last executing test programs: 20.840005303s ago: executing program 0 (id=1531): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000305005b68fdce0afc5924000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) modify_ldt$write2(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r3}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) socket(0x28, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 17.576668787s ago: executing program 0 (id=1536): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) ptrace(0x4206, 0x0) tkill(0x0, 0x12) unshare(0x6a040200) 12.907027697s ago: executing program 2 (id=1543): ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$RTC_PLL_SET(r0, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 11.895609903s ago: executing program 2 (id=1546): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20006, 0xa68d7c5193c827fc, 0xffbc, 0x6, 0x1d46, 0x32, 0x0, 0x0, 0x4, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001780)=[{&(0x7f0000000380)="2bc526eca4ff46974effa2a926ee3bb3b331b7b85c9a", 0x16}], 0x1) 8.362783444s ago: executing program 1 (id=1551): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x2000008) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xdfffffce, 0xdff, 0x3, 0x6, 0x3, "04000000000000000400", 0x28, 0x7f}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) geteuid() getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800f100", @ANYRES16=r1, @ANYBLOB="57010000000000000000000000000c0003000100000000000000080002000000000008000100", @ANYRES32=r4, @ANYBLOB="0600060003000000"], 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r6 = openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) 8.323886365s ago: executing program 0 (id=1552): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 7.792527469s ago: executing program 2 (id=1553): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800dd8d0000c6b00000df2502100000fc00fe070015000006001500060000000c0016800500040002000000"], 0x30}}, 0x40044) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) 7.462727848s ago: executing program 1 (id=1554): ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$RTC_PLL_SET(r0, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 6.146996262s ago: executing program 1 (id=1556): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) recvmmsg(r0, 0x0, 0xffffffffffffff79, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 6.099158463s ago: executing program 3 (id=1557): r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_PLL_SET(r1, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x82) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) ptrace(0x10, r0) 6.054470014s ago: executing program 0 (id=1558): socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x5, 0x0, &(0x7f0000bbdffc)) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r5 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000040)={r5, r0, 0x739}) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000080)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x400) listen(r7, 0xf) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.810118656s ago: executing program 3 (id=1559): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) mkdir(&(0x7f0000000180)='dir0\x00', 0xc2) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129942, 0x18) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 4.718204758s ago: executing program 1 (id=1560): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f00002d9000/0x2000)=nil, 0x2000, 0x70) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) ptrace(0x4206, 0x0) tkill(0x0, 0x12) unshare(0x6a040200) 4.215857401s ago: executing program 0 (id=1561): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20006, 0xa68d7c5193c827fc, 0xffbc, 0x6, 0x1d46, 0x32, 0x0, 0x0, 0x4, 0x9}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000001780)=[{&(0x7f0000000380)="2bc526eca4ff46974effa2a926ee3bb3b331b7b85c9a", 0x16}], 0x1) 4.037647876s ago: executing program 3 (id=1562): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x2000008) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xdfffffce, 0xdff, 0x3, 0x6, 0x3, "04000000000000000400", 0x28, 0x7f}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) geteuid() getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800f100", @ANYRES16=r1, @ANYBLOB="57010000000000000000000000000c0003000100000000000000080002000000000008000100", @ANYRES32=r4, @ANYBLOB="0600060003000000"], 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r6 = openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) 3.932004958s ago: executing program 3 (id=1563): r0 = socket$nl_generic(0x10, 0x3, 0x10) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/trace_pipe\x00', 0xe0180, 0x4) read(r3, &(0x7f0000000040)=""/12, 0xc) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r4, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r4, &(0x7f0000000680)='nullb1\x00', 0x200) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000080)={{0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 'syz1\x00', 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newtaction={0x74, 0x30, 0x9, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x6c05}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x3c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffc}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x7}]}, 0x3c}}, 0x0) 3.662648315s ago: executing program 3 (id=1564): ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) ioctl$RTC_PLL_SET(r0, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) 3.624379636s ago: executing program 2 (id=1565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='md0\x00', 0x3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./ram0\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='raid1\x00', 0x5) r6 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x400, 0x0) write(r7, &(0x7f0000000800)='1\x00', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r8, &(0x7f0000000a00)='1:0\x00', 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/block/md0/md/dev-ram0/slot\x00', 0x2, 0x0) write$khugepaged_scan(r9, &(0x7f0000000080), 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r10, &(0x7f0000000e00)='active\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.428282041s ago: executing program 1 (id=1566): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.689770131s ago: executing program 2 (id=1567): r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_PLL_SET(r1, 0x401c7012, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB], 0x2c}}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd000000000000000800034000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x82) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000000104050000000000000000000a0000000500010002"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) ptrace(0x10, r0) 2.615032182s ago: executing program 3 (id=1568): r0 = socket$inet(0x2, 0x2, 0x3) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x402, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) recvmmsg(r0, 0x0, 0xffffffffffffff79, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0) 274.507573ms ago: executing program 1 (id=1569): socket$kcm(0x21, 0x7, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) close(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="1b0000001a007f029e741683c28f7b331d00000000390000000000", 0x1b}], 0x1}, 0x24000080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x5, 0x0, &(0x7f0000bbdffc)) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r5 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r3, &(0x7f0000000040)={r5, r0, 0x739}) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000080)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x400) listen(r7, 0xf) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.65568ms ago: executing program 2 (id=1570): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) mkdir(&(0x7f0000000180)='dir0\x00', 0xc2) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129942, 0x18) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) 0s ago: executing program 0 (id=1571): io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x2000008) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0xdfffffce, 0xdff, 0x3, 0x6, 0x3, "04000000000000000400", 0x28, 0x7f}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8a) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) geteuid() getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800f100", @ANYRES16=r1, @ANYBLOB="57010000000000000000000000000c0003000100000000000000080002000000000008000100", @ANYRES32=r4, @ANYBLOB="0600060003000000"], 0x38}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r6 = openat$cgroup_type(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 68.766239][ T5759] cgroup: Unknown subsys name 'net' [ 68.903669][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.289344][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.741469][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.748132][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.240912][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.257165][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.276956][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.289642][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.300598][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.308096][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.320221][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.345395][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.355390][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.364859][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.373610][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.377624][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.387947][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.395835][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.403359][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.421667][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.430650][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.431264][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.445651][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.446403][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.460370][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.462328][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.476507][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.484113][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.824661][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 72.976649][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 73.016262][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.024120][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.032170][ T5770] bridge_slave_0: entered allmulticast mode [ 73.039274][ T5770] bridge_slave_0: entered promiscuous mode [ 73.048650][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 73.081315][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.090282][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.097522][ T5770] bridge_slave_1: entered allmulticast mode [ 73.104189][ T5770] bridge_slave_1: entered promiscuous mode [ 73.112077][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 73.172896][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.184425][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.274781][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.282711][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.290401][ T5774] bridge_slave_0: entered allmulticast mode [ 73.297372][ T5774] bridge_slave_0: entered promiscuous mode [ 73.308014][ T5770] team0: Port device team_slave_0 added [ 73.330683][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.337974][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.345133][ T5774] bridge_slave_1: entered allmulticast mode [ 73.352192][ T5774] bridge_slave_1: entered promiscuous mode [ 73.361097][ T5770] team0: Port device team_slave_1 added [ 73.418370][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.425546][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.432943][ T5780] bridge_slave_0: entered allmulticast mode [ 73.440272][ T5780] bridge_slave_0: entered promiscuous mode [ 73.448902][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.455989][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.463374][ T5780] bridge_slave_1: entered allmulticast mode [ 73.470612][ T5780] bridge_slave_1: entered promiscuous mode [ 73.480400][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.487459][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.513498][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.545462][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.562437][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.571779][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.598189][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.609907][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.617642][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.624806][ T5775] bridge_slave_0: entered allmulticast mode [ 73.631718][ T5775] bridge_slave_0: entered promiscuous mode [ 73.640854][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.648345][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.655620][ T5775] bridge_slave_1: entered allmulticast mode [ 73.662549][ T5775] bridge_slave_1: entered promiscuous mode [ 73.670897][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.701973][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.755088][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.784257][ T5774] team0: Port device team_slave_0 added [ 73.793811][ T5774] team0: Port device team_slave_1 added [ 73.812858][ T5770] hsr_slave_0: entered promiscuous mode [ 73.819697][ T5770] hsr_slave_1: entered promiscuous mode [ 73.829432][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.859428][ T5780] team0: Port device team_slave_0 added [ 73.868477][ T5780] team0: Port device team_slave_1 added [ 73.876081][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.924475][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.931562][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.957985][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.982799][ T5775] team0: Port device team_slave_0 added [ 73.989716][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.996697][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.022880][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.041962][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.051310][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.077664][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.090756][ T5775] team0: Port device team_slave_1 added [ 74.102144][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.111735][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.138425][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.230588][ T5780] hsr_slave_0: entered promiscuous mode [ 74.237254][ T5780] hsr_slave_1: entered promiscuous