last executing test programs: 3.142900723s ago: executing program 2 (id=638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.047904605s ago: executing program 3 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.932175078s ago: executing program 3 (id=641): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1, 0x2, 0x80) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.788979062s ago: executing program 2 (id=642): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='!', 0x1) 2.731895513s ago: executing program 0 (id=643): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c9200a00f000f6ffffffffffffffe068166d781b4ca6f8fa32b8c727d808ebc16125"], 0xf) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x0, 0x80000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x10) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) 2.659751705s ago: executing program 3 (id=644): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a704e458b76ad37e1361c43b4078ae926cbf9f823f27bdb489f6255019cad0e6f95137d3fcf", 0x2e}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214020f7500bc89ee18805e22a030c25f1a2a9c3705eef0ca40beb97c799a4002269020c7c12e4f93d7dd822eb42ca542bf7cffc36de4e561fb13629158facaf1ede872cb5d242592b763a06cda9da620892350c59b3580054f2cef3416e47adfd7347bbe95903fa873fd7fee7e7e8c22d8b2ff575a", 0xcb}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb682e05b38c2d19db77d13ec6bbee3da919aa8147271b5612c545cf95483beb486531e1289271e9570708af6a5f7263238f654704ccd4235ee47f8511e5e3fe7c89d3bf43af863590301f1ef78", 0x7f}, {&(0x7f0000000a40)="8a0e0f88ac", 0x5}, {&(0x7f0000000a80)="0e5f5a2ebf89", 0x6}], 0x6}}, {{&(0x7f0000000b40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294dbf3", 0xa8}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63c6cf8db41f42a2d02b09e37c75fbdb3f50108e5d5d135440a4cde064d28c9c30b8c59ebfcf1b3804b16606a289938e5d310359fb8ca279e501d6edc0c7b4cc2419f0bf92a5aea2e8b60b95ffd2c82d9932a22d7a8eb2346247776a523a5d0066bd5f7869e4d24bf30e366fb39c5c3091e615339a415b3efcf073205576f86fdc7e98a12fff979ba11c76a43e889e9bd44ae74e058b5e8e2d8028521a084e135600b4c3e6770b8ff8e26dbd3a010ed5e3", 0xce}, {&(0x7f00000012c0)}], 0x4}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.591655687s ago: executing program 2 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) 2.482847589s ago: executing program 2 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f00000031c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20000080) 2.481920839s ago: executing program 0 (id=647): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='10', 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 2.407608841s ago: executing program 3 (id=648): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) lseek(0xffffffffffffffff, 0x38, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0) 2.328341163s ago: executing program 2 (id=649): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201010102000007"], 0x0) 2.302117834s ago: executing program 0 (id=650): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.170993527s ago: executing program 0 (id=651): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a00)=ANY=[@ANYBLOB="1800000300250100000004006680"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x44041}, 0x84841) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r9], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r11, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x9, 0x5, 0x1, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x74}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0c00180000000000"], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x28) 1.774293587s ago: executing program 1 (id=654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) 1.555934302s ago: executing program 1 (id=655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x36, 0x0, &(0x7f0000001880)="cedfb080cd21d308098e000081007e2286dd2db6cc65938e6cf878a76202992d66a9b3c35fdae0c92d67c45a11b3b285ef0400000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.516673743s ago: executing program 0 (id=656): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x5d0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5a4, 0x2, [@TCA_BPF_ACT={0x5a0, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x174, 0x12, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xb9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x108, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0xb5, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031bdd2ca073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1a0, 0x4, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaba, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0x1000000fe}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x1007b, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x10, 0x6, "72c2816ab98a21c440078477"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x4000001, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.415971186s ago: executing program 1 (id=657): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 1.327932838s ago: executing program 3 (id=658): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000019200)=[&(0x7f0000000540)={0x4c5, 0x0, 0x106, 0x800000000001, 0x0, r0, 0x0}]) 1.301451068s ago: executing program 0 (id=659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_enter(0xffffffffffffffff, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.189184891s ago: executing program 3 (id=660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x10162, 0x0) 1.167997002s ago: executing program 1 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='10', 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 632.182715ms ago: executing program 1 (id=662): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25c", 0x4a) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 127.759637ms ago: executing program 1 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) socket$unix(0x1, 0x5, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) 0s ago: executing program 2 (id=664): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=r1], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 72.553334][ T5755] cgroup: Unknown subsys name 'net' [ 72.686877][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.039427][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.479420][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.501599][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.509948][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.520591][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.521382][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.528990][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.542486][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.542692][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.550802][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.557763][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.564367][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.579565][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.581491][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.587014][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.601266][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.609641][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.617333][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.625511][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.629423][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.640011][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.648819][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.673756][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.682109][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.689703][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.054850][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.106681][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 76.125801][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 76.190844][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 76.320373][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.328011][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.335403][ T5769] bridge_slave_0: entered allmulticast mode [ 76.342729][ T5769] bridge_slave_0: entered promiscuous mode [ 76.357600][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.364868][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.374312][ T5767] bridge_slave_0: entered allmulticast mode [ 76.380924][ T5767] bridge_slave_0: entered promiscuous mode [ 76.388549][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.396007][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.403309][ T5767] bridge_slave_1: entered allmulticast mode [ 76.409900][ T5767] bridge_slave_1: entered promiscuous mode [ 76.426934][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.434043][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.441120][ T5769] bridge_slave_1: entered allmulticast mode [ 76.447977][ T5769] bridge_slave_1: entered promiscuous mode [ 76.465231][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.472941][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.480114][ T5770] bridge_slave_0: entered allmulticast mode [ 76.486968][ T5770] bridge_slave_0: entered promiscuous mode [ 76.514304][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.542433][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.549566][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.556842][ T5770] bridge_slave_1: entered allmulticast mode [ 76.563588][ T5770] bridge_slave_1: entered promiscuous mode [ 76.572310][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.600791][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.625600][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.633004][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.640092][ T5768] bridge_slave_0: entered allmulticast mode [ 76.647435][ T5768] bridge_slave_0: entered promiscuous mode [ 76.654874][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.662083][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.669177][ T5768] bridge_slave_1: entered allmulticast mode [ 76.676071][ T5768] bridge_slave_1: entered promiscuous mode [ 76.685034][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.713099][ T5767] team0: Port device team_slave_0 added [ 76.721043][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.747540][ T5767] team0: Port device team_slave_1 added [ 76.764394][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.803984][ T5769] team0: Port device team_slave_0 added [ 76.810688][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.817672][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.843571][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.865832][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.878918][ T5769] team0: Port device team_slave_1 added [ 76.886121][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.895691][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.921894][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.935542][ T5770] team0: Port device team_slave_0 added [ 76.944570][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.979009][ T5770] team0: Port device team_slave_1 added [ 76.999744][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.006806][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.033229][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.045538][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.052922][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.078864][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.119904][ T5768] team0: Port device team_slave_0 added [ 77.128116][ T5768] team0: Port device team_slave_1 added [ 77.152111][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.159062][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.185697][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.235654][ T5767] hsr_slave_0: entered promiscuous mode [ 77.242317][ T5767] hsr_slave_1: entered promiscuous mode [ 77.249491][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.256615][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.284652][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.306931][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.313981][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.340107][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.352369][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.359920][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.386140][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.433912][ T5770] hsr_slave_0: entered promiscuous mode [ 77.440005][ T5770] hsr_slave_1: entered promiscuous mode [ 77.446459][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.455107][ T5770] Cannot create hsr debugfs directory [ 77.493465][ T5769] hsr_slave_0: entered promiscuous mode [ 77.501934][ T5769] hsr_slave_1: entered promiscuous mode [ 77.507907][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.515621][ T5769] Cannot create hsr debugfs directory [ 77.628458][ T5768] hsr_slave_0: entered promiscuous mode [ 77.635316][ T5768] hsr_slave_1: entered promiscuous mode [ 77.641798][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.649353][ T5768] Cannot create hsr debugfs directory [ 77.671856][ T5773] Bluetooth: hci2: command tx timeout [ 77.671871][ T5772] Bluetooth: hci1: command tx timeout [ 77.751365][ T5772] Bluetooth: hci0: command tx timeout [ 77.751381][ T5773] Bluetooth: hci3: command tx timeout [ 77.935648][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.953557][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.963890][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.984777][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.047423][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.061140][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.079555][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.100564][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.185003][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.195672][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.214016][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.226856][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.288507][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.305361][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.316062][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.325646][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.351889][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.428129][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.466155][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.473405][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.486306][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.493409][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.509298][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.578448][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.589860][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.622070][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.630908][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.681120][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.688273][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.729731][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.756843][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.774671][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.781842][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.794606][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.830700][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.837805][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.855712][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.862857][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.890123][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.897264][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.908519][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.915615][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.939045][ T5769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.950015][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.024439][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.069076][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.154167][ T5770] veth0_vlan: entered promiscuous mode [ 79.200965][ T5770] veth1_vlan: entered promiscuous mode [ 79.256882][ T5770] veth0_macvtap: entered promiscuous mode [ 79.270314][ T5770] veth1_macvtap: entered promiscuous mode [ 79.314796][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.345164][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.382717][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.401254][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.411466][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.420179][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.505441][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.548899][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.609543][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.638282][ T4483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.656178][ T4483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.704538][ T5769] veth0_vlan: entered promiscuous mode [ 79.739214][ T5768] veth0_vlan: entered promiscuous mode [ 79.751700][ T5772] Bluetooth: hci2: command tx timeout [ 79.757687][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.767189][ T5772] Bluetooth: hci1: command tx timeout [ 79.773415][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.777540][ T5768] veth1_vlan: entered promiscuous mode [ 79.808425][ T5769] veth1_vlan: entered promiscuous mode [ 79.816532][ T5767] veth0_vlan: entered promiscuous mode [ 79.831764][ T5772] Bluetooth: hci0: command tx timeout [ 79.833467][ T5773] Bluetooth: hci3: command tx timeout [ 79.839840][ T5767] veth1_vlan: entered promiscuous mode [ 79.909198][ T5768] veth0_macvtap: entered promiscuous mode [ 79.999912][ T5768] veth1_macvtap: entered promiscuous mode [ 80.029209][ T5769] veth0_macvtap: entered promiscuous mode [ 80.050124][ T5767] veth0_macvtap: entered promiscuous mode [ 80.067364][ T5769] veth1_macvtap: entered promiscuous mode [ 80.098805][ T5767] veth1_macvtap: entered promiscuous mode [ 80.127581][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.164378][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.175628][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.195047][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.205593][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.218584][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.349012][ T5833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3'. [ 80.575272][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.612409][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674496][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.726812][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933900][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.940127][ T5837] capability: warning: `syz.2.5' uses 32-bit capabilities (legacy support in use) [ 80.966848][ T5837] program syz.2.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.969726][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.994572][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.005804][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.020348][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.030036][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.050028][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.060175][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.070832][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.084651][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.095151][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.107220][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.129873][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.141346][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.151481][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.161964][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.621513][ T5773] Bluetooth: hci1: command tx timeout [ 82.621531][ T5772] Bluetooth: hci2: command tx timeout [ 82.626927][ T5773] Bluetooth: hci0: command tx timeout [ 82.633216][ T51] Bluetooth: hci3: command tx timeout [ 82.666366][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.722906][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.769464][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.791198][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.821278][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.831098][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.861186][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.892514][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.929229][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.951273][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.959989][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.983182][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.034292][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.067329][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.091279][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.099990][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.203549][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.227247][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.308460][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.340845][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.397039][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.435223][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.466511][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.476050][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.596915][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.615672][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.651999][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.718206][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.771507][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.260423][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.831565][ T5772] Bluetooth: hci0: command tx timeout [ 84.837013][ T5772] Bluetooth: hci1: command tx timeout [ 84.842545][ T51] Bluetooth: hci2: command tx timeout [ 84.847940][ T51] Bluetooth: hci3: command tx timeout [ 84.911168][ C1] sched: RT throttling activated [ 84.995736][ T5860] syz.3.4[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.074196][ T5861] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.300782][ T5860] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 85.737754][ T5865] netlink: 'syz.0.8': attribute type 10 has an invalid length. [ 85.796533][ T5865] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8'. [ 85.841610][ T5865] Zero length message leads to an empty skb [ 86.800239][ T23] cfg80211: failed to load regulatory.db [ 86.937250][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 87.025617][ T5892] Bluetooth: MGMT ver 1.22 [ 88.162799][ T5899] loop2: detected capacity change from 0 to 7 [ 88.747018][ T5899] Dev loop2: unable to read RDB block 7 [ 88.780005][ T5899] loop2: unable to read partition table [ 88.799846][ T5899] loop2: partition table beyond EOD, truncated [ 88.861551][ T5899] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.926344][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21'. [ 89.438330][ T5922] macvlan0: entered allmulticast mode [ 89.470024][ T5922] veth1_vlan: entered allmulticast mode [ 89.509229][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 89.569065][ T5922] veth1_vlan: left allmulticast mode [ 91.086147][ T5941] loop2: detected capacity change from 0 to 7 [ 91.091522][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.107247][ T5941] Dev loop2: unable to read RDB block 7 [ 91.113122][ T5941] loop2: unable to read partition table [ 91.136285][ T5941] loop2: partition table beyond EOD, truncated [ 91.162312][ T5941] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 91.395460][ T23] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.144607][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 92.192539][ T23] usb 2-1: New USB device found, idVendor=0486, idProduct=0186, bcdDevice= 0.40 [ 92.225359][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.251344][ T23] usb 2-1: Product: syz [ 92.257917][ T23] usb 2-1: Manufacturer: syz [ 92.276014][ T23] usb 2-1: SerialNumber: syz [ 92.293255][ T5951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'. [ 92.550849][ T23] usbhid 2-1:1.0: can't add hid device: -71 [ 92.570330][ T23] usbhid: probe of 2-1:1.0 failed with error -71 [ 92.603517][ T23] usb 2-1: USB disconnect, device number 2 [ 95.069025][ T5977] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 95.077967][ T5977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 95.112875][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.46'. [ 95.370050][ T5986] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 95.418288][ T5986] can0: slcan on ttyS3. [ 96.819875][ T5986] can0 (unregistered): slcan off ttyS3. [ 99.042195][ T6009] loop2: detected capacity change from 0 to 7 [ 99.333000][ T6009] Dev loop2: unable to read RDB block 7 [ 99.381774][ T6009] loop2: unable to read partition table [ 99.467446][ T6009] loop2: partition table beyond EOD, truncated [ 99.610347][ T6009] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.910281][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 99.960358][ T6019] can0: slcan on ttyS3. [ 100.052466][ T6019] can0 (unregistered): slcan off ttyS3. [ 101.882842][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.71'. [ 101.928511][ T6049] can0: slcan on ttyS3. [ 102.051366][ T6049] can0 (unregistered): slcan off ttyS3. [ 104.932412][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 105.347976][ T6077] can0: slcan on ttyS3. [ 105.582590][ T6078] can0 (unregistered): slcan off ttyS3. [ 106.166498][ T5773] Bluetooth: hci1: ISO packet too small [ 106.714430][ T6126] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 106.810813][ T6126] can0: slcan on ttyS3. [ 107.856569][ T6142] loop2: detected capacity change from 0 to 7 [ 107.896809][ T6142] Dev loop2: unable to read RDB block 7 [ 107.913597][ T6142] loop2: unable to read partition table [ 107.919471][ T6142] loop2: partition table beyond EOD, truncated [ 107.948390][ T6142] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 108.136311][ T5138] Dev loop2: unable to read RDB block 7 [ 108.159090][ T5138] loop2: unable to read partition table [ 108.168990][ T5138] loop2: partition table beyond EOD, truncated [ 108.182664][ T6126] can0 (unregistered): slcan off ttyS3. [ 108.853851][ T6166] binder_alloc: 6153: binder_alloc_buf, no vma [ 109.757373][ T6164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.794119][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'. [ 111.820965][ T6192] can0: slcan on ttyS3. [ 111.903119][ T6192] can0 (unregistered): slcan off ttyS3. [ 112.143570][ T6204] syz.2.117 uses obsolete (PF_INET,SOCK_PACKET) [ 112.533331][ T6219] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 113.179818][ T6232] o2cb: This node has not been configured. [ 113.187144][ T6232] o2cb: Cluster check failed. Fix errors before retrying. [ 113.194742][ T6232] (syz.2.124,6232,0):user_dlm_register:674 ERROR: status = -22 [ 113.202385][ T6232] (syz.2.124,6232,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 113.853756][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 113.870790][ T6235] can0: slcan on ttyS3. [ 114.102434][ T6235] can0 (unregistered): slcan off ttyS3. [ 114.313296][ T6252] ======================================================= [ 114.313296][ T6252] WARNING: The mand mount option has been deprecated and [ 114.313296][ T6252] and is ignored by this kernel. Remove the mand [ 114.313296][ T6252] option from the mount to silence this warning. [ 114.313296][ T6252] ======================================================= [ 114.348204][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.714361][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 117.728817][ T6283] can0: slcan on ttyS3. [ 117.773034][ T6283] can0 (unregistered): slcan off ttyS3. [ 118.001239][ T6293] loop2: detected capacity change from 0 to 7 [ 118.020917][ T6293] Dev loop2: unable to read RDB block 7 [ 118.035648][ T6293] loop2: unable to read partition table [ 118.045288][ T6293] loop2: partition table beyond EOD, truncated [ 118.060893][ T6293] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 118.389578][ T6306] se_device not configured yet, cannot port link [ 119.746588][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 119.761552][ T6322] can0: slcan on ttyS3. [ 119.832411][ T6322] can0 (unregistered): slcan off ttyS3. [ 120.207599][ T6335] xt_TCPMSS: Only works on TCP SYN packets [ 120.231107][ T6335] bridge1: entered promiscuous mode [ 120.236536][ T6335] bridge1: entered allmulticast mode [ 120.259822][ T6335] team0: Port device bridge1 added [ 120.284605][ T6336] bridge0: port 3(team0) entered blocking state [ 120.311332][ T6336] bridge0: port 3(team0) entered disabled state [ 120.340239][ T6336] team0: entered allmulticast mode [ 120.351552][ T6340] loop2: detected capacity change from 0 to 7 [ 120.358511][ T6336] team_slave_0: entered allmulticast mode [ 120.367495][ T6336] team_slave_1: entered allmulticast mode [ 120.374045][ T6340] Dev loop2: unable to read RDB block 7 [ 120.379956][ T6340] loop2: unable to read partition table [ 120.386307][ T6340] loop2: partition table beyond EOD, truncated [ 120.392757][ T6340] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.415687][ T6336] team0: entered promiscuous mode [ 120.420780][ T6336] team_slave_0: entered promiscuous mode [ 120.453531][ T6336] team_slave_1: entered promiscuous mode [ 120.492267][ T6336] bridge0: port 3(team0) entered blocking state [ 120.499194][ T6336] bridge0: port 3(team0) entered forwarding state [ 120.806922][ T6346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 120.821629][ T6346] can0: slcan on ttyS3. [ 120.882703][ T6346] can0 (unregistered): slcan off ttyS3. [ 121.276660][ T6357] pim6reg: entered allmulticast mode [ 121.368418][ T6359] loop2: detected capacity change from 0 to 7 [ 121.404991][ T6359] Dev loop2: unable to read RDB block 7 [ 121.410659][ T6359] loop2: unable to read partition table [ 121.445780][ T6359] loop2: partition table beyond EOD, truncated [ 121.490781][ T6359] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 121.557223][ T5138] Dev loop2: unable to read RDB block 7 [ 121.567555][ T5138] loop2: unable to read partition table [ 121.578027][ T5138] loop2: partition table beyond EOD, truncated [ 121.780800][ T6364] xt_TCPMSS: Only works on TCP SYN packets [ 121.798222][ T6364] bridge1: entered promiscuous mode [ 121.803540][ T6364] bridge1: entered allmulticast mode [ 121.813741][ T6364] team0: Port device bridge1 added [ 121.827059][ T6364] bridge0: port 3(team0) entered blocking state [ 121.862819][ T6364] bridge0: port 3(team0) entered disabled state [ 121.885042][ T6364] team0: entered allmulticast mode [ 121.902671][ T6364] team_slave_0: entered allmulticast mode [ 121.920316][ T6364] team_slave_1: entered allmulticast mode [ 121.942914][ T6364] team0: entered promiscuous mode [ 121.964337][ T6364] team_slave_0: entered promiscuous mode [ 121.987517][ T6364] team_slave_1: entered promiscuous mode [ 122.010933][ T6364] bridge0: port 3(team0) entered blocking state [ 122.017386][ T6364] bridge0: port 3(team0) entered forwarding state [ 122.166786][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'. [ 122.183044][ T6375] can0: slcan on ttyS3. [ 122.282019][ T6375] can0 (unregistered): slcan off ttyS3. [ 122.474202][ T27] audit: type=1326 audit(1785322459.597:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 122.599644][ T27] audit: type=1326 audit(1785322459.597:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 122.653186][ T6386] loop2: detected capacity change from 0 to 7 [ 122.671418][ T6386] Dev loop2: unable to read RDB block 7 [ 122.679864][ T6386] loop2: unable to read partition table [ 122.682608][ T27] audit: type=1326 audit(1785322459.607:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 122.690494][ T6386] loop2: partition table beyond EOD, truncated [ 122.738517][ T27] audit: type=1326 audit(1785322459.607:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 122.774536][ T6386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 122.831253][ T27] audit: type=1326 audit(1785322459.647:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 122.892834][ T27] audit: type=1326 audit(1785322459.647:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 122.944549][ T27] audit: type=1326 audit(1785322459.647:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 123.009008][ T27] audit: type=1326 audit(1785322459.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 123.031920][ T6394] binder: 6393:6394 ioctl 80049363 200000000100 returned -22 [ 123.056742][ T27] audit: type=1326 audit(1785322459.647:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 123.105273][ T27] audit: type=1326 audit(1785322459.