): Releasing backup interface [ 413.996873][T10490] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 414.016234][ T3634] bond2 (unregistering): Released all slaves [ 414.032511][ T3634] bond1 (unregistering): Released all slaves [ 414.041790][ T3618] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 414.053723][ T3618] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 414.213261][T10517] loop2: detected capacity change from 0 to 128 [ 414.253074][ T3618] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 199ms [ 414.277879][ T3618] gfs2: fsid=syz:syz.0: jid=0: Done [ 414.285224][T10490] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 414.362596][T10517] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 414.375753][ T7300] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 414.383012][T10517] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 414.415542][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.621628][ T3634] team0 (unregistering): Port device team_slave_1 removed [ 414.810580][ T3634] team0 (unregistering): Port device team_slave_0 removed [ 414.996653][ T7300] usb 4-1: Using ep0 maxpacket: 8 [ 415.051629][ T3634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.115920][ T7300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.146554][ T7300] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 415.158482][ T3634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.159514][ T7300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.184781][ T7300] usb 4-1: config 0 descriptor?? [ 415.231743][ T7300] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 415.379708][T10544] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 415.517244][ T3614] usb 4-1: USB disconnect, device number 23 [ 415.576998][ T3634] bond0 (unregistering): Released all slaves [ 415.777875][T10536] device syzkaller0 entered promiscuous mode [ 416.358903][T10559] netlink: 'syz.4.2056': attribute type 21 has an invalid length. [ 416.471589][T10562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2057'. [ 416.666175][ T3618] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 416.795725][ T3651] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 416.976070][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 417.045803][ T3651] usb 4-1: Using ep0 maxpacket: 8 [ 417.136004][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.165959][ T3618] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 417.166089][ T3651] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 417.193542][ T3651] usb 4-1: config 179 has no interface number 0 [ 417.221774][ T3651] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 417.225657][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.245758][ T3651] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 417.258550][ T3651] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 417.273543][ T3651] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 417.324942][ T3651] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 417.338940][ T3651] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 417.344384][ T3618] usb 2-1: config 0 descriptor?? [ 417.354725][ T3651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.416070][T10564] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 417.428396][T10566] loop2: detected capacity change from 0 to 128 [ 417.437979][ T3618] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 417.492635][T10568] loop4: detected capacity change from 0 to 128 [ 417.540006][T10566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 417.560316][T10566] System zones: 1-3, 19-19, 35-36 [ 417.586356][T10566] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 417.597898][T10566] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.633033][T10568] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 417.663749][ T3651] usb 4-1: USB disconnect, device number 24 [ 417.669903][T10568] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 417.675704][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 417.701966][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.890673][T10286] usb 2-1: USB disconnect, device number 34 [ 418.578808][T10588] Invalid ELF header magic: != ELF [ 418.692015][T10588] fuse: Bad value for 'fd' [ 418.894034][T10590] device syzkaller0 entered promiscuous mode [ 418.995844][ T3618] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 419.074939][T10601] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 419.265876][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 419.281296][T10611] netlink: 'syz.0.2071': attribute type 21 has an invalid length. [ 419.395576][T10613] loop1: detected capacity change from 0 to 128 [ 419.416043][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.436545][ T3618] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 419.473300][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.492799][ T3618] usb 3-1: config 0 descriptor?? [ 419.532028][T10613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 419.553246][T10613] System zones: 1-3, 19-19, 35-36 [ 419.560594][T10613] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 419.567921][ T3618] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 419.582407][T10613] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.861872][T10613] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 420.022936][ T3651] usb 3-1: USB disconnect, device number 35 [ 420.365717][ T3619] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 420.495790][ T3618] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 420.615809][ T3619] usb 4-1: Using ep0 maxpacket: 8 [ 420.735916][ T3619] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 420.775925][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 420.781754][ T3619] usb 4-1: config 179 has no interface number 0 [ 420.803466][ T3619] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 420.839259][ T3619] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 420.851067][ T3619] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 420.863910][ T3619] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 420.875905][T10286] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 420.883752][ T3619] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 420.895941][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.897623][ T3619] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 420.917422][ T3618] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 420.922563][ T3619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.934059][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.967476][ T3618] usb 2-1: config 0 descriptor?? [ 420.996233][T10622] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 421.015303][ T3618] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 421.145736][T10286] usb 3-1: Using ep0 maxpacket: 8 [ 421.243380][ T3614] usb 4-1: USB disconnect, device number 25 [ 421.255699][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 421.338918][ T3618] usb 2-1: USB disconnect, device number 35 [ 421.426799][T10286] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 421.446195][T10286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.473516][T10286] usb 3-1: Product: syz [ 421.488366][T10286] usb 3-1: Manufacturer: syz [ 421.503055][T10286] usb 3-1: SerialNumber: syz [ 421.529910][T10286] usb 3-1: config 0 descriptor?? [ 421.587781][T10286] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 421.835953][T10286] pwc: Failed to set LED on/off time (-71) [ 421.875404][T10286] pwc: send_video_command error -71 [ 421.901757][T10286] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 421.937180][T10286] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 421.973702][T10286] usb 3-1: USB disconnect, device number 36 [ 422.012762][T10645] Invalid ELF header magic: != ELF [ 422.050472][T10645] fuse: Bad value for 'fd' [ 422.239147][T10644] device syzkaller0 entered promiscuous mode [ 422.539080][T10657] device bridge_slave_1 left promiscuous mode [ 422.545392][T10657] bridge1: port 1(bridge_slave_1) entered disabled state [ 423.215911][ T3614] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 423.455754][ T3614] usb 2-1: Using ep0 maxpacket: 8 [ 423.576011][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.586040][ T3618] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 423.613924][ T3614] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 423.654346][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.686204][ T3614] usb 2-1: config 0 descriptor?? [ 423.738926][ T3614] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 423.825979][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 423.955990][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.971501][ T3618] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 423.991072][ T3651] usb 2-1: USB disconnect, device number 36 [ 424.003094][T10693] device syzkaller0 entered promiscuous mode [ 424.009835][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.033465][ T3618] usb 3-1: config 0 descriptor?? [ 424.077897][ T3618] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 424.129893][T10700] Invalid ELF header magic: != ELF [ 424.144851][T10700] fuse: Bad value for 'fd' [ 424.321434][T10705] netlink: 'syz.3.2099': attribute type 21 has an invalid length. [ 424.336787][ T3618] usb 3-1: USB disconnect, device number 37 [ 424.968763][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2103'. [ 425.216080][ T150] block nbd0: Possible stuck request ffff888020dde400: control (read@0,4096B). Runtime 60 seconds [ 425.237107][T10727] device syz_tun left promiscuous mode [ 425.242805][T10727] bridge0: port 3(syz_tun) entered disabled state [ 425.995840][T10740] device syzkaller0 entered promiscuous mode [ 426.121729][T10749] Invalid ELF header magic: != ELF [ 426.545760][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 426.725817][ T3618] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 426.816086][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 426.944033][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.956087][ T23] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 426.965223][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.975708][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 426.984460][ T23] usb 2-1: config 0 descriptor?? [ 427.046790][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 427.095993][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.116567][ T3618] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 427.162735][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.196183][ T3618] usb 3-1: config 0 descriptor?? [ 427.224103][T10773] netlink: 'syz.3.2120': attribute type 21 has an invalid length. [ 427.258000][ T3618] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 427.320431][ T7300] usb 2-1: USB disconnect, device number 37 [ 427.556722][ T3618] usb 3-1: USB disconnect, device number 38 [ 427.615342][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2124'. [ 428.435869][ T3618] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 