mode [ 74.243504][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.252162][ T5780] Cannot create hsr debugfs directory [ 74.262620][ T5774] hsr_slave_0: entered promiscuous mode [ 74.270674][ T5774] hsr_slave_1: entered promiscuous mode [ 74.277745][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.285313][ T5774] Cannot create hsr debugfs directory [ 74.359604][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.366668][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.393730][ T5087] Bluetooth: hci0: command tx timeout [ 74.399848][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.442915][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.450002][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.476120][ T5087] Bluetooth: hci1: command tx timeout [ 74.480990][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.537334][ T5087] Bluetooth: hci2: command tx timeout [ 74.537349][ T51] Bluetooth: hci3: command tx timeout [ 74.581298][ T5775] hsr_slave_0: entered promiscuous mode [ 74.588034][ T5775] hsr_slave_1: entered promiscuous mode [ 74.594266][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.602307][ T5775] Cannot create hsr debugfs directory [ 74.759218][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.794488][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.828787][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.838833][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.932226][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.942891][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.956669][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.970063][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.073686][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.101022][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.111015][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.123118][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.190143][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.223468][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.249314][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.261419][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.288397][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.298853][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.313011][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.346890][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.354377][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.375037][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.396562][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.403763][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.450219][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.457442][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.480006][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.487185][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.551039][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.586426][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.643621][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.665187][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.735668][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.742888][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.790808][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.798044][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.818922][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.860455][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.867625][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.929202][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.936374][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.984763][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.093940][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.181082][ T5770] veth0_vlan: entered promiscuous mode [ 76.202861][ T5770] veth1_vlan: entered promiscuous mode [ 76.286782][ T5780] veth0_vlan: entered promiscuous mode [ 76.306110][ T5770] veth0_macvtap: entered promiscuous mode [ 76.322829][ T5780] veth1_vlan: entered promiscuous mode [ 76.339645][ T5770] veth1_macvtap: entered promiscuous mode [ 76.398006][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.424724][ T5780] veth0_macvtap: entered promiscuous mode [ 76.449457][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.459752][ T5087] Bluetooth: hci0: command tx timeout [ 76.469966][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.479633][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.488753][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.497748][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520681][ T5780] veth1_macvtap: entered promiscuous mode [ 76.535081][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.537422][ T5087] Bluetooth: hci1: command tx timeout [ 76.578085][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.589481][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.601371][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.619509][ T5087] Bluetooth: hci3: command tx timeout [ 76.619518][ T51] Bluetooth: hci2: command tx timeout [ 76.625174][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.669511][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.686023][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.701445][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.751980][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.762366][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.774310][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.784668][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.805646][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.813704][ T5775] veth0_vlan: entered promiscuous mode [ 76.827877][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.891233][ T5775] veth1_vlan: entered promiscuous mode [ 76.903628][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.912131][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.935659][ T5774] veth0_vlan: entered promiscuous mode [ 77.001412][ T5774] veth1_vlan: entered promiscuous mode [ 77.062865][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.083237][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.170905][ T5775] veth0_macvtap: entered promiscuous mode [ 77.192573][ T5775] veth1_macvtap: entered promiscuous mode [ 77.202898][ T5835] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.221587][ T5774] veth0_macvtap: entered promiscuous mode [ 77.233027][ T5774] veth1_macvtap: entered promiscuous mode [ 77.241560][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.258503][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.271648][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.278228][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.289285][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.305758][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.318054][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.352639][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.369477][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.385946][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.396581][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.413985][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.430431][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.443332][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.452496][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.462854][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.481428][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.492985][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.507064][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.538473][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.550515][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.561509][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.582091][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.593225][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.605546][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.616615][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.627441][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.637397][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.647988][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.660804][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.677625][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.686769][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.700929][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.721134][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.786502][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5'. [ 77.886698][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.901562][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.954385][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.964485][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.038242][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.046107][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.150337][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.166270][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.402190][ T5857] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 78.430726][ T5859] syz_tun: entered allmulticast mode [ 78.437370][ T5845] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.466153][ T5859] dvmrp6: entered allmulticast mode [ 78.535467][ T5854] syz_tun: left allmulticast mode [ 78.544256][ T5087] Bluetooth: hci0: command tx timeout [ 78.564116][ T5864] 9pnet_virtio: no channels available for device syz [ 78.581167][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.617810][ T5087] Bluetooth: hci1: command tx timeout [ 78.696977][ T5087] Bluetooth: hci3: command tx timeout [ 78.697122][ T51] Bluetooth: hci2: command tx timeout [ 79.104959][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 79.292654][ T5845] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 79.314900][ T5845] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.324965][ T5845] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.335278][ T5845] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.346571][ T5845] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.361866][ T5845] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.371040][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.609428][ C1] hrtimer: interrupt took 644275 ns [ 79.624960][ T5845] usb 4-1: usb_control_msg returned -32 [ 79.641752][ T5845] usbtmc 4-1:16.0: can't read capabilities [ 79.713191][ T5867] Zero length message leads to an empty skb [ 79.740974][ T5867] 9pnet_virtio: no channels available for device syz [ 80.036723][ T5876] usbtmc 4-1:16.0: usb_bulk_msg returned -71 [ 80.123115][ T5878] Bluetooth: MGMT ver 1.22 [ 80.244775][ T8] usb 4-1: USB disconnect, device number 2 [ 80.619089][ T51] Bluetooth: hci0: command tx timeout [ 80.693935][ T5890] autofs4:pid:5890:autofs_fill_super: called with bogus options [ 80.711852][ T51] Bluetooth: hci1: command tx timeout [ 80.779812][ T51] Bluetooth: hci3: command tx timeout [ 80.780481][ T5087] Bluetooth: hci2: command tx timeout [ 81.405435][ T5897] syz.3.21 uses obsolete (PF_INET,SOCK_PACKET) [ 81.985584][ T5908] syzkaller0: entered promiscuous mode [ 82.016927][ T5908] syzkaller0: entered allmulticast mode [ 82.379369][ T27] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 82.609499][ T27] usb 4-1: not running at top speed; connect to a high speed hub [ 82.644858][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 82.669267][ T27] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 82.691334][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.743397][ T27] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 82.793308][ T27] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 83.032177][ T8] usb 4-1: USB disconnect, device number 3 [ 83.078419][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 83.144097][ T8] garmin_gps 4-1:1.0: device disconnected [ 83.203048][ T5930] 9pnet_virtio: no channels available for device syz [ 83.760757][ T5942] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 83.788711][ T5942] ======================================================= [ 83.788711][ T5942] WARNING: The mand mount option has been deprecated and [ 83.788711][ T5942] and is ignored by this kernel. Remove the mand [ 83.788711][ T5942] option from the mount to silence this warning. [ 83.788711][ T5942] ======================================================= [ 85.506851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 85.531084][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.718884][ T5975] (null): rxe_set_mtu: Set mtu to 1024 [ 87.866817][ C0] sched: RT throttling activated [ 89.237487][ T5975] infiniband syz0: set active [ 89.244449][ T5975] infiniband syz0: added bond_slave_1 [ 89.255024][ T5975] syz0: rxe_create_cq: returned err = -12 [ 89.265928][ T5975] infiniband syz0: Couldn't create ib_mad CQ [ 89.273338][ T5975] infiniband syz0: Couldn't open port 1 [ 89.363361][ T5975] RDS/IB: syz0: added [ 89.369387][ T5975] smc: adding ib device syz0 with port count 1 [ 89.377346][ T5975] smc: ib device syz0 port 1 has pnetid [ 90.628892][ T789] cfg80211: failed to load regulatory.db [ 92.184500][ T6008] binder: 6005:6008 ioctl c0306201 2000000004c0 returned -14 [ 92.269052][ T6010] overlayfs: missing 'workdir' [ 92.339335][ T6010] CacheFiles: Empty directory specified [ 92.378284][ T6010] CacheFiles: No cache directory specified [ 97.527354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.936929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.317604][ T6021] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 98.344843][ T6021] overlayfs: failed to look up (tracing) for ino (-66) [ 98.811225][ T6035] binder: BINDER_SET_CONTEXT_MGR already set [ 98.837156][ T6035] binder: 6034:6035 ioctl 4018620d 200000004a80 returned -16 [ 99.101884][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 99.169999][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 99.518246][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 99.637081][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.857038][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.899101][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 99.927013][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 99.963253][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.972028][ T6064] binder: BINDER_SET_CONTEXT_MGR already set [ 99.981679][ T6064] binder: 6063:6064 ioctl 4018620d 200000004a80 returned -16 [ 100.253526][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.73'. [ 100.403374][ T6074] gadgetfs: bound to dummy_udc driver [ 100.565096][ T6082] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 100.850660][ T6083] kvm: pic: non byte read [ 101.119510][ T6101] binder: BINDER_SET_CONTEXT_MGR already set [ 101.125705][ T6101] binder: 6100:6101 ioctl 4018620d 200000004a80 returned -16 [ 102.496068][ T5813] usb 1-1: USB disconnect, device number 2 [ 