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.177" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 123.138063][ T6391] kvm: apic: phys broadcast and lowest prio [ 123.155097][ T6394] 9pnet_virtio: no channels available for device syz [ 123.311010][ T6399] xt_TCPMSS: Only works on TCP SYN packets [ 123.344629][ T6399] bridge1: entered promiscuous mode [ 123.352171][ T6399] bridge1: entered allmulticast mode [ 123.366689][ T6399] team0: Port device bridge1 added [ 123.390802][ T6399] bridge0: port 3(team0) entered blocking state [ 123.407263][ T6399] bridge0: port 3(team0) entered disabled state [ 123.417972][ T6399] team0: entered allmulticast mode [ 123.427026][ T6399] team_slave_0: entered allmulticast mode [ 123.435180][ T6399] team_slave_1: entered allmulticast mode [ 123.446482][ T6399] team0: entered promiscuous mode [ 123.457367][ T6399] team_slave_0: entered promiscuous mode [ 123.464772][ T6399] team_slave_1: entered promiscuous mode [ 123.475871][ T6399] bridge0: port 3(team0) entered blocking state [ 123.482277][ T6399] bridge0: port 3(team0) entered forwarding state [ 123.647325][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.185'. [ 123.663928][ T6407] can0: slcan on ttyS3. [ 123.735361][ T6407] can0 (unregistered): slcan off ttyS3. [ 124.060777][ T6417] loop2: detected capacity change from 0 to 7 [ 124.070463][ T6417] Dev loop2: unable to read RDB block 7 [ 124.079247][ T6417] loop2: unable to read partition table [ 124.086882][ T6417] loop2: partition table beyond EOD, truncated [ 124.113301][ T6417] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 125.161455][ T6430] xt_TCPMSS: Only works on TCP SYN packets [ 125.186706][ T6430] bridge2: entered promiscuous mode [ 125.205314][ T6430] bridge2: entered allmulticast mode [ 125.237109][ T6430] team0: Port device bridge2 added [ 125.489879][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'. [ 125.505569][ T6441] can0: slcan on ttyS3. [ 125.784545][ T6441] can0 (unregistered): slcan off ttyS3. [ 126.209022][ T6458] loop2: detected capacity change from 0 to 7 [ 126.238766][ T6458] Dev loop2: unable to read RDB block 7 [ 126.258859][ T6458] loop2: unable to read partition table [ 126.284871][ T6458] loop2: partition table beyond EOD, truncated [ 126.308096][ T6466] xt_TCPMSS: Only works on TCP SYN packets [ 126.309808][ T6458] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.325132][ T6466] bridge2: entered promiscuous mode [ 126.330454][ T6466] bridge2: entered allmulticast mode [ 126.348531][ T6466] team0: Port device bridge2 added [ 126.367575][ T5138] Dev loop2: unable to read RDB block 7 [ 126.377588][ T5138] loop2: unable to read partition table [ 126.387701][ T5138] loop2: partition table beyond EOD, truncated [ 126.728145][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'. [ 126.758260][ T6474] can0: slcan on ttyS3. [ 126.841754][ T6474] can0 (unregistered): slcan off ttyS3. [ 127.307980][ T6494] xt_TCPMSS: Only works on TCP SYN packets [ 127.345272][ T6494] bridge1: entered promiscuous mode [ 127.363655][ T6494] bridge1: entered allmulticast mode [ 127.415505][ T6494] team0: Port device bridge1 added [ 127.454638][ T6496] bridge0: port 3(team0) entered blocking state [ 127.470029][ T6496] bridge0: port 3(team0) entered disabled state [ 127.509659][ T6496] team0: entered allmulticast mode [ 127.569710][ T6496] team_slave_0: entered allmulticast mode [ 127.676034][ T6496] team_slave_1: entered allmulticast mode [ 128.165769][ T6496] team0: entered promiscuous mode [ 128.170849][ T6496] team_slave_0: entered promiscuous mode [ 128.192557][ T6496] team_slave_1: entered promiscuous mode [ 128.212665][ T6496] bridge0: port 3(team0) entered blocking state [ 128.219065][ T6496] bridge0: port 3(team0) entered forwarding state [ 128.371705][ T6504] loop2: detected capacity change from 0 to 7 [ 128.415325][ T6504] Dev loop2: unable to read RDB block 7 [ 128.432309][ T6504] loop2: unable to read partition table [ 128.501626][ T6504] loop2: partition table beyond EOD, truncated [ 128.526912][ T6504] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 129.411701][ T5773] Bluetooth: hci3: link tx timeout [ 129.417263][ T5773] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.656860][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.221'. [ 129.823584][ T6525] can0: slcan on ttyS3. [ 129.993232][ T6525] can0 (unregistered): slcan off ttyS3. [ 130.382380][ T6543] xt_TCPMSS: Only works on TCP SYN packets [ 130.467445][ T6543] bridge3: entered promiscuous mode [ 130.491838][ T6543] bridge3: entered allmulticast mode [ 130.519785][ T6543] team0: Port device bridge3 added [ 130.566504][ T6552] loop2: detected capacity change from 0 to 7 [ 130.624527][ T6552] Dev loop2: unable to read RDB block 7 [ 130.651467][ T6552] loop2: unable to read partition table [ 130.672647][ T6552] loop2: partition table beyond EOD, truncated [ 130.695518][ T6552] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 131.261854][ T6574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 131.352225][ T6574] can0: slcan on ttyS3. [ 131.432468][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 131.451787][ T6574] can0 (unregistered): slcan off ttyS3. [ 131.696571][ T6578] xt_TCPMSS: Only works on TCP SYN packets [ 131.797088][ T6578] bridge2: entered promiscuous mode [ 131.821270][ T6578] bridge2: entered allmulticast mode [ 131.843385][ T6578] team0: Port device bridge2 added [ 131.945671][ T6585] loop2: detected capacity change from 0 to 7 [ 131.986921][ T6585] Dev loop2: unable to read RDB block 7 [ 131.995647][ T6585] loop2: unable to read partition table [ 132.020020][ T6585] loop2: partition table beyond EOD, truncated [ 132.038548][ T6585] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.608818][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.247'. [ 132.742612][ T6602] can0: slcan on ttyS3. [ 132.877840][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884567][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.951358][ T6601] can0 (unregistered): slcan off ttyS3. [ 133.046588][ T6610] xt_TCPMSS: Only works on TCP SYN packets [ 133.104403][ T6610] bridge3: entered promiscuous mode [ 133.126334][ T6610] bridge3: entered allmulticast mode [ 133.149507][ T6610] team0: Port device bridge3 added [ 133.386709][ T6625] loop2: detected capacity change from 0 to 7 [ 133.416400][ T6625] Dev loop2: unable to read RDB block 7 [ 133.435265][ T6625] loop2: unable to read partition table [ 133.471777][ T6625] loop2: partition table beyond EOD, truncated [ 133.486792][ T6625] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 134.181728][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'. [ 134.368720][ T6650] can0: slcan on ttyS3. [ 134.573482][ T6650] can0 (unregistered): slcan off ttyS3. [ 134.772212][ T6664] xt_TCPMSS: Only works on TCP SYN packets [ 134.829943][ T6664] bridge2: entered promiscuous mode [ 134.841549][ T6664] bridge2: entered allmulticast mode [ 134.863514][ T6664] team0: Port device bridge2 added [ 135.112270][ T6677] loop2: detected capacity change from 0 to 7 [ 135.161456][ T6677] Dev loop2: unable to read RDB block 7 [ 135.179314][ T6677] loop2: unable to read partition table [ 135.201504][ T6677] loop2: partition table beyond EOD, truncated [ 135.225322][ T6677] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 135.593362][ T6688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.270'. [ 135.631549][ T6688] netlink: 48 bytes leftover after parsing attributes in process `syz.3.270'. [ 135.810259][ T6696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'. [ 136.006880][ T6696] can0: slcan on ttyS3. [ 136.162496][ T6695] can0 (unregistered): slcan off ttyS3. [ 136.398496][ T6709] xt_TCPMSS: Only works on TCP SYN packets [ 136.468146][ T6709] bridge3: entered promiscuous mode [ 136.491370][ T6709] bridge3: entered allmulticast mode [ 136.499310][ T6709] team0: Port device bridge3 added [ 136.524202][ T6716] loop2: detected capacity change from 0 to 7 [ 136.534448][ T6716] Dev loop2: unable to read RDB block 7 [ 136.540067][ T6716] loop2: unable to read partition table [ 136.590948][ T6716] loop2: partition table beyond EOD, truncated [ 136.615142][ T6716] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 136.779858][ T6725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 136.941711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 138.512676][ T6735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.285'. [ 138.601639][ T6735] can0: slcan on ttyS3. [ 138.672754][ T6735] can0 (unregistered): slcan off ttyS3. [ 138.892214][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 139.294122][ T6755] xt_TCPMSS: Only works on TCP SYN packets [ 139.348825][ T6755] bridge4: entered promiscuous mode [ 139.374937][ T6755] bridge4: entered allmulticast mode [ 139.406434][ T6755] team0: Port device bridge4 added [ 139.814095][ T6767] loop2: detected capacity change from 0 to 7 [ 139.887831][ T6767] Dev loop2: unable to read RDB block 7 [ 139.928669][ T6767] loop2: unable to read partition table [ 139.971615][ T6767] loop2: partition table beyond EOD, truncated [ 139.977893][ T6767] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 141.946920][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.296'. [ 142.138550][ T6790] can0: slcan on ttyS3. [ 142.282120][ T6790] can0 (unregistered): slcan off ttyS3. [ 142.388888][ T6798] xt_TCPMSS: Only works on TCP SYN packets [ 142.420718][ T6798] bridge4: entered promiscuous mode [ 142.426100][ T6798] bridge4: entered allmulticast mode [ 142.436384][ T6798] team0: Port device bridge4 added [ 142.819044][ T6815] loop2: detected capacity change from 0 to 7 [ 142.948127][ T6815] Dev loop2: unable to read RDB block 7 [ 142.972104][ T6815] loop2: AHDI p1 p2 p3 [ 142.989213][ T6815] loop2: partition table partially beyond EOD, truncated [ 143.011678][ T6815] loop2: p1 start 1601398130 is beyond EOD, truncated [ 143.019415][ T6815] loop2: p2 start 1702059890 is beyond EOD, truncated [ 143.608993][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 143.740074][ T6836] can0: slcan on ttyS3. [ 143.906227][ T6839] xt_TCPMSS: Only works on TCP SYN packets [ 144.844448][ T6836] can0 (unregistered): slcan off ttyS3. [ 144.850171][ T6839] bridge5: entered promiscuous mode [ 144.868941][ T6839] bridge5: entered allmulticast mode [ 144.892827][ T6839] team0: Port device bridge5 added [ 145.473181][ T6859] loop2: detected capacity change from 0 to 7 [ 145.516195][ T6859] Dev loop2: unable to read RDB block 7 [ 145.531233][ T6859] loop2: AHDI p1 p2 p3 [ 145.561221][ T6859] loop2: partition table partially beyond EOD, truncated [ 145.591669][ T6859] loop2: p1 start 1601398130 is beyond EOD, truncated [ 145.603534][ T6859] loop2: p2 start 1702059890 is beyond EOD, truncated [ 146.604844][ T6876] can0: slcan on ttyS3. [ 146.683489][ T6876] can0 (unregistered): slcan off ttyS3. [ 146.892184][ T6887] xt_TCPMSS: Only works on TCP SYN packets [ 146.954770][ T6887] bridge5: entered promiscuous mode [ 146.973815][ T6887] bridge5: entered allmulticast mode [ 146.994390][ T6887] team0: Port device bridge5 added [ 147.360358][ T6904] loop2: detected capacity change from 0 to 7 [ 147.367470][ T6904] Dev loop2: unable to read RDB block 7 [ 147.386958][ T6904] loop2: AHDI p1 p2 p3 [ 147.397090][ T6904] loop2: partition table partially beyond EOD, truncated [ 147.416383][ T6904] loop2: p1 start 1601398130 is beyond EOD, truncated [ 147.434808][ T6904] loop2: p2 start 1702059890 is beyond EOD, truncated [ 147.592638][ T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.798227][ T28] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 147.838472][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.852930][ T28] usb 2-1: Product: syz [ 147.857217][ T28] usb 2-1: Manufacturer: syz [ 147.864679][ T28] usb 2-1: SerialNumber: syz [ 148.135236][ T6926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 148.187470][ T6926] can0: slcan on ttyS3. [ 148.243727][ T177] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 148.361382][ T6926] can0 (unregistered): slcan off ttyS3. [ 148.647528][ T177] usb 3-1: Using ep0 maxpacket: 16 [ 148.734996][ T177] usb 3-1: config 0 has no interfaces? [ 148.778984][ T177] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 148.890439][ T177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.950224][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 148.992145][ T6929] xt_TCPMSS: Only works on TCP SYN packets [ 148.997789][ T177] usb 3-1: config 0 descriptor?? [ 149.012870][ T6929] bridge6: entered promiscuous mode [ 149.018147][ T6929] bridge6: entered allmulticast mode [ 149.026289][ T6929] team0: Port device bridge6 added [ 149.177146][ T6935] loop2: detected capacity change from 0 to 7 [ 149.187431][ T6935] Dev loop2: unable to read RDB block 7 [ 149.194534][ T6935] loop2: AHDI p1 p2 p3 [ 149.198909][ T6935] loop2: partition table partially beyond EOD, truncated [ 149.206562][ T6935] loop2: p1 start 1601398130 is beyond EOD, truncated [ 149.213567][ T6935] loop2: p2 start 1702059890 is beyond EOD, truncated [ 149.377873][ T23] usb 