last executing test programs: 16m24.441925533s ago: executing program 1 (id=187): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 16m21.893864306s ago: executing program 1 (id=194): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 16m15.858395507s ago: executing program 1 (id=203): syz_emit_ethernet(0x4e, &(0x7f0000000300)={@broadcast, @remote, @val={@val={0x88a8, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x6, 0x38, 0x64, 0x0, 0x4, 0x6, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0xc, 0x2, [{0x0, 0x6, "00479c0f"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x80, 0x95e, 0x0, 0x2, {[@window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 16m13.125629942s ago: executing program 1 (id=211): syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x1) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x2}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r7, &(0x7f0000000c80)=[{&(0x7f0000000080)=""/187, 0x23}], 0x1, 0x1, 0x200) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYBLOB="01000000000000000000070000002000018014000400fc0100"/37, @ANYRES32=0x0, @ANYBLOB="65c600000080000000008a6b7ffd6d0345fadb3b1c4044e6bfc98eedeb280ea80655465fbf0e96ae129e6982f10200000000000000d5ebc68e686332a702affa79dc21667b29ccd5a7885626c20b75f35dbbd2110974f727bd0eb6a3907c786983ce1c2bea521c7852b0e270fe8ea721055a906d32bd6ddf95"], 0x34}}, 0x80) 16m4.477399238s ago: executing program 1 (id=246): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 15m58.189852008s ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b"], 0x48) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15m41.250990498s ago: executing program 32 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b"], 0x48) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m53.149498462s ago: executing program 6 (id=1573): r0 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x28102) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$snddsp(r1, &(0x7f0000000340)="87ecc00c05dbb58b776f34f9b779d998d21e0e", 0x13) 9m50.553494808s ago: executing program 6 (id=1577): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) write$snddsp(r0, &(0x7f0000000e00)='\x00'/384, 0x180) 9m50.251312446s ago: executing program 4 (id=1579): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8, 0xe3, 0x8000}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x6, 0x1000, 0x800}) close_range(r0, 0xffffffffffffffff, 0x0) 9m50.159985766s ago: executing program 6 (id=1580): mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 9m47.328032112s ago: executing program 6 (id=1582): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 9m47.32466817s ago: executing program 4 (id=1583): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 9m46.669446348s ago: executing program 6 (id=1586): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/135, 0xffffff0a}], 0x1, 0x5, 0x845) 9m46.539476484s ago: executing program 4 (id=1587): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000000600)="dd627047239effff84ae1bb11a0a70f6a172b032da0e9e3b2d5a4addfc1ad63ccbed607f2a90d1310536edc73e44003d40d7660bd84b7543ee53e8d4d456efae21e58591a612b8547183506c7a69a73d8e82386527b6c42cad4d1d99e27c141c725d6115e19737687eab05f60fa8c51b1b7c96800473a203602da33b97b536680d7526453827ee2150cd7871d61c8b485d2e3dde3a32d9b0d564ebd0f0829990238a111436d25078e98ef3411b5e9bb35d40ae1ec8cb06cba6ec9503c17f2c0a674b68dbe0bc116260450b6b15e86e6a93f64ecb0a711b8109c2", &(0x7f0000000700)="2098e107bd38803b091a41ade57c2a4cbf72611241ea16db481ef2ae10a31162e2be16c0868a4d3e4d71eff5d3068e97c3156774832fd3cf8435fa2aabbd43d059b2a06f2cac58851819cc44cd81118456c4d946b85b99d651501bafdb9e269fda2cfbd1a760fe9511c3820a58d24966a6c8fd6991e9973b84d4c16fdf4284fa8e736f3ad8005bfaef667bf86692963176b4d8185f834e60cd2520ea96cfbbbb8bcb40064a2a83f1a14c2d7fc1a2c3e16c9f93fa61d099e30496b4dbd0f0a6cd33dbb5561db72f4e5f5194883009ace2f0d7cd840cf5f2fd67cecf90e5d19b"}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r3, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 9m44.963964173s ago: executing program 6 (id=1588): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c000780"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 9m43.594601693s ago: executing program 4 (id=1593): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) socket$inet(0x2, 0x1, 0x3) fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x10) 9m40.203908341s ago: executing program 4 (id=1600): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/135, 0xffffff0a}], 0x1, 0x5, 0x845) 9m38.352546446s ago: executing program 4 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)='_', 0x1) 9m29.569362815s ago: executing program 33 (id=1588): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c000780"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007008c7948"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 9m20.476031813s ago: executing program 34 (id=1602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)='_', 0x1) 7m8.988072103s ago: executing program 0 (id=1862): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 7m3.988001099s ago: executing program 0 (id=1869): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r0, &(0x7f00000003c0)='5', 0x1) 7m3.105721153s ago: executing program 0 (id=1872): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x100000009, 0x2, 0xff7fb5b2, 0x3a8e5b6c, 0x40000, 0x208]}, &(0x7f0000000000)=0x78) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init() r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) 7m0.20811378s ago: executing program 0 (id=1877): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6m54.666903901s ago: executing program 0 (id=1884): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x100, 0x0) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) 6m52.781917302s ago: executing program 0 (id=1886): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fedbdf2500000000087fa4d2a0000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000240012800b0001006970766c616e00001400028006000200010000000600010000000000"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 6m37.049897275s ago: executing program 35 (id=1886): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="02002cbd7000fedbdf2500000000087fa4d2a0000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010000104000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc020000000000000000000000000000140003006970766c616e30000000000000000000240012800b0001006970766c616e00001400028006000200010000000600010000000000"], 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 6m19.404891683s ago: executing program 2 (id=1926): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) 6m16.017238992s ago: executing program 2 (id=1938): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r7, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/85, 0x55}, 0x2}], 0x1, 0x2122, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={0x0, 0x0, 0x0}) unshare(0x2c020400) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1000000, 0x2000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0xc0405627, &(0x7f0000000180)={0x3, 0x980900, 0x1}) setsockopt$inet6_udp_int(r8, 0x11, 0x66, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa000000c}) 6m7.070711582s ago: executing program 2 (id=1951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m6.449364715s ago: executing program 2 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = dup(0xffffffffffffffff) listen(0xffffffffffffffff, 0x5) eventfd2(0x0, 0x0) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 6m1.951368221s ago: executing program 2 (id=1955): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)='dax0.0', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/dax/drivers/device_dax/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dax0.0', 0x6) 6m1.755616913s ago: executing program 2 (id=1957): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0, &(0x7f0000001280)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x1, 0x0, 0x0) write(r1, &(0x7f0000002340)='hello', 0x5) 5m45.717792513s ago: executing program 36 (id=1957): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0, &(0x7f0000001280)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x0, 0x1, 0x0, 0x0) write(r1, &(0x7f0000002340)='hello', 0x5) 9.020631766s ago: executing program 3 (id=2453): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) close(r3) close(0xffffffffffffffff) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) 6.930668255s ago: executing program 3 (id=2455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a08000101000000000109021200010100803209040000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='\x00\x00\x00\x00\x00', 0x5) write(0xffffffffffffffff, &(0x7f0000000a00)='0\x00', 0x2) 6.714211291s ago: executing program 5 (id=2456): mkdir(0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) utime(&(0x7f00000000c0)='./my_tracefs/events/sched/sched_switch/enable\x00', 0x0) 6.2872608s ago: executing program 5 (id=2457): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0xfbb, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000000c0)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) listen(0xffffffffffffffff, 0x5) eventfd2(0x0, 0x0) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xffbffffe, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x4, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0x2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x3, 0x5, 0x0, 0x0}}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r8, 0x0, 0x0) 5.305471389s ago: executing program 3 (id=2458): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x17) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8881}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}}, 0x90) 4.911009003s ago: executing program 5 (id=2459): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000003c0)='5', 0x1) 4.451436015s ago: executing program 5 (id=2460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='retu 0x01\n\x00', 0xa) write(r0, &(0x7f0000000300)='tahvo 0x02\n', 0xb) 4.389233845s ago: executing program 3 (id=2461): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 689.336954ms ago: executing program 3 (id=2462): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14}}, 0xf8}}, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 332.676232ms ago: executing program 5 (id=2463): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000280), 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) close(r3) close(0xffffffffffffffff) mkdir(0x0, 0x1ff) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) 18.628225ms ago: executing program 3 (id=2464): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='msdos\x00', 0x0, 0x0) lseek(r3, 0x289e0cb5, 0x0) 0s ago: executing program 5 (id=2465): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys_mnt/block/zram0/reset\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) kernel console output (not intermixed with test programs): 12350] team0: Port device team_slave_0 added [ 848.867352][T12350] team0: Port device team_slave_1 added [ 849.183044][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.222490][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.393550][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.688602][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.740167][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.910776][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.025892][T12106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.070952][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 850.271403][ T5790] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 850.297141][T12106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.336697][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 850.425150][T12106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.444177][ T5790] usb 6-1: unable to get BOS descriptor or descriptor too short [ 850.472642][ T5790] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.489030][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 850.521458][ T5790] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 850.535091][T12106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.573362][ T5790] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 850.601250][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.631037][ T5790] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 850.691548][ T5790] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 850.755019][ T5790] usb 6-1: config 1 interface 1 has no altsetting 0 [ 850.787134][ T5790] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 850.833256][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.879057][ T5790] usb 6-1: Product: syz [ 850.905962][ T5790] usb 6-1: Manufacturer: syz [ 851.048252][ T5790] usb 6-1: SerialNumber: syz [ 851.112321][T12350] hsr_slave_0: entered promiscuous mode [ 851.159581][T12350] hsr_slave_1: entered promiscuous mode [ 851.191942][T12350] debugfs: 'hsr0' already exists in 'hsr' [ 851.221945][T12350] Cannot create hsr debugfs directory [ 851.341452][ T5790] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 851.391746][ T5790] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 851.422168][ T5790] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 851.449388][ T5883] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 851.488801][ T5790] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 851.603496][ T5790] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 851.657500][ T5883] usb 4-1: Using ep0 maxpacket: 32 [ 851.705902][ T5883] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 851.723841][T12179] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 851.746927][ T5790] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 851.775410][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.786274][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.820068][ T5883] usb 4-1: config 0 descriptor?? [ 851.856654][ T5790] usb 6-1: USB disconnect, device number 17 [ 851.918948][ T5883] as10x_usb: device has been detected [ 851.945630][T12179] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 851.978989][ T5883] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 852.030753][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.123330][ T5883] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 852.229625][T12179] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 852.242472][ T5883] as10x_usb: error during firmware upload part1 [ 853.071977][ T5883] Registered device nBox DVB-T Dongle [ 853.444103][ T5883] usb 4-1: USB disconnect, device number 15 [ 853.475182][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.651771][ T5883] Unregistered device nBox DVB-T Dongle [ 853.665138][ T5883] as10x_usb: device has been disconnected [ 853.899087][T12179] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 853.950502][T12179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 854.670543][T12248] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 854.730730][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 854.786003][T12248] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 854.844185][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 854.884749][T12248] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 854.922465][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 854.972251][T12248] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 855.026337][T12248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 855.648525][ T5790] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 855.711729][T12350] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 855.756207][T12350] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 