104.109607][ T173] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.259863][ T6186] overlayfs: missing 'lowerdir' [ 104.319899][ T173] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 104.328413][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 104.347006][ T173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.367364][ T173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.386905][ T173] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.411102][ T173] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.440855][ T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.487282][ T173] usb 4-1: config 0 descriptor?? [ 104.956732][ T173] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 105.077242][ T173] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 105.186652][ T6198] binder: 6191:6198 ioctl 401c7012 0 returned -22 [ 105.229609][ T6198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'. [ 105.768829][ T173] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 105.791411][ T173] usb 4-1: USB disconnect, device number 4 [ 106.412478][ T6203] fido_id[6203]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 108.516838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 114.086138][ T6248] binder: 6242:6248 ioctl 401c7012 0 returned -22 [ 114.095412][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 118.990277][ T6290] overlayfs: missing 'workdir' [ 119.060416][ T6290] CacheFiles: Empty directory specified [ 119.094947][ T6290] CacheFiles: No cache directory specified [ 119.404618][ T6298] binder: 6291:6298 ioctl 401c7012 0 returned -22 [ 119.417489][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 120.178154][ T6301] binder: 6294:6301 ioctl 401c7012 0 returned -22 [ 120.213316][ T6301] 9pnet_virtio: no channels available for device syz [ 120.242973][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.154'. [ 120.296852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 120.356850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 120.451686][ T11] rpcbind: server 127.0.0.1 not responding, timed out [ 120.894690][ T6318] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.162'. [ 124.647228][ T6330] binder: BINDER_SET_CONTEXT_MGR already set [ 124.653740][ T6330] binder: 6329:6330 ioctl 4018620d 200000004a80 returned -16 [ 124.948852][ T6332] binder: 6331:6332 ioctl 401c7012 0 returned -22 [ 124.957710][ T6332] 9pnet_virtio: no channels available for device syz [ 124.968204][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 126.738286][ T6365] binder: BC_ACQUIRE_RESULT not supported [ 126.746890][ T6365] binder: 6361:6365 ioctl c0306201 200000004a40 returned -22 [ 127.135418][ T6371] Config c/1 of g1 needs at least one function. [ 127.144367][ T6371] udc dummy_udc.0: failed to start g1: -22 [ 127.154212][ T6371] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 127.172208][ T6371] UDC core: g1: couldn't find an available UDC or it's busy [ 127.212062][ T6371] XFS (nullb0): Invalid superblock magic number [ 132.660683][ T6423] netlink: 'syz.1.196': attribute type 5 has an invalid length. [ 132.746066][ T6423] netlink: 980 bytes leftover after parsing attributes in process `syz.1.196'. [ 133.217893][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.225421][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.575037][ T6442] binder: BC_ACQUIRE_RESULT not supported [ 133.684055][ T6442] binder: 6435:6442 ioctl c0306201 200000004a40 returned -22 [ 134.646846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.337569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c4!!! [ 136.506824][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 137.776840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 139.437567][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 139.465712][ T6464] xfrm0: entered allmulticast mode [ 140.176897][ T5813] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 140.778946][ T5813] usb 4-1: device descriptor read/64, error -71 [ 143.612085][ T5813] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 143.994235][ T6498] binder: BC_ACQUIRE_RESULT not supported [ 144.032569][ T6498] binder: 6492:6498 ioctl c0306201 200000004a40 returned -22 [ 144.256678][ T6504] binder: 6503:6504 unknown command 1074553619 [ 144.264533][ T6504] binder: 6503:6504 ioctl c0306201 200000000040 returned -22 [ 145.997002][ T5813] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 146.131860][ T6527] binder: BC_ACQUIRE_RESULT not supported [ 146.156941][ T5813] usb 2-1: device descriptor read/64, error -71 [ 146.167960][ T6527] binder: 6526:6527 ioctl c0306201 200000004a40 returned -22 [ 146.456900][ T5813] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 146.606865][ T5813] usb 2-1: device descriptor read/64, error -71 [ 147.650737][ T5813] usb usb2-port1: attempt power cycle [ 150.053855][ T6545] UDC core: g1: couldn't find an available UDC or it's busy [ 150.156903][ T5813] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 150.418105][ T5813] usb 2-1: device not accepting address 4, error -71 [ 152.407202][ T6576] syz0: rxe_newlink: already configured on bond_slave_1 [ 154.551612][ T6590] binder: BC_ACQUIRE_RESULT not supported [ 154.596936][ T6590] binder: 6585:6590 ioctl c0306201 200000004a40 returned -22 [ 155.615088][ T6602] trusted_key: encrypted_key: insufficient parameters specified [ 155.897066][ T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 156.096872][ T9] usb 1-1: device descriptor read/64, error -71 [ 156.957076][ T6609] (null): rxe_set_mtu: Set mtu to 1024 [ 156.963567][ T6609] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 158.536852][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 161.465110][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 161.682712][ T6642] trusted_key: encrypted_key: insufficient parameters specified [ 163.286996][ T6652] program syz.1.253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.457331][ T6652] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 163.867112][ T6652] (null): rxe_set_mtu: Set mtu to 1024 [ 163.873330][ T6652] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 165.174010][ T5087] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 166.289861][ T6656] netlink: 156 bytes leftover after parsing attributes in process `syz.1.257'. [ 172.459151][ T6721] fuse: Bad value for 'fd' [ 177.244490][ T6769] fuse: Bad value for 'fd' [ 185.098274][ T6803] fuse: Bad value for 'fd' [ 196.807713][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.937832][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.858678][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 198.861006][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 198.864860][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 198.864891][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 201.936938][ T6893] program syz.3.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.078101][ T6893] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 210.614313][ T6915] syz_tun: entered allmulticast mode [ 210.765161][ T6913] syz_tun: left allmulticast mode [ 223.410167][ T6965] pim6reg: entered allmulticast mode [ 223.470495][ T6965] pim6reg: left allmulticast mode [ 223.618508][ T6967] 9pnet_virtio: no channels available for device syz [ 223.652775][ T6967] netlink: 48 bytes leftover after parsing attributes in process `syz.1.343'. [ 223.964014][ T6951] syz.3.339 (6951) used greatest stack depth: 18888 bytes left [ 226.065956][ T6975] syz_tun: entered allmulticast mode [ 226.107762][ T6973] syz_tun: left allmulticast mode [ 228.357019][ T6990] (null): rxe_set_mtu: Set mtu to 1024 [ 228.363213][ T6990] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 230.568188][ T7003] syz_tun: entered allmulticast mode [ 230.591739][ T7003] dvmrp6: entered allmulticast mode [ 230.606187][ T7002] syz_tun: left allmulticast mode [ 231.797510][ T7016] program syz.0.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.956853][ T7016] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 237.026937][ T7031] syz0: rxe_newlink: already configured on bond_slave_1 [ 239.643415][ T7054] syz_tun: entered allmulticast mode [ 239.654954][ T7053] syz_tun: left allmulticast mode [ 239.780278][ T5777] Bluetooth: hci2: unexpected event for opcode 0x203d [ 239.787760][ T7059] CacheFiles: Empty directory specified [ 239.892768][ T7059] CacheFiles: No cache directory specified [ 241.547029][ T7068] (null): rxe_set_mtu: Set mtu to 1024 [ 241.553197][ T7068] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 242.920676][ T3503] rpcbind: server 127.0.0.1 not responding, timed out [ 243.490229][ T7080] (null): rxe_set_mtu: Set mtu to 1024 [ 243.496404][ T7080] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 244.581328][ T5777] Bluetooth: hci1: unexpected event for opcode 0x203d [ 244.590207][ T7085] CacheFiles: Empty directory specified [ 244.596120][ T7085] CacheFiles: No cache directory specified [ 248.923879][ T7119] syz0: rxe_newlink: already configured on bond_slave_1 [ 252.698742][ T5777] Bluetooth: hci1: unexpected event for opcode 0x203d [ 252.713702][ T7127] CacheFiles: Empty directory specified [ 252.760833][ T7130] CacheFiles: No cache directory specified [ 254.667723][ T7148] (null): rxe_set_mtu: Set mtu to 1024 [ 254.673886][ T7148] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 255.155345][ T7153] program syz.2.397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.166677][ T7153] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 256.061201][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.068934][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.286978][ T27] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 260.497769][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 260.514411][ T27] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 260.546092][ T28] audit: type=1800 audit(1786933153.471:2): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.405" name="file0" dev="overlay" ino=542 res=0 errno=0 [ 260.602005][ T27] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 260.620080][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.654403][ T27] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 260.664947][ T27] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 260.701747][ T27] garmin_gps: probe of ttyUSB0 failed with error -22 [ 260.850785][ T5777] Bluetooth: hci3: unexpected event for opcode 0x203d [ 260.852206][ T7191] CacheFiles: Empty directory specified [ 260.887107][ T7191] CacheFiles: No cache directory specified [ 260.911669][ T27] usb 1-1: USB disconnect, device number 5 [ 260.933653][ T27] garmin_gps 1-1:1.0: device disconnected [ 265.672149][ T3503] rpcbind: server 127.0.0.1 not responding, timed out [ 267.242738][ T7234] binder: 7232:7234 ioctl 4018620d 0 returned -22 [ 267.266467][ T5777] Bluetooth: hci1: unexpected event for opcode 0x203d [ 267.288772][ T7233] CacheFiles: Empty directory specified [ 267.296015][ T7233] CacheFiles: No cache directory specified [ 267.427100][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 267.638709][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 267.719072][ T7246] binder: 7241:7246 ioctl 401c7012 0 returned -22 [ 267.759051][ T7246] 9pnet_virtio: no channels available for device syz [ 267.798852][ T7246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 268.638131][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 268.656878][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 268.675557][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 268.686892][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.707396][ T9] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 268.722625][ T9] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 268.740592][ T9] garmin_gps: probe of ttyUSB0 failed with error -90 [ 268.949733][ T5813] usb 2-1: USB disconnect, device number 6 [ 268.987484][ T5813] garmin_gps 2-1:1.0: device disconnected [ 269.105132][ T7252] nbd3: detected capacity change from 0 to 63 [ 269.161289][ T7255] block nbd3: NBD_DISCONNECT [ 269.189089][ T7255] block nbd3: Disconnected due to user request. [ 269.208308][ T7255] block nbd3: shutting down sockets [ 269.266888][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.276151][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.284388][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.293486][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.301318][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.310395][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 269.318182][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 269.327256][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 269.373608][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 269.393417][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.402793][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.410755][ T55] Buffer I/O error on dev nbd3, logical block 2, async page read [ 269.419009][ T55] Buffer I/O error on dev nbd3, logical block 3, async page read [ 269.428246][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 269.437541][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.445285][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.453688][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 269.464035][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 269.473762][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 269.483440][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 269.493024][ T6570] ldm_validate_partition_table(): Disk read failed. [ 269.507201][ T7259] binder: 7258:7259 ioctl 4018620d 0 returned -22 [ 269.508041][ T6570] Dev nbd3: unable to read RDB block 0 [ 269.520378][ T6570] nbd3: unable to read partition table [ 269.534142][ T6570] ldm_validate_partition_table(): Disk read failed. [ 269.542531][ T6570] Dev nbd3: unable to read RDB block 0 [ 269.550417][ T6570] nbd3: unable to read partition table [ 269.807539][ T7265] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 269.928995][ T7265] bond1: entered promiscuous mode [ 269.934552][ T7265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.957089][ T7272] bond1: (slave bridge1): making interface the new active one [ 269.965589][ T7272] bridge1: entered promiscuous mode [ 269.973098][ T7272] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 271.017500][ T7277] binder: 7275:7277 ioctl 401c7012 0 returned -22 [ 271.056328][ T7277] 9pnet_virtio: no channels available for device syz [ 271.077828][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 273.437591][ T5830] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 273.742647][ T7301] binder: 7300:7301 ioctl 4018620d 0 returned -22 [ 273.761369][ T5830] usb 2-1: not running at top speed; connect to a high speed hub [ 273.866449][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 274.291360][ T5830] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 274.340818][ T5830] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 274.410943][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.488943][ T5830] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 274.572450][ T5830] garmin_gps ttyUSB0: failed to submit interrupt urb: -90 [ 274.620551][ T5830] garmin_gps: probe of ttyUSB0 failed with error -90 [ 274.716031][ T5830] usb 2-1: USB disconnect, device number 7 [ 274.742340][ T5830] garmin_gps 2-1:1.0: device disconnected [ 274.937223][ T61] rpcbind: server 127.0.0.1 not responding, timed out [ 279.726929][ T5812] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 282.018434][ T5812] usb 2-1: not running at top speed; connect to a high speed hub [ 283.443493][ T7391] program syz.3.463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.456405][ T7391] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 283.583419][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 284.316880][ T7394] (null): rxe_set_mtu: Set mtu to 1024 [ 284.336222][ T7394] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 285.156260][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 285.167812][ T5812] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 285.178276][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.247196][ T5812] usb 2-1: can't set config #1, error -71 [ 285.267310][ T5812] usb 2-1: USB disconnect, device number 8 [ 292.234264][ T7439] program syz.3.476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.244394][ T7439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.255631][ T7439] (null): rxe_set_mtu: Set mtu to 1024 [ 292.261848][ T7439] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 292.706846][ T5830] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 293.668388][ T5830] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 293.704102][ T5830] usb 2-1: can't read configurations, error -71 [ 294.021383][ T7463] program syz.2.