428.685785][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 428.947135][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 428.966818][ T3618] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 428.984978][ T3618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.010463][ T3618] usb 3-1: Product: syz [ 429.031603][ T3618] usb 3-1: Manufacturer: syz [ 429.051346][ T3618] usb 3-1: SerialNumber: syz [ 429.090774][ T3618] usb 3-1: config 0 descriptor?? [ 429.148343][ T3618] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 429.396039][ T3618] pwc: Failed to set LED on/off time (-71) [ 429.415891][ T3618] pwc: send_video_command error -71 [ 429.432602][ T3618] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 429.457123][T10837] loop4: detected capacity change from 0 to 128 [ 429.459049][ T3618] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 429.488152][ T3618] usb 3-1: USB disconnect, device number 39 [ 429.495772][T10286] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 429.554939][T10837] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 429.580813][T10837] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.745762][T10286] usb 4-1: Using ep0 maxpacket: 8 [ 430.015806][T10286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.025707][T10286] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 430.061281][T10286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.134721][T10286] usb 4-1: config 0 descriptor?? [ 430.187765][T10286] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 430.415714][ T3618] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 430.525450][ T3651] usb 4-1: USB disconnect, device number 26 [ 430.665709][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 430.785942][ T3618] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 430.805807][ T3618] usb 2-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.838309][T10867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2152'. [ 430.848717][ T3618] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 430.891709][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.967991][ T3618] usbhid 2-1:64.0: couldn't find an input interrupt endpoint [ 431.289639][T10878] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 431.567375][T10882] input: syz1 as /devices/virtual/input/input28 [ 432.176175][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 432.377979][T10916] loop4: detected capacity change from 0 to 128 [ 432.381858][T10286] usb 2-1: USB disconnect, device number 38 [ 432.487781][T10916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 432.532500][T10916] System zones: 1-3, 19-19, 35-36 [ 432.561325][T10916] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 432.573081][T10916] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.666493][T10925] loop3: detected capacity change from 0 to 128 [ 432.716929][T10927] netlink: 'syz.2.2167': attribute type 21 has an invalid length. [ 432.771849][T10925] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 432.941501][T10925] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.994075][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.024903][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.506778][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2173'. [ 433.562368][T10941] device bridge_slave_1 left promiscuous mode [ 433.569780][T10941] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.706136][T10286] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 433.750049][T10949] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 434.301130][T10286] usb 5-1: Using ep0 maxpacket: 8 [ 434.377132][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2180'. [ 434.426020][T10286] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.440441][T10286] usb 5-1: config 179 has no interface number 0 [ 434.466798][T10286] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.512151][T10286] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 434.566629][T10286] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.619907][T10286] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.666235][T10286] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.709885][T10286] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.759781][T10286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.837734][T10937] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 434.882399][T10988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2184'. [ 434.950746][T10991] netlink: 'syz.2.2186': attribute type 21 has an invalid length. [ 435.095882][ T3618] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 435.285098][T10286] usb 5-1: USB disconnect, device number 43 [ 435.295695][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 435.304134][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 435.356157][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 435.379626][T10996] input: syz1 as /devices/virtual/input/input29 [ 435.655712][ T3618] usb 2-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 435.672737][ T3618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.686842][ T3618] usb 2-1: Product: syz [ 435.691072][ T3618] usb 2-1: Manufacturer: syz [ 435.703229][ T3618] usb 2-1: SerialNumber: syz [ 435.728879][ T3618] usb 2-1: config 0 descriptor?? [ 435.800145][ T3618] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 435.870954][T11002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 436.007436][T11009] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 436.036400][ T3618] pwc: Failed to set LED on/off time (-71) [ 436.055891][ T3618] pwc: send_video_command error -71 [ 436.061339][ T3618] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 436.105318][ T3618] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 436.141399][ T3618] usb 2-1: USB disconnect, device number 39 [ 436.531399][T11031] input: syz1 as /devices/virtual/input/input30 [ 436.559483][T11035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2203'. [ 436.637935][T11040] netlink: 'syz.1.2204': attribute type 21 has an invalid length. [ 436.655990][ T7448] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 436.863598][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2205'. [ 436.945759][ T7448] usb 5-1: Using ep0 maxpacket: 8 [ 437.065980][ T7448] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 437.105228][ T7448] usb 5-1: config 179 has no interface number 0 [ 437.157399][ T7448] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 437.190574][ T7448] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 437.203834][ T7448] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.232491][ T7448] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 437.288167][ T7448] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 437.375295][ T7448] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 437.423422][ T7448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.528037][T11030] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 437.986094][ T3614] usb 5-1: USB disconnect, device number 44 [ 437.995770][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 438.004187][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 438.321400][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2216'. [ 438.391247][T11076] device bridge_slave_1 left promiscuous mode [ 438.400664][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.683201][T11084] input: syz1 as /devices/virtual/input/input31 [ 439.676522][T11108] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2225'. [ 439.927026][ T1393] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.933391][ T1393] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.164273][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2229'. [ 440.234903][T11122] loop2: detected capacity change from 0 to 128 [ 440.243122][T11123] device bridge_slave_1 left promiscuous mode [ 440.252327][T11123] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.271698][T11123] bridge2: port 1(bridge_slave_1) entered blocking state [ 440.279645][T11123] bridge2: port 1(bridge_slave_1) entered disabled state [ 440.301622][T11123] device bridge_slave_1 entered promiscuous mode [ 440.390049][T11122] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 440.403563][T11122] System zones: 1-3, 19-19, 35-36 [ 440.448434][T11122] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 440.460686][T11122] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 440.727560][T11136] Invalid ELF header magic: != ELF [ 440.923365][T11138] input: syz1 as /devices/virtual/input/input32 [ 441.664064][T11158] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 441.834602][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2242'. [ 442.004043][T11166] bridge1: port 1(bridge_slave_1) entered blocking state [ 442.015300][T11166] bridge1: port 1(bridge_slave_1) entered disabled state [ 442.026051][T11166] device bridge_slave_1 entered promiscuous mode [ 442.415781][ T3618] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 442.486230][ T150] block nbd3: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 90 seconds [ 442.896733][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 442.918791][T11178] Invalid ELF header magic: != ELF [ 443.135751][ T3651] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 443.176009][ T3618] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 443.210243][ T3618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.265728][ T3618] usb 5-1: Product: syz [ 443.284868][ T3618] usb 5-1: Manufacturer: syz [ 443.294459][ T3618] usb 5-1: SerialNumber: syz [ 443.309811][ T3618] usb 5-1: config 0 descriptor?? [ 443.377793][ T3618] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 443.415849][ T3651] usb 4-1: Using ep0 maxpacket: 8 [ 443.444219][T11185] input: syz1 as /devices/virtual/input/input33 [ 443.546151][ T3651] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.587843][ T3651] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 443.604331][ T3651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.615900][ T3618] pwc: Failed to set LED on/off time (-71) [ 443.635801][ T3618] pwc: send_video_command error -71 [ 443.641033][ T3618] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 443.665795][ T3651] usb 4-1: config 0 descriptor?? [ 443.695396][ T3618] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 443.736309][ T3618] usb 5-1: USB disconnect, device number 45 [ 443.744516][ T3651] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 444.006709][ T3618] usb 4-1: USB disconnect, device number 27 [ 444.768553][T11207] loop4: detected capacity change from 0 to 128 [ 444.775330][T11206] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 444.844980][T11209] loop3: detected capacity change from 0 to 128 [ 444.887589][T11207] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.965076][T11207] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 444.996929][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.150674][T11209] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 445.166110][T11209] System