855.793179][T12106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.833496][T12350] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 855.859961][ T5790] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 855.884362][T12350] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 855.904382][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.920526][T12350] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 855.958988][T11435] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 855.972692][ T5790] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 855.996389][T12350] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.025854][ T5790] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 856.064123][T12350] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 856.077105][ T5790] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 856.112245][T12350] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.161361][T11435] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 856.224116][T11435] usb 4-1: config 0 has no interface number 0 [ 856.271700][T11435] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 856.289113][ T5790] usb 6-1: Firmware "emi26/loader.fw" not valid IHEX records [ 856.332280][ T5790] usb 6-1: emi26_load_firmware - request_firmware() failed [ 856.354870][T11435] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 856.379242][ T5790] usb 6-1: emi26_load_firmware - error loading firmware: error = -22 [ 856.402139][T12106] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.411332][T11435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.434343][ T5790] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 856.463513][T11435] usb 4-1: Product: syz [ 856.485233][T11435] usb 4-1: Manufacturer: syz [ 856.523262][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.530410][ T6951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.554969][T11435] usb 4-1: SerialNumber: syz [ 856.602477][T11435] usb 4-1: config 0 descriptor?? [ 856.656553][ T9] usb 6-1: USB disconnect, device number 18 [ 856.675595][T11435] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 856.750636][T12179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.835663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.842810][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.915018][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 856.949090][ T9] usb 4-1: USB disconnect, device number 16 [ 857.035889][ T9] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 857.106584][T12179] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.181137][T12248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.256898][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.264060][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.463775][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.470926][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.640072][T12248] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.774700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.781896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.905185][T12604] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 857.944233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.951358][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.357062][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.619665][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.814784][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.821978][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.036984][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.045019][ T5908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.449032][ T5790] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 861.687632][ T5790] usb 4-1: Using ep0 maxpacket: 32 [ 861.747377][ T5790] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 861.866444][ T5790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.999209][ T5790] usb 4-1: config 0 descriptor?? [ 862.092416][T10640] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 862.110563][T10640] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 862.121801][T10640] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 862.149959][T10640] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 862.159605][T10640] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 862.210668][ T5790] as10x_usb: device has been detected [ 862.288255][ T5790] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 862.490104][ T5790] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 864.097821][ T5790] as10x_usb: error during firmware upload part1 [ 864.227663][T10640] Bluetooth: hci6: command tx timeout [ 864.784362][ T5790] Registered device nBox DVB-T Dongle [ 864.822293][ T5790] usb 4-1: USB disconnect, device number 17 [ 865.159686][ T5790] Unregistered device nBox DVB-T Dongle [ 865.164740][ T5790] as10x_usb: device has been disconnected [ 866.317581][T10640] Bluetooth: hci6: command tx timeout [ 867.297050][T12679] bridge0: port 3(syz_tun) entered blocking state [ 867.370645][T12679] bridge0: port 3(syz_tun) entered disabled state [ 867.425726][T12679] syz_tun: entered allmulticast mode [ 867.561761][T12679] syz_tun: entered promiscuous mode [ 867.671682][T12679] bridge0: port 3(syz_tun) entered blocking state [ 867.680993][T12679] bridge0: port 3(syz_tun) entered forwarding state [ 868.226132][T12179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.387714][T10640] Bluetooth: hci6: command tx timeout [ 868.748470][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.922179][ T5790] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 869.127617][ T5790] usb 6-1: device descriptor read/64, error -71 [ 869.184434][T12248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.419500][ T5790] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 869.443252][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.454824][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.609245][ T5790] usb 6-1: device descriptor read/64, error -71 [ 869.761350][ T5790] usb usb6-port1: attempt power cycle [ 870.167521][ T5790] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 870.264687][ T5790] usb 6-1: device descriptor read/8, error -71 [ 870.462302][ T3285] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.474848][T10640] Bluetooth: hci6: command tx timeout [ 870.570612][ T5790] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 870.583967][T12734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2069'. [ 870.634128][ T5790] usb 6-1: device descriptor read/8, error -71 [ 870.682113][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.729454][T12734] vlan0: entered promiscuous mode [ 870.771087][ T5790] usb usb6-port1: unable to enumerate USB device [ 870.971973][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.325772][ T12] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.420992][T11503] bridge_slave_1: left allmulticast mode [ 871.453119][T11503] bridge_slave_1: left promiscuous mode [ 871.483877][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.573169][T11503] bridge_slave_0: left allmulticast mode [ 871.630876][T11503] bridge_slave_0: left promiscuous mode [ 871.689302][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.178812][ T5883] playstation 0003:054C:05C4.0008: hidraw0: USB HID v0.01 Device [syz1] on syz1 [ 872.250779][ T5883] playstation 0003:054C:05C4.0008: Failed to retrieve feature with reportID 18: -5 [ 872.316067][ T5883] playstation 0003:054C:05C4.0008: Failed to retrieve DualShock4 pairing info: -5 [ 872.394063][ T5883] playstation 0003:054C:05C4.0008: Failed to get MAC address from DualShock4 [ 872.450241][ T5883] playstation 0003:054C:05C4.0008: Failed to create dualshock4. [ 872.553692][ T5883] playstation 0003:054C:05C4.0008: probe with driver playstation failed with error -5 [ 872.979035][T12763] ntfs3(nullb0): Primary boot signature is not NTFS. [ 873.016748][T12763] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 873.066205][T11503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.115749][T11503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.159991][T11503] bond0 (unregistering): Released all slaves [ 873.417426][T12751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 873.466405][T12751] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 873.610512][T11503] hsr_slave_0: left promiscuous mode [ 873.653865][T12751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 873.663520][T11503] hsr_slave_1: left promiscuous mode [ 873.740955][T12751] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 873.748662][T11503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.795112][T11503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.806508][T12751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 873.840279][T12751] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 873.930891][T12751] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 874.007350][T12751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 874.045719][T12751] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 874.106827][T12751] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 874.149600][T12751] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 874.176320][T12751] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 874.231908][T12751] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 874.326465][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 874.339120][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 874.350002][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 874.361472][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 874.369831][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 874.550579][ T861] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 874.750468][ T861] usb 4-1: Using ep0 maxpacket: 16 [ 874.784781][ T861] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 874.838079][ T861] usb 4-1: config 0 has no interface number 0 [ 874.876832][ T861] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 874.928459][ T861] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 875.001402][ T861] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 875.040776][ T861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.060806][T11503] team0 (unregistering): Port device team_slave_1 removed [ 875.083608][ T861] usb 4-1: Product: syz [ 875.101996][ T861] usb 4-1: Manufacturer: syz [ 875.132959][ T861] usb 4-1: SerialNumber: syz [ 875.151116][T11503] team0 (unregistering): Port device team_slave_0 removed [ 875.173515][ T861] usb 4-1: config 0 descriptor?? [ 875.208609][T12777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 875.232662][T12777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 875.430901][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 875.502025][T12777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 875.544575][T12777] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 875.668131][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 875.802138][ T861] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 875.831458][ T5623] Bluetooth: hci2: command 0x041b tx timeout [ 875.889736][ T861] asix 4-1:0.34: probe with driver asix failed with error -61 [ 876.067625][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 876.165593][T12350] veth0_vlan: entered promiscuous mode [ 876.228608][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout [ 876.471027][ T5623] Bluetooth: hci4: command tx timeout [ 876.564787][T12248] veth0_vlan: entered promiscuous mode [ 876.730653][T12350] veth1_vlan: entered promiscuous mode [ 876.905069][T12248] veth1_vlan: entered promiscuous mode [ 877.256003][ T5883] usb 4-1: USB disconnect, device number 18 [ 877.465476][T12634] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.508884][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 877.520650][T12634] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.552741][T12634] bridge_slave_0: entered allmulticast mode [ 877.585374][T12634] bridge_slave_0: entered promiscuous mode [ 877.633272][T12634] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.672469][T12634] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.713144][T12634] bridge_slave_1: entered allmulticast mode [ 877.742521][T12634] bridge_slave_1: entered promiscuous mode [ 877.752793][ T5623] Bluetooth: hci5: command 0x0406 tx timeout [ 877.907748][ T5623] Bluetooth: hci2: command 0x041b tx timeout [ 878.147910][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 878.311137][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout [ 878.416594][T12634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.509059][T12634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.549228][ T5623] Bluetooth: hci4: command tx timeout [ 879.987980][ T5623] Bluetooth: hci2: command 0x041b tx timeout [ 880.227910][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 880.373400][T12833] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2082'. [ 880.409276][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout [ 880.627743][ T5623] Bluetooth: hci4: command tx timeout [ 881.328102][T12634] team0: Port device team_slave_0 added [ 881.380124][T12634] team0: Port device team_slave_1 added [ 881.436894][T12350] veth0_macvtap: entered promiscuous mode [ 882.067944][ T5623] Bluetooth: hci2: command 0x041b tx timeout [ 882.496283][T12843] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 882.709143][ T5623] Bluetooth: hci4: command tx timeout [ 884.024016][T12634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.152554][ T5623] Bluetooth: hci2: command 0x041b tx timeout [ 884.199021][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.351072][T12634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.451647][T12350] veth1_macvtap: entered promiscuous mode [ 884.632193][T12634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.694844][T12634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.775848][T12850] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 884.950915][T12634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.117556][T12862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 886.142044][T12862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 886.152343][T12862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 886.163352][T12862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 886.179795][T12862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 886.377228][ T5623] Bluetooth: hci2: command 0x041b tx timeout [ 888.387627][T12862] Bluetooth: hci2: command 0x041b tx timeout [ 889.380095][T12862] Bluetooth: hci7: command tx timeout [ 890.725266][ T36] netdevsim netdevsim9 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.808575][ T36] netdevsim netdevsim9 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.428373][ T5623] Bluetooth: hci7: command tx timeout [ 891.505300][T12634] hsr_slave_0: entered promiscuous mode [ 891.533530][T12634] hsr_slave_1: entered promiscuous mode [ 891.562609][ T6782] netdevsim netdevsim9 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.662158][ T1165] netdevsim netdevsim9 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.837015][T11503] bridge_slave_1: left allmulticast mode [ 891.860354][T11503] bridge_slave_1: left promiscuous mode [ 891.893517][T11503] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.968710][T11503] bridge_slave_0: left allmulticast mode [ 892.013647][T11503] bridge_slave_0: left promiscuous mode [ 892.063791][T11503] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.974828][T12862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 892.991620][T12862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 