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.031532][ T7463] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 297.467610][ T5777] Bluetooth: hci3: unexpected event for opcode 0x203d [ 297.471252][ T7495] overlayfs: failed to resolve './file0': -2 [ 297.617222][ T7495] CacheFiles: Empty directory specified [ 297.655534][ T7495] CacheFiles: No cache directory specified [ 297.832116][ T7502] pim6reg: entered allmulticast mode [ 297.860103][ T7499] 9pnet_virtio: no channels available for device syz [ 297.870979][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.1.486'. [ 299.352986][ T7517] program syz.1.491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.362981][ T7517] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 301.742156][ T7531] overlayfs: failed to resolve './file0': -2 [ 301.751361][ T5777] Bluetooth: hci3: unexpected event for opcode 0x203d [ 301.793706][ T7536] CacheFiles: Empty directory specified [ 301.833576][ T7531] CacheFiles: No cache directory specified [ 302.325969][ T7551] syz.2.499[7551]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 304.336345][ T7552] 9pnet_virtio: no channels available for device syz [ 304.402768][ T7552] netlink: 48 bytes leftover after parsing attributes in process `syz.1.501'. [ 306.600778][ T7569] program syz.0.504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.611724][ T7569] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.540788][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 307.688183][ T7590] overlayfs: missing 'workdir' [ 307.696808][ T5830] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 307.724256][ T7590] CacheFiles: Empty directory specified [ 307.740873][ T7590] CacheFiles: No cache directory specified [ 307.752993][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 307.901364][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 307.929281][ T5830] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 307.963052][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.966324][ T7599] netlink: 'syz.0.518': attribute type 1 has an invalid length. [ 308.023514][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.055823][ T7599] bond1: entered promiscuous mode [ 308.064266][ T7599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.072322][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 308.094319][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.137512][ T7605] bond1: (slave bridge1): making interface the new active one [ 308.146257][ T7605] bridge1: entered promiscuous mode [ 308.153701][ T7605] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 308.198260][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.238719][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.466037][ T7610] fuse: Unknown parameter 'group_i00000000000000000000' [ 310.727175][ T7607] (null): rxe_set_mtu: Set mtu to 1024 [ 310.733733][ T7607] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 311.001667][ T5830] usb 2-1: usb_control_msg returned -32 [ 311.034401][ T5830] usbtmc 2-1:16.0: can't read capabilities [ 312.387739][ T5761] usb 2-1: USB disconnect, device number 11 [ 312.432083][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 312.458191][ T7629] overlayfs: missing 'workdir' [ 312.536204][ T7630] CacheFiles: Empty directory specified [ 312.604176][ T7629] CacheFiles: No cache directory specified [ 315.503417][ T7638] (null): rxe_set_mtu: Set mtu to 1024 [ 315.509641][ T7638] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 315.803200][ T7645] fuse: Unknown parameter 'group_i00000000000000000000' [ 317.502681][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.509700][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.661514][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 320.148493][ T7682] (null): rxe_set_mtu: Set mtu to 1024 [ 320.154718][ T7682] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 320.500689][ T7692] binder: 7691:7692 ioctl c0306201 0 returned -14 [ 320.801349][ T7700] fuse: Unknown parameter 'group_i00000000000000000000' [ 320.808544][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 322.112758][ T7714] binder: 7712:7714 ioctl c0306201 0 returned -14 [ 326.188888][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 326.202858][ T7735] fuse: Unknown parameter 'group_id00000000000000000000' [ 327.855938][ T5812] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 328.408730][ T5812] usb 1-1: not running at top speed; connect to a high speed hub [ 328.429278][ T5812] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 328.446974][ T5812] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 328.457360][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.491771][ T5812] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 328.523914][ T5812] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 328.646073][ T7756] overlayfs: missing 'workdir' [ 328.646848][ T5777] Bluetooth: hci0: unexpected event for opcode 0x203d [ 328.727959][ T9] usb 1-1: USB disconnect, device number 6 [ 328.754651][ T7756] CacheFiles: Empty directory specified [ 328.787923][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 328.804710][ T7756] CacheFiles: No cache directory specified [ 328.831532][ T9] garmin_gps 1-1:1.0: device disconnected [ 329.538223][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 332.735837][ T5777] Bluetooth: hci1: unexpected event for opcode 0x203d [ 332.742265][ T7789] overlayfs: missing 'workdir' [ 332.768146][ T7789] CacheFiles: Empty directory specified [ 332.855717][ T7789] CacheFiles: No cache directory specified [ 337.689519][ T3488] rpcbind: server 127.0.0.1 not responding, timed out [ 340.871090][ T7821] binder: 7812:7821 ioctl 401c7012 0 returned -22 [ 341.305389][ T7821] 9pnet_virtio: no channels available for device syz [ 341.463689][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 343.450353][ T7843] program syz.3.592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.500163][ T7843] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.817430][ T7844] program syz.2.591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.957971][ T7844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 343.973052][ T7843] (null): rxe_set_mtu: Set mtu to 1024 [ 343.979292][ T7843] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 344.222129][ T7844] (null): rxe_set_mtu: Set mtu to 1024 [ 344.233400][ T7844] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 350.107056][ T5777] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 350.356911][ T7867] binder: 7862:7867 ioctl 401c7012 0 returned -22 [ 350.398237][ T7867] 9pnet_virtio: no channels available for device syz [ 350.500829][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 352.885109][ T7891] netlink: 36 bytes leftover after parsing attributes in process `syz.2.606'. [ 353.359301][ T7895] pim6reg: left allmulticast mode [ 353.435237][ T7900] 9pnet_virtio: no channels available for device syz [ 353.456037][ T7900] netlink: 48 bytes leftover after parsing attributes in process `syz.1.603'. [ 355.892459][ T5777] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 356.157503][ T7912] binder: 7909:7912 ioctl 401c7012 0 returned -22 [ 356.170122][ T7912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 358.302019][ T7926] fuse: Bad value for 'user_id' [ 359.467001][ T7925] program syz.0.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.626841][ T7925] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 359.766882][ T7925] syz0: rxe_newlink: already configured on bond_slave_1 [ 364.848402][ T7940] nbd0: detected capacity change from 0 to 63 [ 364.864489][ T5777] block nbd0: Receive control failed (result -32) [ 364.865305][ T24] block nbd0: Send control failed (result -32) [ 364.879139][ T24] block nbd0: Request send failed, requeueing [ 364.897487][ T1096] block nbd0: Dead connection, failed to find a fallback [ 364.905335][ T1096] block nbd0: shutting down sockets [ 364.911240][ T1096] blk_print_req_error: 93 callbacks suppressed [ 364.911248][ T1096] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 364.928342][ T1096] buffer_io_error: 138 callbacks suppressed [ 364.928373][ T1096] Buffer I/O error on dev nbd0, logical block 0, async page read [ 364.943333][ T1096] Buffer I/O error on dev nbd0, logical block 1, async page read [ 364.951812][ T1096] Buffer I/O error on dev nbd0, logical block 2, async page read [ 364.960225][ T1096] Buffer I/O error on dev nbd0, logical block 3, async page read [ 364.969696][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 364.979510][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 364.987946][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 364.996982][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 365.005420][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 365.014097][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.023966][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 365.032354][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 365.041035][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.051200][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.061283][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.071319][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.081390][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 365.091214][ T7861] ldm_validate_partition_table(): Disk read failed. [ 365.107008][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 365.117817][ T24] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 365.171668][ T7861] Dev nbd0: unable to read RDB block 0 [ 365.210692][ T7861] nbd0: unable to read partition table [ 365.355388][ T7944] pim6reg: entered allmulticast mode [ 365.362252][ T7861] ldm_validate_partition_table(): Disk read failed. [ 365.374951][ T7861] Dev nbd0: unable to read RDB block 0 [ 365.383007][ T7861] nbd0: unable to read partition table [ 365.448126][ T7943] pim6reg: left allmulticast mode [ 365.502153][ T7944] 9pnet_virtio: no channels available for device syz [ 365.518266][ T7944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.619'. [ 365.831254][ T7956] binder: 7949:7956 ioctl 401c7012 0 returned -22 [ 365.843108][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 366.252633][ T7952] jffs2: notice: (7952) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.551957][ T7958] binder: 7954:7958 ioctl 401c7012 0 returned -22 [ 366.635396][ T7958] 9pnet_virtio: no channels available for device syz [ 366.718997][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 366.855823][ T7971] fuse: Bad value for 'fd' [ 367.072000][ T7974] nbd2: detected capacity change from 0 to 63 [ 367.094115][ T7974] block nbd2: NBD_DISCONNECT [ 367.106610][ T7974] block nbd2: Disconnected due to user request. [ 367.125087][ T7974] block nbd2: shutting down sockets [ 367.138452][ T7861] ldm_validate_partition_table(): Disk read failed. [ 367.163241][ T7861] Dev nbd2: unable to read RDB block 0 [ 367.178812][ T7861] nbd2: unable to read partition table [ 367.200551][ T7861] ldm_validate_partition_table(): Disk read failed. [ 367.216154][ T7861] Dev nbd2: unable to read RDB block 0 [ 367.230625][ T7861] nbd2: unable to read partition table [ 367.798914][ T7981] 9pnet_virtio: no channels available for device syz [ 371.739690][ T8009] nbd: nbd0 already in use [ 371.776809][ T8014] fuse: Bad value for 'fd' [ 371.788128][ T8009] block nbd0: NBD_DISCONNECT [ 371.792764][ T8009] block nbd0: Send disconnect failed -32 [ 371.840659][ T5777] Bluetooth: hci2: unexpected event for opcode 0x203d [ 371.844830][ T8016] overlayfs: missing 'workdir' [ 371.881766][ T8016] CacheFiles: Empty directory specified [ 371.934619][ T8021] CacheFiles: No cache directory specified [ 378.941482][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.020854][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.090001][ T8063] fuse: Bad value for 'fd' [ 384.475629][ T8085] netlink: 'syz.0.663': attribute type 1 has an invalid length. [ 384.629652][ T8093] fuse: Bad value for 'fd' [ 384.651875][ T8085] bond2: entered promiscuous mode [ 384.658692][ T8085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.748054][ T8087] bond2: (slave bridge2): making interface the new active one [ 384.757226][ T8087] bridge2: entered promiscuous mode [ 385.057947][ T8087] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 386.536594][ T8104] binder: 8101:8104 ioctl c0306201 2000000004c0 returned -14 [ 393.565993][ T8135] fuse: Bad value for 'fd' [ 394.381860][ T8145] binder: 8144:8145 ioctl c0306201 2000000004c0 returned -14 [ 399.877388][ T8185] fuse: Bad value for 'fd' [ 400.108280][ T8192] binder: 8189:8192 ioctl c0306201 2000000004c0 returned -14 [ 401.689837][ T8205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.698'. [ 401.803973][ T5777] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 403.472255][ T8229] binder: 8228:8229 ioctl c0306201 2000000004c0 returned -14 [ 404.434295][ T49] rpcbind: server 127.0.0.1 not responding, timed out [ 404.558730][ T8235] fuse: Invalid rootmode [ 404.789127][ T8242] fuse: Unknown parameter 'group_id00000000000000000000' [ 406.891760][ T8256] binder: 8250:8256 ioctl c0306201 2000000004c0 returned -14 [ 408.469677][ T143] rpcbind: server 127.0.0.1 not responding, timed out [ 410.063562][ T8280] fuse: Invalid rootmode [ 410.134829][ T8272] md: could not open device unknown-block(1,0). [ 410.306440][ T8286] netlink: 'syz.0.725': attribute type 1 has an invalid length. [ 410.350410][ T8286] bond3: entered promiscuous mode [ 410.357166][ T8286] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.408855][ T8288] bond3: (slave bridge3): making interface the new active one [ 410.416452][ T8288] bridge3: entered promiscuous mode [ 410.423299][ T8288] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 412.984258][ T8294] binder: 8293:8294 ioctl 401c7012 0 returned -22 [ 412.993244][ T8294] 9pnet_virtio: no channels available for device syz [ 413.006974][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 414.239450][ T8314] nbd: must specify at least one socket [ 415.865440][ T8322] fuse: Invalid rootmode [ 416.062157][ T8326] tipc: Started in network mode [ 416.068348][ T8326] tipc: Node identity b2653f091d97, cluster identity 4711 [ 416.077123][ T8326] tipc: Enabled bearer , priority 10 [ 416.105835][ T8325] tipc: Resetting bearer [ 416.284725][ T8325] tipc: Disabling bearer [ 416.493475][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.3.742'. [ 419.896898][ T8360] program syz.2.752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 420.106791][ T8360] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 420.246879][ T8360] (null): rxe_set_mtu: Set mtu to 1024 [ 420.253069][ T8360] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 421.548465][ T3524] rpcbind: server 127.0.0.1 not responding, timed out [ 421.634648][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.754'. [ 422.757493][ T8369] fuse: Bad value for 'rootmode' [ 424.526152][ T1128] rpcbind: server 127.0.0.1 not responding, timed out [ 424.778345][ T8391] fuse: Bad value for 'fd' [ 425.238873][ T8399] program syz.0.762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.249728][ T8399] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 425.263417][ T8399] syz0: rxe_newlink: already configured on bond_slave_1 [ 425.647288][ T5813] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 426.512341][ T5813] usb 3-1: not running at top speed; connect to a high speed hub [ 426.527916][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 426.544591][ T5813] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 426.553934][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.588599][ T5813] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 426.605964][ T8410] fuse: Bad value for 'rootmode' [ 426.648920][ T5813] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 426.822154][ T5813] usb 3-1: USB disconnect, device number 2 [ 426.864846][ T5813] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 426.900880][ T5813] garmin_gps 3-1:1.0: device disconnected [ 427.191235][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.0.769'. [ 427.367742][ T5777] Bluetooth: hci1: unexpected event for opcode 0x0411 [ 427.641961][ T8439] fuse: Bad value for 'fd' [ 428.101647][ T8452] program syz.0.777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 428.111039][ T8452] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 428.121748][ T8452] syz0: rxe_newlink: already configured on bond_slave_1 [ 429.063736][ T8463] pim6reg: entered allmulticast mode [ 429.143513][ T8463] pim6reg: left allmulticast mode [ 429.336715][ T5813] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 429.389572][ T8450] 9pnet_virtio: no channels available for device syz [ 429.454918][ T8450] netlink: 48 bytes leftover after parsing attributes in process `syz.2.778'. [ 429.510119][ T5437] veth0_macvtap: left promiscuous mode [ 429.567857][ T5813] usb 1-1: not running at top speed; connect to a high speed hub [ 429.589392][ T5813] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 429.605679][ T5813] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 429.654446][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.720417][ T5813] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 429.759847][ T5813] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 429.792721][ T8475] fuse: Bad value for 'rootmode' [ 429.950063][ T5813] usb 1-1: USB disconnect, device number 7 [ 430.034636][ T5813] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 430.044605][ T5813] garmin_gps 1-1:1.0: device disconnected [ 430.331936][ T8492] fuse: Bad value for 'fd' [ 430.704385][ T8509] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 430.744201][ T8509] bond4: entered promiscuous mode [ 430.749668][ T8509] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.773757][ T8511] bond4: (slave bridge4): making interface the new active one [ 430.782387][ T8511] bridge4: entered promiscuous mode [ 430.788926][ T8511] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 431.429744][ T5777] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 431.478519][ T5777] Bluetooth: hci1: Injecting HCI hardware error event [ 431.526445][ T5777] Bluetooth: hci1: hardware error 0x00 [ 432.266071][ T8534] fuse: Unknown parameter 'use00000000000000000000' [ 432.276704][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 432.365512][ T8537] pim6reg: entered allmulticast mode [ 432.384021][ T8532] pim6reg: left allmulticast mode [ 432.434237][ T8537] 9pnet_virtio: no channels available for device syz [ 432.481595][ T8532] netlink: 48 bytes leftover after parsing attributes in process `syz.0.794'. [ 432.900671][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 432.964836][ T8546] program syz.3.801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.974319][ T8546] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 432.985548][ T8546] (null): rxe_set_mtu: Set mtu to 1024 [ 432.991993][ T8546] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 433.766899][ T5777] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 433.966796][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 433.986894][ T9] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 434.159864][ T8550] fuse: Bad value for 'fd' [ 434.483614][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.508119][ T9] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 434.522767][ T9] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 434.552921][ T8554] netlink: 'syz.3.804': attribute type 1 has an invalid length. [ 434.586107][ T8554] bond1: entered promiscuous mode [ 434.592165][ T8554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.620218][ T8554] bond1: (slave bridge1): making interface the new active one [ 434.628778][ T8554] bridge1: entered promiscuous mode [ 434.634815][ T8554] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 434.875621][ T9] usb 3-1: USB disconnect, device number 3 [ 435.037613][ T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 435.177283][ T9] garmin_gps 3-1:1.0: device disconnected [ 436.936069][ T8576] syz.0.810 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 436.978352][ T8585] fuse: Bad value for 'fd' [ 437.223686][ T8588] program syz.2.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 437.233252][ T8588] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 437.244028][ T8588] (null): rxe_set_mtu: Set mtu to 1024 [ 437.249844][ T8588] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 438.568825][ T8589] netlink: 'syz.1.809': attribute type 4 has an invalid length. [ 438.678921][ T8574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.872504][ T8599] nbd: must specify at least one socket [ 438.966971][ T5830] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 440.025573][ T5830] usb 4-1: not running at top speed; connect to a high speed hub [ 440.039006][ T5830] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 440.067430][ T5830] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 440.086785][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.119654][ T5830] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 440.192059][ T5830] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 440.378399][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.390160][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.397793][ T5812] usb 4-1: USB disconnect, device number 7 [ 440.444032][ T5812] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 440.466093][ T5812] garmin_gps 4-1:1.0: device disconnected [ 442.821564][ T8629] fuse: Bad value for 'fd' [ 442.906952][ T27] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 443.151043][ T27] usb 4-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x3B, skipping [ 443.296598][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 443.311167][ T27] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 443.329401][ T27] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 443.338872][ T27] usb 4-1: Product: syz [ 443.343061][ T27] usb 4-1: Manufacturer: syz [ 443.348062][ T27] usb 4-1: SerialNumber: syz [ 443.357585][ T27] usb 4-1: config 0 descriptor?? [ 443.363218][ T8620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 443.438365][ T27] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 443.521377][ T8177] udevd[8177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 443.789554][ T27] usb 4-1: USB disconnect, device number 8 [ 445.600917][ T8649] binder: 8648:8649 ioctl 401c7012 0 returned -22 [ 445.609376][ T8649] 9pnet_virtio: no channels available for device syz [ 445.621154][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 445.694241][ T8658] pim6reg: entered allmulticast mode [ 445.747750][ T8652] pim6reg: left allmulticast mode [ 445.911600][ T8658] 9pnet_virtio: no channels available for device syz [ 446.001088][ T8658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.828'. [ 446.266440][ T8672] nbd: must specify at least one socket [ 447.389890][ T8688] fuse: Invalid rootmode [ 447.434668][ T8691] binder_alloc: 8690: pid 8690 spamming oneway? 2 buffers allocated for a total size of 5120 [ 447.671033][ T8697] binder: 8696:8697 ioctl 401c7012 0 returned -22 [ 447.683359][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.839'. [ 450.136507][ T8726] pim6reg: entered allmulticast mode [ 450.168401][ T8719] pim6reg: left allmulticast mode [ 450.230337][ T8723] 9pnet_virtio: no channels available for device syz [ 450.248838][ T8723] netlink: 48 bytes leftover after parsing attributes in process `syz.0.843'. [ 450.409663][ T8736] binder: 8733:8736 ioctl 401c7012 0 returned -22 [ 450.429898][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'. [ 450.478174][ T8737] md: could not open device unknown-block(1,0). [ 450.734288][ T8744] program syz.3.851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.743681][ T8744] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 450.774083][ T8744] (null): rxe_set_mtu: Set mtu to 1024 [ 450.780637][ T8744] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 451.763918][ T8758] binder: 8757:8758 ioctl 401c7012 0 returned -22 [ 451.781843][ T8758] 9pnet_virtio: no channels available for device syz [ 451.794013][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 452.680312][ T8779] 9pnet_virtio: no channels available for device syz [ 452.692404][ T8779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.862'. [ 453.711837][ T8777] pim6reg: entered allmulticast mode [ 453.727956][ T8774] pim6reg: left allmulticast mode [ 454.693015][ T8786] program syz.3.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.702637][ T8786] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 454.714334][ T8786] (null): rxe_set_mtu: Set mtu to 1024 [ 454.719988][ T8786] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 456.515101][ T8807] pim6reg: entered allmulticast mode [ 456.525906][ T8807] pim6reg: left allmulticast mode [ 456.609179][ T8807] 9pnet_virtio: no channels available for device syz [ 456.622335][ T8807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.873'. [ 457.401713][ T8823] program syz.0.876 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.411118][ T8823] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 457.421583][ T8823] syz0: rxe_newlink: already configured on bond_slave_1 [ 458.436970][ T8826] binder: 8825:8826 ioctl 401c7012 0 returned -22 [ 458.444441][ T8826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 459.553971][ T8842] pim6reg: entered allmulticast mode [ 459.751805][ T8842] pim6reg: left allmulticast mode [ 461.516349][ T8857] binder: 8856:8857 ioctl 401c7012 0 returned -22 [ 461.532849][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 461.609004][ T8859] nbd0: detected capacity change from 0 to 63 [ 461.623390][ T5777] block nbd0: Receive control failed (result -104) [ 463.968133][ T8891] nbd1: detected capacity change from 0 to 63 [ 463.989652][ T5777] block nbd1: Receive control failed (result -104) [ 464.001645][ T55] block nbd1: Dead connection, failed to find a fallback [ 464.009000][ T55] block nbd1: shutting down sockets [ 464.014445][ T55] blk_print_req_error: 222 callbacks suppressed [ 464.014457][ T55] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 464.030376][ T55] buffer_io_error: 286 callbacks suppressed [ 464.030383][ T55] Buffer I/O error on dev nbd1, logical block 3, async page read [ 466.222758][ T8920] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 466.260990][ T8920] bond2: entered promiscuous mode [ 466.284967][ T8920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.309538][ T8923] bond2: (slave bridge2): making interface the new active one [ 466.320186][ T8923] bridge2: entered promiscuous mode [ 466.326682][ T8923] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 467.526001][ T8929] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 467.613300][ T8929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 467.840162][ T8929] bond5: (slave geneve2): making interface the new active one [ 467.879128][ T8929] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 468.032752][ T8940] nbd2: detected capacity change from 0 to 63 [ 468.056737][ T5777] block nbd2: Receive control failed (result -104) [ 472.026090][ T8950] md: could not open device unknown-block(1,0). [ 472.421183][ T8966] nbd: must specify at least one socket [ 472.427688][ T8966] block nbd2: NBD_DISCONNECT [ 472.432585][ T8966] block nbd2: Send disconnect failed -32 [ 472.438919][ T8966] block nbd2: shutting down sockets [ 472.452306][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.461665][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 472.470398][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.479660][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 472.487607][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.496822][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 472.504627][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.513857][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 472.606984][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 472.616219][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 472.624903][ T24] Buffer I/O error on dev nbd2, logical block 1, async page read [ 472.632979][ T24] Buffer I/O error on dev nbd2, logical block 2, async page read [ 472.641225][ T24] Buffer I/O error on dev nbd2, logical block 3, async page read [ 472.650644][ T1096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 472.659959][ T1096] Buffer I/O error on dev nbd2, logical block 0, async page read [ 472.667886][ T1096] Buffer I/O error on dev nbd2, logical block 1, async page read [ 472.675987][ T1096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 472.685541][ T1096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 472.697102][ T1096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 472.706739][ T1096] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 472.717109][ T8067] ldm_validate_partition_table(): Disk read failed. [ 472.726395][ T8067] Dev nbd2: unable to read RDB block 0 [ 472.735137][ T8067] nbd2: unable to read partition table [ 472.754372][ T8067] ldm_validate_partition_table(): Disk read failed. [ 472.768320][ T8067] Dev nbd2: unable to read RDB block 0 [ 472.775687][ T8067] nbd2: unable to read partition table [ 473.776060][ T8985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.269167][ T9001] md: could not open device unknown-block(1,0). [ 477.178168][ T9014] 9pnet_virtio: no channels available for device syz [ 477.189814][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.932'. [ 477.758095][ T9013] binder: 9005:9013 ioctl 401c7012 0 returned -22 [ 478.094798][ T9016] binder_alloc: 9015: pid 9015 spamming oneway? 