3-1: USB disconnect, device number 2 [ 150.266424][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 150.498703][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -71 [ 150.532547][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.555472][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.581770][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.611404][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.636517][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.670001][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.696473][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 150.965121][ T6959] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 150.974342][ T6959] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 150.982749][ T6959] udc dummy_udc.0: failed to start g1: -22 [ 150.988623][ T6959] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 150.999475][ T6959] UDC core: g1: couldn't find an available UDC or it's busy [ 151.008517][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 151.008529][ T27] audit: type=1800 audit(1785322488.097:16): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.346" name="UDC" dev="configfs" ino=11893 res=0 errno=0 [ 151.532169][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): timeout on OTP_PWR_DN [ 151.634045][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 151.730277][ T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 151.887385][ T28] lan78xx: probe of 2-1:1.0 failed with error -71 [ 152.171918][ T28] usb 2-1: USB disconnect, device number 3 [ 153.277434][ T6976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 153.400041][ T6983] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 153.408464][ T6983] cramfs: wrong magic [ 153.582762][ T5810] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.812923][ T5810] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 153.853114][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.905490][ T5810] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.960456][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 154.161617][ T5810] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.170795][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.240330][ T5810] usb 3-1: Product: syz [ 154.265468][ T5810] usb 3-1: Manufacturer: syz [ 154.270175][ T5810] usb 3-1: SerialNumber: syz [ 154.550818][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 154.594968][ T7000] can0: slcan on ttyS3. [ 154.617412][ T6999] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 154.624749][ T6999] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 154.634161][ T6999] udc dummy_udc.0: failed to start g1: -22 [ 154.640102][ T6999] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 154.651978][ T6999] UDC core: g1: couldn't find an available UDC or it's busy [ 154.689104][ T6998] xt_TCPMSS: Only works on TCP SYN packets [ 154.705432][ T27] audit: type=1800 audit(1785322491.737:17): pid=6999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.358" name="UDC" dev="configfs" ino=10868 res=0 errno=0 [ 155.426321][ T5810] usb 3-1: 0:2 : does not exist [ 155.491415][ T5810] usb 3-1: USB disconnect, device number 3 [ 155.529814][ T6998] bridge3: entered promiscuous mode [ 155.558610][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 155.572901][ T6998] bridge3: entered allmulticast mode [ 155.588098][ T6998] team0: Port device bridge3 added [ 155.605352][ T7000] can0 (unregistered): slcan off ttyS3. [ 155.793979][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.362'. [ 155.883924][ T7016] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 155.891957][ T7016] cramfs: wrong magic [ 156.114269][ T7025] loop2: detected capacity change from 0 to 7 [ 156.159611][ T7025] Dev loop2: unable to read RDB block 7 [ 156.166175][ T7025] loop2: AHDI p1 p2 p3 [ 156.180503][ T7025] loop2: partition table partially beyond EOD, truncated [ 156.235023][ T7025] loop2: p1 start 1601398130 is beyond EOD, truncated [ 156.246620][ T7025] loop2: p2 start 1702059890 is beyond EOD, truncated [ 156.304342][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.368'. [ 156.354039][ T7029] can0: slcan on ttyS3. [ 156.491622][ T7029] can0 (unregistered): slcan off ttyS3. [ 157.205726][ T27] audit: type=1800 audit(1785322494.337:18): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.370" name="UDC" dev="configfs" ino=12073 res=0 errno=0 [ 157.207042][ T7032] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 157.234058][ T7032] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 157.242229][ T7032] udc dummy_udc.0: failed to start g1: -22 [ 157.248063][ T7032] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 157.257226][ T7032] UDC core: g1: couldn't find an available UDC or it's busy [ 157.318163][ T7034] xt_TCPMSS: Only works on TCP SYN packets [ 157.417719][ T7034] bridge4: entered promiscuous mode [ 157.444872][ T7034] bridge4: entered allmulticast mode [ 157.486616][ T7034] team0: Port device bridge4 added [ 157.525862][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.372'. [ 157.615463][ T7043] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 157.624094][ T7043] cramfs: wrong magic [ 157.799107][ T7051] loop2: detected capacity change from 0 to 7 [ 157.825739][ T7051] Dev loop2: unable to read RDB block 7 [ 157.837466][ T7051] loop2: AHDI p1 p2 p3 [ 157.847602][ T7051] loop2: partition table partially beyond EOD, truncated [ 157.868031][ T7051] loop2: p1 start 1601398130 is beyond EOD, truncated [ 157.878540][ T7051] loop2: p2 start 1702059890 is beyond EOD, truncated [ 158.188945][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.379'. [ 158.231377][ T7058] can0: slcan on ttyS3. [ 158.361311][ T7058] can0 (unregistered): slcan off ttyS3. [ 158.383037][ T27] audit: type=1800 audit(1785322495.517:19): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.380" name="UDC" dev="configfs" ino=11151 res=0 errno=0 [ 158.385002][ T7059] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 158.410179][ T7059] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 158.418858][ T7059] udc dummy_udc.0: failed to start g1: -22 [ 158.424768][ T7059] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 158.432796][ T7059] UDC core: g1: couldn't find an available UDC or it's busy [ 160.129267][ T7064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.382'. [ 160.201820][ T7066] xt_TCPMSS: Only works on TCP SYN packets [ 160.222753][ T7066] bridge6: entered promiscuous mode [ 160.228119][ T7066] bridge6: entered allmulticast mode [ 160.237556][ T7066] team0: Port device bridge6 added [ 160.369552][ T7071] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 160.376721][ T7071] cramfs: wrong magic [ 161.601244][ T7087] UDC core: g1: couldn't find an available UDC or it's busy [ 161.602499][ T27] audit: type=1800 audit(1785322498.727:20): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.390" name="UDC" dev="configfs" ino=11196 res=0 errno=0 [ 161.795942][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.391'. [ 161.838993][ T7092] can0: slcan on ttyS3. [ 161.931439][ T7092] can0 (unregistered): slcan off ttyS3. [ 162.771864][ T7094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.392'. [ 162.909018][ T7096] xt_TCPMSS: Only works on TCP SYN packets [ 162.958456][ T7096] bridge7: entered promiscuous mode [ 162.974211][ T7096] bridge7: entered allmulticast mode [ 162.998544][ T7096] team0: Port device bridge7 added [ 163.139479][ T7102] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 163.146622][ T7102] cramfs: wrong magic [ 163.442342][ T7112] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 163.449413][ T7112] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 163.457631][ T7112] udc dummy_udc.0: failed to start g1: -22 [ 163.463777][ T7112] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 163.472001][ T7112] UDC core: g1: couldn't find an available UDC or it's busy [ 163.487221][ T27] audit: type=1800 audit(1785322500.567:21): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.400" name="UDC" dev="configfs" ino=12365 res=0 errno=0 [ 164.438947][ T7118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 164.486885][ T7118] can0: slcan on ttyS3. [ 164.654230][ T7118] can0 (unregistered): slcan off ttyS3. [ 164.677936][ T7122] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 167.023915][ T7126] xt_TCPMSS: Only works on TCP SYN packets [ 167.079637][ T7126] bridge7: entered promiscuous mode [ 167.103648][ T7126] bridge7: entered allmulticast mode [ 167.111896][ T7126] team0: Port device bridge7 added [ 167.422190][ T789] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 167.442527][ T7141] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 167.449624][ T7141] cramfs: wrong magic [ 167.605337][ T27] audit: type=1800 audit(1785322504.737:22): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="UDC" dev="configfs" ino=13325 res=0 errno=0 [ 167.606153][ T7146] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 167.632194][ T7146] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 167.640284][ T7146] udc dummy_udc.0: failed to start g1: -22 [ 167.646174][ T7146] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 167.655006][ T7146] UDC core: g1: couldn't find an available UDC or it's busy [ 167.673594][ T789] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 167.710544][ T789] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.747338][ T789] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.760622][ T789] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.798779][ T789] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.821592][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.849191][ T789] usb 3-1: Product: syz [ 167.881430][ T789] usb 3-1: Manufacturer: syz [ 167.908856][ T789] usb 3-1: SerialNumber: syz [ 168.618683][ T789] usb 3-1: 0:2 : does not exist [ 168.685264][ T789] usb 3-1: USB disconnect, device number 4 [ 168.744722][ T5758] udevd[5758]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.873004][ T7155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.413'. [ 169.799268][ T7160] xt_TCPMSS: Only works on TCP SYN packets [ 169.857689][ T7160] bridge8: entered promiscuous mode [ 169.929816][ T7160] bridge8: entered allmulticast mode [ 169.972726][ T7160] team0: Port device bridge8 added [ 169.987238][ T7158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 170.012359][ T7161] can0: slcan on ttyS3. [ 170.028561][ T7164] loop2: detected capacity change from 0 to 7 [ 170.108761][ T7164] Dev loop2: unable to read RDB block 7 [ 170.134778][ T7157] can0 (unregistered): slcan off ttyS3. [ 170.149537][ T7164] loop2: AHDI p1 p2 p3 [ 170.173482][ T7164] loop2: partition table partially beyond EOD, truncated [ 170.208676][ T7164] loop2: p1 start 1601398130 is beyond EOD, truncated [ 170.255490][ T7164] loop2: p2 start 1702059890 is beyond EOD, truncated [ 170.750803][ T27] audit: type=1800 audit(1785322507.877:23): pid=7186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.421" name="UDC" dev="configfs" ino=13443 res=0 errno=0 [ 170.782361][ T7186] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 170.789466][ T7186] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 170.797804][ T7186] udc dummy_udc.0: failed to start g1: -22 [ 170.803721][ T7186] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 170.814025][ T7186] UDC core: g1: couldn't find an available UDC or it's busy [ 171.442188][ T7185] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 171.449263][ T7185] cramfs: wrong magic [ 171.706211][ T7200] xt_TCPMSS: Only works on TCP SYN