zones: 1-3, 19-19, 35-36 [ 445.172180][T11209] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 445.250557][T11209] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 445.958673][T11231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2262'. [ 446.234364][T11230] input: syz1 as /devices/virtual/input/input34 [ 446.433418][T11235] Invalid ELF header magic: != ELF [ 447.348616][T11246] device syzkaller0 entered promiscuous mode [ 447.389727][T11249] netlink: 'syz.0.2267': attribute type 21 has an invalid length. [ 447.695549][T11259] loop2: detected capacity change from 0 to 128 [ 447.709867][T11261] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 447.816175][T11259] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 447.824205][T11259] System zones: 1-3, 19-19, 35-36 [ 447.848837][T11262] block nbd4: shutting down sockets [ 447.894086][T11259] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 447.991694][T11259] ext4 filesystem being mounted at /176/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 448.426642][T11278] Invalid ELF header magic: != ELF [ 448.527730][T11286] loop2: detected capacity change from 0 to 128 [ 448.547121][T11282] netlink: 'syz.4.2278': attribute type 21 has an invalid length. [ 448.668231][T11286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.721291][T11286] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 448.753308][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.834289][T11288] device syzkaller0 entered promiscuous mode [ 449.175891][ T3619] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 449.244480][T11301] loop3: detected capacity change from 0 to 128 [ 449.354252][T11301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 449.382840][T11301] System zones: 1-3, 19-19, 35-36 [ 449.414176][T11301] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 449.435769][ T3619] usb 2-1: Using ep0 maxpacket: 8 [ 449.457507][T11301] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 449.566179][ T3619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.584582][ T3619] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 449.614637][ T3619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.117796][ T3619] usb 2-1: config 0 descriptor?? [ 450.158862][ T3619] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 450.636584][ T3613] usb 2-1: USB disconnect, device number 40 [ 450.645395][T11329] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 450.809180][T11330] input: syz1 as /devices/virtual/input/input35 [ 451.129597][T11339] Invalid ELF header magic: != ELF [ 452.394091][T11369] device syzkaller0 entered promiscuous mode [ 452.437739][ T3585] block nbd4: Receive control failed (result -32) [ 452.453180][T11350] block nbd4: shutting down sockets [ 452.606063][T11379] Invalid ELF header magic: != ELF [ 452.884131][T11383] input: syz1 as /devices/virtual/input/input36 [ 453.189017][T11389] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 454.077700][T11405] device bridge_slave_1 left promiscuous mode [ 454.127818][T11405] bridge2: port 1(bridge_slave_1) entered disabled state [ 454.495039][T11410] netlink: 'syz.3.2315': attribute type 21 has an invalid length. [ 454.869567][T11414] device syzkaller0 entered promiscuous mode [ 455.146144][ T7448] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 455.262009][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2319'. [ 455.288302][ T150] block nbd0: Possible stuck request ffff888020dde400: control (read@0,4096B). Runtime 90 seconds [ 455.306159][T11425] bridge3: port 1(bridge_slave_1) entered blocking state [ 455.318307][T11425] bridge3: port 1(bridge_slave_1) entered disabled state [ 455.339004][T11425] device bridge_slave_1 entered promiscuous mode [ 455.435829][ T7448] usb 2-1: Using ep0 maxpacket: 8 [ 455.556544][ T7448] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 455.602935][ T7448] usb 2-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 455.698864][ T7448] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 455.733681][ T7448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.817740][ T7448] usbhid 2-1:64.0: couldn't find an input interrupt endpoint [ 455.919392][T11431] input: syz1 as /devices/virtual/input/input37 [ 456.596687][T11443] loop2: detected capacity change from 0 to 128 [ 456.677632][T11445] Invalid ELF header magic: != ELF [ 456.692239][T11443] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 456.717748][T11443] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 457.595910][ T3618] usb 2-1: USB disconnect, device number 41 [ 457.637462][T11457] netlink: 'syz.0.2328': attribute type 21 has an invalid length. [ 457.820553][T11463] device syzkaller0 entered promiscuous mode [ 457.882513][T11474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 457.994203][T11470] device bridge_slave_1 left promiscuous mode [ 458.004755][T11470] bridge3: port 1(bridge_slave_1) entered disabled state [ 458.043977][T11470] bridge4: port 1(bridge_slave_1) entered blocking state [ 458.054920][T11470] bridge4: port 1(bridge_slave_1) entered disabled state [ 458.074027][T11470] device bridge_slave_1 entered promiscuous mode [ 458.805933][ T3614] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 459.065846][ T3614] usb 4-1: Using ep0 maxpacket: 8 [ 459.136707][ T3651] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 459.185938][ T3614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.209975][ T3614] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 459.250110][ T3614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.304935][ T3614] usb 4-1: config 0 descriptor?? [ 459.358051][ T3614] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 459.415788][ T3651] usb 3-1: Using ep0 maxpacket: 8 [ 459.555958][ T3651] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.600909][ T3651] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 459.651372][ T3651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.679190][ T3651] usb 3-1: config 0 descriptor?? [ 459.700579][ T7300] usb 4-1: USB disconnect, device number 28 [ 459.728136][ T3651] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 459.978174][T11512] netlink: 'syz.0.2343': attribute type 21 has an invalid length. [ 460.005969][ T3651] usb 3-1: USB disconnect, device number 40 [ 460.225731][ T7300] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 460.505820][ T7300] usb 5-1: Using ep0 maxpacket: 8 [ 460.666003][ T7300] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 460.704446][ T7300] usb 5-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 460.778687][T11521] device syzkaller0 entered promiscuous mode [ 460.786011][ T7300] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 460.808532][ T7300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.878731][ T7300] usbhid 5-1:64.0: couldn't find an input interrupt endpoint [ 461.005783][ T3614] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 461.051987][T11534] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 461.255849][ T3614] usb 2-1: Using ep0 maxpacket: 8 [ 461.358902][T11537] cgroup2: Unknown parameter 'pids_localevents' [ 461.376191][ T3614] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 461.421678][ T3614] usb 2-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.499442][ T3614] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 461.555232][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.650754][ T3614] usbhid 2-1:64.0: couldn't find an input interrupt endpoint [ 462.628669][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 462.782532][T11553] device bridge_slave_1 left promiscuous mode [ 462.792974][T11553] bridge4: port 1(bridge_slave_1) entered disabled state [ 462.821099][T11553] bridge5: port 1(bridge_slave_1) entered blocking state [ 462.840169][T11553] bridge5: port 1(bridge_slave_1) entered disabled state [ 462.874646][T11553] device bridge_slave_1 entered promiscuous mode [ 462.989172][ T3618] usb 5-1: USB disconnect, device number 46 [ 463.151606][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2359'. [ 463.255834][ T3618] usb 2-1: USB disconnect, device number 42 [ 464.016627][T11576] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 464.149919][T11577] input: syz1 as /devices/virtual/input/input38 [ 465.255735][ T3618] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 465.505733][ T3618] usb 3-1: Using ep0 maxpacket: 8 [ 465.625925][ T3618] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 465.643803][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 465.653023][ T3618] usb 3-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 465.745770][T11600] device bridge_slave_1 left promiscuous mode [ 465.745809][ T3618] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 465.752024][T11600] bridge1: port 1(bridge_slave_1) entered disabled state [ 465.805834][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.861126][T11600] bridge2: port 1(bridge_slave_1) entered blocking state [ 465.891108][T11600] bridge2: port 1(bridge_slave_1) entered disabled state [ 465.899582][ T3618] usbhid 3-1:64.0: couldn't find an input interrupt endpoint [ 465.926076][T11600] device bridge_slave_1 entered promiscuous mode [ 466.264508][T11606] cgroup2: Unknown parameter 'pids_localevents' [ 466.825740][ T3614] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 467.085860][ T3614] usb 2-1: Using ep0 maxpacket: 8 [ 467.205891][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.255725][ T3614] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 467.287249][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.368644][ T3614] usb 2-1: config 0 descriptor?? [ 467.457216][ T3614] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 467.682392][ T7448] usb 3-1: USB disconnect, device number 41 [ 467.761744][ T3614] usb 2-1: USB disconnect, device number 43 [ 467.772032][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 467.992933][T11632] netlink: 'syz.2.2379': attribute type 21 has an invalid length. [ 468.084511][T11635] Invalid ELF header magic: != ELF [ 468.534737][T11640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2382'. [ 468.656138][ T3614] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 468.905877][ T3614] usb 2-1: Using ep0 maxpacket: 8 [ 469.025992][ T3614] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.041676][ T3614] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 469.053532][ T3614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.072387][ T3614] usb 2-1: config 0 descriptor?? [ 469.119148][ T3614] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 469.417337][ T7300] usb 2-1: USB disconnect, device number 44 [ 469.531575][T11649] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 470.702232][T11679] netlink: 'syz.2.2395': attribute type 21 has an invalid length. [ 471.082444][T11686] input: syz1 as /devices/virtual/input/input39 [ 471.285839][ T3618] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 471.377327][T11692] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 471.535928][ T3618] usb 2-1: Using ep0 maxpacket: 8 [ 