2 buffers allocated for a total size of 5120 [ 478.178121][ T9017] binder_alloc: 9015: pid 9015 spamming oneway? 3 buffers allocated for a total size of 5128 [ 479.535664][ T9026] program syz.1.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 479.545058][ T9026] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 479.555117][ T9026] (null): rxe_set_mtu: Set mtu to 1024 [ 479.560932][ T9026] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 484.266549][ T9081] overlayfs: missing 'workdir' [ 484.321527][ T9086] CacheFiles: Empty directory specified [ 484.341525][ T9086] CacheFiles: No cache directory specified [ 484.884490][ T9091] pim6reg: entered allmulticast mode [ 485.900735][ T9106] binder: 9100:9106 ioctl 401c7012 0 returned -22 [ 485.914311][ T9106] 9pnet_virtio: no channels available for device syz [ 485.926295][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.959'. [ 486.967354][ T9113] fuse: Bad value for 'fd' [ 491.636841][ T5761] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 491.878901][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.896663][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.907076][ T5761] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 491.920606][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.938879][ T5761] usb 2-1: config 0 descriptor?? [ 492.944340][ T10] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 30 seconds [ 492.957160][ T10] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 30 seconds [ 492.973134][ T10] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 30 seconds [ 492.989545][ T10] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 30 seconds [ 493.288513][ T9155] binder: 9147:9155 ioctl 401c7012 0 returned -22 [ 493.300786][ T9155] 9pnet_virtio: no channels available for device syz [ 493.312892][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'. [ 494.151713][ T10] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 30 seconds [ 494.162609][ T10] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 30 seconds [ 494.173949][ T10] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 30 seconds [ 494.925311][ T5761] usbhid 2-1:0.0: can't add hid device: -71 [ 494.927643][ T9165] netlink: 32 bytes leftover after parsing attributes in process `syz.3.977'. [ 495.402571][ T5761] usbhid: probe of 2-1:0.0 failed with error -71 [ 495.424909][ T5761] usb 2-1: USB disconnect, device number 12 [ 497.676434][ T9203] binder: 9202:9203 ioctl 401c7012 0 returned -22 [ 497.686190][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.985'. [ 497.867895][ T9206] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 501.821531][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.999798][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.225518][ T9232] binder: 9231:9232 ioctl 401c7012 0 returned -22 [ 502.236385][ T9232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.994'. [ 503.828508][ T9256] 9pnet_virtio: no channels available for device syz [ 503.840103][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.998'. [ 504.074955][ T9251] pim6reg: entered allmulticast mode [ 504.081137][ T9254] pim6reg: left allmulticast mode [ 508.146572][ T9284] binder: 9279:9284 ioctl 401c7012 0 returned -22 [ 509.034521][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 510.641248][ T9307] vivid-000: kernel_thread() failed [ 510.705795][ T9312] futex_wake_op: syz.0.1009 tries to shift op by 144; fix this program [ 514.405263][ T5437] veth1_vlan: left promiscuous mode [ 515.427398][ T9336] binder: 9335:9336 ioctl 401c7012 0 returned -22 [ 515.520509][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 517.335409][ T1128] rpcbind: server 127.0.0.1 not responding, timed out [ 519.801884][ T9391] dummy0: entered promiscuous mode [ 520.022032][ T9391] macvtap1: entered promiscuous mode [ 520.217235][ T9391] dummy0: left promiscuous mode [ 520.549491][ T9415] binder: 9408:9415 ioctl 401c7012 0 returned -22 [ 520.563421][ T9415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 522.151646][ T9430] binder: 9417:9430 ioctl 401c7012 0 returned -22 [ 522.191457][ T9430] 9pnet_virtio: no channels available for device syz [ 522.202185][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1034'. [ 524.878966][ T10] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 60 seconds [ 524.917066][ T10] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 60 seconds [ 524.930207][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 60 seconds [ 524.969223][ T10] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 60 seconds [ 524.985912][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 60 seconds [ 525.022239][ T10] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 60 seconds [ 525.037495][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 60 seconds [ 525.369466][ T9437] md: could not open device unknown-block(1,0). [ 525.740344][ T3488] rpcbind: server 127.0.0.1 not responding, timed out [ 528.317401][ T9472] binder: 9461:9472 ioctl 401c7012 0 returned -22 [ 528.698932][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 531.709456][ T9519] binder: 9513:9519 ioctl 401c7012 0 returned -22 [ 531.725525][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 534.119923][ T9510] md: could not open device unknown-block(1,0). [ 535.283151][ T9544] pim6reg: entered allmulticast mode [ 535.300183][ T9544] pim6reg: left allmulticast mode [ 538.411289][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 539.452495][ T28] audit: type=1800 audit(1786933432.381:3): pid=9580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1075" name="file0" dev="overlay" ino=1532 res=0 errno=0 [ 543.034126][ T5142] udevd[5142]: worker [8177] /devices/virtual/block/nbd0 is taking a long time [ 543.084337][ T9606] netlink: 'syz.3.1073': attribute type 4 has an invalid length. [ 543.119663][ T5142] udevd[5142]: worker [8131] /devices/virtual/block/nbd1 is taking a long time [ 545.084847][ T9616] comedi comedi3: comedi_test: 256 microvolt, 15 microsecond waveform attached [ 545.265384][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 545.575348][ T9626] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 545.707550][ T9626] bond6: entered promiscuous mode [ 545.732324][ T9626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.751722][ T9630] bond6: (slave bridge5): making interface the new active one [ 546.761996][ T9630] bridge5: entered promiscuous mode [ 547.655496][ T9630] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 547.786910][ T9656] pim6reg: entered allmulticast mode [ 547.801589][ T9656] pim6reg: left allmulticast mode [ 548.884727][ T9668] nbd: nbd1 already in use [ 548.998958][ T9668] nbd: must specify an index to disconnect [ 550.390063][ T9676] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 552.884059][ T9709] syzkaller1: entered promiscuous mode [ 552.912818][ T9709] syzkaller1: entered allmulticast mode [ 552.929748][ T9709] netlink: 'syz.3.1099': attribute type 4 has an invalid length. [ 553.076185][ T9717] netlink: 'syz.2.1097': attribute type 4 has an invalid length. [ 553.109684][ T9715] syzkaller1: entered promiscuous mode [ 553.155546][ T9715] syzkaller1: entered allmulticast mode [ 553.660911][ T9729] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 556.898692][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 90 seconds [ 556.909474][ T7819] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 90 seconds [ 556.920207][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 90 seconds [ 556.955863][ T7819] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 90 seconds [ 556.981254][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 90 seconds [ 557.010623][ T7819] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 90 seconds [ 557.057404][ T7819] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 90 seconds [ 558.618314][ T9792] CacheFiles: Empty directory specified [ 558.638518][ T9792] CacheFiles: No cache directory specified [ 561.556459][ T5087] Bluetooth: hci2: unexpected event for opcode 0x203d [ 561.613724][ T9834] CacheFiles: Empty directory specified [ 563.341743][ T9834] CacheFiles: No cache directory specified [ 563.370304][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.399003][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.588653][ T9851] futex_wake_op: syz.1.1130 tries to shift op by 144; fix this program [ 567.059149][ T9867] dummy0: entered promiscuous mode [ 567.073884][ T9867] macvtap1: entered promiscuous mode [ 567.091776][ T9867] dummy0: left promiscuous mode [ 567.402811][ T5087] Bluetooth: hci3: unexpected event for opcode 0x203d [ 567.452461][ T9880] CacheFiles: Empty directory specified [ 568.998628][ T9885] CacheFiles: No cache directory specified [ 570.093169][ T9898] futex_wake_op: syz.0.1144 tries to shift op by 144; fix this program [ 575.467933][ T9925] dummy0: entered promiscuous mode [ 575.473226][ T9925] macvtap1: entered promiscuous mode [ 575.551580][ T9925] dummy0: left promiscuous mode [ 575.648372][ T9930] binder: 9927:9930 ioctl 401c7012 0 returned -22 [ 575.662144][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 577.096851][ T9946] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 577.174800][ T28] audit: type=1800 audit(1786933469.861:4): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1151" name="bmControls" dev="configfs" ino=22037 res=0 errno=0 [ 581.530558][ T9976] fuse: Unknown parameter '0x0000000000000003' [ 582.027951][ T9990] binder: 9985:9990 ioctl 401c7012 0 returned -22 [ 582.041577][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1158'. [ 582.064859][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 584.360912][T10003] binder: 9993:10003 ioctl 401c7012 0 returned -22 [ 584.368415][T10003] 9pnet_virtio: no channels available for device syz [ 584.375834][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 584.957082][T10013] md: could not open device unknown-block(1,0). [ 586.995520][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 120 seconds [ 588.267952][ T9745] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 120 seconds [ 588.290083][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 120 seconds [ 588.315626][ T9745] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 120 seconds [ 588.355463][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 120 seconds [ 588.355552][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 588.378108][ T9745] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 120 seconds [ 588.420936][ T9745] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 120 seconds [ 588.959412][T10048] fuse: Unknown parameter '0x0000000000000003' [ 591.515030][T10070] binder: 10062:10070 ioctl 401c7012 0 returned -22 [ 591.526443][T10070] 9pnet_virtio: no channels available for device syz [ 591.536536][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1173'. [ 592.254295][T10071] netlink: 'syz.3.1170': attribute type 4 has an invalid length. [ 597.567565][T10102] fuse: Unknown parameter '0x0000000000000003' [ 600.643276][T10121] binder: 10118:10121 ioctl 401c7012 0 returned -22 [ 600.658786][T10121] 9pnet_virtio: no channels available for device syz [ 600.669566][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 605.471187][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 605.766021][T10155] fuse: Unknown parameter 'fd0x0000000000000003' [ 607.420397][T10178] 9pnet_virtio: no channels available for device syz [ 607.433043][T10178] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1197'. [ 608.533462][T10176] pim6reg: left allmulticast mode [ 613.225554][T10222] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 613.595254][T10222] bond2: entered promiscuous mode [ 613.600730][T10222] 8021q: adding VLAN 0 to HW filter on device bond2 [ 613.828985][T10228] bond2: (slave bridge2): making interface the new active one [ 613.897744][T10228] bridge2: entered promiscuous mode [ 613.904015][T10228] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 617.282010][T10259] 9pnet_virtio: no channels available for device syz [ 617.293656][T10259] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1210'. [ 618.112922][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 150 seconds [ 618.604515][T10256] binder: 10248:10256 ioctl 401c7012 0 returned -22 [ 618.679972][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1209'. [ 618.927875][T10258] pim6reg: entered allmulticast mode [ 618.933897][T10257] pim6reg: left allmulticast mode [ 619.156784][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 150 seconds [ 619.167851][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 150 seconds [ 619.179322][ T9745] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 150 seconds [ 619.190087][ T9745] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 150 seconds [ 619.201092][ T9745] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 150 seconds [ 619.212075][ T9745] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 150 seconds [ 624.711811][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.718473][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.989355][T10293] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 625.001490][T10293] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 625.262735][T10311] binder: 10304:10311 ioctl 401c7012 0 returned -22 [ 625.284573][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1221'. [ 627.136947][T10328] pim6reg: entered allmulticast mode [ 627.176186][T10328] pim6reg: left allmulticast mode [ 627.229355][T10336] 9pnet_virtio: no channels available for device syz [ 627.382227][T10336] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1223'. [ 628.467787][ T1128] rpcbind: server 127.0.0.1 not responding, timed out [ 630.814561][T10371] binder: 10364:10371 ioctl 401c7012 0 returned -22 [ 630.826867][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 