packets [ 171.772483][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.424'. [ 172.272066][ T7200] bridge5: entered promiscuous mode [ 172.408170][ T7200] bridge5: entered allmulticast mode [ 172.547795][ T7200] team0: Port device bridge5 added [ 172.602719][ T7209] loop2: detected capacity change from 0 to 7 [ 172.647385][ T7209] Dev loop2: unable to read RDB block 7 [ 172.657527][ T7209] loop2: AHDI p1 p2 p3 [ 172.672749][ T7209] loop2: partition table partially beyond EOD, truncated [ 172.709917][ T7209] loop2: p1 start 1601398130 is beyond EOD, truncated [ 172.751267][ T7209] loop2: p2 start 1702059890 is beyond EOD, truncated [ 172.794742][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.1.427'. [ 172.893851][ T7215] can0: slcan on ttyS3. [ 172.929608][ T7217] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 172.937057][ T7217] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 172.945305][ T7217] udc dummy_udc.0: failed to start g1: -22 [ 172.951304][ T7217] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 172.959307][ T7217] UDC core: g1: couldn't find an available UDC or it's busy [ 172.982330][ T27] audit: type=1800 audit(1785322510.057:24): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.431" name="UDC" dev="configfs" ino=12529 res=0 errno=0 [ 173.147527][ T7223] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 173.235493][ T7225] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 173.247344][ T7225] cramfs: wrong magic [ 174.013301][ T7215] can0 (unregistered): slcan off ttyS3. [ 174.506312][ T7248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'. [ 175.424079][ T7256] xt_TCPMSS: Only works on TCP SYN packets [ 175.484248][ T7256] bridge9: entered promiscuous mode [ 175.504152][ T7256] bridge9: entered allmulticast mode [ 175.533117][ T7256] team0: Port device bridge9 added [ 175.679976][ T7262] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 175.687271][ T7262] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 175.695477][ T7262] udc dummy_udc.0: failed to start g1: -22 [ 175.701408][ T7262] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 175.709571][ T7262] UDC core: g1: couldn't find an available UDC or it's busy [ 175.794475][ T7267] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 175.805243][ T7267] cramfs: wrong magic [ 176.123906][ T27] audit: type=1800 audit(1785322512.807:25): pid=7262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.441" name="UDC" dev="configfs" ino=12590 res=0 errno=0 [ 176.853292][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.445'. [ 177.063701][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.447'. [ 178.691359][ T7281] can0: slcan on ttyS3. [ 180.202498][ T7276] can0 (unregistered): slcan off ttyS3. [ 180.550652][ T5773] Bluetooth: Unexpected start frame (len 10) [ 180.552264][ T7304] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 180.564467][ T7304] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 180.572618][ T7304] udc dummy_udc.0: failed to start g1: -22 [ 180.578447][ T7304] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 180.586678][ T7304] UDC core: g1: couldn't find an available UDC or it's busy [ 180.619523][ T27] audit: type=1800 audit(1785322517.677:26): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="UDC" dev="configfs" ino=12640 res=0 errno=0 [ 180.646229][ T7307] xt_TCPMSS: Only works on TCP SYN packets [ 180.690721][ T7307] bridge10: entered promiscuous mode [ 180.772210][ T7315] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 180.781458][ T7315] cramfs: wrong magic [ 181.279731][ T789] net_ratelimit: 379 callbacks suppressed [ 181.279746][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.466187][ T7307] bridge10: entered allmulticast mode [ 181.630104][ T7307] team0: Port device bridge10 added [ 181.676977][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.835387][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.457'. [ 182.322776][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.105627][ T7342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 183.167698][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.177028][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.189275][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.225112][ T7348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.458'. [ 183.235834][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.291575][ T7342] can0: slcan on ttyS3. [ 183.305022][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.348407][ T7346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.358945][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.422838][ T7338] can0 (unregistered): slcan off ttyS3. [ 183.753586][ T7366] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 183.760643][ T7366] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 183.769202][ T7366] udc dummy_udc.0: failed to start g1: -22 [ 183.775177][ T7366] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 183.783384][ T7366] UDC core: g1: couldn't find an available UDC or it's busy [ 183.797308][ T27] audit: type=1800 audit(1785322520.887:27): pid=7366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.463" name="UDC" dev="configfs" ino=13683 res=0 errno=0 [ 183.927923][ T7369] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 183.937027][ T7369] cramfs: wrong magic [ 184.705450][ T7378] xt_TCPMSS: Only works on TCP SYN packets [ 184.774202][ T7378] bridge8: entered promiscuous mode [ 184.779468][ T7378] bridge8: entered allmulticast mode [ 184.873205][ T7378] team0: Port device bridge8 added [ 184.945217][ T7388] fuse: Bad value for 'fd' [ 185.414711][ T5773] Bluetooth: Unexpected start frame (len 12) [ 185.935519][ T7396] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 185.942117][ T5773] Bluetooth: Unexpected start frame (len 10) [ 185.943027][ T7396] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 185.957426][ T7396] udc dummy_udc.0: failed to start g1: -22 [ 185.961248][ T27] audit: type=1800 audit(1785322523.067:28): pid=7396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.474" name="UDC" dev="configfs" ino=12775 res=0 errno=0 [ 185.963755][ T7396] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 185.982937][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.997725][ T7396] UDC core: g1: couldn't find an available UDC or it's busy [ 186.103731][ T7400] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 186.296623][ T7410] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 186.308422][ T7410] cramfs: wrong magic [ 186.471689][ T789] net_ratelimit: 38 callbacks suppressed [ 186.471704][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.610820][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.761447][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.634695][ T5773] Bluetooth: Unexpected start frame (len 10) [ 188.637136][ T7430] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 188.648113][ T7430] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 188.656525][ T7430] udc dummy_udc.0: failed to start g1: -22 [ 188.662457][ T7430] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 188.670561][ T7430] UDC core: g1: couldn't find an available UDC or it's busy [ 188.689121][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.704373][ T27] audit: type=1800 audit(1785322525.767:29): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.484" name="UDC" dev="configfs" ino=12862 res=0 errno=0 [ 189.839376][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.926260][ T7442] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 189.938374][ T7442] cramfs: wrong magic [ 191.554788][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.781221][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.898719][ T7462] xt_TCPMSS: Only works on TCP SYN packets [ 191.923134][ T7462] bridge6: entered promiscuous mode [ 191.931222][ T7462] bridge6: entered allmulticast mode [ 191.939616][ T7462] team0: Port device bridge6 added [ 191.967515][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.984360][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.016715][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.070210][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.097293][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.147608][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.191929][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.216125][ T7465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.851160][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 193.058878][ T7476] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 193.992903][ T7476] cramfs: wrong magic [ 194.318290][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.830044][ T7503] xt_TCPMSS: Only works on TCP SYN packets [ 194.869567][ T7503] bridge7: entered promiscuous mode [ 194.880979][ T7503] bridge7: entered allmulticast mode [ 194.889371][ T7503] team0: Port device bridge7 added [ 196.211772][ T7517] misc userio: Invalid payload size [ 197.348205][ T23] net_ratelimit: 404 callbacks suppressed [ 197.348222][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.591994][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.042615][ T7536] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 198.052551][ T7536] cramfs: wrong magic [ 198.391689][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.609967][ T7540] xt_TCPMSS: Only works on TCP SYN packets [ 198.712317][ T7540] bridge11: entered promiscuous mode [ 198.717658][ T7540] bridge11: entered allmulticast mode [ 198.735005][ T7540] team0: Port device bridge11 added [ 198.929481][ T27] audit: type=1800 audit(1785322536.057:30): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.522" name="UDC" dev="configfs" ino=14124 res=0 errno=0 [ 198.949262][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.031945][ T7548] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 199.038997][ T7548] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 199.047197][ T7548] udc dummy_udc.0: failed to start g1: -22 [ 199.053085][ T7548] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 199.061508][ T7548] UDC core: g1: couldn't find an available UDC or it's busy [ 199.457968][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 199.791040][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.978659][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 199.991682][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 200.000525][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.016954][ T23] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 200.034662][ T23] usb 3-1: config 1 has no interface number 1 [ 200.052651][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 200.087236][ T23] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.108365][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.129741][ T23] usb 3-1: Product: syz [ 200.155386][ T23] usb 3-1: Manufacturer: syz [ 200.349324][ T23] usb 3-1: SerialNumber: syz [ 200.776058][ T23] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 201.065107][ T23] usb 3-1: MIDIStreaming interface descriptor not found [ 201.130584][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.148750][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.272105][ T23] usb 3-1: USB disconnect, device number 5 [ 201.369310][ T7572] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 201.379625][ T7572] cramfs: wrong magic [ 201.603390][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 201.609808][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 201.616140][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 