471.564643][T11697] device bridge_slave_1 left promiscuous mode [ 471.583720][T11697] bridge2: port 1(bridge_slave_1) entered disabled state [ 471.655834][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.665582][ T3618] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 471.693492][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.727789][ T3618] usb 2-1: config 0 descriptor?? [ 471.770653][ T3618] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 471.817305][T11701] loop4: detected capacity change from 0 to 128 [ 471.948077][T11701] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 471.965142][T11701] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.102781][ T3618] usb 2-1: USB disconnect, device number 45 [ 472.566039][ T150] block nbd3: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 120 seconds [ 473.186967][T11738] loop2: detected capacity change from 0 to 128 [ 473.315414][T11738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 473.640347][T11738] System zones: 1-3, 19-19, 35-36 [ 473.676181][T11738] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 473.706856][T11738] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 473.786032][T11744] cgroup2: Unknown parameter 'pids_localevents' [ 474.715802][ T3651] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 474.810564][T11757] loop4: detected capacity change from 0 to 128 [ 474.901075][T11757] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 474.936097][T11757] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 474.974605][T11761] netlink: 'syz.1.2417': attribute type 21 has an invalid length. [ 475.125582][ T3651] usb 3-1: Using ep0 maxpacket: 8 [ 475.375804][ T3651] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 475.568650][ T3651] usb 3-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 475.622712][ T3651] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 475.655804][ T3651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.748063][ T3651] usbhid 3-1:64.0: couldn't find an input interrupt endpoint [ 476.804645][ T7448] usb 3-1: USB disconnect, device number 42 [ 476.963999][T11775] device syzkaller0 entered promiscuous mode [ 477.149206][T11784] loop4: detected capacity change from 0 to 128 [ 477.248570][T11784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 477.284109][T11784] System zones: 1-3, 19-19, 35-36 [ 477.318854][T11784] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 477.436037][T11784] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 477.845739][ T13] Bluetooth: hci6: command 0x0406 tx timeout [ 478.124433][T11804] input: syz1 as /devices/virtual/input/input40 [ 478.973678][T11806] chnl_net:caif_netlink_parms(): no params data found [ 479.096757][T11822] device syzkaller0 entered promiscuous mode [ 479.254131][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.262416][T11806] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.277164][T11806] device bridge_slave_0 entered promiscuous mode [ 479.297329][T11806] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.305580][T11806] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.314242][T11806] device bridge_slave_1 entered promiscuous mode [ 479.414823][T11806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.497524][T11806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.556498][T11838] nbd4: detected capacity change from 0 to 22 [ 479.569162][T11843] Invalid ELF header magic: != ELF [ 479.608742][T11839] block nbd4: shutting down sockets [ 479.637563][ C1] print_req_error: 40 callbacks suppressed [ 479.637580][ C1] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.654256][ C1] buffer_io_error: 40 callbacks suppressed [ 479.654268][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.668055][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.678902][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.687757][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.698614][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.707256][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.718110][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.726126][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.737429][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.746032][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.756896][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.764820][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.775741][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.784151][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.795201][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.803329][ T3837] ldm_validate_partition_table(): Disk read failed. [ 479.819027][T11806] team0: Port device team_slave_0 added [ 479.827756][T11806] team0: Port device team_slave_1 added [ 479.834564][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.846714][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.860553][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 479.871599][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 479.887174][ T3837] Dev nbd4: unable to read RDB block 0 [ 479.918030][ T3837] nbd4: unable to read partition table [ 479.956132][ T3837] nbd4: partition table beyond EOD, truncated [ 480.001988][T11838] ldm_validate_partition_table(): Disk read failed. [ 480.029868][T11838] Dev nbd4: unable to read RDB block 0 [ 480.055743][T11838] nbd4: unable to read partition table [ 480.071493][T11838] nbd4: partition table beyond EOD, truncated [ 480.084166][ T3837] ldm_validate_partition_table(): Disk read failed. [ 480.114751][ T3837] Dev nbd4: unable to read RDB block 0 [ 480.142412][ T3837] nbd4: unable to read partition table [ 480.157386][ T3837] nbd4: partition table beyond EOD, truncated [ 480.165522][T11806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.181551][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.245886][ T3618] Bluetooth: hci8: command 0x0409 tx timeout [ 480.288094][T11806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.317500][T11806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.324749][T11806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.412742][T11806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.422670][T11848] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 480.503234][T11806] device hsr_slave_0 entered promiscuous mode [ 480.538662][T11806] device hsr_slave_1 entered promiscuous mode [ 480.803173][T11806] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.877295][T11806] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.961495][T11806] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.184786][T11806] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.511636][T11806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 481.570422][T11863] input: syz1 as /devices/virtual/input/input41 [ 481.604364][T11806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 481.646408][T11806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 481.734073][T11806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 482.335839][ T23] Bluetooth: hci8: command 0x041b tx timeout [ 482.424310][T11806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.530799][T11874] device syzkaller0 entered promiscuous mode [ 482.542268][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'. [ 482.635878][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 482.678028][ T3757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.722899][T11878] device bridge_slave_1 left promiscuous mode [ 482.745310][T11878] bridge5: port 1(bridge_slave_1) entered disabled state [ 482.792330][T11878] bridge6: port 1(bridge_slave_1) entered blocking state [ 482.818699][T11878] bridge6: port 1(bridge_slave_1) entered disabled state [ 482.864882][T11878] device bridge_slave_1 entered promiscuous mode [ 482.879843][T11882] Invalid ELF header magic: != ELF [ 482.921171][T11806] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.036554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.057145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.076608][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.083717][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.119911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.138318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 483.159686][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.166812][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.187468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 483.201707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 483.247837][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 483.297410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 483.380063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 483.409914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 483.438815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 483.461024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 483.497213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 483.517240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 483.527658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 483.536629][T11893] nbd4: detected capacity change from 0 to 22 [ 483.566560][T11806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.587292][T11896] block nbd4: shutting down sockets [ 483.614679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 483.614880][T11894] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 483.643208][ T3837] ldm_validate_partition_table(): Disk read failed. [ 483.653004][ T3837] Dev nbd4: unable to read RDB block 0 [ 483.709756][ T3837] nbd4: unable to read partition table [ 483.715360][ T3837] nbd4: partition table beyond EOD, truncated [ 483.798931][ T3837] ldm_validate_partition_table(): Disk read failed. [ 483.853629][ T3837] Dev nbd4: unable to read RDB block 0 [ 483.918089][ T3837] nbd4: unable to read partition table [ 483.952939][ T3837] nbd4: partition table beyond EOD, truncated [ 484.073850][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 484.087054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 484.114132][T11806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.161838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 484.182892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 484.215061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 484.252995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 484.298659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 484.326600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 484.337755][T11806] device veth0_vlan entered promiscuous mode [ 484.416198][T11806] device veth1_vlan entered promiscuous mode [ 484.422464][ T3651] Bluetooth: hci8: command 0x040f tx timeout [ 484.496989][T11916] input: syz1 as /devices/virtual/input/input42 [ 484.536619][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 484.567227][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 484.593456][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.610594][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.632852][T11922] loop4: detected capacity change from 0 to 128 [ 484.657698][T11923] cgroup2: Unknown parameter 'pids_localevents' [ 484.677482][T11806] device veth0_macvtap entered promiscuous mode [ 484.701430][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 484.736678][T11922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 484.744630][T11922] System zones: 1-3, 19-19, 35-36 [ 484.776971][T11806] device veth1_macvtap entered promiscuous mode [ 484.791764][T11922] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,,errors=continue. Quota mode: none. [ 484.830370][T11922] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 484.862088][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.931871][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.957358][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.976455][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.992828][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.005777][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.019446][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.030952][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.055528][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.082862][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.122238][T11806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.161539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.283526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.390048][ T150] block nbd0: Possible stuck request ffff888020dde400: control (read@0,4096B). Runtime 120 seconds [ 485.410406][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.429887][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.473512][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.528043][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.571365][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.590545][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.603059][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.621724][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.632230][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.662681][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.708985][T11806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.731146][T11806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.764285][T11806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.798310][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2463'. [ 485.828379][T11938] bridge8: port 1(bridge_slave_1) entered blocking state [ 485.843718][T11938] bridge8: port 1(bridge_slave_1) entered disabled state [ 485.859660][T11938] device bridge_slave_1 entered promiscuous mode [ 485.893675][T11942] device syzkaller0 entered promiscuous mode [ 485.932535][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.953833][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 486.111846][T11806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.127262][T11806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.141889][T11806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.151785][T11806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.850168][ T3651] Bluetooth: hci8: command 0x0419 tx timeout [ 486.873859][T11951] device batadv0 entered promiscuous mode [ 486.883240][T11951] device bridge0 entered promiscuous mode [ 486.883450][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.925455][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.942841][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.996981][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.051969][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 487.093403][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 487.715829][ T3651] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 487.726527][ T13] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 487.758407][T11964] netlink: 'syz.1.2469': attribute type 21 has an invalid length. [ 487.965902][ T3651] usb 5-1: Using ep0 maxpacket: 8 [ 487.977057][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 488.086394][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 488.092546][ T23] Bluetooth: hci7: command 0x0406 tx timeout [ 488.096153][ T13] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 488.116007][ T3651] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 488.123432][ T13] usb 4-1: config 179 has no interface number 0 [ 488.133118][ T3651] usb 5-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 488.136122][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 488.149489][ T3651] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 488.157701][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 488.189929][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 488.216096][T11973] input: syz1 as /devices/virtual/input/input43 [ 488.222459][ T13] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 488.254392][ T3651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.283862][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 488.294354][ T13] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 488.312691][ T13] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 488.322297][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.337651][ T3651] usbhid 5-1:64.0: couldn't find an input interrupt endpoint [ 488.375968][T11961] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 488.650896][ T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input44 [ 488.798625][T11986] device syzkaller0 entered promiscuous mode [ 488.839629][ T7300] usb 4-1: USB disconnect, device number 29 [ 488.845749][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 488.854062][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 488.862430][ T7300] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 488.966244][ T3651] Bluetooth: hci8: command 0x0405 tx timeout [ 490.119129][ T13] usb 5-1: USB disconnect, device number 47 [ 490.277073][T12000] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 490.314432][T12001] cgroup2: Unknown parameter 'pids_localevents' [ 490.492831][T12007] device bridge_slave_1 left promiscuous mode [ 490.515327][T12007] bridge8: port 1(bridge_slave_1) entered disabled state [ 490.804235][T12012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2483'. [ 492.173274][T12020] input: syz1 as /devices/virtual/input/input45 [ 492.990321][T12027] loop1: detected capacity change from 0 to 128 [ 495.141335][T12045] device syzkaller0 entered promiscuous mode [ 495.257964][T12047] nbd2: detected capacity change from 0 to 22 [ 495.290420][T12050] block nbd2: shutting down sockets [ 495.316077][ C0] print_req_error: 75 callbacks suppressed [ 495.316093][ C0] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.332791][ C0] buffer_io_error: 75 callbacks suppressed [ 495.332806][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.346708][ T263] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.357725][ T263] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.366058][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.377011][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.385010][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.395879][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.403851][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.415183][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.423166][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.433974][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.441998][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.453121][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.461519][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.472339][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.481422][ T3837] ldm_validate_partition_table(): Disk read failed. [ 495.496332][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.507295][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.516967][ T150] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.527813][ T150] Buffer I/O error on dev nbd2, logical block 0, async page read [ 495.553067][ T3837] Dev nbd2: unable to read RDB block 0 [ 495.696224][ T3837] nbd2: unable to read partition table [ 495.752520][ T3837] nbd2: partition table beyond EOD, truncated [ 495.818945][T12056] ldm_validate_partition_table(): Disk read failed. [ 495.852250][T12056] Dev nbd2: unable to read RDB block 0 [ 495.898869][T12056] nbd2: unable to read partition table [ 495.947117][T12056] nbd2: partition table beyond EOD, truncated [ 495.968683][T12062] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 495.994316][ T3837] ldm_validate_partition_table(): Disk read failed. [ 496.039373][ T3837] Dev nbd2: unable to read RDB block 0 [ 496.066762][ T3837] nbd2: unable to read partition table [ 496.098729][ T3837] nbd2: partition table beyond EOD, truncated [ 496.204733][T12069] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 496.296321][ T7300] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 496.416223][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 496.585967][ T7300] usb 2-1: Using ep0 maxpacket: 8 [ 497.122973][ T7300] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 497.167314][T12087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2506'. [ 497.179091][ T7300] usb 2-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 497.241908][ T7300] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 497.320377][ T7300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.459213][ T7300] usbhid 2-1:64.0: couldn't find an input interrupt endpoint [ 497.856200][T12100] device syzkaller0 entered promiscuous mode [ 498.224375][T12104] loop4: detected capacity change from 0 to 128 [ 498.326037][ T3651] Bluetooth: hci2: command 0x0406 tx timeout [ 499.468488][ T3651] usb 2-1: USB disconnect, device number 46 [ 499.611446][T12117] Invalid ELF header magic: != ELF [ 499.972568][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2516'. [ 500.090136][T12121] bridge3: port 1(bridge_slave_1) entered blocking state [ 500.127332][T12121] bridge3: port 1(bridge_slave_1) entered disabled state [ 500.161248][T12121] device bridge_slave_1 entered promiscuous mode [ 500.261991][T12128] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 501.367771][ T1393] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.377209][ T1393] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.995062][T12149] loop3: detected capacity change from 0 to 128 [ 502.470330][T12153] device syzkaller0 entered promiscuous mode [ 502.668752][ T150] block nbd3: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 150 seconds [ 502.706593][T12149] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.726196][T12149] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 502.757970][ C0] vkms_vblank_simulate: vblank timer overrun [ 502.847779][T12162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2528'. [ 504.041668][T12175] cgroup2: Unknown parameter 'pids_localevents' [ 504.688890][T12180] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 505.219649][T12182] Invalid ELF