638.379356][T10419] netlink: 'syz.3.1247': attribute type 1 has an invalid length. [ 638.547091][T10419] bond3: entered promiscuous mode [ 638.552305][T10419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 638.747456][T10421] netlink: 'syz.2.1243': attribute type 4 has an invalid length. [ 638.797296][T10423] bond3: (slave bridge3): making interface the new active one [ 638.825958][T10423] bridge3: entered promiscuous mode [ 639.015456][T10423] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 641.342973][T10437] binder: 10434:10437 ioctl 401c7012 0 returned -22 [ 641.356869][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 646.268892][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 648.382298][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 180 seconds [ 649.597411][ T9745] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 180 seconds [ 649.608583][ T9745] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 180 seconds [ 649.664418][ T9745] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 180 seconds [ 649.675795][ T9745] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 180 seconds [ 649.686820][ T9745] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 180 seconds [ 649.697817][ T9745] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 180 seconds [ 650.087422][T10526] pim6reg: entered allmulticast mode [ 650.099926][T10526] pim6reg: left allmulticast mode [ 650.157326][T10527] 9pnet_virtio: no channels available for device syz [ 650.168847][T10527] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1270'. [ 651.663146][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 653.687981][T10551] md: could not open device unknown-block(1,0). [ 653.700647][ T5142] udevd[5142]: worker [8177] /devices/virtual/block/nbd0 timeout; kill it [ 653.798586][ T5142] udevd[5142]: seq 12751 '/devices/virtual/block/nbd0' killed [ 654.542545][ T5142] udevd[5142]: worker [8131] /devices/virtual/block/nbd1 timeout; kill it [ 654.552679][ T5142] udevd[5142]: seq 12763 '/devices/virtual/block/nbd1' killed [ 655.612928][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 658.369297][T10593] binder: 10588:10593 ioctl 401c7012 0 returned -22 [ 658.382946][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 660.365164][T10615] pim6reg: entered allmulticast mode [ 660.383947][T10615] pim6reg: left allmulticast mode [ 662.036449][T10640] binder: 10633:10640 ioctl 401c7012 0 returned -22 [ 662.048721][T10640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 665.704354][ T5087] Bluetooth: hci2: unexpected event for opcode 0x203d [ 668.460328][T10685] binder: 10679:10685 ioctl 401c7012 0 returned -22 [ 668.522752][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 670.389171][ T5087] Bluetooth: hci2: unexpected event for opcode 0x203d [ 676.161752][T10739] binder: 10730:10739 ioctl 401c7012 0 returned -22 [ 676.266777][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 677.015062][ T5087] Bluetooth: hci3: unexpected event for opcode 0x203d [ 678.856872][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 210 seconds [ 679.666737][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 210 seconds [ 679.678157][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 210 seconds [ 679.760069][ T55] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 210 seconds [ 679.806544][ T55] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 210 seconds [ 679.854103][ T55] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 210 seconds [ 679.901012][ T55] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 210 seconds [ 680.307319][T10769] netlink: 'syz.3.1322': attribute type 4 has an invalid length. [ 686.115463][ T5087] Bluetooth: hci3: unexpected event for opcode 0x203d [ 686.141274][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.147745][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.321599][T10832] binder: 10828:10832 ioctl 401c7012 0 returned -22 [ 691.345688][T10831] 9pnet_virtio: no channels available for device syz [ 691.354511][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 691.779211][T10840] pim6reg: entered allmulticast mode [ 691.793255][T10840] pim6reg: left allmulticast mode [ 692.691878][ T5087] Bluetooth: hci2: unexpected event for opcode 0x203d [ 694.554871][T10860] netlink: 'syz.3.1343': attribute type 4 has an invalid length. [ 694.577152][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 694.798911][T10868] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 695.007707][T10868] bond7: entered promiscuous mode [ 695.013568][T10868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 695.052510][T10871] bond7: (slave bridge6): making interface the new active one [ 695.060191][T10871] bridge6: entered promiscuous mode [ 695.068603][T10871] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 698.713190][T10899] pim6reg: entered allmulticast mode [ 698.728327][T10899] pim6reg: left allmulticast mode [ 699.556679][ T5087] Bluetooth: hci3: unexpected event for opcode 0x203d [ 700.873369][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 701.835796][T10932] netlink: 'syz.2.1365': attribute type 1 has an invalid length. [ 702.849475][T10932] bond1: entered promiscuous mode [ 702.856862][T10932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.991850][T10934] bond1: (slave bridge1): making interface the new active one [ 703.029897][T10934] bridge1: entered promiscuous mode [ 703.083494][T10934] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 703.358582][T10956] netlink: 'syz.0.1366': attribute type 4 has an invalid length. [ 703.386604][ T5087] Bluetooth: hci0: unexpected event for opcode 0x203d [ 705.467363][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 707.858651][T11003] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 707.907634][T11003] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 708.855684][T11015] dummy0: entered promiscuous mode [ 708.913320][T11015] macvtap1: entered promiscuous mode [ 708.926151][T11015] dummy0: left promiscuous mode [ 709.177027][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 240 seconds [ 709.686735][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 240 seconds [ 709.919666][ T10] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 240 seconds [ 709.930482][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 240 seconds [ 709.946734][ T55] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 240 seconds [ 709.957937][ T55] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 240 seconds [ 709.969116][ T55] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 240 seconds [ 711.226347][T11050] netlink: 'syz.2.1390': attribute type 1 has an invalid length. [ 711.560119][T11050] bond2: entered promiscuous mode [ 711.580469][T11050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 711.667511][T11055] bond2: (slave bridge2): making interface the new active one [ 711.675098][T11055] bridge2: entered promiscuous mode [ 711.683722][T11055] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 712.075403][T11060] netlink: 'syz.3.1387': attribute type 4 has an invalid length. [ 713.675669][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 718.909472][ T3524] rpcbind: server 127.0.0.1 not responding, timed out [ 719.441046][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 721.298993][T11154] md: could not open device unknown-block(1,0). [ 723.905015][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 725.994354][T11209] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 726.118838][T11209] bond4: entered promiscuous mode [ 726.124164][T11209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 726.263732][T11216] bond4: (slave bridge4): making interface the new active one [ 726.286634][T11216] bridge4: entered promiscuous mode [ 726.306639][T11216] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 728.304690][T11247] md: could not open device unknown-block(1,0). [ 728.375433][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 729.680837][T11284] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 729.764400][T11284] bond8: entered promiscuous mode [ 729.930344][T11284] 8021q: adding VLAN 0 to HW filter on device bond8 [ 730.141508][T11289] bond8: (slave bridge7): making interface the new active one [ 730.152437][T11289] bridge7: entered promiscuous mode [ 730.160252][T11289] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 731.078250][T11306] pim6reg: entered allmulticast mode [ 731.116322][T11304] pim6reg: left allmulticast mode [ 731.168824][T11306] 9pnet_virtio: no channels available for device syz [ 731.180677][T11306] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1439'. [ 732.590758][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 733.066932][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 735.784509][ T5087] Bluetooth: hci0: unexpected event for opcode 0x203d [ 737.827690][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 737.856428][T11340] netlink: 'syz.0.1446': attribute type 4 has an invalid length. [ 737.977613][ T3503] rpcbind: server 127.0.0.1 not responding, timed out [ 738.527302][T11379] 9pnet_virtio: no channels available for device syz [ 738.539002][T11379] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1453'. [ 739.050785][T11378] pim6reg: entered allmulticast mode [ 739.057330][T11377] pim6reg: left allmulticast mode [ 739.305619][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 270 seconds [ 739.762580][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 270 seconds [ 740.248545][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 270 seconds [ 741.808211][ T55] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 270 seconds [ 741.853096][ T55] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 270 seconds [ 741.932213][ T55] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 270 seconds [ 742.024898][ T55] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 270 seconds [ 744.572724][ T5087] Bluetooth: hci0: unexpected event for opcode 0x203d [ 744.598895][T11402] pim6reg: entered allmulticast mode [ 744.613783][T11402] pim6reg: left allmulticast mode [ 747.256899][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 747.616195][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.622521][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.079506][T11433] pim6reg: entered allmulticast mode [ 748.092359][T11433] pim6reg: left allmulticast mode [ 748.164603][T11431] 9pnet_virtio: no channels available for device syz [ 748.175622][T11431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1465'. [ 754.124251][T11466] pim6reg: entered allmulticast mode [ 754.139311][T11466] pim6reg: left allmulticast mode [ 754.583095][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 755.612414][T11485] pim6reg: entered allmulticast mode [ 755.647128][T11481] pim6reg: left allmulticast mode [ 755.699534][T11485] 9pnet_virtio: no channels available for device syz [ 755.710432][T11485] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1479'. [ 757.485738][T11487] binder: 11482:11487 ioctl 401c7012 0 returned -22 [ 757.507830][ T5087] Bluetooth: hci0: unexpected event for opcode 0x203d [ 757.543631][T11487] 9pnet_virtio: no channels available for device syz [ 757.551097][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1478'. [ 761.238763][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 763.326173][T11527] netlink: 'syz.3.1483': attribute type 4 has an invalid length. [ 764.494403][T11535] pim6reg: entered allmulticast mode [ 764.522393][T11536] pim6reg: left allmulticast mode [ 764.682500][T11543] binder: 11540:11543 ioctl 401c7012 0 returned -22 [ 764.692849][T11543] 9pnet_virtio: no channels available for device syz [ 764.707516][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 767.742910][T11555] pim6reg: entered allmulticast mode [ 767.755313][T11555] pim6reg: left allmulticast mode [ 767.828444][T11554] 9pnet_virtio: no channels available for device syz [ 767.839623][T11554] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1492'. [ 768.950589][ T61] rpcbind: server 127.0.0.1 not responding, timed out [ 768.958438][ T12] rpcbind: server 127.0.0.1 not responding, timed out [ 769.474346][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 300 seconds [ 769.816731][ T10] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 300 seconds [ 770.296682][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 300 seconds [ 771.912161][T11582] pim6reg: entered allmulticast mode [ 771.923183][T11584] pim6reg: left allmulticast mode [ 771.947944][T11583] binder: 11572:11583 ioctl 401c7012 0 returned -22 [ 771.958956][T11583] 9pnet_virtio: no channels available for device syz [ 771.969676][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 772.298688][ T55] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 300 seconds [ 772.337923][ T55] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 300 seconds [ 772.417390][ T55] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 300 seconds [ 772.428826][ T55] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 300 seconds [ 775.113092][ T5087] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 776.527990][T11616] futex_wake_op: syz.2.1509 tries to shift op by 144; fix this program [ 777.431279][T11625] binder: 11617:11625 ioctl 401c7012 0 returned -22 [ 777.443087][T11625] 9pnet_virtio: no channels available for device syz [ 777.453006][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 777.707504][T11631] md: could not open device unknown-block(1,0). [ 782.885039][T11674] md: could not open device unknown-block(1,0). [ 783.031009][T11676] binder: 11670:11676 ioctl 401c7012 0 returned -22 [ 783.052149][T11676] 9pnet_virtio: no channels available for device syz [ 783.062090][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1521'. [ 783.507193][ T3503] rpcbind: server 127.0.0.1 not responding, timed out [ 784.645890][ T3488] rpcbind: server 127.0.0.1 not responding, timed out [ 784.657170][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 787.388142][T11715] binder: 11710:11715 ioctl 401c7012 0 returned -22 [ 787.399295][T11715] 9pnet_virtio: no channels available for device syz [ 787.409534][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 789.857626][ T3524] rpcbind: server 127.0.0.1 not responding, timed out [ 789.963840][ T5087] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 790.053931][T11727] md: could not open device unknown-block(1,0). [ 793.050481][T11751] binder: 11746:11751 ioctl 401c7012 0 returned -22 [ 793.061544][T11751] 9pnet_virtio: no channels available for device syz [ 793.072280][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 794.007926][ T5087] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 794.080705][T11760] binder: 11754:11760 ioctl 401c7012 0 returned -22 [ 794.096906][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1545'. [ 794.108475][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 798.865338][T11791] binder: 11786:11791 ioctl 401c7012 0 returned -22 [ 798.875840][T11791] 9pnet_virtio: no channels available for device syz [ 