893.000204][T12862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 893.011281][T12862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 893.022619][T12862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 893.482315][T11503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.508533][T12862] Bluetooth: hci7: command tx timeout [ 893.576581][T11503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.639678][T11503] bond0 (unregistering): Released all slaves [ 893.943958][T12911] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2098'. [ 894.362029][T11503] hsr_slave_0: left promiscuous mode [ 894.593273][T11503] hsr_slave_1: left promiscuous mode [ 894.983925][T11503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.050278][T11503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.107893][T12862] Bluetooth: hci2: command tx timeout [ 895.475087][T12928] fuse: Bad value for 'fd' [ 895.588724][T12862] Bluetooth: hci7: command tx timeout [ 896.317838][T11503] team0 (unregistering): Port device team_slave_1 removed [ 896.414949][T11503] team0 (unregistering): Port device team_slave_0 removed [ 897.188476][T12862] Bluetooth: hci2: command tx timeout [ 898.053141][T12634] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.267629][T12862] Bluetooth: hci2: command tx timeout [ 899.963448][T12969] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2107'. [ 901.164854][T12634] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.347869][T12862] Bluetooth: hci2: command tx timeout [ 901.385112][T12634] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.003038][T12634] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.664742][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.716419][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.753580][T12755] bridge_slave_0: entered allmulticast mode [ 902.791865][T12755] bridge_slave_0: entered promiscuous mode [ 902.830471][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.865468][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.898585][T12755] bridge_slave_1: entered allmulticast mode [ 902.935583][T12755] bridge_slave_1: entered promiscuous mode [ 903.314928][T12755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.372902][T12755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.918553][T12755] team0: Port device team_slave_0 added [ 903.942982][T12755] team0: Port device team_slave_1 added [ 904.236095][T12755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.278441][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.431651][T12755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.591530][T12755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.621370][T12755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.756335][T13018] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2117'. [ 904.782952][T12755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.312696][T12634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 905.362915][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.400039][T12634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 905.461506][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.522664][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.869070][T11503] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.342120][T12634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 906.395824][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 906.560933][T12634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 906.635018][T12634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 907.139720][T12755] hsr_slave_0: entered promiscuous mode [ 907.160139][T12755] hsr_slave_1: entered promiscuous mode [ 907.183016][T12755] debugfs: 'hsr0' already exists in 'hsr' [ 907.210061][T12755] Cannot create hsr debugfs directory [ 907.263009][ T36] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.402288][ T36] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.116505][T12860] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.152096][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.183370][T12860] bridge_slave_0: entered allmulticast mode [ 908.220420][T12860] bridge_slave_0: entered promiscuous mode [ 908.302225][T12899] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.339558][T12899] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.372822][T12899] bridge_slave_0: entered allmulticast mode [ 908.417028][T12899] bridge_slave_0: entered promiscuous mode [ 908.472220][T12860] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.512349][T12860] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.560780][T12860] bridge_slave_1: entered allmulticast mode [ 908.604523][T12860] bridge_slave_1: entered promiscuous mode [ 909.036265][T12899] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.739148][T12899] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.465180][T13087] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2127'. [ 911.295086][T12899] bridge_slave_1: entered allmulticast mode [ 911.351719][T12899] bridge_slave_1: entered promiscuous mode [ 911.632696][T12860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.713912][T12860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.811667][T13093] fuse: Bad value for 'fd' [ 912.904940][T12899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.962586][T12899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.999121][T12860] team0: Port device team_slave_0 added [ 913.030191][T12860] team0: Port device team_slave_1 added [ 913.398443][T12899] team0: Port device team_slave_0 added [ 913.433200][T12860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.463405][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.594705][T12860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.695745][T12899] team0: Port device team_slave_1 added [ 913.793444][T12860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.832050][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.025561][T12860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.193389][T12755] netdevsim netdevsim9 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.319664][T13129] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2138'. [ 916.882305][T12899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.906420][T13133] fuse: Bad value for 'fd' [ 916.928902][T12899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.093329][T12899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.176393][T12899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.409235][T12899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.883248][T12899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.122904][ T12] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.325072][T12755] netdevsim netdevsim9 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.405477][ T12] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.486546][T12860] hsr_slave_0: entered promiscuous mode [ 918.501018][T12860] hsr_slave_1: entered promiscuous mode [ 918.515223][T12860] debugfs: 'hsr0' already exists in 'hsr' [ 918.527499][T12860] Cannot create hsr debugfs directory [ 918.541866][ T12] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.636909][T12755] netdevsim netdevsim9 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.689563][ T6951] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.715882][ T1165] bridge_slave_1: left allmulticast mode [ 918.728355][ T1165] bridge_slave_1: left promiscuous mode [ 918.740238][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.765023][ T1165] bridge_slave_0: left allmulticast mode [ 918.790461][ T1165] bridge_slave_0: left promiscuous mode [ 918.808719][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.886478][ T1165] bridge_slave_1: left allmulticast mode [ 918.909026][ T1165] bridge_slave_1: left promiscuous mode [ 918.926847][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.962210][ T1165] bridge_slave_0: left allmulticast mode [ 918.983883][ T1165] bridge_slave_0: left promiscuous mode [ 919.004919][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.839076][T13162] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2148'. [ 921.863702][T13166] fuse: Bad value for 'fd' [ 922.075753][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.122770][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.168879][ T1165] bond0 (unregistering): Released all slaves [ 923.082371][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 923.102607][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 923.112384][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 923.134156][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 923.150919][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 923.532759][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.589665][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.636003][ T1165] bond0 (unregistering): Released all slaves [ 923.843471][T12755] netdevsim netdevsim9 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.141268][T12899] hsr_slave_0: entered promiscuous mode [ 924.183526][T12899] hsr_slave_1: entered promiscuous mode [ 924.225799][T12899] debugfs: 'hsr0' already exists in 'hsr' [ 924.262352][T12899] Cannot create hsr debugfs directory [ 924.379489][ T1165] hsr_slave_0: left promiscuous mode [ 924.475928][ T1165] hsr_slave_1: left promiscuous mode [ 924.501649][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.540531][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.619381][ T1165] hsr_slave_0: left promiscuous mode [ 924.656352][ T1165] hsr_slave_1: left promiscuous mode [ 924.684205][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.724148][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.857988][T13197] fuse: fd is not a fuse device [ 924.864341][ T1165] veth1_macvtap: left promiscuous mode [ 924.887257][ T1165] veth0_macvtap: left promiscuous mode [ 924.915411][ T1165] veth1_vlan: left promiscuous mode [ 924.939808][ T1165] veth0_vlan: left promiscuous mode [ 924.966643][ T1165] veth1_vlan: left promiscuous mode [ 925.008664][ T1165] veth0_vlan: left promiscuous mode [ 925.268833][ T5623] Bluetooth: hci0: command tx timeout [ 925.369972][T13201] fuse: fd is not a fuse device [ 927.350325][ T5623] Bluetooth: hci0: command tx timeout [ 928.015205][T13212] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2161'. [ 928.800115][T13215] fuse: fd is not a fuse device [ 929.055934][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 929.116002][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 929.428535][ T5623] Bluetooth: hci0: command tx timeout [ 929.844473][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 929.906554][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 930.871972][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.879963][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.330360][T13235] fuse: fd is not a fuse device [ 931.509463][ T5623] Bluetooth: hci0: command tx timeout [ 932.495479][T12862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 932.506931][T12862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 932.522673][T12862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 932.532447][T12860] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.547200][T12862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 932.556875][T12862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 933.179459][ T861] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 933.325698][T13263] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2173'. [ 933.397494][ T861] usb 6-1: Using ep0 maxpacket: 32 [ 933.434184][ T861] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 933.476976][T12860] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.494471][ T861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.544711][ T861] usb 6-1: config 0 descriptor?? [ 933.634990][ T861] as10x_usb: device has been detected [ 933.686618][ T861] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 933.802962][ T861] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 933.936717][ T861] as10x_usb: error during firmware upload part1 [ 933.989534][ T861] Registered device nBox DVB-T Dongle [ 934.106971][T12860] netdevsim netdevsim7 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.641724][ T5623] Bluetooth: hci6: command tx timeout [ 935.123485][ T861] usb 6-1: USB disconnect, device number 23 [ 935.278041][ T861] Unregistered device nBox DVB-T Dongle [ 935.286637][ T861] as10x_usb: device has been disconnected [ 935.475924][T12860] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.986374][T13289] fuse: fd is not a fuse device [ 936.496172][T12899] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.707696][ T5623] Bluetooth: hci6: command tx timeout [ 936.787070][T11001] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.961024][T11001] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.098757][T12899] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.178370][ T5908] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.304790][T12899] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.381931][ T5908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.429972][ T1165] bridge_slave_1: left allmulticast mode [ 937.456785][ T1165] bridge_slave_1: left promiscuous mode [ 937.484980][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.537131][ T1165] bridge_slave_0: left allmulticast mode [ 937.566079][ T1165] bridge_slave_0: left promiscuous mode [ 937.572886][T13315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2182'. [ 937.598813][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.643054][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.689099][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.724835][ T1165] bond0 (unregistering): Released all slaves [ 938.788855][ T5623] Bluetooth: hci6: command tx timeout [ 939.314398][T12899] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.457093][ T1165] hsr_slave_0: left promiscuous mode [ 939.502777][ T1165] hsr_slave_1: left promiscuous mode [ 939.525782][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.562328][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.622496][T13334] fuse: fd is not a fuse device [ 940.148746][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 940.215216][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 940.874232][ T5623] Bluetooth: hci6: command tx timeout [ 940.933225][T13172] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.980385][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.049914][T13172] bridge_slave_0: entered allmulticast mode [ 941.121038][T13172] bridge_slave_0: entered promiscuous mode [ 941.240586][T13172] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.296656][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.347178][T13172] bridge_slave_1: entered allmulticast mode [ 941.941402][T13172] bridge_slave_1: entered promiscuous mode [ 943.538598][T13172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.686019][T13380] fuse: fd is not a fuse device [ 943.772325][T13172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.144738][T13385] fuse: Bad value for 'fd' [ 944.289837][T13172] team0: Port device team_slave_0 added [ 944.352008][T13172] team0: Port device team_slave_1 added [ 944.853844][T12899] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 944.946901][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 945.015456][T13172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.046562][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.122788][T13172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.148017][T12899] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 