header magic: != ELF [ 505.388291][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 505.466996][T12184] bridge10: port 1(bridge_slave_1) entered blocking state [ 505.484301][T12184] bridge10: port 1(bridge_slave_1) entered disabled state [ 505.494094][T12184] device bridge_slave_1 entered promiscuous mode [ 505.604741][T12189] loop2: detected capacity change from 0 to 128 [ 507.056623][T12203] device bridge_slave_1 left promiscuous mode [ 507.064975][T12203] bridge3: port 1(bridge_slave_1) entered disabled state [ 507.765811][ T13] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 507.945363][T12230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2549'. [ 507.959621][T12232] netlink: 'syz.3.2551': attribute type 21 has an invalid length. [ 508.006107][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 508.136331][ T13] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 508.152364][ T13] usb 5-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 508.193999][ T13] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 508.229226][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.318422][ T13] usbhid 5-1:64.0: couldn't find an input interrupt endpoint [ 508.984432][T12238] input: syz1 as /devices/virtual/input/input47 [ 509.007710][T12243] device bridge_slave_1 left promiscuous mode [ 509.037617][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.607737][T12261] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 509.825083][ T7448] usb 5-1: USB disconnect, device number 48 [ 509.971556][T12264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2563'. [ 510.593737][T12275] netlink: 'syz.3.2567': attribute type 21 has an invalid length. [ 511.444558][T12283] input: syz1 as /devices/virtual/input/input48 [ 511.946548][T12289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2570'. [ 512.026581][T12292] device bridge_slave_1 left promiscuous mode [ 512.033964][T12292] bridge10: port 1(bridge_slave_1) entered disabled state [ 512.256394][ T27] INFO: task udevd:4136 blocked for more than 144 seconds. [ 512.311215][ T27] Not tainted 5.15.168-syzkaller #0 [ 512.318211][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.344066][ T27] task:udevd state:D stack:24544 pid: 4136 ppid: 3027 flags:0x00004002 [ 512.359645][ T27] Call Trace: [ 512.363082][ T27] [ 512.375496][T12306] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 512.383793][ T27] __schedule+0x12c4/0x45b0 [ 512.392247][ T27] ? release_firmware_map_entry+0x190/0x190 [ 512.402411][ T27] ? preempt_schedule+0xd9/0xe0 [ 512.420874][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 512.434056][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 512.454464][ T27] ? print_irqtrace_events+0x210/0x210 [ 512.472616][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 512.490986][ T27] schedule+0x11b/0x1f0 [ 512.503203][ T27] io_schedule+0x88/0x100 [ 512.508414][ T3617] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 512.516326][ T3618] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 512.542640][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 512.574471][ T27] ? wait_on_page_bit+0x50/0x50 [ 512.603385][ T27] ? blkdev_fallocate+0x4e0/0x4e0 [ 512.634061][ T27] ? rcu_lock_release+0x20/0x20 [ 512.640220][ T27] ? vsnprintf+0x1c70/0x1c70 [ 512.651240][ T27] do_read_cache_page+0x9c1/0x1040 [ 512.657495][ T27] read_part_sector+0xd8/0x530 [ 512.666399][ T27] adfspart_check_ICS+0xd9/0xd00 [ 512.673117][ T27] ? ptr_to_hashval+0x60/0x60 [ 512.681825][ T27] ? adfspart_check_ADFS+0x8b0/0x8b0 [ 512.687962][ T27] ? snprintf+0xd6/0x120 [ 512.692544][ T27] ? __rmqueue_pcplist+0x2030/0x2030 [ 512.698747][ T27] ? __vmalloc_node_range+0x6aa/0x8c0 [ 512.704559][ T27] ? vsnprintf+0x1b89/0x1c70 [ 512.710078][ T27] ? vsnprintf+0x190/0x1c70 [ 512.715846][ T3617] usb 4-1: device descriptor read/64, error -71 [ 512.747454][ T27] ? vscnprintf+0x80/0x80 [ 512.751859][ T27] ? alloc_pages+0x458/0x570 [ 512.757020][ T27] bdev_disk_changed+0x964/0x16e0 [ 512.767205][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 512.775779][ T3618] usb 5-1: Using ep0 maxpacket: 8 [ 512.787009][ T27] ? iput+0x371/0x8b0 [ 512.791967][ T27] blkdev_get_whole+0x2fb/0x390 [ 512.812643][ T27] blkdev_get_by_dev+0x2bc/0xa50 [ 512.837798][ T27] blkdev_open+0x138/0x2d0 [ 512.842536][ T27] ? block_ioctl+0xf0/0xf0 [ 512.873109][ T27] do_dentry_open+0x807/0xfb0 [ 512.899882][ T27] path_openat+0x2705/0x2f20 [ 512.904548][ T27] ? do_filp_open+0x460/0x460 [ 512.915895][ T3618] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 512.928167][ T27] do_filp_open+0x21c/0x460 [ 512.941561][ T3618] usb 5-1: config 64 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 512.951359][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 512.985210][ T27] ? _raw_spin_unlock+0x24/0x40 [ 512.989742][ T3618] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice=40.00 [ 512.992050][ T27] ? alloc_fd+0x598/0x630 [ 513.005823][ T3617] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 513.030188][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.045117][ T27] do_sys_openat2+0x13b/0x4f0 [ 513.082719][ T27] ? do_sys_open+0x220/0x220 [ 513.087961][ T27] ? __fdget+0x158/0x220 [ 513.092397][ T27] __x64_sys_openat+0x243/0x290 [ 513.107260][ T3618] usbhid 5-1:64.0: couldn't find an input interrupt endpoint [ 513.128536][ T27] ? __ia32_sys_open+0x270/0x270 [ 513.137783][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 513.147516][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 513.153812][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 513.167061][ T27] do_syscall_64+0x3b/0xb0 [ 513.171764][ T27] ? clear_bhb_loop+0x15/0x70 [ 513.195523][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 513.215846][ T3617] usb 4-1: device descriptor read/64, error -71 [ 513.236028][ T27] RIP: 0033:0x7f2f3c8b99a4 [ 513.240588][ T27] RSP: 002b:00007fffb0c86d30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.254365][ T27] RAX: ffffffffffffffda RBX: 000055c3fe8bd2c0 RCX: 00007f2f3c8b99a4 [ 513.294619][ T27] RDX: 00000000000a0800 RSI: 000055c3fe8d7c00 RDI: 00000000ffffff9c [ 513.303085][ T27] RBP: 000055c3fe8d7c00 R08: 0000000000000001 R09: 0000000000000010 [ 513.311380][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 513.339603][ T27] R13: 000055c3fe8cdad0 R14: 0000000000000001 R15: 000055c3fe8bc910 [ 513.345903][ T3617] usb usb4-port1: attempt power cycle [ 513.377276][ T27] [ 513.387646][ T27] INFO: task udevd:4368 blocked for more than 145 seconds. [ 513.412883][ T27] Not tainted 5.15.168-syzkaller #0 [ 513.432309][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.464912][ T27] task:udevd state:D stack:22624 pid: 4368 ppid: 3027 flags:0x00004002 [ 513.487005][ T27] Call Trace: [ 513.490671][ T27] [ 513.493715][ T27] __schedule+0x12c4/0x45b0 [ 513.498789][ T27] ? release_firmware_map_entry+0x190/0x190 [ 513.504880][ T27] ? preempt_schedule+0xd9/0xe0 [ 513.511441][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 513.517287][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 513.523446][ T27] ? print_irqtrace_events+0x210/0x210 [ 513.529855][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 513.536419][ T27] schedule+0x11b/0x1f0 [ 513.540727][ T27] io_schedule+0x88/0x100 [ 513.545190][ T27] wait_on_page_bit_common+0xa13/0x1180 [ 513.551057][ T27] ? wait_on_page_bit+0x50/0x50 [ 513.556080][ T27] ? blkdev_fallocate+0x4e0/0x4e0 [ 513.561317][ T27] ? rcu_lock_release+0x20/0x20 [ 513.566454][ T27] ? vsnprintf+0x1c70/0x1c70 [ 513.571148][ T27] do_read_cache_page+0x9c1/0x1040 [ 513.576465][ T27] read_part_sector+0xd8/0x530 [ 513.581388][ T27] adfspart_check_ICS+0xd9/0xd00 [ 513.586590][ T27] ? ptr_to_hashval+0x60/0x60 [ 513.591422][ T27] ? adfspart_check_ADFS+0x8b0/0x8b0 [ 513.597020][ T27] ? snprintf+0xd6/0x120 [ 513.601372][ T27] ? __rmqueue_pcplist+0x2030/0x2030 [ 513.607074][ T27] ? __vmalloc_node_range+0x6aa/0x8c0 [ 513.612569][ T27] ? vsnprintf+0x1b89/0x1c70 [ 513.618618][ T27] ? vsnprintf+0x190/0x1c70 [ 513.623271][ T27] ? vscnprintf+0x80/0x80 [ 513.627912][ T27] ? alloc_pages+0x458/0x570 [ 513.633451][ T27] bdev_disk_changed+0x964/0x16e0 [ 513.638767][ T27] ? blk_drop_partitions+0x1b0/0x1b0 [ 513.644193][ T27] ? iput+0x371/0x8b0 [ 513.648391][ T27] blkdev_get_whole+0x2fb/0x390 [ 513.653727][ T27] blkdev_get_by_dev+0x2bc/0xa50 [ 513.659101][ T27] blkdev_open+0x138/0x2d0 [ 513.663764][ T27] ? block_ioctl+0xf0/0xf0 [ 513.668392][ T27] do_dentry_open+0x807/0xfb0 [ 513.673362][ T27] path_openat+0x2705/0x2f20 [ 513.678233][ T27] ? do_filp_open+0x460/0x460 [ 513.683129][ T27] do_filp_open+0x21c/0x460 [ 513.688013][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 513.692803][ T27] ? _raw_spin_unlock+0x24/0x40 [ 513.698172][ T27] ? alloc_fd+0x598/0x630 [ 513.702615][ T27] do_sys_openat2+0x13b/0x4f0 [ 513.707548][ T27] ? do_sys_open+0x220/0x220 [ 513.712231][ T27] ? __fdget+0x158/0x220 [ 513.716656][ T27] __x64_sys_openat+0x243/0x290 [ 513.721673][ T27] ? __ia32_sys_open+0x270/0x270 [ 513.728120][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 513.734294][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 513.740943][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 513.747365][ T27] do_syscall_64+0x3b/0xb0 [ 513.751935][ T27] ? clear_bhb_loop+0x15/0x70 [ 513.756739][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 513.762804][ T27] RIP: 0033:0x7f2f3c8b99a4 [ 513.767446][ T3617] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 513.767584][ T27] RSP: 002b:00007fffb0c86d30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 513.795558][ T27] RAX: ffffffffffffffda RBX: 000055c3fe8bd2c0 RCX: 00007f2f3c8b99a4 [ 513.813974][ T27] RDX: 00000000000a0800 RSI: 000055c3fe8ec050 RDI: 00000000ffffff9c [ 513.823297][ T27] RBP: 000055c3fe8ec050 R08: 0000000000000001 R09: 0000000000000010 [ 513.843882][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 513.865783][ T27] R13: 000055c3fe8ce750 R14: 0000000000000001 R15: 000055c3fe8bc910 [ 513.873809][ T27] [ 513.876521][ T3651] usb 5-1: USB disconnect, device number 49 [ 513.877525][ T3617] usb 4-1: device descriptor read/8, error -71 [ 513.898979][ T27] INFO: task syz.3.1832:9720 blocked for more than 145 seconds. [ 513.911911][ T27] Not tainted 5.15.168-syzkaller #0 [ 513.917981][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.928141][ T27] task:syz.3.1832 state:D stack:27168 pid: 9720 ppid: 4319 flags:0x00004004 [ 513.937782][ T27] Call Trace: [ 513.941644][ T27] [ 513.944597][ T27] __schedule+0x12c4/0x45b0 [ 513.950465][ T27] ? release_firmware_map_entry+0x190/0x190 [ 513.956527][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 513.962051][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 513.967507][ T27] schedule+0x11b/0x1f0 [ 513.971680][ T27] schedule_preempt_disabled+0xf/0x20 [ 513.977177][ T27] __mutex_lock_common+0xe34/0x25a0 [ 513.982387][ T27] ? blkdev_put+0xfb/0x790 [ 513.986887][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 513.992120][ T27] ? memset+0x1f/0x40 [ 513.996190][ T27] ? __fsnotify_parent+0x50c/0x730 [ 514.001324][ T27] mutex_lock_nested+0x17/0x20 [ 514.006189][ T27] blkdev_put+0xfb/0x790 [ 514.010508][ T27] blkdev_close+0x7c/0xa0 [ 514.014903][ T27] ? blkdev_open+0x2d0/0x2d0 [ 514.019627][ T27] __fput+0x3fe/0x8e0 [ 514.023647][ T27] task_work_run+0x129/0x1a0 [ 514.028807][ T27] exit_to_user_mode_loop+0x106/0x130 [ 514.034214][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 514.039980][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 514.046136][ T27] do_syscall_64+0x47/0xb0 [ 514.050576][ T27] ? clear_bhb_loop+0x15/0x70 [ 514.055270][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.061780][ T27] RIP: 0033:0x7f4f8d41fff9 [ 514.067728][ T27] RSP: 002b:00007ffe541d6698 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 514.076460][ T27] RAX: 0000000000000000 RBX: 00007f4f8d5d9a80 RCX: 00007f4f8d41fff9 [ 514.084500][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 514.092795][ T27] RBP: 00007f4f8d5d9a80 R08: 0000000000000006 R09: 00007ffe541d698f [ 514.101461][ T27] R10: 00000000003febb0 R11: 0000000000000246 R12: 000000000005621d [ 514.109744][ T27] R13: 00007ffe541d67a0 R14: 0000000000000032 R15: ffffffffffffffff [ 514.117897][ T27] [ 514.120970][ T27] INFO: task syz.3.1832:9721 blocked for more than 145 seconds. [ 514.128873][ T27] Not tainted 5.15.168-syzkaller #0 [ 514.134595][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.143363][ T27] task:syz.3.1832 state:D stack:26520 pid: 9721 ppid: 4319 flags:0x00004004 [ 514.155807][ T27] Call Trace: [ 514.159426][ T27] [ 514.162502][ T27] __schedule+0x12c4/0x45b0 [ 514.167554][ T27] ? release_firmware_map_entry+0x190/0x190 [ 514.173498][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 514.175804][ T3617] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 514.186978][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 514.192250][ T27] schedule+0x11b/0x1f0 [ 514.196535][ T27] schedule_preempt_disabled+0xf/0x20 [ 514.201939][ T27] __mutex_lock_common+0xe34/0x25a0 [ 514.207423][ T27] ? blkdev_get_by_dev+0x14d/0xa50 [ 514.212547][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 514.217948][ T27] ? iput+0x371/0x8b0 [ 514.221929][ T27] ? ilookup+0x1d6/0x210 [ 514.226422][ T27] mutex_lock_nested+0x17/0x20 [ 514.231360][ T27] blkdev_get_by_dev+0x14d/0xa50 [ 514.236543][ T27] blkdev_open+0x138/0x2d0 [ 514.241212][ T27] ? block_ioctl+0xf0/0xf0 [ 514.245709][ T27] do_dentry_open+0x807/0xfb0 [ 514.251265][ T27] path_openat+0x2705/0x2f20 [ 514.256456][ T27] ? do_filp_open+0x460/0x460 [ 514.261168][ T27] do_filp_open+0x21c/0x460 [ 514.266462][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 514.271099][ T27] ? _raw_spin_unlock+0x24/0x40 [ 514.276131][ T3617] usb 4-1: device descriptor read/8, error -71 [ 514.276615][ T27] ? alloc_fd+0x598/0x630 [ 514.288300][ T27] do_sys_openat2+0x13b/0x4f0 [ 514.293012][ T27] ? do_sys_open+0x220/0x220 [ 514.297783][ T27] ? __sock_create+0x7b5/0x8f0 [ 514.302918][ T27] __x64_sys_openat+0x243/0x290 [ 514.308042][ T27] ? __ia32_sys_open+0x270/0x270 [ 514.313148][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 514.319278][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 514.324618][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 514.338091][ T27] do_syscall_64+0x3b/0xb0 [ 514.342522][ T27] ? clear_bhb_loop+0x15/0x70 [ 514.347751][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.355448][ T27] RIP: 0033:0x7f4f8d41e990 [ 514.359923][ T27] RSP: 002b:00007f4f8b897b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 514.368730][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4f8d41e990 [ 514.376995][ T27] RDX: 0000000000000000 RSI: 00007f4f8b897c10 RDI: 00000000ffffff9c [ 514.385257][ T27] RBP: 00007f4f8b897c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 514.393311][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 514.396085][ T3617] usb usb4-port1: unable to enumerate USB device [ 514.403090][ T27] R13: 0000000000000000 R14: 00007f4f8d5d7f80 R15: 00007ffe541d6538 [ 514.416462][ T27] [ 514.419616][ T27] INFO: task syz.3.1832:9731 blocked for more than 146 seconds. [ 514.427330][ T27] Not tainted 5.15.168-syzkaller #0 [ 514.433552][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.442320][ T27] task:syz.3.1832 state:D stack:26968 pid: 9731 ppid: 4319 flags:0x00004004 [ 514.453121][ T27] Call Trace: [ 514.457033][ T27] [ 514.459989][ T27] __schedule+0x12c4/0x45b0 [ 514.464525][ T27] ? release_firmware_map_entry+0x190/0x190 [ 514.470652][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 514.476486][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 514.481797][ T27] schedule+0x11b/0x1f0 [ 514.486870][ T27] schedule_preempt_disabled+0xf/0x20 [ 514.492265][ T27] __mutex_lock_common+0xe34/0x25a0 [ 514.497588][ T27] ? blkdev_put+0xfb/0x790 [ 514.502263][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 514.508958][ T27] ? memset+0x1f/0x40 [ 514.512960][ T27] ? __fsnotify_parent+0x50c/0x730 [ 514.518135][ T27] mutex_lock_nested+0x17/0x20 [ 514.523057][ T27] blkdev_put+0xfb/0x790 [ 514.527554][ T27] ? __rwlock_init+0x140/0x140 [ 514.532342][ T27] blkdev_close+0x7c/0xa0 [ 514.536718][ T27] ? blkdev_open+0x2d0/0x2d0 [ 514.541702][ T27] __fput+0x3fe/0x8e0 [ 514.545911][ T27] task_work_run+0x129/0x1a0 [ 514.550676][ T27] exit_to_user_mode_loop+0x106/0x130 [ 514.556886][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 514.562451][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 514.568134][ T27] do_syscall_64+0x47/0xb0 [ 514.572783][ T27] ? clear_bhb_loop+0x15/0x70 [ 514.577550][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.583577][ T27] RIP: 0033:0x7f4f8d41fff9 [ 514.588093][ T27] RSP: 002b:00007f4f8b856038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.596753][ T27] RAX: 0000000000000000 RBX: 00007f4f8d5d8130 RCX: 00007f4f8d41fff9 [ 514.604738][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 514.612821][ T27] RBP: 00007f4f8d492296 R08: 0000000000000000 R09: 0000000000000000 [ 514.622494][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.630593][ T27] R13: 0000000000000001 R14: 00007f4f8d5d8130 R15: 00007ffe541d6538 [ 514.638764][ T27] [ 514.641825][ T27] INFO: task syz.0.1878:9920 blocked for more than 146 seconds. [ 514.649704][ T27] Not tainted 5.15.168-syzkaller #0 [ 514.655695][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.664818][ T27] task:syz.0.1878 state:D stack:27168 pid: 9920 ppid: 9717 flags:0x00004004 [ 514.674112][ T27] Call Trace: [ 514.677723][ T27] [ 514.680672][ T27] __schedule+0x12c4/0x45b0 [ 514.685195][ T27] ? release_firmware_map_entry+0x190/0x190 [ 514.691152][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 514.696921][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 514.702227][ T27] schedule+0x11b/0x1f0 [ 514.706488][ T27] schedule_preempt_disabled+0xf/0x20 [ 514.712007][ T27] __mutex_lock_common+0xe34/0x25a0 [ 514.717295][ T27] ? blkdev_put+0xfb/0x790 [ 514.721899][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 514.728621][ T27] ? memset+0x1f/0x40 [ 514.732633][ T27] ? __fsnotify_parent+0x50c/0x730 [ 514.737829][ T27] mutex_lock_nested+0x17/0x20 [ 514.742801][ T27] blkdev_put+0xfb/0x790 [ 514.747116][ T27] blkdev_close+0x7c/0xa0 [ 514.751593][ T27] ? blkdev_open+0x2d0/0x2d0 [ 514.756220][ T27] __fput+0x3fe/0x8e0 [ 514.761037][ T27] task_work_run+0x129/0x1a0 [ 514.765720][ T27] exit_to_user_mode_loop+0x106/0x130 [ 514.771219][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 514.776851][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 514.782573][ T27] do_syscall_64+0x47/0xb0 [ 514.787062][ T27] ? clear_bhb_loop+0x15/0x70 [ 514.791902][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 514.797848][ T27] RIP: 0033:0x7f0e46235ff9 [ 514.802416][ T27] RSP: 002b:00007fff7752c268 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 514.812182][ T27] RAX: 0000000000000000 RBX: 00007f0e463efa80 RCX: 00007f0e46235ff9 [ 514.820494][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 514.829020][ T27] RBP: 00007f0e463efa80 R08: 0000000000000006 R09: 00007fff7752c55f [ 514.838474][ T27] R10: 00000000003febe0 R11: 0000000000000246 R12: 0000000000059441 [ 514.846541][ T27] R13: 00007fff7752c370 R14: 0000000000000032 R15: ffffffffffffffff [ 514.854529][ T27] [ 514.857684][ T27] INFO: task syz.0.1878:9921 blocked for more than 146 seconds. [ 514.866130][ T27] Not tainted 5.15.168-syzkaller #0 [ 514.871854][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.880647][ T27] task:syz.0.1878 state:D stack:26432 pid: 9921 ppid: 9717 flags:0x00004004 [ 514.889934][ T27] Call Trace: [ 514.893216][ T27] [ 514.896253][ T27] __schedule+0x12c4/0x45b0 [ 514.900799][ T27] ? release_firmware_map_entry+0x190/0x190 [ 514.906786][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 514.912266][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 514.917569][ T27] schedule+0x11b/0x1f0 [ 514.921739][ T27] schedule_preempt_disabled+0xf/0x20 [ 514.927272][ T27] __mutex_lock_common+0xe34/0x25a0 [ 514.932495][ T27] ? blkdev_get_by_dev+0x14d/0xa50 [ 514.937718][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 514.942927][ T27] ? iput+0x371/0x8b0 [ 514.948202][ T27] ? ilookup+0x1d6/0x210 [ 514.952473][ T27] mutex_lock_nested+0x17/0x20 [ 514.957368][ T27] blkdev_get_by_dev+0x14d/0xa50 [ 514.962674][ T27] blkdev_open+0x138/0x2d0 [ 514.967926][ T27] ? block_ioctl+0xf0/0xf0 [ 514.972354][ T27] do_dentry_open+0x807/0xfb0 [ 514.977184][ T27] path_openat+0x2705/0x2f20 [ 514.981831][ T27] ? do_filp_open+0x460/0x460 [ 514.986587][ T27] do_filp_open+0x21c/0x460 [ 514.991101][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 514.995793][ T27] ? _raw_spin_unlock+0x24/0x40 [ 515.000679][ T27] ? alloc_fd+0x598/0x630 [ 515.005021][ T27] do_sys_openat2+0x13b/0x4f0 [ 515.009780][ T27] ? do_sys_open+0x220/0x220 [ 515.014399][ T27] __x64_sys_openat+0x243/0x290 [ 515.019403][ T27] ? __ia32_sys_open+0x270/0x270 [ 515.024348][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 515.030355][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 515.035562][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 515.041687][ T27] do_syscall_64+0x3b/0xb0 [ 515.046170][ T27] ? clear_bhb_loop+0x15/0x70 [ 515.050856][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.058171][ T27] RIP: 0033:0x7f0e46234990 [ 515.062605][ T27] RSP: 002b:00007f0e446adb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 515.071678][ T27] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e46234990 [ 515.079787][ T27] RDX: 0000000000000000 RSI: 00007f0e446adc10 RDI: 00000000ffffff9c [ 515.087905][ T27] RBP: 00007f0e446adc10 R08: 0000000000000000 R09: 002364626e2f7665 [ 515.096019][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 515.104032][ T27] R13: 0000000000000000 R14: 00007f0e463edf80 R15: 00007fff7752c108 [ 515.112083][ T27] [ 515.115121][ T27] INFO: task syz.0.1878:9923 blocked for more than 146 seconds. [ 515.123212][ T27] Not tainted 5.15.168-syzkaller #0 [ 515.129023][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.137733][ T27] task:syz.0.1878 state:D stack:27064 pid: 9923 ppid: 9717 flags:0x00004004 [ 515.147138][ T27] Call Trace: [ 515.150423][ T27] [ 515.153405][ T27] __schedule+0x12c4/0x45b0 [ 515.158013][ T27] ? release_firmware_map_entry+0x190/0x190 [ 515.163910][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 515.171317][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 515.176604][ T27] schedule+0x11b/0x1f0 [ 515.180771][ T27] schedule_preempt_disabled+0xf/0x20 [ 515.188072][ T27] __mutex_lock_common+0xe34/0x25a0 [ 515.193309][ T27] ? blkdev_put+0xfb/0x790 [ 515.197806][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 515.203014][ T27] ? memset+0x1f/0x40 [ 515.207059][ T27] ? __fsnotify_parent+0x50c/0x730 [ 515.212182][ T27] mutex_lock_nested+0x17/0x20 [ 515.217081][ T27] blkdev_put+0xfb/0x790 [ 515.221358][ T27] ? __rwlock_init+0x140/0x140 [ 515.226204][ T27] blkdev_close+0x7c/0xa0 [ 515.230537][ T27] ? blkdev_open+0x2d0/0x2d0 [ 515.235131][ T27] __fput+0x3fe/0x8e0 [ 515.239165][ T27] task_work_run+0x129/0x1a0 [ 515.243811][ T27] exit_to_user_mode_loop+0x106/0x130 [ 515.249279][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 515.254837][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 515.260449][ T27] do_syscall_64+0x47/0xb0 [ 515.264871][ T27] ? clear_bhb_loop+0x15/0x70 [ 515.269587][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.276425][ T27] RIP: 0033:0x7f0e46235ff9 [ 515.280856][ T27] RSP: 002b:00007f0e4468d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.290780][ T27] RAX: 0000000000000000 RBX: 00007f0e463ee058 RCX: 00007f0e46235ff9 [ 515.298845][ T27] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000006 [ 515.307025][ T27] RBP: 00007f0e462a8296 R08: 0000000000000000 R09: 0000000000000000 [ 515.315030][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.323130][ T27] R13: 0000000000000000 R14: 00007f0e463ee058 R15: 00007fff7752c108 [ 515.331213][ T27] [ 515.334278][ T27] [ 515.334278][ T27] Showing all locks held in the system: [ 515.342131][ T27] 3 locks held by kworker/0:1/13: [ 515.347312][ T27] #0: ffff8880b903a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa8/0x140 [ 515.357325][ T27] #1: ffff8880b9027848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 515.378455][ T27] #2: ffffffff96b2b070 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0xd8/0x4e0 [ 515.389322][ T27] 1 lock held by khungtaskd/27: [ 515.394186][ T27] #0: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 515.404106][ T27] 2 locks held by getty/3332: [ 515.409067][ T27] #0: ffff88814b4cd098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 515.419242][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 515.429609][ T27] 4 locks held by kworker/u4:4/3622: [ 515.434886][ T27] #0: ffff8880171cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 515.445251][ T27] #1: ffffc90003147d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 515.456105][ T150] block nbd0: Possible stuck request ffff888020dde400: control (read@0,4096B). Runtime 150 seconds [ 515.465318][ T27] #2: ffffffff8da265d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 515.477342][ T27] #3: ffffffff8c9240f0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 515.487412][ T27] 3 locks held by kworker/u4:6/3757: [ 515.492702][ T27] 1 lock held by udevd/4136: [ 515.497365][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.508851][ T27] 1 lock held by udevd/4368: [ 515.513448][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.523615][ T27] 1 lock held by syz.3.1832/9720: [ 515.528907][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 515.538314][ T27] 1 lock held by syz.3.1832/9721: [ 515.543335][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.553431][ T27] 1 lock held by syz.3.1832/9731: [ 515.558526][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 515.567988][ T27] 1 lock held by syz.0.1878/9920: [ 515.573010][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 515.583162][ T27] 1 lock held by syz.0.1878/9921: [ 515.588328][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.598427][ T27] 1 lock held by syz.0.1878/9923: [ 515.603449][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 515.612856][ T27] 1 lock held by syz.3.2376/11620: [ 515.619244][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.629388][ T27] 1 lock held by syz.3.2376/11625: [ 515.634494][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.644544][ T27] 1 lock held by syz.3.2376/11629: [ 515.649755][ T27] #0: ffff888020de0518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.659871][ T27] 1 lock held by syz.0.2538/12193: [ 515.664973][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.675385][ T27] 1 lock held by syz.0.2538/12196: [ 515.681188][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.691440][ T27] 1 lock held by syz.0.2538/12200: [ 515.696612][ T27] #0: ffff888020aec518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 515.706790][ T27] [ 515.709127][ T27] ============================================= [ 515.709127][ T27] [ 515.717735][ T27] NMI backtrace for cpu 1 [ 515.722073][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 515.730033][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.740376][ T27] Call Trace: [ 515.743681][ T27] [ 515.746602][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 515.751283][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 515.756904][ T27] ? panic+0x860/0x860 [ 515.760977][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 515.766077][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 515.771110][ T27] ? __wake_up_klogd+0xd5/0x100 [ 515.775977][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 515.782136][ T27] ? _printk+0xd1/0x120 [ 515.786286][ T27] ? panic+0x860/0x860 [ 515.790451][ T27] ? __wake_up_klogd+0xcc/0x100 [ 515.795299][ T27] ? panic+0x860/0x860 [ 515.799368][ T27] ? __rcu_read_unlock+0x92/0x100 [ 515.804392][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 515.810449][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 515.816441][ T27] watchdog+0xe72/0xeb0 [ 515.820621][ T27] kthread+0x3f6/0x4f0 [ 515.824695][ T27] ? hungtask_pm_notify+0x50/0x50 [ 515.829715][ T27] ? kthread_blkcg+0xd0/0xd0 [ 515.834304][ T27] ret_from_fork+0x1f/0x30 [ 515.838722][ T27] [ 515.842568][ T27] Sending NMI from CPU 1 to CPUs 0: [ 515.848028][ C0] NMI backtrace for cpu 0 [ 515.848039][ C0] CPU: 0 PID: 4330 Comm: kworker/u4:13 Not tainted 5.15.168-syzkaller #0 [ 515.848054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.848062][ C0] Workqueue: phy25 ieee80211_iface_work [ 515.848084][ C0] RIP: 0010:__lock_acquire+0x660/0x1ff0 [ 515.848100][ C0] Code: 81 00 00 00 48 8d 04 9b 48 8d 5c c1 20 48 89 d8 48 c1 e8 03 0f b6 04 10 84 c0 75 18 8b 1b 41 0f b6 04 16 84 c0 75 35 41 33 1f c3 00 60 00 00 74 bc eb 73 89 d9 80 e1 07 80 c1 03 38 c1 48 8b [ 515.848112][ C0] RSP: 0018:ffffc900031f7760 EFLAGS: 00000006 [ 515.848123][ C0] RAX: 0000000000000000 RBX: 0000000000060342 RCX: ffff888028764670 [ 515.848133][ C0] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffffffff90763100 [ 515.848143][ C0] RBP: 0000000000000002 R08: dffffc0000000000 R09: fffffbfff20ec621 [ 515.848152][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000003 [ 515.848161][ C0] R13: ffff888028764668 R14: 1ffff110050ec8e1 R15: ffff888028764708 [ 515.848171][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 515.848183][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.848193][ C0] CR2: 00007f3a1a959338 CR3: 000000001f988000 CR4: 00000000003526f0 [ 515.848206][ C0] Call Trace: [ 515.848211][ C0] [ 515.848215][ C0] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 515.848231][ C0] ? read_lock_is_recursive+0x10/0x10 [ 515.848245][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 515.848265][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 515.848280][ C0] ? nmi_handle+0xf7/0x370 [ 515.848294][ C0] ? __lock_acquire+0x660/0x1ff0 [ 515.848307][ C0] ? default_do_nmi+0x62/0x150 [ 515.848321][ C0] ? exc_nmi+0xa8/0x100 [ 515.848334][ C0] ? end_repeat_nmi+0x16/0x31 [ 515.848350][ C0] ? __lock_acquire+0x660/0x1ff0 [ 515.848362][ C0] ? __lock_acquire+0x660/0x1ff0 [ 515.848375][ C0] ? __lock_acquire+0x660/0x1ff0 [ 515.848387][ C0] [ 515.848392][ C0] [ 515.848402][ C0] lock_acquire+0x1db/0x4f0 [ 515.848414][ C0] ? rcu_lock_acquire+0x5/0x30 [ 515.848430][ C0] ? read_lock_is_recursive+0x10/0x10 [ 515.848443][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 515.848455][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 515.848471][ C0] ? ieee80211_queue_delayed_work+0x160/0x160 [ 515.848486][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 515.848499][ C0] ? ieee80211_get_channel_khz+0x16f/0x7a0 [ 515.848515][ C0] rcu_lock_acquire+0x2a/0x30 [ 515.848529][ C0] ? rcu_lock_acquire+0x5/0x30 [ 515.848542][ C0] ieee80211_ibss_rx_queued_mgmt+0xd20/0x2af0 [ 515.848557][ C0] ? mark_lock+0x98/0x340 [ 515.848574][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 515.848591][ C0] ? ieee80211_ibss_rx_no_sta+0x720/0x720 [ 515.848606][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 515.848620][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 515.848635][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 515.848649][ C0] ? _raw_spin_unlock+0x40/0x40 [ 515.848663][ C0] ? kcov_remote_start+0x6f/0x480 [ 515.848679][ C0] ? kcov_remote_start+0xf2/0x480 [ 515.848693][ C0] ieee80211_iface_work+0x78f/0xcc0 [ 515.848711][ C0] process_one_work+0x8a1/0x10c0 [ 515.848731][ C0] ? worker_detach_from_pool+0x260/0x260 [ 515.848746][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 515.848761][ C0] ? kthread_data+0x4e/0xc0 [ 515.848773][ C0] ? wq_worker_running+0x97/0x170 [ 515.848787][ C0] worker_thread+0xaca/0x1280 [ 515.848809][ C0] kthread+0x3f6/0x4f0 [ 515.848821][ C0] ? rcu_lock_release+0x20/0x20 [ 515.848834][ C0] ? kthread_blkcg+0xd0/0xd0 [ 515.848847][ C0] ret_from_fork+0x1f/0x30 [ 515.848866][ C0] [ 515.850520][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 516.213235][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 516.221192][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 516.231234][ T27] Call Trace: [ 516.234513][ T27] [ 516.237435][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 516.242118][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 516.247742][ T27] ? panic+0x860/0x860 [ 516.251836][ T27] panic+0x318/0x860 [ 516.255737][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 516.261369][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 516.267627][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 516.272829][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 516.278892][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 516.285050][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 516.291194][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 516.297344][ T27] watchdog+0xeb0/0xeb0 [ 516.301540][ T27] kthread+0x3f6/0x4f0 [ 516.305592][ T27] ? hungtask_pm_notify+0x50/0x50 [ 516.310616][ T27] ? kthread_blkcg+0xd0/0xd0 [ 516.315199][ T27] ret_from_fork+0x1f/0x30 [ 516.319623][ T27] [ 516.322914][ T27] Kernel Offset: disabled [ 516.328019][ T27] Rebooting in 86400 seconds..