798.886103][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1554'. [ 800.056713][ T55] block nbd1: Possible stuck request ffff888021ed0000: control (read@0,1024B). Runtime 330 seconds [ 800.092082][ T55] block nbd1: Possible stuck request ffff888021ed0200: control (read@1024,1024B). Runtime 330 seconds [ 800.442725][ T55] block nbd1: Possible stuck request ffff888021ed0400: control (read@2048,1024B). Runtime 330 seconds [ 800.678316][T11803] binder: 11795:11803 ioctl 401c7012 0 returned -22 [ 800.691815][T11803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1557'. [ 800.714571][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 801.074584][T11806] netlink: 'syz.2.1553': attribute type 4 has an invalid length. [ 802.293907][T11823] md: could not open device unknown-block(1,0). [ 802.397910][T11829] binder: 11824:11829 ioctl 401c7012 0 returned -22 [ 802.408327][T11829] 9pnet_virtio: no channels available for device syz [ 802.419134][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 802.618307][ T10] block nbd0: Possible stuck request ffff888021e70400: control (read@0,1024B). Runtime 330 seconds [ 802.629384][ T10] block nbd0: Possible stuck request ffff888021e70600: control (read@1024,1024B). Runtime 330 seconds [ 802.640718][ T10] block nbd0: Possible stuck request ffff888021e70800: control (read@2048,1024B). Runtime 330 seconds [ 802.652116][ T10] block nbd0: Possible stuck request ffff888021e70a00: control (read@3072,1024B). Runtime 330 seconds [ 805.566692][T11845] binder: 11839:11845 ioctl 401c7012 0 returned -22 [ 805.580864][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 805.592775][T11845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1567'. [ 807.737270][ T29] INFO: task udevd:8131 blocked for more than 144 seconds. [ 807.978168][ T29] Not tainted syzkaller #0 [ 808.016544][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.043174][ T29] task:udevd state:D stack:23176 pid:8131 ppid:5142 flags:0x00004006 [ 808.056616][ T29] Call Trace: [ 808.060146][ T29] [ 808.063352][ T29] __schedule+0x15ae/0x4660 [ 808.068270][ T29] ? asan.module_dtor+0x20/0x20 [ 808.073365][ T29] ? mark_lock+0x94/0x320 [ 808.078064][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 808.083421][ T29] ? lock_chain_count+0x20/0x20 [ 808.091238][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 808.096419][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 808.102148][ T29] schedule+0xbd/0x170 [ 808.106249][ T29] io_schedule+0x80/0xd0 [ 808.112697][ T29] folio_wait_bit_common+0x881/0xfa0 [ 808.118079][ T29] ? folio_wait_bit+0x30/0x30 [ 808.122851][ T29] ? _compound_head+0x120/0x120 [ 808.127885][ T29] ? filemap_add_folio+0x190/0x3d0 [ 808.133042][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 808.138398][ T29] ? blkdev_writepage+0x30/0x30 [ 808.143299][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 808.148519][ T29] ? blkdev_writepage+0x30/0x30 [ 808.153382][ T29] read_part_sector+0xd2/0x350 [ 808.158200][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 808.163594][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 808.168994][ T29] ? put_partition+0x360/0x360 [ 808.173776][ T29] ? alloc_pages+0x4e1/0x740 [ 808.178445][ T29] bdev_disk_changed+0x755/0x1450 [ 808.183868][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 808.189294][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 808.194639][ T29] ? iput+0x33f/0x900 [ 808.198782][ T29] blkdev_get_whole+0x30d/0x390 [ 808.203648][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 808.208693][ T29] blkdev_open+0x14e/0x360 [ 808.213129][ T29] do_dentry_open+0x880/0x14b0 [ 808.218371][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 808.223000][ T29] path_openat+0x284f/0x3270 [ 808.227715][ T29] ? do_sys_openat2+0xda/0x1d0 [ 808.232505][ T29] ? __x64_sys_openat+0x139/0x160 [ 808.237742][ T29] ? verify_lock_unused+0x140/0x140 [ 808.243010][ T29] ? do_filp_open+0x430/0x430 [ 808.247878][ T29] do_filp_open+0x1f2/0x430 [ 808.252412][ T29] ? vfs_tmpfile+0x620/0x620 [ 808.257083][ T29] ? _raw_spin_unlock+0x28/0x40 [ 808.261982][ T29] ? alloc_fd+0x590/0x640 [ 808.266328][ T29] do_sys_openat2+0x134/0x1d0 [ 808.271114][ T29] ? do_sys_open+0xe0/0xe0 [ 808.275547][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 808.281563][ T29] ? lock_chain_count+0x20/0x20 [ 808.286983][ T29] __x64_sys_openat+0x139/0x160 [ 808.291864][ T29] do_syscall_64+0x55/0xb0 [ 808.296585][ T29] ? clear_bhb_loop+0x40/0x90 [ 808.301348][ T29] ? clear_bhb_loop+0x40/0x90 [ 808.306022][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.312013][ T29] RIP: 0033:0x7faad8ca7407 [ 808.316558][ T29] RSP: 002b:00007fff17ea7b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 808.325048][ T29] RAX: ffffffffffffffda RBX: 00007faad9474880 RCX: 00007faad8ca7407 [ 808.333166][ T29] RDX: 00000000000a0800 RSI: 00005602d86ca9f0 RDI: ffffffffffffff9c [ 808.341175][ T29] RBP: 00005602d86a7910 R08: 0000000000000000 R09: 0000000000000000 [ 808.349630][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005602d86c7f60 [ 808.357841][ T29] R13: 00005602d86bf410 R14: 0000000000000000 R15: 00005602d86c7f60 [ 808.365903][ T29] [ 808.369835][ T29] INFO: task udevd:8177 blocked for more than 145 seconds. [ 808.391465][ T29] Not tainted syzkaller #0 [ 808.396524][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 808.405195][ T29] task:udevd state:D stack:25592 pid:8177 ppid:5142 flags:0x00004006 [ 808.414474][ T29] Call Trace: [ 808.418015][ T29] [ 808.420969][ T29] __schedule+0x15ae/0x4660 [ 808.425522][ T29] ? asan.module_dtor+0x20/0x20 [ 808.430445][ T29] ? mark_lock+0x94/0x320 [ 808.434790][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 808.439889][ T29] ? lock_chain_count+0x20/0x20 [ 808.444749][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 808.449811][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 808.455392][ T29] schedule+0xbd/0x170 [ 808.459573][ T29] io_schedule+0x80/0xd0 [ 808.463839][ T29] folio_wait_bit_common+0x881/0xfa0 [ 808.469222][ T29] ? folio_wait_bit+0x30/0x30 [ 808.473921][ T29] ? _compound_head+0x120/0x120 [ 808.478876][ T29] ? filemap_add_folio+0x190/0x3d0 [ 808.484030][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 808.489439][ T29] ? blkdev_writepage+0x30/0x30 [ 808.494601][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 808.499817][ T29] ? blkdev_writepage+0x30/0x30 [ 808.504678][ T29] read_part_sector+0xd2/0x350 [ 808.509486][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 808.514871][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 808.520227][ T29] ? put_partition+0x360/0x360 [ 808.525006][ T29] ? alloc_pages+0x4e1/0x740 [ 808.529753][ T29] bdev_disk_changed+0x755/0x1450 [ 808.534805][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 808.540167][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 808.545465][ T29] ? iput+0x33f/0x900 [ 808.549511][ T29] blkdev_get_whole+0x30d/0x390 [ 808.554372][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 808.559392][ T29] blkdev_open+0x14e/0x360 [ 808.563821][ T29] do_dentry_open+0x880/0x14b0 [ 808.568679][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 808.573290][ T29] path_openat+0x284f/0x3270 [ 808.577981][ T29] ? do_sys_openat2+0xda/0x1d0 [ 808.582758][ T29] ? __x64_sys_openat+0x139/0x160 [ 808.587853][ T29] ? verify_lock_unused+0x140/0x140 [ 808.593342][ T29] ? do_filp_open+0x430/0x430 [ 808.598144][ T29] do_filp_open+0x1f2/0x430 [ 808.602676][ T29] ? vfs_tmpfile+0x620/0x620 [ 808.607395][ T29] ? _raw_spin_unlock+0x28/0x40 [ 808.612266][ T29] ? alloc_fd+0x590/0x640 [ 808.617160][ T29] do_sys_openat2+0x134/0x1d0 [ 808.621866][ T29] ? do_sys_open+0xe0/0xe0 [ 808.626272][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 808.632319][ T29] ? lock_chain_count+0x20/0x20 [ 808.637349][ T29] __x64_sys_openat+0x139/0x160 [ 808.642220][ T29] do_syscall_64+0x55/0xb0 [ 808.646679][ T29] ? clear_bhb_loop+0x40/0x90 [ 808.651379][ T29] ? clear_bhb_loop+0x40/0x90 [ 808.656066][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.662012][ T29] RIP: 0033:0x7faad8ca7407 [ 808.666475][ T29] RSP: 002b:00007fff17ea7b50 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 808.674898][ T29] RAX: ffffffffffffffda RBX: 00007faad9474880 RCX: 00007faad8ca7407 [ 808.682931][ T29] RDX: 00000000000a0800 RSI: 00005602d86b9150 RDI: ffffffffffffff9c [ 808.690932][ T29] RBP: 00005602d86a7910 R08: 0000000000000000 R09: 0000000000000000 [ 808.699580][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005602d86bae20 [ 808.707615][ T29] R13: 00005602d86bf410 R14: 0000000000000000 R15: 00005602d86bae20 [ 808.715603][ T29] [ 808.718745][ T29] [ 808.718745][ T29] Showing all locks held in the system: [ 808.727175][ T29] 1 lock held by ksoftirqd/0/16: [ 808.732132][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 808.745676][ T29] 1 lock held by khungtaskd/29: [ 808.751069][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 808.761037][ T29] 5 locks held by kworker/u4:4/61: [ 808.766145][ T29] #0: ffff88801a259138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 808.777157][ T29] #1: ffffc900015c7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 808.788777][ T29] #2: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 808.798837][ T29] #3: ffffffff8e3d6ac8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd6/0x380 [ 808.808706][ T29] #4: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 808.819713][ T29] 2 locks held by kworker/u4:10/3503: [ 808.825086][ T29] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 808.835040][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 808.843814][ T29] 2 locks held by getty/5533: [ 808.848547][ T29] #0: ffff888030cd20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 808.858882][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 808.869095][ T29] 1 lock held by udevd/8131: [ 808.873693][ T29] #0: ffff888021d914c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 808.883792][ T29] 1 lock held by udevd/8177: [ 808.888475][ T29] #0: ffff888141f1b4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 808.898590][ T29] [ 808.901315][ T29] ============================================= [ 808.901315][ T29] [ 808.910190][ T29] NMI backtrace for cpu 1 [ 808.914546][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 808.921728][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.931786][ T29] Call Trace: [ 808.935054][ T29] [ 808.937971][ T29] dump_stack_lvl+0x18c/0x250 [ 808.942639][ T29] ? __wake_up_klogd+0xd9/0x100 [ 808.947485][ T29] ? show_regs_print_info+0x20/0x20 [ 808.952682][ T29] ? load_image+0x420/0x420 [ 808.957198][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 808.962123][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 808.968281][ T29] ? load_image+0x420/0x420 [ 808.972793][ T29] ? wq_watchdog_touch+0xef/0x170 [ 808.977810][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 808.983885][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 808.989853][ T29] watchdog+0xf59/0xfa0 [ 808.994016][ T29] ? watchdog+0x1e1/0xfa0 [ 808.998353][ T29] kthread+0x2fa/0x390 [ 809.002422][ T29] ? hungtask_pm_notify+0x50/0x50 [ 809.007457][ T29] ? kthread_blkcg+0xd0/0xd0 [ 809.012034][ T29] ret_from_fork+0x48/0x80 [ 809.016438][ T29] ? kthread_blkcg+0xd0/0xd0 [ 809.021035][ T29] ret_from_fork_asm+0x11/0x20 [ 809.022644][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.025834][ T29] [ 809.032120][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.035955][ T29] Sending NMI from CPU 1 to CPUs 0: [ 809.046704][ C0] NMI backtrace for cpu 0 [ 809.046714][ C0] CPU: 0 PID: 10439 Comm: kworker/0:2 Not tainted syzkaller #0 [ 809.046729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.046738][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 809.046799][ C0] RIP: 0010:mark_lock+0x9/0x320 [ 809.046819][ C0] Code: 8c 8e e8 ca b1 76 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 <53> 50 89 d5 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df 83 fa [ 809.046885][ C0] RSP: 0018:ffffc900032b7770 EFLAGS: 00000002 [ 809.046897][ C0] RAX: 0000000000000000 RBX: ffff888078400b38 RCX: dffffc0000000000 [ 809.046908][ C0] RDX: 0000000000000006 RSI: ffff888078400b38 RDI: ffff888078400000 [ 809.046918][ C0] RBP: ffffc900032b79e8 R08: ffffffff911ed5e7 R09: 1ffffffff223dabc [ 809.046929][ C0] R10: dffffc0000000000 R11: fffffbfff223dabd R12: 0000000000000000 [ 809.046939][ C0] R13: ffff888078400000 R14: ffffffff90bb08a0 R15: ffff888078400b58 [ 809.046950][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 809.046963][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 809.046973][ C0] CR2: 00007f7854def2f8 CR3: 0000000074bdc000 CR4: 00000000003506f0 [ 809.046986][ C0] Call Trace: [ 809.046992][ C0] [ 809.046998][ C0] __lock_acquire+0x11b6/0x7d80 [ 809.047027][ C0] ? verify_lock_unused+0x140/0x140 [ 809.047049][ C0] ? mark_lock+0x94/0x320 [ 809.047069][ C0] lock_acquire+0x19e/0x420 [ 809.047084][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 809.047104][ C0] ? read_lock_is_recursive+0x20/0x20 [ 809.047121][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 809.047138][ C0] ? __rwlock_init+0x150/0x150 [ 809.047166][ C0] _raw_spin_lock+0x2e/0x40 [ 809.047188][ C0] ? wg_ratelimiter_gc_entries+0x5d/0x450 [ 809.047204][ C0] wg_ratelimiter_gc_entries+0x5d/0x450 [ 809.047222][ C0] ? process_scheduled_works+0x975/0x1600 [ 809.047242][ C0] process_scheduled_works+0xa60/0x1600 [ 809.047271][ C0] ? worker_attach_to_pool+0x370/0x370 [ 809.047292][ C0] ? assign_work+0x3cc/0x5d0 [ 809.047312][ C0] worker_thread+0xa5e/0xfe0 [ 809.047335][ C0] ? _raw_spin_unlock+0x40/0x40 [ 809.047355][ C0] ? __kthread_parkme+0x71/0x1c0 [ 809.047373][ C0] kthread+0x2fa/0x390 [ 809.047387][ C0] ? pr_cont_work+0x550/0x550 [ 809.047405][ C0] ? kthread_blkcg+0xd0/0xd0 [ 809.047419][ C0] ret_from_fork+0x48/0x80 [ 809.047437][ C0] ? kthread_blkcg+0xd0/0xd0 [ 809.047451][ C0] ret_from_fork_asm+0x11/0x20 [ 809.047476][ C0] [ 809.062832][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 809.062844][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 809.062862][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 809.062871][ T29] Call Trace: [ 809.062878][ T29] [ 809.062885][ T29] dump_stack_lvl+0x18c/0x250 [ 809.062912][ T29] ? show_regs_print_info+0x20/0x20 [ 809.062931][ T29] ? load_image+0x420/0x420 [ 809.062964][ T29] panic+0x2ca/0x720 [ 809.062990][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 809.063012][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 809.063052][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 809.063075][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 809.063101][ T29] watchdog+0xf98/0xfa0 [ 809.063124][ T29] ? watchdog+0x1e1/0xfa0 [ 809.063150][ T29] kthread+0x2fa/0x390 [ 809.063166][ T29] ? hungtask_pm_notify+0x50/0x50 [ 809.063187][ T29] ? kthread_blkcg+0xd0/0xd0 [ 809.063203][ T29] ret_from_fork+0x48/0x80 [ 809.063223][ T29] ? kthread_blkcg+0xd0/0xd0 [ 809.063238][ T29] ret_from_fork_asm+0x11/0x20 [ 809.063267][ T29] [ 809.073018][ T29] Kernel Offset: disabled [ 809.413385][ T29] Rebooting in 86400 seconds..