945.168872][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 945.186460][T12899] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 945.221041][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 945.286727][T13172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.308278][T13172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.367970][T13172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.392173][T12899] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 945.410844][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 947.538349][T12862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.553668][T12862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.570898][T12862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.578835][T12862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.586870][T12862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.686317][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.734536][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.784504][T13249] bridge_slave_0: entered allmulticast mode [ 947.833471][T13249] bridge_slave_0: entered promiscuous mode [ 947.886465][T13249] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.936065][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.970667][T13249] bridge_slave_1: entered allmulticast mode [ 948.010197][T13249] bridge_slave_1: entered promiscuous mode [ 948.144834][ T6099] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.397289][T13172] hsr_slave_0: entered promiscuous mode [ 948.426052][T13172] hsr_slave_1: entered promiscuous mode [ 948.465832][ T5908] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.729432][T13249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.829948][T13249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.015970][ T160] netdevsim netdevsim9 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.668067][T12862] Bluetooth: hci4: command tx timeout [ 949.893925][T13249] team0: Port device team_slave_0 added [ 949.963494][T13249] team0: Port device team_slave_1 added [ 950.119701][ T160] netdevsim netdevsim9 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.203265][ T1165] bridge_slave_1: left allmulticast mode [ 950.242437][ T1165] bridge_slave_1: left promiscuous mode [ 950.288170][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.357198][ T1165] bridge_slave_0: left allmulticast mode [ 950.398941][ T1165] bridge_slave_0: left promiscuous mode [ 950.441354][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.865803][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.923137][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.966795][ T1165] bond0 (unregistering): Released all slaves [ 951.535597][ T1165] hsr_slave_0: left promiscuous mode [ 951.559801][T13482] fuse: fd is not a fuse device [ 951.593144][ T1165] hsr_slave_1: left promiscuous mode [ 951.623778][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.686508][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.748580][T12862] Bluetooth: hci4: command tx timeout [ 952.516849][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 952.554187][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 952.842059][T13249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.857483][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.982455][T13249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.053697][T13249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.093900][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.260113][T13249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.411779][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 953.578416][ T5623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 953.590525][ T5623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 953.600223][ T5623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 953.612781][ T5623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 953.636988][ T5623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 953.829920][ T5623] Bluetooth: hci4: command tx timeout [ 954.474549][T13249] hsr_slave_0: entered promiscuous mode [ 954.516588][T13249] hsr_slave_1: entered promiscuous mode [ 954.562751][T13249] debugfs: 'hsr0' already exists in 'hsr' [ 954.630969][T13249] Cannot create hsr debugfs directory [ 954.854205][T13517] fuse: fd is not a fuse device [ 955.341747][T13172] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.755413][ T5623] Bluetooth: hci7: command tx timeout [ 955.908093][ T5623] Bluetooth: hci4: command tx timeout [ 956.144608][T13172] netdevsim netdevsim1 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.427696][ T5790] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 956.628302][ T5790] usb 6-1: Using ep0 maxpacket: 16 [ 956.654971][ T5790] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 956.695827][ T5790] usb 6-1: config 0 has no interface number 0 [ 956.744636][ T5790] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 956.832056][ T5790] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 956.876745][T13172] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.923958][ T5790] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 956.975075][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.044526][ T5790] usb 6-1: Product: syz [ 957.079501][ T5790] usb 6-1: Manufacturer: syz [ 957.107300][ T5790] usb 6-1: SerialNumber: syz [ 957.189567][ T5790] usb 6-1: config 0 descriptor?? [ 957.238698][T13536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 957.245923][T13536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 957.455158][T13172] netdevsim netdevsim1 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.536828][T13536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 957.593884][T13536] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 957.833241][ T5623] Bluetooth: hci7: command tx timeout [ 957.851612][ T5790] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 958.066253][ T5790] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 958.105005][T13560] fuse: fd is not a fuse device [ 958.128800][ T5790] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 958.194951][ T5790] asix 6-1:0.34: probe with driver asix failed with error -32 [ 959.330993][ T861] usb 6-1: USB disconnect, device number 24 [ 959.564086][T11001] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.754737][T10928] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.908656][ T5623] Bluetooth: hci7: command tx timeout [ 960.312944][T13172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 960.375874][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.398679][ T861] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 960.419274][T10928] netdevsim netdevsim8 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.458880][T10928] netdevsim netdevsim8 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.590123][ T861] usb 6-1: Using ep0 maxpacket: 16 [ 960.617284][ T861] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.653257][T13172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 960.670083][ T861] usb 6-1: config 0 has no interfaces? [ 960.701031][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.725245][ T861] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 960.742094][T13172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 960.764024][ T861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.791472][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.802697][ T861] usb 6-1: Product: syz [ 960.816569][ T861] usb 6-1: Manufacturer: syz [ 960.842190][ T861] usb 6-1: SerialNumber: syz [ 960.876786][ T861] usb 6-1: config 0 descriptor?? [ 960.886521][T13249] netdevsim netdevsim9 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.101731][T13425] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.132418][T13425] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.170458][T13425] bridge_slave_0: entered allmulticast mode [ 961.209806][T13425] bridge_slave_0: entered promiscuous mode [ 961.235732][T13172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 961.299618][T13172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 961.398099][T13425] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.416353][T13425] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.442456][T13425] bridge_slave_1: entered allmulticast mode [ 961.460253][T13425] bridge_slave_1: entered promiscuous mode [ 961.508686][T13249] netdevsim netdevsim9 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.785201][T13425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.829129][T13425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.890013][T13249] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.322048][ T5623] Bluetooth: hci7: command tx timeout [ 962.521116][T13249] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.749433][T13425] team0: Port device team_slave_0 added [ 962.770686][T13425] team0: Port device team_slave_1 added [ 962.963116][T13425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.985086][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.082400][T13425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.128688][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.165481][T13498] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.195572][T13498] bridge_slave_0: entered allmulticast mode [ 963.213553][T12594] usb 6-1: USB disconnect, device number 25 [ 963.267192][T13498] bridge_slave_0: entered promiscuous mode [ 963.345674][T13425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.394351][T13425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.578898][T13425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.636992][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.680112][T13498] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.720363][T13498] bridge_slave_1: entered allmulticast mode [ 963.759678][T13498] bridge_slave_1: entered promiscuous mode [ 964.145554][T13498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.515775][T13498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.692146][T10928] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.953820][T13425] hsr_slave_0: entered promiscuous mode [ 964.985401][T13425] hsr_slave_1: entered promiscuous mode [ 965.019831][T13425] debugfs: 'hsr0' already exists in 'hsr' [ 965.046616][T13425] Cannot create hsr debugfs directory [ 965.083253][T13498] team0: Port device team_slave_0 added [ 965.135209][T13498] team0: Port device team_slave_1 added [ 965.220694][T10928] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.465165][ T6951] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.681684][T13249] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 965.739803][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 965.794276][T13249] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 965.901292][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 966.101025][T13498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.119823][T12594] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 966.165148][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.276943][T13498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.314823][T13249] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 966.347140][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 966.354393][T12594] usb 6-1: Using ep0 maxpacket: 16 [ 966.368992][T12594] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.395879][T13249] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 966.408964][T12594] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 966.442950][T13249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 966.465613][T12594] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 966.480476][ T6782] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.501326][T12594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.518058][ T1165] bridge_slave_1: left allmulticast mode [ 966.535452][T12594] usb 6-1: Product: syz [ 966.547063][ T1165] bridge_slave_1: left promiscuous mode [ 966.567550][T12594] usb 6-1: Manufacturer: syz [ 966.578978][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.590630][T12594] usb 6-1: SerialNumber: syz [ 966.613471][T12594] usb 6-1: config 0 descriptor?? [ 966.640339][ T1165] bridge_slave_0: left allmulticast mode [ 966.670405][ T1165] bridge_slave_0: left promiscuous mode [ 966.695156][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.735997][ T1165] bridge_slave_1: left allmulticast mode [ 966.753652][ T1165] bridge_slave_1: left promiscuous mode [ 966.763368][T13676] fuse: fd is not a fuse device [ 966.778391][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.804117][ T1165] bridge_slave_0: left allmulticast mode [ 966.823907][ T1165] bridge_slave_0: left promiscuous mode [ 966.840509][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.100259][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.128475][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.155607][ T1165] bond0 (unregistering): Released all slaves [ 967.351831][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.376371][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.397852][ T1165] bond0 (unregistering): Released all slaves [ 967.481108][T13498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.502515][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 967.568823][T13498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.740987][ T1165] hsr_slave_0: left promiscuous mode [ 967.765854][ T1165] hsr_slave_1: left promiscuous mode [ 967.788064][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.813263][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.846216][ T1165] hsr_slave_0: left promiscuous mode [ 967.863457][ T1165] hsr_slave_1: left promiscuous mode [ 967.878860][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.896236][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.250565][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 968.289979][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 968.974094][T11435] usb 6-1: USB disconnect, device number 26 [ 969.173905][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 969.240804][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 970.947535][T13700] se_dev->se_dev_ptr already set for storage object [ 971.679260][T13498] hsr_slave_0: entered promiscuous mode [ 971.685742][T13498] hsr_slave_1: entered promiscuous mode [ 971.761660][T13498] debugfs: 'hsr0' already exists in 'hsr' [ 971.786843][T13498] Cannot create hsr debugfs directory [ 972.166588][T13425] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.504391][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.591983][T13425] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.892152][T13425] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.260826][T13425] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.426213][T13172] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.600451][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.607631][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.790156][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.797454][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.962543][T13249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.453779][T13249] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.636342][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.643507][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.700202][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2282'. [ 974.746400][T13425] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 974.794425][T13425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.860985][T13425] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 974.946725][T13425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 974.994015][T13425] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 975.031323][T13425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.065391][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.072552][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.133851][T13498] netdevsim netdevsim8 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.232806][T13425] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 975.261844][T13425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.287757][T11435] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 975.352719][T13498] netdevsim netdevsim8 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.478605][T11435] usb 6-1: Using ep0 maxpacket: 16 [ 975.524117][T11435] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 975.589896][T11435] usb 6-1: config 0 has no interface number 0 [ 975.641002][T11435] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 975.659699][T13498] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.725061][T11435] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 975.819972][T11435] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 975.906314][T11435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.949693][T13498] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.981346][T11435] usb 6-1: Product: syz [ 976.021159][T11435] usb 6-1: Manufacturer: syz [ 976.036763][T11435] usb 6-1: SerialNumber: syz [ 976.081220][T11435] usb 6-1: config 0 descriptor?? [ 976.131354][T13739] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 976.193891][T13739] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 976.252392][T13249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.510438][T13739] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 976.581438][T13739] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 976.873357][T11435] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 977.070697][T11435] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 977.156962][T11435] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 977.252307][T11435] asix 6-1:0.34: probe with driver asix failed with error -61 [ 977.542893][T13425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.615552][T13498] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 977.692511][T13498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.755596][T13498] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 977.833050][T13498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.921832][T13498] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 977.981128][T13498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.048035][T13498] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 978.111341][T13498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 978.252201][T13425] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.412305][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.419508][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.472225][T11435] usb 6-1: USB disconnect, device number 27 [ 978.611150][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.618347][ T6782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.947097][T13172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.573014][T13172] veth0_vlan: entered promiscuous mode [ 981.775206][T13172] veth1_vlan: entered promiscuous mode [ 982.001818][T13498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.294131][T13172] veth0_macvtap: entered promiscuous mode [ 982.392652][T13498] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.564775][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.571966][T10928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.793578][T13249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.911060][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.918253][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.565074][T12862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 983.586807][T12862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 983.595999][T12862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 983.616328][T12862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 983.634209][T12862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 985.789487][T12862] Bluetooth: hci2: command tx timeout [ 987.488752][T11435] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 987.678831][T11435] usb 6-1: Using ep0 maxpacket: 16 [ 987.719868][T11435] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 987.785041][T11435] usb 6-1: config 0 has no interface number 0 [ 987.838169][T12862] Bluetooth: hci2: command tx timeout [ 987.851654][T11435] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 987.929993][T11435] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 988.037039][T11435] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 988.145614][T11435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.235729][T11435] usb 6-1: Product: syz [ 988.242734][T13249] veth0_vlan: entered promiscuous mode [ 988.275100][T11435] usb 6-1: Manufacturer: syz [ 988.322178][T11435] usb 6-1: SerialNumber: syz [ 988.385795][T11435] usb 6-1: config 0 descriptor?? [ 988.429717][T13858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 988.466108][T13858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 988.739224][T13858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 988.801553][T13858] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 988.883522][T13425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.969091][T13249] veth1_vlan: entered promiscuous mode [ 989.061203][T11435] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 989.261728][T11435] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 989.560038][T11435] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 990.522043][T12862] Bluetooth: hci2: command tx timeout [ 990.529198][ T30] audit: type=1326 audit(1785251321.104:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 991.530778][T11435] asix 6-1:0.34: probe with driver asix failed with error -61 [ 991.745718][T11435] usb 6-1: USB disconnect, device number 28 [ 991.757589][ T30] audit: type=1326 audit(1785251321.104:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 991.977871][T13249] veth0_macvtap: entered promiscuous mode [ 992.101229][ T30] audit: type=1326 audit(1785251321.104:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 992.315250][ T6099] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.327983][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.337784][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.379612][ T30] audit: type=1326 audit(1785251321.104:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 992.549895][T12862] Bluetooth: hci2: command tx timeout [ 992.664032][ T30] audit: type=1326 audit(1785251321.324:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 992.711245][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.777710][ T1165] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.858064][ T30] audit: type=1326 audit(1785251321.324:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feab3d9dc02 code=0x7ffc0000 [ 992.913228][T11503] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.136935][ T30] audit: type=1326 audit(1785251321.324:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feab3d9dc02 code=0x7ffc0000 [ 993.246953][T11503] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.383572][ T30] audit: type=1326 audit(1785251321.334:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 993.526342][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 993.546951][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 993.559140][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 993.571232][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 993.579572][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 993.640367][ T3285] bridge_slave_1: left allmulticast mode [ 993.668630][ T3285] bridge_slave_1: left promiscuous mode [ 993.715849][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.746271][ T30] audit: type=1326 audit(1785251321.334:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feab3d9dc02 code=0x7ffc0000 [ 993.814803][ T3285] bridge_slave_0: left allmulticast mode [ 993.851321][ T3285] bridge_slave_0: left promiscuous mode [ 993.877674][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.903739][ T30] audit: type=1326 audit(1785251321.334:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13883 comm="syz.3.2301" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feab3d9dc97 code=0x7ffc0000 [ 994.322107][T13918] fuse: fd is not a fuse device [ 995.756429][ T5623] Bluetooth: hci0: command tx timeout [ 996.883622][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.954175][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.998430][ T3285] bond0 (unregistering): Released all slaves [ 997.375340][ T3285] hsr_slave_0: left promiscuous mode [ 997.464080][ T3285] hsr_slave_1: left promiscuous mode [ 997.489305][T13924] svc: failed to register nfsdv3 RPC service (errno 101). [ 997.513208][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 997.552610][T13924] svc: failed to register nfsaclv3 RPC service (errno 101). [ 997.587725][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.677111][ T3285] veth0_macvtap: left promiscuous mode [ 997.716833][ T3285] veth1_vlan: left promiscuous mode [ 997.745578][ T3285] veth0_vlan: left promiscuous mode [ 997.829516][ T5623] Bluetooth: hci0: command tx timeout [ 999.908051][ T5623] Bluetooth: hci0: command tx timeout [ 1001.196913][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 1001.272923][ T3285] team0 (unregistering): Port device team_slave_0 removed [ 1002.601075][ T5623] Bluetooth: hci0: command tx timeout [ 1004.155968][T13425] veth0_vlan: entered promiscuous mode [ 1004.323880][T13425] veth1_vlan: entered promiscuous mode [ 1004.774845][T13498] veth0_vlan: entered promiscuous mode [ 1005.037159][T13955] random: crng reseeded on system resumption [ 1005.164215][T13498] veth1_vlan: entered promiscuous mode [ 1005.196422][T13425] veth0_macvtap: entered promiscuous mode [ 1005.345361][T13425] veth1_macvtap: entered promiscuous mode [ 1005.996652][T13831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.046672][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.096984][T13831] bridge_slave_0: entered allmulticast mode [ 1006.122691][T13831] bridge_slave_0: entered promiscuous mode [ 1006.315039][T13831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.352617][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.384041][T13831] bridge_slave_1: entered allmulticast mode [ 1006.430273][T13831] bridge_slave_1: entered promiscuous mode [ 1006.828825][T13831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.882668][T13831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.094627][T13971] fuse: fd is not a fuse device [ 1010.780369][T12862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1010.794022][T12862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1011.273183][T12862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1011.293765][T12862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1011.302556][T12862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1011.499220][T13831] team0: Port device team_slave_0 added [ 1011.558223][T13831] team0: Port device team_slave_1 added [ 1011.585613][T13498] veth0_macvtap: entered promiscuous mode [ 1011.749057][T13831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.782365][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.888505][T13831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.942482][T13831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.971919][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1012.025768][T13831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1012.056705][T13498] veth1_macvtap: entered promiscuous mode [ 1012.288380][ T36] netdevsim netdevsim9 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.568985][ T12] netdevsim netdevsim9 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.795418][T11503] netdevsim netdevsim9 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.870049][T13831] hsr_slave_0: entered promiscuous mode [ 1012.896410][T13831] hsr_slave_1: entered promiscuous mode [ 1013.101118][ T3285] bridge_slave_1: left allmulticast mode [ 1013.142187][ T3285] bridge_slave_1: left promiscuous mode [ 1013.189819][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.241589][ T3285] bridge_slave_0: left allmulticast mode [ 1013.281143][ T3285] bridge_slave_0: left promiscuous mode [ 1013.307373][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.350662][T12862] Bluetooth: hci4: command tx timeout [ 1013.905839][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.969382][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.025609][ T3285] bond0 (unregistering): Released all slaves [ 1014.118979][ T36] netdevsim netdevsim9 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.018395][ T5623] Bluetooth: hci4: command tx timeout [ 1016.517215][ T3285] hsr_slave_0: left promiscuous mode [ 1016.563147][ T3285] hsr_slave_1: left promiscuous mode [ 1016.603914][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.675431][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.762104][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1016.769863][ T5790] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1016.784292][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1016.793557][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1016.815586][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1016.823273][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1016.884298][ T3285] veth0_macvtap: left promiscuous mode [ 1016.914963][ T3285] veth1_vlan: left promiscuous mode [ 1016.949523][ T3285] veth0_vlan: left promiscuous mode [ 1017.054976][ T5790] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1017.103944][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.171844][ T5790] usb 6-1: Product: syz [ 1017.202598][ T5790] usb 6-1: Manufacturer: syz [ 1017.233863][ T5790] usb 6-1: SerialNumber: syz [ 1017.290127][ T5790] usb 6-1: config 0 descriptor?? [ 1017.343584][ T5790] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1018.123907][ T5623] Bluetooth: hci4: command tx timeout [ 1018.145061][ T5790] gspca_sunplus: reg_w_riv err -71 [ 1018.171021][ T5790] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1019.128455][ T5623] Bluetooth: hci6: command tx timeout [ 1019.384865][ T5790] usb 6-1: USB disconnect, device number 29 [ 1020.699173][ T5623] Bluetooth: hci4: command tx timeout [ 1021.588493][ T5623] Bluetooth: hci6: command tx timeout [ 1021.739917][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 1021.880426][ T3285] team0 (unregistering): Port device team_slave_0 removed [ 1022.867719][ T5790] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1023.067919][ T5790] usb 6-1: Using ep0 maxpacket: 16 [ 1023.094563][ T5790] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1023.146505][ T5790] usb 6-1: config 0 has no interface number 0 [ 1023.187706][ T5790] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1023.249444][ T5790] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1023.334100][ T5790] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1023.390698][ T5790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.444707][ T5790] usb 6-1: Product: syz [ 1023.470032][ T5790] usb 6-1: Manufacturer: syz [ 1023.513884][ T5790] usb 6-1: SerialNumber: syz [ 1023.569855][ T5790] usb 6-1: config 0 descriptor?? [ 1023.624808][T14034] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1023.662029][T14034] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1023.673129][T12862] Bluetooth: hci6: command tx timeout [ 1023.835780][T13910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.876145][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.932634][T13910] bridge_slave_0: entered allmulticast mode [ 1023.942411][T14034] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1023.984790][T13910] bridge_slave_0: entered promiscuous mode [ 1023.993421][T14034] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1024.152411][T13910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.191041][T13910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.218294][T13910] bridge_slave_1: entered allmulticast mode [ 1024.239117][ T5790] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1024.260065][T13910] bridge_slave_1: entered promiscuous mode [ 1025.260198][ T5790] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1025.321857][ T5790] asix 6-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1025.404357][ T5790] asix 6-1:0.34: probe with driver asix failed with error -61 [ 1025.748402][ T5623] Bluetooth: hci6: command tx timeout [ 1025.766876][T13831] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.971274][T13910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.019607][T13910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.307173][T13831] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.443032][T13910] team0: Port device team_slave_0 added [ 1026.578686][ T5627] usb 6-1: USB disconnect, device number 30 [ 1026.704189][T13910] team0: Port device team_slave_1 added [ 1027.040682][T13831] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.260318][T13910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.299144][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.610037][T13910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.680485][T13831] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.755388][T13910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.793183][T13910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.881581][T13910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.244576][T13910] hsr_slave_0: entered promiscuous mode [ 1031.305778][T13910] hsr_slave_1: entered promiscuous mode [ 1031.345002][T13910] debugfs: 'hsr0' already exists in 'hsr' [ 1031.368863][T13910] Cannot create hsr debugfs directory [ 1032.421593][ T6605] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.042249][T14087] autofs: Bad value for 'fd' [ 1033.910905][T14095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1034.242446][T11503] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.935638][T11502] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.010739][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.045316][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.076332][T13977] bridge_slave_0: entered allmulticast mode [ 1041.115658][T13977] bridge_slave_0: entered promiscuous mode [ 1041.155896][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.201244][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.240412][T13977] bridge_slave_1: entered allmulticast mode [ 1041.276002][T13977] bridge_slave_1: entered promiscuous mode [ 1041.348743][T14121] ipvlan1: entered promiscuous mode [ 1041.369734][T14121] ipvlan1: entered allmulticast mode [ 1041.397811][T14121] veth0_vlan: entered allmulticast mode [ 1041.440652][T11502] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.551819][T13831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1041.613444][T13831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.670380][T13831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1041.728290][T13831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.057057][T13831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1044.113232][T13831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.990956][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1045.058239][T13977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.168791][T13977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.264348][T12862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1045.279019][T12862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1045.288704][T12862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1045.301960][T12862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1045.310906][T12862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1045.673882][T13910] netdevsim netdevsim9 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.513851][T13977] team0: Port device team_slave_0 added [ 1046.637136][T13910] netdevsim netdevsim9 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.046606][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.080317][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.129919][T14014] bridge_slave_0: entered allmulticast mode [ 1047.156620][T14014] bridge_slave_0: entered promiscuous mode [ 1047.198891][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.236019][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.267785][T14014] bridge_slave_1: entered allmulticast mode [ 1047.306525][T14014] bridge_slave_1: entered promiscuous mode [ 1047.420593][T13977] team0: Port device team_slave_1 added [ 1047.427954][ T5623] Bluetooth: hci7: command tx timeout [ 1047.552611][T13910] netdevsim netdevsim9 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.894592][T13977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.926203][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.015607][T13977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.059784][T13977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.087547][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.178906][T13977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.220782][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.334207][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1048.370871][T13910] netdevsim netdevsim9 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.388660][ T5623] Bluetooth: hci2: command 0xfc11 tx timeout [ 1048.395833][T12862] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1048.672805][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.081060][T14014] team0: Port device team_slave_0 added [ 1049.151363][T14014] team0: Port device team_slave_1 added [ 1049.509586][T12862] Bluetooth: hci7: command tx timeout [ 1049.524724][T13977] hsr_slave_0: entered promiscuous mode [ 1049.563868][T13977] hsr_slave_1: entered promiscuous mode [ 1049.600874][T13977] debugfs: 'hsr0' already exists in 'hsr' [ 1049.624447][T13977] Cannot create hsr debugfs directory [ 1049.650818][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.672718][T14188] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2351'. [ 1049.694781][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.785287][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.021461][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.044084][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.135199][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.468259][T11502] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.758251][ T6782] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.483165][T14209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.613371][T12862] Bluetooth: hci7: command tx timeout [ 1051.814429][T14014] hsr_slave_0: entered promiscuous mode [ 1051.843547][T14014] hsr_slave_1: entered promiscuous mode [ 1051.867169][T14014] debugfs: 'hsr0' already exists in 'hsr' [ 1051.894569][T14014] Cannot create hsr debugfs directory [ 1052.169775][ T160] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.249018][T13910] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1052.269323][T13910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.288726][T13910] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1052.310793][T13910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1052.411634][ T6782] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.445734][T13910] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1052.471635][T13910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1052.522437][ T3285] bridge_slave_1: left allmulticast mode [ 1052.531912][ T3285] bridge_slave_1: left promiscuous mode [ 1052.546872][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.576069][ T3285] bridge_slave_0: left allmulticast mode [ 1052.588645][ T3285] bridge_slave_0: left promiscuous mode [ 1052.605763][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.743920][ T3285] bridge_slave_1: left allmulticast mode [ 1052.773856][ T3285] bridge_slave_1: left promiscuous mode [ 1052.812218][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.833974][ T3285] bridge_slave_0: left allmulticast mode [ 1052.849572][ T3285] bridge_slave_0: left promiscuous mode [ 1052.868091][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.305192][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.667524][T12862] Bluetooth: hci7: command tx timeout [ 1053.756033][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.880165][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.666060][T14225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1055.675288][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.752111][ T3285] bond0 (unregistering): Released all slaves [ 1056.132859][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1056.146868][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1056.160283][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1056.170593][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1056.182469][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1056.425204][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1056.464532][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1056.496058][ T3285] bond0 (unregistering): Released all slaves [ 1056.551986][T13910] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1056.595848][T13910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1056.783634][ T3285] hsr_slave_0: left promiscuous mode [ 1056.819740][ T3285] hsr_slave_1: left promiscuous mode [ 1056.846641][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.888040][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.938635][ T3285] hsr_slave_0: left promiscuous mode [ 1056.965222][ T3285] hsr_slave_1: left promiscuous mode [ 1056.997737][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.071206][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.140377][ T3285] veth1_macvtap: left promiscuous mode [ 1057.157468][ T3285] veth0_macvtap: left promiscuous mode [ 1057.177473][ T3285] veth1_vlan: left promiscuous mode [ 1057.195199][ T3285] veth0_vlan: left promiscuous mode [ 1057.219659][ T3285] veth1_macvtap: left promiscuous mode [ 1057.247407][ T3285] veth0_macvtap: left promiscuous mode [ 1057.253069][ T3285] veth1_vlan: left promiscuous mode [ 1057.268960][ T3285] veth0_vlan: left promiscuous mode [ 1058.026632][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 1058.063296][ T3285] team0 (unregistering): Port device team_slave_0 removed [ 1058.228242][ T5623] Bluetooth: hci2: command tx timeout [ 1058.702991][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 1058.753237][ T3285] team0 (unregistering): Port device team_slave_0 removed [ 1059.943410][T13977] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.940161][ T5623] Bluetooth: hci2: command tx timeout [ 1061.950291][T13977] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.011574][ T5623] Bluetooth: hci2: command tx timeout [ 1063.102521][T13977] netdevsim netdevsim7 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.226918][T14261] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2363'. [ 1063.533402][T13977] netdevsim netdevsim7 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.966707][T14141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.022063][T14141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.076566][T14141] bridge_slave_0: entered allmulticast mode [ 1064.117887][T14141] bridge_slave_0: entered promiscuous mode [ 1064.165781][T14141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.220040][T14141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.282006][T14141] bridge_slave_1: entered allmulticast mode [ 1064.333342][T14141] bridge_slave_1: entered promiscuous mode [ 1064.834672][T14279] fuse: fd is not a fuse device [ 1065.028732][ T5623] Bluetooth: hci2: command tx timeout [ 1065.168605][T14014] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.464096][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1065.552208][T14141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1065.652733][T14141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.076920][T14014] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.265317][T14292] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1068.752027][T14305] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2372'. [ 1068.855073][T14014] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.931775][T14141] team0: Port device team_slave_0 added [ 1069.071968][T14141] team0: Port device team_slave_1 added [ 1069.303604][T14014] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.455338][T14141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.490405][T14141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.610806][T14141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.839413][T14141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.931463][T14141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.487572][T14141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.544293][T14321] overlayfs: missing 'lowerdir' [ 1072.673065][T14327] fuse: fd is not a fuse device [ 1072.705570][T14322] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1072.758602][T14322] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1072.798374][T14322] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1072.831683][T14322] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1072.897748][T14322] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1072.916631][T14141] hsr_slave_0: entered promiscuous mode [ 1072.951795][T14322] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1072.964659][T14141] hsr_slave_1: entered promiscuous mode [ 1072.994118][T14322] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1073.009173][T14141] debugfs: 'hsr0' already exists in 'hsr' [ 1073.034595][T14322] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1073.043024][T14141] Cannot create hsr debugfs directory [ 1073.161855][T14322] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1073.197748][T14322] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1073.235322][T14322] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1073.280010][T14322] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.326469][T14322] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1073.381391][T14322] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1073.503822][T12862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1073.519294][T12862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1073.532395][T12862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1073.547189][T12862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1073.560507][T12862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1073.734902][ T1165] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.216422][T11001] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.241327][ T5790] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1074.418144][ T5790] usb 6-1: Using ep0 maxpacket: 32 [ 1074.445052][T14229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.463416][ T5790] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1074.502088][T14229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.521750][ T5790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.547149][T14229] bridge_slave_0: entered allmulticast mode [ 1074.580888][ T5790] usb 6-1: config 0 descriptor?? [ 1074.596167][T14229] bridge_slave_0: entered promiscuous mode [ 1074.628766][T12862] Bluetooth: hci3: command 0x0406 tx timeout [ 1074.652107][ T5790] as10x_usb: device has been detected [ 1074.695323][ T5790] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1074.749984][ T6951] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.792287][T12862] Bluetooth: hci5: command 0x0406 tx timeout [ 1074.805269][ T5790] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1074.867814][T12862] Bluetooth: hci4: command 0x0c1a tx timeout [ 1074.901038][ T5790] as10x_usb: error during firmware upload part1 [ 1074.972277][T14229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.992738][ T5790] Registered device nBox DVB-T Dongle [ 1075.027425][T12862] Bluetooth: hci6: command 0x0c1a tx timeout [ 1075.060446][T14229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.120722][T14229] bridge_slave_1: entered allmulticast mode [ 1075.178338][T14229] bridge_slave_1: entered promiscuous mode [ 1075.188073][T12862] Bluetooth: hci7: command 0x0c1a tx timeout [ 1075.354057][T12862] Bluetooth: hci2: command 0x0c1a tx timeout [ 1075.667627][T12862] Bluetooth: hci0: command tx timeout [ 1076.949496][T12862] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.109109][T12862] Bluetooth: hci6: command 0x0c1a tx timeout [ 1077.244752][T11435] usb 6-1: USB disconnect, device number 31 [ 1077.271174][T12862] Bluetooth: hci7: command 0x0c1a tx timeout [ 1077.427949][T12862] Bluetooth: hci2: command 0x0c1a tx timeout [ 1077.747903][T12862] Bluetooth: hci0: command tx timeout [ 1077.793809][ T1165] netdevsim netdevsim9 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.818495][T11435] Unregistered device nBox DVB-T Dongle [ 1077.846596][T11435] as10x_usb: device has been disconnected [ 1078.274709][T14229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.514102][T14229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.832630][ T5623] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1079.795746][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 1079.801924][ T5623] Bluetooth: hci6: command 0x0c1a tx timeout [ 1079.808052][ T5623] Bluetooth: hci7: command 0x0c1a tx timeout [ 1079.814743][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 1079.823333][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1079.823351][ T30] audit: type=1326 audit(1785251410.444:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 1080.691406][T10640] Bluetooth: hci0: command tx timeout [ 1080.703906][T10640] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1080.730438][T10640] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1080.759000][T10640] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1080.775246][T10640] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1081.212734][ T30] audit: type=1326 audit(1785251410.444:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 1081.366929][T14387] fuse: fd is not a fuse device [ 1081.464274][ T30] audit: type=1326 audit(1785251410.444:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 1081.672347][ T30] audit: type=1326 audit(1785251410.444:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 1081.723048][T14229] team0: Port device team_slave_0 added [ 1081.808816][ T30] audit: type=1326 audit(1785251410.564:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 1081.976298][ T30] audit: type=1326 audit(1785251410.564:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feab3d9dc02 code=0x7ffc0000 [ 1082.020121][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 1082.140089][ T30] audit: type=1326 audit(1785251410.564:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feab3d9dc02 code=0x7ffc0000 [ 1082.271188][T14229] team0: Port device team_slave_1 added [ 1082.319795][ T30] audit: type=1326 audit(1785251410.564:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab3d9de99 code=0x7ffc0000 [ 1082.461639][ T30] audit: type=1326 audit(1785251410.564:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feab3d9dc02 code=0x7ffc0000 [ 1082.606110][ T30] audit: type=1326 audit(1785251410.564:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14370 comm="syz.3.2382" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7feab3d9dc97 code=0x7ffc0000 [ 1082.710394][T10640] Bluetooth: hci0: command tx timeout [ 1082.906213][T14229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.947818][T10640] Bluetooth: hci8: command tx timeout [ 1082.978244][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.180992][T14229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.425227][T14229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.462162][T14229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.585120][T14229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.539837][T14229] hsr_slave_0: entered promiscuous mode [ 1084.598626][T14229] hsr_slave_1: entered promiscuous mode [ 1084.635353][T14229] debugfs: 'hsr0' already exists in 'hsr' [ 1084.674255][T14229] Cannot create hsr debugfs directory [ 1085.027487][T10640] Bluetooth: hci8: command tx timeout [ 1086.943675][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1087.107672][T10640] Bluetooth: hci8: command tx timeout [ 1087.607901][T11001] netdevsim netdevsim1 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.875784][T11503] netdevsim netdevsim1 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.178952][ T160] netdevsim netdevsim1 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.505609][ T160] netdevsim netdevsim1 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.563485][T10928] bridge_slave_1: left allmulticast mode [ 1088.593239][T10928] bridge_slave_1: left promiscuous mode [ 1088.630821][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.694710][T10928] bridge_slave_0: left allmulticast mode [ 1088.739906][T10928] bridge_slave_0: left promiscuous mode [ 1088.785696][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.868711][T10928] bridge_slave_1: left allmulticast mode [ 1088.900265][T10928] bridge_slave_1: left promiscuous mode [ 1088.920178][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.977869][T10928] bridge_slave_0: left allmulticast mode [ 1089.005632][T10928] bridge_slave_0: left promiscuous mode [ 1089.035849][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.188745][T10640] Bluetooth: hci8: command tx timeout [ 1089.429181][T10928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.490076][T10928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.540852][T10928] bond0 (unregistering): Released all slaves [ 1089.926032][T10928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.950958][T10928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.974595][T10928] bond0 (unregistering): Released all slaves [ 1091.976474][T14141] netdevsim netdevsim1 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.172211][T10928] hsr_slave_0: left promiscuous mode [ 1095.204383][T10928] hsr_slave_1: left promiscuous mode [ 1095.227091][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.291950][T10928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.382917][T10928] hsr_slave_0: left promiscuous mode [ 1095.411219][T14471] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1095.453204][T10928] hsr_slave_1: left promiscuous mode [ 1095.463529][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.495172][T10928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.532163][T14471] CIFS: Attempting to mount //127.0.0.1/share [ 1095.623882][T14471] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1095.674069][T14471] CIFS: VFS: cifs_mount failed w/return code = -101 [ 1095.975612][T10928] team0 (unregistering): Port device team_slave_1 removed [ 1096.023445][T10928] team0 (unregistering): Port device team_slave_0 removed [ 1096.617026][T14481] fuse: fd is not a fuse device [ 1097.038168][T10928] team0 (unregistering): Port device team_slave_1 removed [ 1097.442127][T10928] team0 (unregistering): Port device team_slave_0 removed [ 1097.996551][T14141] netdevsim netdevsim1 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.266407][T14141] netdevsim netdevsim1 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.317616][T14141] netdevsim netdevsim1 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.427695][T14510] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1106.033898][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.076016][T14329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.116757][T14329] bridge_slave_0: entered allmulticast mode [ 1106.154716][T14329] bridge_slave_0: entered promiscuous mode [ 1106.804642][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.841447][T14329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.892864][T14329] bridge_slave_1: entered allmulticast mode [ 1106.936425][T14329] bridge_slave_1: entered promiscuous mode [ 1107.193798][T12862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1107.209908][T12862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1107.223147][T12862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1107.234609][T12862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1107.246572][T12862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1107.583637][T14329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.941957][T14329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1108.211303][T14371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.267202][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.325630][T14371] bridge_slave_0: entered allmulticast mode [ 1108.381361][T14371] bridge_slave_0: entered promiscuous mode [ 1108.448369][T14371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.503215][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.553129][T14371] bridge_slave_1: entered allmulticast mode [ 1108.791535][T14371] bridge_slave_1: entered promiscuous mode [ 1109.218005][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1109.349938][T12862] Bluetooth: hci4: command tx timeout [ 1109.567880][T14229] netdevsim netdevsim9 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.963782][T14329] team0: Port device team_slave_0 added [ 1110.001314][T14329] team0: Port device team_slave_1 added [ 1110.410524][T14229] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.535143][T14371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.676354][T14329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.721825][T14329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.881966][T14329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.975565][T14329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.213282][T14329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.202827][T12862] Bluetooth: hci4: command tx timeout [ 1113.128354][T14329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.182345][T14371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.395215][T14229] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.875995][T14229] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.004021][T14371] team0: Port device team_slave_0 added [ 1114.033626][T14371] team0: Port device team_slave_1 added [ 1114.227667][T10640] Bluetooth: hci4: command tx timeout [ 1114.415309][ T36] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.603639][T14329] hsr_slave_0: entered promiscuous mode [ 1114.633946][T14329] hsr_slave_1: entered promiscuous mode [ 1114.791164][T14371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.830997][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1114.962592][T12862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1114.975070][T12862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1114.983204][T12862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1114.991768][T12862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1114.999739][T12862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1115.049315][T14371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.122699][ T36] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.193765][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.207881][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.438446][T14371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.510254][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.307988][T12862] Bluetooth: hci4: command tx timeout [ 1117.111307][T12862] Bluetooth: hci6: command tx timeout [ 1117.263774][T14371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.978371][T14590] loop5: detected capacity change from 0 to 1764 [ 1118.012939][T11502] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.084471][T14589] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1118.614878][ T6561] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.187846][T12862] Bluetooth: hci6: command tx timeout [ 1121.268955][T12862] Bluetooth: hci6: command tx timeout [ 1121.368133][T14371] hsr_slave_0: entered promiscuous mode [ 1121.399513][T14371] hsr_slave_1: entered promiscuous mode [ 1121.445290][T14371] debugfs: 'hsr0' already exists in 'hsr' [ 1121.486497][T14371] Cannot create hsr debugfs directory [ 1122.497687][T14624] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1123.902572][T12862] Bluetooth: hci6: command tx timeout [ 1128.127175][ T6951] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.366708][ T6951] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.506169][ T6099] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.915750][ T160] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.942475][T10928] bridge_slave_1: left allmulticast mode [ 1128.971547][T10928] bridge_slave_1: left promiscuous mode [ 1128.994929][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.026649][T10928] bridge_slave_0: left allmulticast mode [ 1129.051451][T10928] bridge_slave_0: left promiscuous mode [ 1129.071486][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.116861][T10928] bridge_slave_1: left allmulticast mode [ 1129.134047][T10928] bridge_slave_1: left promiscuous mode [ 1129.155720][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.185282][T10928] bridge_slave_0: left allmulticast mode [ 1129.211911][T10928] bridge_slave_0: left promiscuous mode [ 1129.234772][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.178840][T10928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1130.319631][T10928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1130.474255][T10928] bond0 (unregistering): Released all slaves [ 1131.223186][T10928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.294802][T10928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.376409][T10928] bond0 (unregistering): Released all slaves [ 1131.483861][T14535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.562859][T14535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.630519][T14535] bridge_slave_0: entered allmulticast mode [ 1131.710965][T14535] bridge_slave_0: entered promiscuous mode [ 1131.785099][T14535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.846352][T14535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.905049][T14535] bridge_slave_1: entered allmulticast mode [ 1131.958970][T14535] bridge_slave_1: entered promiscuous mode [ 1132.040162][T10640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1132.056774][T10640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1132.067163][T10640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1132.077643][T10640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1132.088024][T10640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1132.211806][T10928] hsr_slave_0: left promiscuous mode [ 1132.236559][ T5627] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1132.257515][T10928] hsr_slave_1: left promiscuous mode [ 1132.288176][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.328624][T10928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.376772][T10928] hsr_slave_0: left promiscuous mode [ 1132.406045][T10928] hsr_slave_1: left promiscuous mode [ 1132.422284][ T5627] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1132.438639][T10928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.459915][ T5627] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.492309][T10928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.538199][ T5627] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 1132.582671][ T5627] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1132.627925][ T5627] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1133.093702][T10928] team0 (unregistering): Port device team_slave_1 removed [ 1133.172197][T10928] team0 (unregistering): Port device team_slave_0 removed [ 1133.953819][T10928] team0 (unregistering): Port device team_slave_1 removed [ 1134.004120][T10928] team0 (unregistering): Port device team_slave_0 removed [ 1134.147997][T10640] Bluetooth: hci2: command tx timeout [ 1134.728601][T14329] netdevsim netdevsim7 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.046821][T14535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.196453][T14535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.440028][T14329] netdevsim netdevsim7 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.748384][T14535] team0: Port device team_slave_0 added [ 1135.825885][T14535] team0: Port device team_slave_1 added [ 1136.076034][T14329] netdevsim netdevsim7 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.190666][T14741] ubi: mtd0 is already attached to ubi16 [ 1136.229889][T10640] Bluetooth: hci2: command tx timeout [ 1136.459724][T14535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.515196][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.680635][T14535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.740822][T14535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.779092][T14535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.920027][T14535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.010849][T14329] netdevsim netdevsim7 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1137.567636][T14760] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1138.909725][T10640] Bluetooth: hci2: command tx timeout [ 1139.523871][T14582] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.594842][T14582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.648409][T12862] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1139.660698][T12862] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1139.668788][T12862] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1139.682374][T12862] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1139.691577][T12862] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1139.748257][T14582] bridge_slave_0: entered allmulticast mode [ 1139.822474][T14582] bridge_slave_0: entered promiscuous mode [ 1139.884731][T14582] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.939336][T14582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.991122][T14582] bridge_slave_1: entered allmulticast mode [ 1140.051386][T14582] bridge_slave_1: entered promiscuous mode [ 1140.422985][T14535] hsr_slave_0: entered promiscuous mode [ 1140.472225][T14535] hsr_slave_1: entered promiscuous mode [ 1140.516570][T14535] debugfs: 'hsr0' already exists in 'hsr' [ 1140.562555][T14535] Cannot create hsr debugfs directory [ 1140.730096][T14371] netdevsim netdevsim8 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.950552][T12862] Bluetooth: hci2: command tx timeout [ 1141.062274][T14582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.452809][T14582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.693074][T14794] retu-mfd 0-0001: could not read Retu revision: -5 [ 1141.882914][T12862] Bluetooth: hci7: command tx timeout [ 1141.925908][T14794] retu-mfd 0-0001: probe with driver retu-mfd failed with error -5 [ 1142.936190][T14794] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 1143.909201][T12862] Bluetooth: hci7: command tx timeout [ 1143.918239][T14371] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.235005][T14796] retu-mfd 0-0002: could not read Tahvo revision: -5 [ 1145.305524][T14796] retu-mfd 0-0002: probe with driver retu-mfd failed with error -5 [ 1145.387231][T14796] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 1145.631896][T14371] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.760928][T14582] team0: Port device team_slave_0 added [ 1145.806823][T14582] team0: Port device team_slave_1 added [ 1145.916986][T12040] ------------[ cut here ]------------ [ 1145.922858][T12040] time_after(jiffies, warn_timeout) [ 1145.922874][T12040] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x36c/0x9d0, CPU#0: syz.2.1957/12040 [ 1145.938953][T12040] Modules linked in: [ 1145.942873][T12040] CPU: 0 UID: 0 PID: 12040 Comm: syz.2.1957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1145.953883][T12040] Tainted: [L]=SOFTLOCKUP [ 1145.958232][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1145.968323][T12040] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 1145.974308][T12040] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 4f 5e 69 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 7f a5 f2 fc 4d 85 ff 79 aa e8 d5 aa f2 fc 90 <0f> 0b 90 eb 9f e8 ca aa f2 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 1145.995807][T12040] RSP: 0018:ffffc900037178c0 EFLAGS: 00010293 [ 1146.002410][T12040] RAX: 0000000000000000 RBX: ffff8880232c2000 RCX: ffffffff85179441 [ 1146.010451][T12040] RDX: ffff88802c588000 RSI: ffffffff8517944b RDI: ffff88802c588000 [ 1146.018594][T12040] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 1146.026641][T12040] R10: ffffffffffffe8e3 R11: 0000000000000000 R12: 00000001000132e3 [ 1146.034672][T12040] R13: 0000000000001b58 R14: ffff8880232c2018 R15: ffffffffffffe8e3 [ 1146.042720][T12040] FS: 00007f04fca5e6c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1146.051706][T12040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1146.058327][T12040] CR2: 00007feab4b556b8 CR3: 0000000075dc1000 CR4: 0000000000350ef0 [ 1146.066291][T12040] Call Trace: [ 1146.069619][T12040] [ 1146.072564][T12040] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1146.078158][T12040] ? __pfx___might_resched+0x10/0x10 [ 1146.083445][T12040] ? io_wq_set_exit_on_idle+0x156/0x290 [ 1146.089847][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.095494][T12040] io_uring_clean_tctx+0x114/0x180 [ 1146.101067][T12040] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1146.106736][T12040] ? percpu_counter_add_batch+0xb9/0x230 [ 1146.112438][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.118108][T12040] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 1146.124644][T12040] io_uring_cancel_generic+0x798/0x7f0 [ 1146.130160][T12040] ? futex_unqueue+0x133/0x2c0 [ 1146.134936][T12040] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1146.140984][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.146630][T12040] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1146.152765][T12040] ? do_exit+0x2b6/0x2ae0 [ 1146.157150][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.162834][T12040] ? rcu_is_watching+0x12/0xc0 [ 1146.167643][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.173297][T12040] ? io_uring_unreg_ringfd+0xca/0x140 [ 1146.178709][T12040] do_exit+0x344/0x2ae0 [ 1146.182891][T12040] ? __pfx_do_exit+0x10/0x10 [ 1146.187557][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.193967][T12040] ? do_raw_spin_lock+0x128/0x260 [ 1146.199403][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.205080][T12040] ? find_held_lock+0x2b/0x80 [ 1146.209807][T12040] ? get_signal+0x7e0/0x21e0 [ 1146.214406][T12040] do_group_exit+0xd5/0x2a0 [ 1146.218976][T12040] get_signal+0x1ec7/0x21e0 [ 1146.223524][T12040] ? __pfx_get_signal+0x10/0x10 [ 1146.228862][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.234500][T12040] ? do_futex+0x190/0x440 [ 1146.238896][T12040] arch_do_signal_or_restart+0x91/0x7e0 [ 1146.244444][T12040] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1146.250665][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.256319][T12040] ? fdget_pos+0x2c0/0x380 [ 1146.260795][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.266437][T12040] exit_to_user_mode_loop+0x139/0x6f0 [ 1146.271878][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.277561][T12040] ? rcu_is_watching+0x12/0xc0 [ 1146.282338][T12040] do_syscall_64+0x666/0x870 [ 1146.286953][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.293655][T12040] RIP: 0033:0x7f04fbb9de99 [ 1146.298507][T12040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.318522][T12040] RSP: 002b:00007f04fca5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1146.326975][T12040] RAX: fffffffffffffe00 RBX: 00007f04fbe25fa8 RCX: 00007f04fbb9de99 [ 1146.334979][T12040] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04fbe25fa8 [ 1146.343015][T12040] RBP: 00007f04fbe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.351041][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.359062][T12040] R13: 00007f04fbe26038 R14: 00007fff5e923f80 R15: 00007fff5e924068 [ 1146.367073][T12040] [ 1146.370144][T12040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1146.377416][T12040] CPU: 0 UID: 0 PID: 12040 Comm: syz.2.1957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.388348][T12040] Tainted: [L]=SOFTLOCKUP [ 1146.392655][T12040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1146.402695][T12040] Call Trace: [ 1146.405974][T12040] [ 1146.408895][T12040] dump_stack_lvl+0x100/0x190 [ 1146.413589][T12040] vpanic+0x552/0x970 [ 1146.417564][T12040] ? __pfx_vpanic+0x10/0x10 [ 1146.422069][T12040] panic+0xd1/0xe0 [ 1146.425784][T12040] ? __pfx_panic+0x10/0x10 [ 1146.430202][T12040] ? check_panic_on_warn+0x1f/0x90 [ 1146.435325][T12040] check_panic_on_warn.cold+0x19/0x34 [ 1146.440692][T12040] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1146.445899][T12040] __warn.cold+0x191/0x318 [ 1146.450315][T12040] __report_bug+0x30f/0x440 [ 1146.454817][T12040] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1146.460031][T12040] ? __pfx___report_bug+0x10/0x10 [ 1146.465058][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.470691][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.476324][T12040] ? do_raw_spin_lock+0x128/0x260 [ 1146.481350][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.486979][T12040] ? find_held_lock+0x2b/0x80 [ 1146.491667][T12040] ? __wait_for_common+0x1f3/0x4c0 [ 1146.496781][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.502411][T12040] ? rcu_is_watching+0x12/0xc0 [ 1146.507182][T12040] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1146.512390][T12040] report_bug+0xb2/0x220 [ 1146.516634][T12040] ? io_wq_put_and_exit+0x36c/0x9d0 [ 1146.521844][T12040] handle_bug+0x16a/0x2a0 [ 1146.526183][T12040] exc_invalid_op+0x17/0x50 [ 1146.530693][T12040] asm_exc_invalid_op+0x1a/0x20 [ 1146.535535][T12040] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 1146.541353][T12040] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 4f 5e 69 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 7f a5 f2 fc 4d 85 ff 79 aa e8 d5 aa f2 fc 90 <0f> 0b 90 eb 9f e8 ca aa f2 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 1146.560954][T12040] RSP: 0018:ffffc900037178c0 EFLAGS: 00010293 [ 1146.567017][T12040] RAX: 0000000000000000 RBX: ffff8880232c2000 RCX: ffffffff85179441 [ 1146.574976][T12040] RDX: ffff88802c588000 RSI: ffffffff8517944b RDI: ffff88802c588000 [ 1146.582939][T12040] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 1146.590897][T12040] R10: ffffffffffffe8e3 R11: 0000000000000000 R12: 00000001000132e3 [ 1146.598854][T12040] R13: 0000000000001b58 R14: ffff8880232c2018 R15: ffffffffffffe8e3 [ 1146.606822][T12040] ? io_wq_put_and_exit+0x361/0x9d0 [ 1146.612052][T12040] ? io_wq_put_and_exit+0x36b/0x9d0 [ 1146.617269][T12040] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 1146.622832][T12040] ? __pfx___might_resched+0x10/0x10 [ 1146.628111][T12040] ? io_wq_set_exit_on_idle+0x156/0x290 [ 1146.633667][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.639325][T12040] io_uring_clean_tctx+0x114/0x180 [ 1146.644448][T12040] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 1146.650089][T12040] ? percpu_counter_add_batch+0xb9/0x230 [ 1146.655732][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.661362][T12040] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 1146.667961][T12040] io_uring_cancel_generic+0x798/0x7f0 [ 1146.673437][T12040] ? futex_unqueue+0x133/0x2c0 [ 1146.678208][T12040] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 1146.684201][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.689835][T12040] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1146.695916][T12040] ? do_exit+0x2b6/0x2ae0 [ 1146.700253][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.705888][T12040] ? rcu_is_watching+0x12/0xc0 [ 1146.710656][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.716286][T12040] ? io_uring_unreg_ringfd+0xca/0x140 [ 1146.721667][T12040] do_exit+0x344/0x2ae0 [ 1146.725838][T12040] ? __pfx_do_exit+0x10/0x10 [ 1146.730434][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.736065][T12040] ? do_raw_spin_lock+0x128/0x260 [ 1146.741093][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.746723][T12040] ? find_held_lock+0x2b/0x80 [ 1146.751405][T12040] ? get_signal+0x7e0/0x21e0 [ 1146.756004][T12040] do_group_exit+0xd5/0x2a0 [ 1146.760518][T12040] get_signal+0x1ec7/0x21e0 [ 1146.765035][T12040] ? __pfx_get_signal+0x10/0x10 [ 1146.769887][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.775517][T12040] ? do_futex+0x190/0x440 [ 1146.779856][T12040] arch_do_signal_or_restart+0x91/0x7e0 [ 1146.785399][T12040] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1146.791554][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.797186][T12040] ? fdget_pos+0x2c0/0x380 [ 1146.801615][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.807253][T12040] exit_to_user_mode_loop+0x139/0x6f0 [ 1146.812625][T12040] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1146.818255][T12040] ? rcu_is_watching+0x12/0xc0 [ 1146.823028][T12040] do_syscall_64+0x666/0x870 [ 1146.827622][T12040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.833507][T12040] RIP: 0033:0x7f04fbb9de99 [ 1146.837935][T12040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.857550][T12040] RSP: 002b:00007f04fca5e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1146.865958][T12040] RAX: fffffffffffffe00 RBX: 00007f04fbe25fa8 RCX: 00007f04fbb9de99 [ 1146.873922][T12040] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f04fbe25fa8 [ 1146.881882][T12040] RBP: 00007f04fbe25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.889841][T12040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.897800][T12040] R13: 00007f04fbe26038 R14: 00007fff5e923f80 R15: 00007fff5e924068 [ 1146.905776][T12040] [ 1146.908827][T12040] Kernel Offset: disabled [ 1146.913136][T12040] Rebooting in 86400 seconds..