201.672032][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.904600][ T7573] futex_wake_op: syz.2.530 tries to shift op by 144; fix this program [ 202.157136][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.454732][ T7581] xt_TCPMSS: Only works on TCP SYN packets [ 202.494757][ T7581] bridge12: entered promiscuous mode [ 202.500100][ T7581] bridge12: entered allmulticast mode [ 202.555857][ T7581] team0: Port device bridge12 added [ 202.867744][ T5772] Bluetooth: Unexpected start frame (len 10) [ 202.880293][ T7591] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 202.887546][ T7591] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 202.895803][ T7591] udc dummy_udc.0: failed to start g1: -22 [ 202.902019][ T7591] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 202.910009][ T7591] UDC core: g1: couldn't find an available UDC or it's busy [ 202.920462][ T27] audit: type=1800 audit(1785322540.007:31): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.535" name="UDC" dev="configfs" ino=13072 res=0 errno=0 [ 203.026750][ T7588] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 203.108643][ T7588] bond1 (unregistering): Released all slaves [ 203.244256][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.363676][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.425163][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.623079][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.664381][ T7608] binder: BINDER_SET_CONTEXT_MGR already set [ 204.670733][ T7608] binder: 7607:7608 ioctl 4018620d 2000000002c0 returned -16 [ 204.679748][ T4483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.690386][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.721640][ T7608] binder: 7607:7608 ioctl c0306201 0 returned -14 [ 204.735924][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.801439][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.819069][ T7611] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 204.828602][ T7611] cramfs: wrong magic [ 205.563384][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.695458][ T7615] netlink: 16 bytes leftover after parsing attributes in process `syz.3.543'. [ 205.724082][ T7615] can0: slcan on ttyS3. [ 205.783916][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.813888][ T7615] can0 (unregistered): slcan off ttyS3. [ 205.820159][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.840765][ T23] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 205.851629][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.883037][ T23] usb 3-1: config 0 descriptor?? [ 206.122895][ T27] audit: type=1326 audit(1785322543.257:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 206.191335][ T27] audit: type=1326 audit(1785322543.257:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 206.305680][ T27] audit: type=1326 audit(1785322543.257:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 206.347866][ T27] audit: type=1326 audit(1785322543.287:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 206.373296][ T27] audit: type=1326 audit(1785322543.287:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 206.397095][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.673230][ T27] audit: type=1326 audit(1785322543.287:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 207.029178][ T27] audit: type=1326 audit(1785322543.287:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 207.107217][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.122931][ T23] playstation 0003:054C:0BA0.0001: item fetching failed at offset 0/7 [ 207.132741][ T23] playstation 0003:054C:0BA0.0001: Parse failed [ 207.139069][ T23] playstation: probe of 0003:054C:0BA0.0001 failed with error -22 [ 207.150752][ T27] audit: type=1326 audit(1785322543.287:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dab9de99 code=0x7ffc0000 [ 207.174581][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.184022][ T27] audit: type=1326 audit(1785322543.287:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08dab9db2b code=0x7ffc0000 [ 207.207736][ C1] vkms_vblank_simulate: vblank timer overrun [ 207.215663][ T27] audit: type=1326 audit(1785322543.287:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7605 comm="syz.2.539" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08dab9db2b code=0x7ffc0000 [ 207.367471][ T5777] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.459740][ T7637] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 207.468816][ T7637] cramfs: wrong magic [ 207.679668][ T5777] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 207.776934][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.898889][ T5777] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 207.928899][ T23] usb 3-1: USB disconnect, device number 6 [ 208.098861][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.124550][ T5777] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 208.156803][ T5777] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 208.196455][ T5777] usb 4-1: Manufacturer: syz [ 208.228019][ T5777] usb 4-1: config 0 descriptor?? [ 208.275542][ T5777] igorplugusb 4-1:0.0: endpoint incorrect [ 208.486713][ T23] usb 4-1: USB disconnect, device number 2 [ 208.818729][ T7652] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 208.827386][ T7652] netlink: 'syz.2.557': attribute type 2 has an invalid length. [ 209.197538][ T789] net_ratelimit: 1 callbacks suppressed [ 209.197553][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.672847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.380730][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.401996][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.503539][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.769302][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.125490][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.561684][ T28] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 211.579133][ T5772] Bluetooth: Unexpected start frame (len 10) [ 211.587004][ T27] kauditd_printk_skb: 92 callbacks suppressed [ 211.587015][ T27] audit: type=1800 audit(1785322548.727:134): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.571" name="UDC" dev="configfs" ino=14354 res=0 errno=0 [ 211.615065][ T7687] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 211.622717][ T7687] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 211.630867][ T7687] udc dummy_udc.0: failed to start g1: -22 [ 211.637230][ T7687] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 211.646888][ T7687] UDC core: g1: couldn't find an available UDC or it's busy [ 211.791436][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 212.464100][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.485339][ T28] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 212.493636][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.505127][ T28] usb 2-1: config 0 has no interface number 0 [ 212.511543][ T28] usb 2-1: config 0 interface 67 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.552815][ T28] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 212.576435][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.591659][ T28] usb 2-1: Product: syz [ 212.601946][ T28] usb 2-1: Manufacturer: syz [ 212.611920][ T28] usb 2-1: SerialNumber: syz [ 212.642532][ T28] usb 2-1: config 0 descriptor?? [ 212.654088][ T28] smsc95xx v2.0.0 [ 212.668014][ T28] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 212.692290][ T28] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 212.786443][ T7694] loop2: detected capacity change from 0 to 7 [ 212.806088][ T7694] Dev loop2: unable to read RDB block 7 [ 212.814972][ T7694] loop2: unable to read partition table [ 212.827316][ T7694] loop2: partition table beyond EOD, truncated [ 212.839581][ T7694] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 212.879483][ T5138] Dev loop2: unable to read RDB block 7 [ 212.889470][ T5138] loop2: unable to read partition table [ 212.897282][ T5138] loop2: partition table beyond EOD, truncated [ 213.532584][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.509761][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.542862][ T5777] usb 2-1: USB disconnect, device number 4 [ 214.562369][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.582520][ T7715] macvlan0: entered promiscuous mode [ 214.600824][ T7715] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 214.630749][ T7715] netlink: 'syz.2.581': attribute type 2 has an invalid length. [ 214.772403][ T7717] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 215.524187][ T7717] can0: slcan on ttyS3. [ 215.687133][ T7717] can0 (unregistered): slcan off ttyS3. [ 215.694377][ T5777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.087126][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.641010][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.729873][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.751669][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.521771][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.859989][ T7748] netlink: 'syz.0.592': attribute type 9 has an invalid length. [ 217.909831][ T7748] netlink: 48 bytes leftover after parsing attributes in process `syz.0.592'. [ 218.016939][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.034149][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.282062][ T5809] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 219.585339][ T5809] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 219.713008][ T5809] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 219.771841][ T7766] xt_TCPMSS: Only works on TCP SYN packets [ 219.791343][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.800676][ T7766] bridge4: entered promiscuous mode [ 219.806792][ T7766] bridge4: entered allmulticast mode [ 219.814452][ T7766] team0: Port device bridge4 added [ 219.820296][ T5809] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.834875][ T5809] usb 3-1: config 1 has no interface number 1 [ 219.851823][ T5809] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.871232][ T5809] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.094465][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.121902][ T5809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.177064][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.188338][ T5809] usb 3-1: Product: syz [ 220.199548][ T5809] usb 3-1: Manufacturer: syz [ 220.230678][ T5809] usb 3-1: SerialNumber: syz [ 220.901341][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.920494][ T5809] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 220.933420][ T7776] netlink: 'syz.1.603': attribute type 9 has an invalid length. [ 220.941083][ T7776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.603'. [ 220.968344][ T5809] usb 3-1: MIDIStreaming interface descriptor not found [ 221.079162][ T5809] usb 3-1: USB disconnect, device number 7 [ 221.113688][ T28] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.187228][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.687635][ T7792] xt_TCPMSS: Only works on TCP SYN packets [ 221.712694][ T5772] Bluetooth: Unexpected start frame (len 10) [ 221.717066][ T7792] bridge8: entered promiscuous mode [ 221.719294][ T27] audit: type=1800 audit(1785322558.847:135): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.610" name="UDC" dev="configfs" ino=15516 res=0 errno=0 [ 221.731965][ T7792] bridge8: entered allmulticast mode [ 221.745228][ T7793] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 221.757226][ T7793] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 221.759213][ T7792] team0: Port device bridge8 added [ 221.770560][ T7793] udc dummy_udc.0: failed to start g1: -22 [ 221.776592][ T7793] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 221.785611][ T7793] UDC core: g1: couldn't find an available UDC or it's busy [ 222.133497][ T7802] netlink: 'syz.2.614': attribute type 8 has an invalid length. [ 222.142297][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.2.614'. [ 222.154273][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.191969][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.429598][ T7817] xt_TCPMSS: Only works on TCP SYN packets [ 223.488563][ T7817] bridge9: entered promiscuous mode [ 223.503242][ T7817] bridge9: entered allmulticast mode [ 223.517448][ T7817] team0: Port device bridge9 added [ 223.654579][ T5772] Bluetooth: Unexpected start frame (len 10) [ 223.655693][ T7821] UDC core: g1: couldn't find an available UDC or it's busy [ 223.660720][ T27] audit: type=1800 audit(1785322560.787:136): pid=7821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.621" name="UDC" dev="configfs" ino=15555 res=0 errno=0 [ 223.859576][ T7827] netlink: 'syz.1.623': attribute type 8 has an invalid length. [ 223.918861][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.932660][ T7827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.623'. [ 224.366950][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.061440][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.323567][ T7842] xt_TCPMSS: Only works on TCP SYN packets [ 225.374720][ T7845] loop2: detected capacity change from 0 to 7 [ 225.377686][ T7842] bridge9: entered promiscuous mode [ 225.389715][ T7842] bridge9: entered allmulticast mode [ 225.393820][ T7845] Dev loop2: unable to read RDB block 7 [ 225.398356][ T7842] team0: Port device bridge9 added [ 225.407707][ T7845] loop2: unable to read partition table [ 225.413702][ T7845] loop2: partition table beyond EOD, truncated [ 225.426050][ T7845] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.436785][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.554172][ T5772] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 225.560256][ T27] audit: type=1800 audit(1785322562.687:137): pid=7848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.632" name="UDC" dev="configfs" ino=15609 res=0 errno=0 [ 225.583574][ T7848] UDC core: g1: couldn't find an available UDC or it's busy [ 226.246022][ T7873] xt_TCPMSS: Only works on TCP SYN packets [ 226.298351][ T7873] bridge5: entered promiscuous mode [ 226.318359][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.342845][ T7873] bridge5: entered allmulticast mode [ 226.368001][ T7873] team0: Port device bridge5 added [ 226.471444][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.556332][ T5772] Bluetooth: Unexpected start frame (len 10) [ 226.557621][ T27] audit: type=1800 audit(1785322563.687:138): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.643" name="UDC" dev="configfs" ino=15664 res=0 errno=0 [ 226.583326][ T7886] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 226.590315][ T7886] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 226.598447][ T7886] udc dummy_udc.0: failed to start g1: -22 [ 226.604322][ T7886] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 226.612545][ T7886] UDC core: g1: couldn't find an available UDC or it's busy [ 227.144333][ T7907] xt_TCPMSS: Only works on TCP SYN packets [ 227.251211][ T5810] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 227.426082][ T7907] bridge6: entered promiscuous mode [ 227.456129][ T7907] bridge6: entered allmulticast mode [ 227.502730][ T7907] team0: Port device bridge6 added [ 227.512444][ T5809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.518639][ T5810] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 227.551056][ T5810] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 227.579803][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.636002][ T5810] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 227.661293][ T5810] usb 3-1: config 1 has no interface number 1 [ 227.669125][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 227.703371][ T5810] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.735326][ T5810] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 227.754826][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.769209][ T5810] usb 3-1: Product: syz [ 227.783284][ T5810] usb 3-1: Manufacturer: syz [ 227.787916][ T5810] usb 3-1: SerialNumber: syz [ 228.124747][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.150268][ T5810] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 228.161363][ T5810] usb 3-1: MIDIStreaming interface descriptor not found [ 228.210648][ T5810] usb 3-1: USB disconnect, device number 8 [ 228.498870][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.553791][ T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.251070][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 334.258079][ C0] rcu: (detected by 0, t=10502 jiffies, g=23549, q=193 ncpus=2) [ 334.265812][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10501 (4294970539-4294960038), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 334.279197][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g23549 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 334.290414][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 334.300388][ C0] rcu: RCU grace-period kthread stack dump: [ 334.306281][ C0] task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 [ 334.317098][ C0] Call Trace: [ 334.320422][ C0] [ 334.323369][ C0] __schedule+0x15ae/0x4660 [ 334.327921][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 334.332964][ C0] ? lock_chain_count+0x20/0x20 [ 334.337833][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 334.343053][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 334.348965][ C0] ? asan.module_dtor+0x20/0x20 [ 334.353830][ C0] ? rcu_is_watching+0x15/0xb0 [ 334.358626][ C0] schedule+0xbd/0x170 [ 334.362715][ C0] schedule_timeout+0x188/0x2d0 [ 334.367587][ C0] ? console_conditional_schedule+0x40/0x40 [ 334.373506][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 334.379422][ C0] ? update_process_times+0x1b0/0x1b0 [ 334.384815][ C0] ? prepare_to_swait_event+0x344/0x360 [ 334.390394][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 334.395270][ C0] ? dump_blkd_tasks+0x820/0x820 [ 334.400220][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 334.406213][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 334.411253][ C0] ? rcu_gp_init+0x1530/0x1530 [ 334.416029][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 334.420898][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.426117][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 334.431345][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 334.435953][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 334.441080][ C0] ? __kthread_parkme+0x71/0x1c0 [ 334.446029][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 334.451072][ C0] kthread+0x2fa/0x390 [ 334.455153][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 334.460286][ C0] ? kthread_blkcg+0xd0/0xd0 [ 334.464893][ C0] ret_from_fork+0x48/0x80 [ 334.469333][ C0] ? kthread_blkcg+0xd0/0xd0 [ 334.473946][ C0] ret_from_fork_asm+0x11/0x20 [ 334.478737][ C0] [ 334.481768][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 334.488105][ C0] Sending NMI from CPU 0 to CPUs 1: [ 334.493334][ C1] NMI backtrace for cpu 1 [ 334.493353][ C1] CPU: 1 PID: 7941 Comm: syz.1.663 Not tainted syzkaller #0 [ 334.493367][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 334.493378][ C1] RIP: 0010:__lock_acquire+0x525/0x7d80 [ 334.493409][ C1] Code: 44 0b 74 24 40 45 09 e6 48 8b 44 24 58 42 0f b6 04 00 84 c0 0f 85 dc 14 00 00 44 8b 7d 28 48 8b 84 24 88 00 00 00 44 89 70 20 <48> 8d 58 24 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 4c 8b 6c 24 [ 334.493421][ C1] RSP: 0018:ffffc900001f08c0 EFLAGS: 00000046 [ 334.493434][ C1] RAX: ffff88806e51c708 RBX: 0000000000004000 RCX: 0000000000004000 [ 334.493444][ C1] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff88806e51c710 [ 334.493453][ C1] RBP: ffffc900001f0b08 R08: dffffc0000000000 R09: 0000000000000001 [ 334.493463][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 0000000000044000 [ 334.493473][ C1] R13: ffff88806e51c720 R14: 00000000000c4001 R15: 0000000000000000 [ 334.493483][ C1] FS: 00007f14fe3806c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 334.493496][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.493506][ C1] CR2: 0000200000000058 CR3: 0000000077873000 CR4: 00000000003506e0 [ 334.493519][ C1] Call Trace: [ 334.493525][ C1] [ 334.493539][ C1] ? mark_lock+0x94/0x320 [ 334.493556][ C1] ? verify_lock_unused+0x140/0x140 [ 334.493572][ C1] ? __lock_acquire+0x1336/0x7d80 [ 334.493597][ C1] lock_acquire+0x19e/0x420 [ 334.493613][ C1] ? debug_object_deactivate+0x67/0x380 [ 334.493635][ C1] ? read_lock_is_recursive+0x20/0x20 [ 334.493653][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 334.493674][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 334.493695][ C1] ? debug_object_deactivate+0x67/0x380 [ 334.493712][ C1] ? _raw_spin_lock+0x40/0x40 [ 334.493733][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 334.493752][ C1] debug_object_deactivate+0x67/0x380 [ 334.493773][ C1] __hrtimer_run_queues+0x2cc/0xc10 [ 334.493789][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 334.493806][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 334.493830][ C1] ? hrtimer_interrupt+0x980/0x980 [ 334.493846][ C1] ? read_tsc+0x9/0x20 [ 334.493862][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 334.493883][ C1] hrtimer_interrupt+0x39d/0x980 [ 334.493907][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 334.493926][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 334.493946][ C1] [ 334.493950][ C1] [ 334.493955][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.493972][ C1] RIP: 0010:syscall_enter_from_user_mode+0x2e/0x80 [ 334.493991][ C1] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 e9 fa ff ff 66 90 66 90 e8 a0 06 01 f7 e8 5b 06 01 f7 fb 65 48 8b 05 12 dc 76 75 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 1d 46 e7 f6 48 [ 334.494002][ C1] RSP: 0018:ffffc90019cbff08 EFLAGS: 00000286 [ 334.494013][ C1] RAX: ffff88806e51bc00 RBX: 00000000000000ca RCX: 3288d80b0d7f8100 [ 334.494023][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0660 [ 334.494033][ C1] RBP: ffffc90019cbff48 R08: ffffffff8e8c7caf R09: 1ffffffff1d18f95 [ 334.494044][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f96 R12: 0000000000000000 [ 334.494053][ C1] R13: 0000000000000000 R14: ffffc90019cbff58 R15: 0000000000000000 [ 334.494069][ C1] ? syscall_enter_from_user_mode+0x25/0x80 [ 334.494088][ C1] do_syscall_64+0x28/0xb0 [ 334.494103][ C1] ? clear_bhb_loop+0x40/0x90 [ 334.494118][ C1] ? clear_bhb_loop+0x40/0x90 [ 334.494133][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.494148][ C1] RIP: 0033:0x7f14fd59de99 [ 334.494163][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.494173][ C1] RSP: 002b:00007f14fe3800e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 334.494187][ C1] RAX: ffffffffffffffda RBX: 00007f14fd825fa8 RCX: 00007f14fd59de99 [ 334.494197][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14fd825fa8 [ 334.494205][ C1] RBP: 00007f14fd825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 334.494214][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.494222][ C1] R13: 00007f14fd826038 R14: 00007fff321ecee0 R15: 00007fff321ecfc8 [ 334.494238][ C1] [ 342.793863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog