last executing test programs: 44.610911184s ago: executing program 2 (id=4588): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c8) syz_emit_ethernet(0x62, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "fec498", 0x2c, 0x6, 0xff, @local, @mcast2, {[@dstopts={0x0, 0x1, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x100}]}], {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0xfffb, 0x0, 0xac4e}}}}}}}, 0x0) 44.328213122s ago: executing program 2 (id=4590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 43.955340953s ago: executing program 2 (id=4591): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) 43.860856485s ago: executing program 4 (id=4592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x28, 'cbc(twofish)\x00'}, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 43.561668076s ago: executing program 4 (id=4594): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, &(0x7f00000002c0)=""/75, 0x4b, 0x0) 42.828005908s ago: executing program 4 (id=4599): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 42.657518073s ago: executing program 2 (id=4600): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x8, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0xd6b9, 0x3, 0x2, 0x10, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x80}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x835, &(0x7f0000000440)={0x11, 0xf4, r8, 0x1, 0x1, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r3) fremovexattr(r4, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x50080, 0xda) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x14c, 0x0, 0x204, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4a3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008}, 0x41) 41.532368737s ago: executing program 4 (id=4605): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.433438031s ago: executing program 2 (id=4607): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9, 0x1, 0x1, 0x9, 0x13ec, 0x1}, 0x20) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x600, 0x0, 0x37}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x2, "0666"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) close(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb3, 0xb3, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x12000000}}, @datasec={0x10, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x9, 0x3}, {0x4, 0x8, 0xffffff88}, {0x5, 0x2, 0x401}, {0x5, 0x4, 0x4}, {0x1, 0xec3, 0xb}, {0x2, 0x100, 0xd}, {0x2, 0x6fc3, 0x5}], "0af519"}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x2}, {0x6, 0x3}, {0xd, 0x5}, {0xc, 0x2}]}, @typedef={0x1}]}}, &(0x7f00000002c0)=""/112, 0xce, 0x70, 0x0, 0x611}, 0x28) 38.522968855s ago: executing program 4 (id=4612): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 38.312387087s ago: executing program 4 (id=4613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 37.847226625s ago: executing program 2 (id=4614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x80, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5e, 0x33, @beacon={{{}, {0x99f}}, 0x3, @random=0x1, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x1}}, @void, @val={0x5, 0x3, {0xd0, 0x76, 0x3}}, @val={0x25, 0x3, {0x1, 0x3c, 0x1}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x21, 0x6, 0x34, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf6, 0x40}}, @val={0x76, 0x6, {0x5, 0x10, 0x5, 0x2}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) 37.686579738s ago: executing program 1 (id=4616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) 36.747946918s ago: executing program 1 (id=4619): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x6, 0xfefe, 0x0, 'syz0\x00', 0xfffffefd}, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x8, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0xd6b9, 0x3, 0x2, 0x10, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x80}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x835, &(0x7f0000000440)={0x11, 0xf4, r8, 0x1, 0x1, 0x6, @multicast}, 0x14) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r3) fremovexattr(r4, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/uevent_seqnum', 0x50080, 0xda) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)={0x14c, 0x0, 0x204, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x6}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4a3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4008}, 0x41) 35.387320815s ago: executing program 3 (id=4620): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='source', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffff9, 0x1, 0x1, 0x9, 0x13ec, 0x1}, 0x20) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000000)={0x600, 0x0, 0x37}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "051000"}, @local=@item_012={0x1, 0x2, 0x9, "d3"}]}}, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)={0x40, 0x18, 0x2, "0666"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)='%ps \x00'}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.946523376s ago: executing program 1 (id=4622): syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) read$FUSE(r4, &(0x7f00000002c0)={0x2020}, 0x2020) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) 34.005045977s ago: executing program 1 (id=4625): r0 = socket(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 33.496044056s ago: executing program 1 (id=4626): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) 32.774839114s ago: executing program 3 (id=4629): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="67400f07c40249af4b8bb9800000c00f32350102000066baf80cb8f9b54b88ef66bafc0cec0f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b6845a66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e1680659", 0x65}], 0x1, 0x7c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e80)={0x0, 0x4, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002fc0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000002c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000029c0)='GPL\x00', 0x1, 0xd, &(0x7f0000002c80)=""/13, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002d80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002dc0)={0x4, 0x0, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002ec0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r6], &(0x7f0000002f00)=[{0x5, 0x2, 0xe, 0xc}, {0x5, 0x3, 0x7, 0x8}, {0x3, 0x1, 0x10, 0x3}, {0x5, 0x5, 0xb, 0x2}, {0x0, 0x1, 0x3, 0xc}, {0x3, 0x1, 0xa, 0x2}, {0x4, 0x5, 0xb, 0x8}, {0x2, 0x1, 0xd, 0x9}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x15, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2d, 0x19, 0x8}, {0x0, 0xeeee6001, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0x9b}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x33339000, 0xc, 0x8, 0x4, 0x42, 0x5, 0xf7, 0x8, 0x3, 0xe, 0x48}, {0x4000, 0xf000, 0xb, 0x4, 0x15, 0x7, 0xab, 0x7e, 0x7, 0x83, 0xf7, 0x32}, {0x1000, 0x80a0000, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x45, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x6000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x5, 0x5, 0x7, 0x9}, {0xeeef0000, 0x9}, {0x10000, 0x7}, 0x80000031, 0x0, 0x2000, 0x2024, 0xc, 0x10800, 0x8000c00, [0x6800000000000000, 0x80000004, 0x5e, 0x8]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b109, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x23, 0xab, 0x38, 0x40, 0x3923, 0x718a, 0x695d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x77, 0x0, 0x26, 0x15, 0xbe}}]}}]}}, 0x0) sendmsg$inet(r7, &(0x7f0000002340)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000140)="f38a6ab1687f33a5425348c15980af2fdc3b19ec18c542674dd366bf20589f1bed2d2cc5e28017870fce3e2f568f23fc039d1eedf4a07d39bd34", 0x3a}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="3ef78845c8ef7a57e547afb4263ab02479fbb5171b4ba21e854e0b22902150be9ec68d414972421f43a8485d21c47bded141360dd408cdbd264a8ae31f30e0672deac8c86b7015f9649c059f2a01d2ec9837f74563eeff598a4a804dec15be3780a85f4388ec78d4a311e255147578", 0x6f}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="c8139fcdea0690917406075b2681cf421ad46f8521acaaec6c105f2e842324c66601fe8afd383b137dfe1a282b33e071eaea0b992afd1fb1f8e5c8e194e5d81b56fe5f687dffb0ea034e24fc30bd3348d9ba59dfbc68f30772155c5e37361f144199dbaa8ad7bc9b841c49783e095e41333ad445cc35b494503a819e", 0x7c}], 0x5, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}, 0x10) sendmmsg(r7, &(0x7f0000002bc0)=[{{&(0x7f0000002380)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002400)="a8bc3b477e224e5ee15909dbdf87f9546a3474738e601e42dcdeb29164854b55794d8a1a5c794fab9bc639750d5a5719", 0x30}, {&(0x7f0000002440)="b3eb70dd4998aa2c5374ae2e1e7e51f46e15deb9a7ace20724fa4bb1b40d137dbf4348b003b3e8b185d5226366d20afaeff6eef00669bafe6c51e221139e67a3277ab61f6c2b6062c29f2b1ce01aefb3f9943c5fdf5ef84d2b5942debfd7dd47f893a5103f5b99fb27ff0e3e21940179c49df519de5ef9c47b939a8164b8eedddafd2599b7094318aebc55ef7d0f51f0f88d0300ec4f55535eb9", 0x9a}, {&(0x7f0000002500)="000ae5d83c0cfd229d1c28001581d7ee7a09a565389f22bec30e50b8a960900d11ab8449e87c64dd922522a69cf40b61492f9524572c446c5b93143b5400fcd799478b30d0c13d04cd25e07d29177666da24941c14bf5ac2d71b3b2e1e0521e0b00802a6b15d061b", 0x68}, {&(0x7f0000002580)="765a39e7f160e710a781fbe6d1cbf656eaec617ea117d1fa8a15271844dbf54095149dd3b95d3ab50af59de6ea04542b59f438cd350786493ca6492a471a1b564112ec7778f92be6ebbc809d20d97e3546aa1bf33080e7dab98a26b166e7b91ecffa9c5db22f5d", 0x67}, {&(0x7f0000002600)="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", 0xfe}, {&(0x7f0000002700)="3d5483c509500ef241ae2b464a1a0ef5a0f0b8dbd1f6f376da7e1823d413799392191b48e0e1ae7729a3b8c7de9071632c095765475e76e05371c1238909d95af3dc", 0x42}, {&(0x7f0000002780)="7a24536d5e4b577243e931723bb28238cdb8e0f3984f4db8bf3075df9834d6e277de10a34cb99d1bd24a9db34d036dcb39be6a6ed380dbb7cfd93def04eeac4a0381a79ebe7874c0cfb30461af91b5ddcbc982e036c55c5a1b814c40a86373c3ea3e35d208e6f20a9c77a5b50305afeabb8d2990fee72b6eea83e939ea68531f7d62fa379374cb62c7c6d98fc131c4adc0f9aca6882e40efb92ce20a8469f84d22ce53e4a065a12efa3b60cd", 0xac}, {&(0x7f0000002840)="2b21f1be0c737a50437cff6b17b188a9538984a9032a0ee433cc9357b53eca38d2f62837056252f6124ebaff35142f39f5c7152858921dd438afb849fb89de6f3e1f662d717cb024f08188fd7cda05fd2163c9996f19e29e6b7671f5e9e2e552aa090180000000000000d19a2a23fd17b4c2ba7565e74f3a9615eac2f315ba9d13b9524a516c", 0x86}, {&(0x7f0000002900)="bb7e1da5816f176ca99e62a1d1612f4298534cd5d884ee99f12924e06d7401a7b3d2d580c90d47c1a417379a7161d2c7441a4bc4bcd379eb0f9bb76e416babd22c", 0x41}, {&(0x7f0000002980)="1843d687409f64f137c578527d7068ec22318fe700b1f2ce9d99d8a35cf5adcf9dab258e24aaa0ffa7", 0x29}], 0xa, &(0x7f0000002ac0)=[{0xe8, 0x0, 0x9, "1051baf59bb9fd3fd4039ed5e629efd2f17aa399e0a62d8c5acfde6404fc9abf1c31cb8f56ad05a8e23f573cb82dfd7f481ecd1aeb9d9eca3bd15dcb067272bcda1e4528e886856696da9ac024a0fdd3a092fe9bd9d318652c433f46f79670319f09a0171926864eeefc6d1fe47230339dc32ede084c94d810820349c3e6cdf2d0001db8a1868284bf108b062666aa0a1878bcc1ba66e447b418fde429398327dae72bfeed9a8eb8fe12bf414425ce062642c24662a206adbc8ea4f4624656583808fda60a6cce33eb023d376d78a00920d62a4e91"}], 0xe8}}], 0x1, 0x240488c0) 32.255902765s ago: executing program 1 (id=4630): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) connect$pppl2tp(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ip6gre0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r12, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r8}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r12, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0x11) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r7, @ANYRES32=r8], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3800000040001901feffffff00000000017c0000140042800f000a002e2425d42a7b2b2e4e2e00000c0001800600060065310000040008"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r15) 30.947150379s ago: executing program 3 (id=4632): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000400)="67400f07c40249af4b8bb9800000c00f32350102000066baf80cb8f9b54b88ef66bafc0cec0f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b6845a66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e1680659", 0x65}], 0x1, 0x7c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e80)={0x0, 0x4, 0x8}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002fc0)=@bpf_lsm={0x1d, 0x10, &(0x7f0000002c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@call={0x85, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000029c0)='GPL\x00', 0x1, 0xd, &(0x7f0000002c80)=""/13, 0x41100, 0x28, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002d80)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002dc0)={0x4, 0x0, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002ec0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r6], &(0x7f0000002f00)=[{0x5, 0x2, 0xe, 0xc}, {0x5, 0x3, 0x7, 0x8}, {0x3, 0x1, 0x10, 0x3}, {0x5, 0x5, 0xb, 0x2}, {0x0, 0x1, 0x3, 0xc}, {0x3, 0x1, 0xa, 0x2}, {0x4, 0x5, 0xb, 0x8}, {0x2, 0x1, 0xd, 0x9}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x15, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2d, 0x19, 0x8}, {0x0, 0xeeee6001, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x7f, 0x5, 0x3, 0x3, 0x9b}, {0xdddd1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0x33339000, 0xc, 0x8, 0x4, 0x42, 0x5, 0xf7, 0x8, 0x3, 0xe, 0x48}, {0x4000, 0xf000, 0xb, 0x4, 0x15, 0x7, 0xab, 0x7e, 0x7, 0x83, 0xf7, 0x32}, {0x1000, 0x80a0000, 0xd, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0xfd}, {0xffff1000, 0x2, 0x10, 0x5, 0x7, 0x45, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x6000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x5, 0x5, 0x7, 0x9}, {0xeeef0000, 0x9}, {0x10000, 0x7}, 0x80000031, 0x0, 0x2000, 0x2024, 0xc, 0x10800, 0x8000c00, [0x6800000000000000, 0x80000004, 0x5e, 0x8]}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b109, 0x40}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x23, 0xab, 0x38, 0x40, 0x3923, 0x718a, 0x695d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x77, 0x0, 0x26, 0x15, 0xbe}}]}}]}}, 0x0) sendmsg$inet(r7, &(0x7f0000002340)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000140)="f38a6ab1687f33a5425348c15980af2fdc3b19ec18c542674dd366bf20589f1bed2d2cc5e28017870fce3e2f568f23fc039d1eedf4a07d39bd34", 0x3a}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="3ef78845c8ef7a57e547afb4263ab02479fbb5171b4ba21e854e0b22902150be9ec68d414972421f43a8485d21c47bded141360dd408cdbd264a8ae31f30e0672deac8c86b7015f9649c059f2a01d2ec9837f74563eeff598a4a804dec15be3780a85f4388ec78d4a311e255147578", 0x6f}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="c8139fcdea0690917406075b2681cf421ad46f8521acaaec6c105f2e842324c66601fe8afd383b137dfe1a282b33e071eaea0b992afd1fb1f8e5c8e194e5d81b56fe5f687dffb0ea034e24fc30bd3348d9ba59dfbc68f30772155c5e37361f144199dbaa8ad7bc9b841c49783e095e41333ad445cc35b494503a819e", 0x7c}], 0x5, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}, 0x10) sendmmsg(r7, &(0x7f0000002bc0)=[{{&(0x7f0000002380)=@l2tp={0x2, 0x0, @local, 0x1}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002400)="a8bc3b477e224e5ee15909dbdf87f9546a3474738e601e42dcdeb29164854b55794d8a1a5c794fab9bc639750d5a5719", 0x30}, {&(0x7f0000002440)="b3eb70dd4998aa2c5374ae2e1e7e51f46e15deb9a7ace20724fa4bb1b40d137dbf4348b003b3e8b185d5226366d20afaeff6eef00669bafe6c51e221139e67a3277ab61f6c2b6062c29f2b1ce01aefb3f9943c5fdf5ef84d2b5942debfd7dd47f893a5103f5b99fb27ff0e3e21940179c49df519de5ef9c47b939a8164b8eedddafd2599b7094318aebc55ef7d0f51f0f88d0300ec4f55535eb9", 0x9a}, {&(0x7f0000002500)="000ae5d83c0cfd229d1c28001581d7ee7a09a565389f22bec30e50b8a960900d11ab8449e87c64dd922522a69cf40b61492f9524572c446c5b93143b5400fcd799478b30d0c13d04cd25e07d29177666da24941c14bf5ac2d71b3b2e1e0521e0b00802a6b15d061b", 0x68}, {&(0x7f0000002580)="765a39e7f160e710a781fbe6d1cbf656eaec617ea117d1fa8a15271844dbf54095149dd3b95d3ab50af59de6ea04542b59f438cd350786493ca6492a471a1b564112ec7778f92be6ebbc809d20d97e3546aa1bf33080e7da", 0x58}, {&(0x7f0000002600)="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", 0xfe}, {&(0x7f0000002700)="3d5483c509500ef241ae2b464a1a0ef5a0f0b8dbd1f6f376da7e1823d413799392191b48e0e1ae7729a3b8c7de9071632c095765475e76e05371c1238909d95af3dc", 0x42}, {&(0x7f0000002780)="7a24536d5e4b577243e931723bb28238cdb8e0f3984f4db8bf3075df9834d6e277de10a34cb99d1bd24a9db34d036dcb39be6a6ed380dbb7cfd93def04eeac4a0381a79ebe7874c0cfb30461af91b5ddcbc982e036c55c5a1b814c40a86373c3ea3e35d208e6f20a9c77a5b50305afeabb8d2990fee72b6eea83e939ea68531f7d62fa379374cb62c7c6d98fc131c4adc0f9aca6882e40efb92ce20a8469f84d22ce53e4a065a12efa3b60cd", 0xac}, {&(0x7f0000002840)="2b21f1be0c737a50437cff6b17b188a9538984a9032a0ee433cc9357b53eca38d2f62837056252f6124ebaff35142f39f5c7152858921dd438afb849fb89de6f3e1f662d717cb024f08188fd7cda05fd2163c9996f19e29e6b7671f5e9e2e552aa090180000000000000d19a2a23fd17b4c2ba7565e74f3a9615eac2f315ba9d13b9524a516c", 0x86}, {&(0x7f0000002900)="bb7e1da5816f176ca99e62a1d1612f4298534cd5d884ee99f12924e06d7401a7b3d2d580c90d47c1a417379a7161d2c7441a4bc4bcd379eb0f9bb76e416babd22c", 0x41}, {&(0x7f0000002980)="1843d687409f64f137c578527d7068ec22318fe700b1f2ce9d99d8a35cf5adcf9dab258e24aaa0ffa7", 0x29}], 0xa, &(0x7f0000002ac0)=[{0xe8, 0x0, 0x9, "1051baf59bb9fd3fd4039ed5e629efd2f17aa399e0a62d8c5acfde6404fc9abf1c31cb8f56ad05a8e23f573cb82dfd7f481ecd1aeb9d9eca3bd15dcb067272bcda1e4528e886856696da9ac024a0fdd3a092fe9bd9d318652c433f46f79670319f09a0171926864eeefc6d1fe47230339dc32ede084c94d810820349c3e6cdf2d0001db8a1868284bf108b062666aa0a1878bcc1ba66e447b418fde429398327dae72bfeed9a8eb8fe12bf414425ce062642c24662a206adbc8ea4f4624656583808fda60a6cce33eb023d376d78a00920d62a4e91"}], 0xe8}}], 0x1, 0x240488c0) 28.768639548s ago: executing program 3 (id=4635): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fchdir(r2) r3 = gettid() r4 = syz_open_procfs(r3, 0x0) write$khugepaged_scan(r4, &(0x7f00000000c0), 0x8) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 28.441056985s ago: executing program 3 (id=4636): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x80}, 0x0) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0x200fad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000700"], 0x1c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xa6, 0x1, 0x7fff, 0x3, 0xa, 0x4, "47b577f39557a0d6d89ed119668a907c7eead4b4a5eff82fd08b56478b3955f05516199a451184585a00060e6dc95ec2addda392611dbd702eae28a15b1070041bdafce8b19c2b14ee47146c64e70aea6b56a2bd91c87ee4cbd2be5b4e0d81d044ed5be1ea0dcfd57f7f36006fe3d2a764d0073a8523b3dd28205dad2e798f7a7d8080cb820b30c3e9d0de47fdd60e0b6be42d67df1813eb2826884c62cea6e2edb805227dcd"}}, 0x1be) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000040000"], 0x48) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) 27.508806666s ago: executing program 3 (id=4639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 22.736367348s ago: executing program 32 (id=4614): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x80, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x5e, 0x33, @beacon={{{}, {0x99f}}, 0x3, @random=0x1, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x1}}, @void, @val={0x5, 0x3, {0xd0, 0x76, 0x3}}, @val={0x25, 0x3, {0x1, 0x3c, 0x1}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @val={0x3c, 0x4, {0x21, 0x6, 0x34, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf6, 0x40}}, @val={0x76, 0x6, {0x5, 0x10, 0x5, 0x2}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) 22.700371383s ago: executing program 33 (id=4613): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 17.225735489s ago: executing program 34 (id=4630): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) connect$pppl2tp(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ip6gre0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r11, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r12 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r12, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r8}) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r12, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20044001}, 0x11) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008000100", @ANYRES32=r7, @ANYRES32=r8], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="3800000040001901feffffff00000000017c0000140042800f000a002e2425d42a7b2b2e4e2e00000c0001800600060065310000040008"], 0x38}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r15) 16.555066097s ago: executing program 0 (id=4655): chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file0\x00') 15.626852525s ago: executing program 0 (id=4656): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0xc8, 0x0, 0x316f, 0x0, 0x30, "ec28a144f13d7607"}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x3}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 15.567611043s ago: executing program 0 (id=4657): socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) open(&(0x7f0000000000)='./file0/file1\x00', 0x101002, 0x17d) 15.510018539s ago: executing program 0 (id=4658): open(&(0x7f0000000080)='./file1\x00', 0x101c41, 0xa8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\r'], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x880) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x20) 15.478601984s ago: executing program 0 (id=4659): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) iopl(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x126) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, 0x0, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x9e, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0x1000000c, 0x0, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 15.426408385s ago: executing program 0 (id=4660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 11.722519548s ago: executing program 35 (id=4639): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf250300000008000100000000000800010000000000340007800c00018008", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 0s ago: executing program 36 (id=4660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000100)='p', 0x1}], 0x1, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 17368] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1451.543284][T17368] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1451.863447][T17368] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1451.906619][T17368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.955771][T17368] usbtmc 2-1:16.0: bulk endpoints not found [ 1452.144792][T21017] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1452.154375][T21017] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1453.754426][T21035] usb 2-1: USB disconnect, device number 37 [ 1454.057368][T21036] hub 2-0:1.0: USB hub found [ 1454.064673][T21036] hub 2-0:1.0: 1 port detected [ 1455.632787][T21054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21054 comm=syz.2.4082 [ 1456.727208][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4087'. [ 1457.501477][T21076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1457.510324][T21076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1459.205259][T11421] Bluetooth: hci0: command 0x0406 tx timeout [ 1464.087932][T21125] netlink: 'syz.2.4100': attribute type 10 has an invalid length. [ 1464.098396][T21112] nbd43: detected capacity change from 0 to 127 [ 1464.105402][T21125] openvswitch: netlink: Actions may not be safe on all matching packets [ 1464.115865][T21119] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4100'. [ 1464.132753][T21119] block nbd0: reconnected socket [ 1464.137754][T21119] nbd: socks must be embedded in a SOCK_ITEM attr [ 1464.181047][T21127] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1465.096310][T16872] block nbd0: Receive control failed (result -32) [ 1465.103004][T11421] block nbd43: Receive control failed (result -104) [ 1465.788627][T21151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4106'. [ 1467.568905][T21164] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1467.572387][T19754] block nbd43: Connection timed out, retrying (0/1 alive) [ 1467.657518][T21167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1467.671752][T18843] block nbd43: Dead connection, failed to find a fallback [ 1467.681122][T19754] block nbd43: Connection timed out, retrying (0/1 alive) [ 1467.689106][T18843] block nbd43: shutting down sockets [ 1467.696033][T19754] block nbd43: Connection timed out, retrying (0/1 alive) [ 1467.703948][T18843] blk_print_req_error: 138 callbacks suppressed [ 1467.703975][T18843] I/O error, dev nbd43, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1467.720773][T19754] block nbd43: Connection timed out, retrying (0/1 alive) [ 1467.728803][T18843] buffer_io_error: 138 callbacks suppressed [ 1467.728829][T18843] Buffer I/O error on dev nbd43, logical block 0, async page read [ 1467.745087][T18843] I/O error, dev nbd43, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1467.755024][T18843] Buffer I/O error on dev nbd43, logical block 3, async page read [ 1467.764145][T18843] I/O error, dev nbd43, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1467.980147][T18843] Buffer I/O error on dev nbd43, logical block 2, async page read [ 1467.989995][T18843] I/O error, dev nbd43, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1467.999424][T18843] Buffer I/O error on dev nbd43, logical block 1, async page read [ 1468.007920][T19638] I/O error, dev nbd43, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1468.017996][T19638] Buffer I/O error on dev nbd43, logical block 0, async page read [ 1468.026326][T19638] I/O error, dev nbd43, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1468.035753][T19638] Buffer I/O error on dev nbd43, logical block 1, async page read [ 1468.044191][T19638] I/O error, dev nbd43, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1468.053631][T19638] Buffer I/O error on dev nbd43, logical block 2, async page read [ 1468.061585][T19638] I/O error, dev nbd43, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1468.071057][T19638] Buffer I/O error on dev nbd43, logical block 3, async page read [ 1468.122885][T19638] I/O error, dev nbd43, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1468.132097][T19638] Buffer I/O error on dev nbd43, logical block 0, async page read [ 1468.147445][ T30] audit: type=1400 audit(1763724299.002:364): avc: denied { write } for pid=21161 comm="syz.0.4112" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1468.152733][T19638] I/O error, dev nbd43, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1468.229066][T19638] Buffer I/O error on dev nbd43, logical block 1, async page read [ 1468.266202][T19638] ldm_validate_partition_table(): Disk read failed. [ 1468.352720][ T30] audit: type=1400 audit(1763724299.002:365): avc: denied { open } for pid=21161 comm="syz.0.4112" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1468.377319][ T30] audit: type=1400 audit(1763724299.002:366): avc: denied { ioctl } for pid=21161 comm="syz.0.4112" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1469.410065][T19638] Dev nbd43: unable to read RDB block 0 [ 1469.506114][T19638] nbd43: unable to read partition table [ 1469.677696][T19638] ldm_validate_partition_table(): Disk read failed. [ 1469.717861][T19638] Dev nbd43: unable to read RDB block 0 [ 1469.973677][T19638] nbd43: unable to read partition table [ 1470.434526][T21207] netlink: 'syz.2.4119': attribute type 10 has an invalid length. [ 1470.523892][T21208] openvswitch: netlink: Actions may not be safe on all matching packets [ 1470.753843][T21194] nbd44: detected capacity change from 0 to 127 [ 1471.197852][T21200] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4119'. [ 1471.576900][T11421] block nbd44: Receive control failed (result -104) [ 1472.696709][T21231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1474.250888][ T5812] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1474.502814][ T5812] usb 4-1: Using ep0 maxpacket: 8 [ 1474.616923][T21249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1474.622727][T19754] block nbd44: Connection timed out, retrying (0/1 alive) [ 1474.648213][ T11] block nbd44: Dead connection, failed to find a fallback [ 1474.655412][ T11] block nbd44: shutting down sockets [ 1474.660995][T19754] block nbd44: Connection timed out, retrying (0/1 alive) [ 1474.672675][ T11] blk_print_req_error: 138 callbacks suppressed [ 1474.672687][ T11] I/O error, dev nbd44, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.706048][T19754] block nbd44: Connection timed out, retrying (0/1 alive) [ 1474.740410][T19754] block nbd44: Connection timed out, retrying (0/1 alive) [ 1474.752915][ T11] buffer_io_error: 138 callbacks suppressed [ 1474.752924][ T11] Buffer I/O error on dev nbd44, logical block 0, async page read [ 1474.811799][ T11] I/O error, dev nbd44, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.848576][ T11] Buffer I/O error on dev nbd44, logical block 3, async page read [ 1474.883586][ T11] I/O error, dev nbd44, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.920000][ T11] Buffer I/O error on dev nbd44, logical block 2, async page read [ 1474.955870][ T11] I/O error, dev nbd44, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1474.996677][ T11] Buffer I/O error on dev nbd44, logical block 1, async page read [ 1475.027148][T19638] I/O error, dev nbd44, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.178999][ T5812] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1475.215866][T19638] Buffer I/O error on dev nbd44, logical block 0, async page read [ 1475.265668][T21253] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1475.274631][T21253] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1475.340414][T19638] I/O error, dev nbd44, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.453077][T19638] Buffer I/O error on dev nbd44, logical block 1, async page read [ 1475.485054][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1475.495115][ T5812] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1475.516931][ T5812] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1475.524854][T19638] I/O error, dev nbd44, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.547537][ T5812] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1475.556682][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.591692][T19638] Buffer I/O error on dev nbd44, logical block 2, async page read [ 1475.634835][T19638] I/O error, dev nbd44, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1475.673675][T19638] Buffer I/O error on dev nbd44, logical block 3, async page read [ 1475.831829][ T5812] usb 4-1: usb_control_msg returned -32 [ 1475.857855][ T5812] usbtmc 4-1:16.0: can't read capabilities [ 1475.862822][T19638] I/O error, dev nbd44, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1476.311008][T19638] Buffer I/O error on dev nbd44, logical block 0, async page read [ 1476.325469][ T5812] usb 4-1: USB disconnect, device number 34 [ 1476.333792][T19638] I/O error, dev nbd44, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1476.363331][T19638] Buffer I/O error on dev nbd44, logical block 1, async page read [ 1476.378349][T19638] ldm_validate_partition_table(): Disk read failed. [ 1476.409969][T19638] Dev nbd44: unable to read RDB block 0 [ 1476.439192][T19638] nbd44: unable to read partition table [ 1476.476650][T19638] ldm_validate_partition_table(): Disk read failed. [ 1476.544123][T19638] Dev nbd44: unable to read RDB block 0 [ 1476.619698][T19638] nbd44: unable to read partition table [ 1478.677692][T21289] netlink: 'syz.0.4141': attribute type 10 has an invalid length. [ 1478.709196][T21289] openvswitch: netlink: Actions may not be safe on all matching packets [ 1478.725755][T21283] nbd45: detected capacity change from 0 to 127 [ 1478.763210][T21287] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4141'. [ 1478.772276][T21287] block nbd0: reconnected socket [ 1478.822681][T21287] nbd: socks must be embedded in a SOCK_ITEM attr [ 1478.844334][T16872] block nbd0: Receive control failed (result -32) [ 1478.852961][T11421] block nbd45: Receive control failed (result -104) [ 1479.165077][T21294] hub 2-0:1.0: USB hub found [ 1479.172668][T21294] hub 2-0:1.0: 1 port detected [ 1479.732057][T21302] overlayfs: missing 'lowerdir' [ 1480.063342][T21312] netlink: 'syz.1.4147': attribute type 10 has an invalid length. [ 1480.078561][T21312] openvswitch: netlink: Actions may not be safe on all matching packets [ 1480.092697][T21309] nbd46: detected capacity change from 0 to 127 [ 1480.100809][T21311] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1480.127076][T21311] block nbd0: reconnected socket [ 1480.141560][T21311] nbd: socks must be embedded in a SOCK_ITEM attr [ 1480.262025][T11421] block nbd46: Receive control failed (result -104) [ 1480.271989][T16872] block nbd0: Receive control failed (result -32) [ 1480.859627][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1481.014212][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1481.517256][T21332] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1481.551224][T21332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1482.325373][T18843] block nbd45: Connection timed out, retrying (0/1 alive) [ 1482.333136][T18843] block nbd45: Connection timed out, retrying (0/1 alive) [ 1482.340280][T18843] block nbd45: Connection timed out, retrying (0/1 alive) [ 1482.347654][T18843] block nbd45: Connection timed out, retrying (0/1 alive) [ 1482.354826][ T11] block nbd45: Dead connection, failed to find a fallback [ 1482.361952][ T11] block nbd45: shutting down sockets [ 1482.367311][ T11] blk_print_req_error: 138 callbacks suppressed [ 1482.367320][ T11] I/O error, dev nbd45, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.382930][ T11] buffer_io_error: 138 callbacks suppressed [ 1482.382943][ T11] Buffer I/O error on dev nbd45, logical block 2, async page read [ 1482.441068][ T11] I/O error, dev nbd45, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.450201][ T11] Buffer I/O error on dev nbd45, logical block 1, async page read [ 1482.458085][ T11] I/O error, dev nbd45, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.467287][ T11] Buffer I/O error on dev nbd45, logical block 0, async page read [ 1482.475149][ T11] I/O error, dev nbd45, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.484257][ T11] Buffer I/O error on dev nbd45, logical block 3, async page read [ 1482.492146][T19638] I/O error, dev nbd45, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.506438][T19638] Buffer I/O error on dev nbd45, logical block 0, async page read [ 1482.616818][T19638] I/O error, dev nbd45, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.645173][T19638] Buffer I/O error on dev nbd45, logical block 1, async page read [ 1482.656388][T19638] I/O error, dev nbd45, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.666035][T19638] Buffer I/O error on dev nbd45, logical block 2, async page read [ 1482.682286][T19638] I/O error, dev nbd45, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.710102][T19638] Buffer I/O error on dev nbd45, logical block 3, async page read [ 1482.718210][T19638] I/O error, dev nbd45, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.728642][T19638] Buffer I/O error on dev nbd45, logical block 0, async page read [ 1482.738703][T19638] I/O error, dev nbd45, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1482.747929][T19638] Buffer I/O error on dev nbd45, logical block 1, async page read [ 1482.758086][T19638] ldm_validate_partition_table(): Disk read failed. [ 1482.772126][T19638] Dev nbd45: unable to read RDB block 0 [ 1482.780867][T19638] nbd45: unable to read partition table [ 1482.799969][T19638] ldm_validate_partition_table(): Disk read failed. [ 1482.811153][T19638] Dev nbd45: unable to read RDB block 0 [ 1482.819335][T19638] nbd45: unable to read partition table [ 1482.893188][T21350] nbd47: detected capacity change from 0 to 127 [ 1483.082892][T21352] netlink: 'syz.4.4156': attribute type 3 has an invalid length. [ 1483.093992][T21352] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1483.162234][T16872] block nbd47: Receive control failed (result -104) [ 1483.492611][T13343] block nbd46: Connection timed out, retrying (0/1 alive) [ 1483.499886][T13343] block nbd46: Connection timed out, retrying (0/1 alive) [ 1483.507113][T13343] block nbd46: Connection timed out, retrying (0/1 alive) [ 1483.514403][ T11] block nbd46: Dead connection, failed to find a fallback [ 1483.521674][ T11] block nbd46: shutting down sockets [ 1483.527694][T13343] block nbd46: Connection timed out, retrying (0/1 alive) [ 1483.815700][T19658] ldm_validate_partition_table(): Disk read failed. [ 1483.881334][T19658] Dev nbd46: unable to read RDB block 0 [ 1483.907018][T19658] nbd46: unable to read partition table [ 1483.915029][ T30] audit: type=1400 audit(1763724314.762:367): avc: denied { mount } for pid=21362 comm="syz.4.4161" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1484.113225][T19658] ldm_validate_partition_table(): Disk read failed. [ 1484.254541][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.260968][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.548766][T19658] Dev nbd46: unable to read RDB block 0 [ 1484.556273][T19658] nbd46: unable to read partition table [ 1484.707645][ T30] audit: type=1400 audit(1763724315.562:368): avc: denied { watch watch_reads } for pid=21362 comm="syz.4.4161" path="/bus" dev="sysfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1485.965751][T21381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21381 comm=syz.4.4165 [ 1486.403817][T16786] block nbd47: Connection timed out, retrying (0/1 alive) [ 1486.411021][T16786] block nbd47: Connection timed out, retrying (0/1 alive) [ 1486.418243][T14482] block nbd47: Dead connection, failed to find a fallback [ 1486.425845][T14482] block nbd47: shutting down sockets [ 1486.433085][T19638] ldm_validate_partition_table(): Disk read failed. [ 1486.461319][T19638] Dev nbd47: unable to read RDB block 0 [ 1486.480894][T19638] nbd47: unable to read partition table [ 1486.497870][T19638] ldm_validate_partition_table(): Disk read failed. [ 1486.513997][T19638] Dev nbd47: unable to read RDB block 0 [ 1486.528011][T19638] nbd47: unable to read partition table [ 1489.598551][T21422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1490.682884][T21435] nbd: must specify at least one socket [ 1490.875951][T21441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21441 comm=syz.3.4180 [ 1492.329152][T21453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.637642][T21473] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21473 comm=syz.3.4189 [ 1495.795200][ T5812] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1495.807279][T10628] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1496.033364][T10628] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1496.041969][T10628] usb 5-1: config 0 has no interface number 0 [ 1496.191076][ T5812] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1496.259942][ T5812] usb 2-1: can't read configurations, error -61 [ 1496.272946][T10628] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1496.304282][T10628] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.346323][T10628] usb 5-1: Product: syz [ 1496.370652][T10628] usb 5-1: Manufacturer: syz [ 1496.394142][T10628] usb 5-1: SerialNumber: syz [ 1496.408817][T10628] usb 5-1: config 0 descriptor?? [ 1496.422736][ T5812] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1496.486158][T21502] genirq: Flags mismatch irq 7. 00200000 (at-a2150c) vs. 00200080 (ttyS3) [ 1496.681245][T10628] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1496.696051][ T5812] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1496.696690][T10628] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1496.716751][T10628] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1496.717124][ T5812] usb 2-1: can't read configurations, error -61 [ 1496.725272][T10628] usb 5-1: media controller created [ 1496.739335][ T5812] usb usb2-port1: attempt power cycle [ 1496.748077][T10628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1496.935505][T10628] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1497.082672][ T5812] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1497.104976][ T5812] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1497.112675][ T5812] usb 2-1: can't read configurations, error -61 [ 1497.252698][ T5812] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1497.279287][ T5812] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1497.287417][ T5812] usb 2-1: can't read configurations, error -61 [ 1497.294309][ T5812] usb usb2-port1: unable to enumerate USB device [ 1498.735781][T10628] usb 5-1: USB disconnect, device number 37 [ 1499.101746][T21537] hub 2-0:1.0: USB hub found [ 1499.107496][T21537] hub 2-0:1.0: 1 port detected [ 1503.193138][ T5986] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1503.388069][ T5986] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1503.550873][ T5986] usb 2-1: config 0 has no interface number 0 [ 1504.163733][ T5986] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1504.320251][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.328602][ T5986] usb 2-1: Product: syz [ 1504.332962][ T5986] usb 2-1: Manufacturer: syz [ 1504.337644][ T5986] usb 2-1: SerialNumber: syz [ 1504.353493][ T5986] usb 2-1: config 0 descriptor?? [ 1504.596614][ T5986] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1504.606324][T21590] overlayfs: missing 'lowerdir' [ 1504.630411][ T5986] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1505.070713][ T5986] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1505.078836][ T5986] usb 2-1: media controller created [ 1505.159914][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1505.223245][ T5986] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1505.742826][ T5986] usb 2-1: USB disconnect, device number 43 [ 1506.032888][T21602] nbd48: detected capacity change from 0 to 127 [ 1506.049690][T21607] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4226'. [ 1506.101158][T11421] block nbd48: Receive control failed (result -104) [ 1506.571785][T21619] hub 2-0:1.0: USB hub found [ 1506.577382][T21619] hub 2-0:1.0: 1 port detected [ 1507.056398][T21620] netlink: 'syz.1.4228': attribute type 10 has an invalid length. [ 1507.107152][T21609] nbd49: detected capacity change from 0 to 127 [ 1507.132014][T21620] openvswitch: netlink: Actions may not be safe on all matching packets [ 1507.160052][T21612] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4228'. [ 1507.170820][T21612] block nbd0: reconnected socket [ 1507.178466][T21612] nbd: socks must be embedded in a SOCK_ITEM attr [ 1507.208627][T11421] block nbd49: Receive control failed (result -104) [ 1507.221716][T16872] block nbd0: Receive control failed (result -32) [ 1509.377434][T13343] nbd_xmit_timeout: 2 callbacks suppressed [ 1509.384260][T13343] block nbd48: Connection timed out, retrying (0/1 alive) [ 1509.391701][T13343] block nbd48: Connection timed out, retrying (0/1 alive) [ 1509.400050][ T11] block nbd48: Dead connection, failed to find a fallback [ 1509.410938][T13343] block nbd48: Connection timed out, retrying (0/1 alive) [ 1509.419594][ T11] block nbd48: shutting down sockets [ 1509.426686][T13343] block nbd48: Connection timed out, retrying (0/1 alive) [ 1509.434108][ T11] blk_print_req_error: 434 callbacks suppressed [ 1509.434125][ T11] I/O error, dev nbd48, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.449679][ T11] buffer_io_error: 434 callbacks suppressed [ 1509.449689][ T11] Buffer I/O error on dev nbd48, logical block 0, async page read [ 1509.464965][ T11] I/O error, dev nbd48, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.474227][ T11] Buffer I/O error on dev nbd48, logical block 3, async page read [ 1509.482141][ T11] I/O error, dev nbd48, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.491363][ T11] Buffer I/O error on dev nbd48, logical block 2, async page read [ 1509.499311][ T11] I/O error, dev nbd48, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.508605][ T11] Buffer I/O error on dev nbd48, logical block 1, async page read [ 1509.516765][T19638] I/O error, dev nbd48, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.526205][T19638] Buffer I/O error on dev nbd48, logical block 0, async page read [ 1509.550113][T19638] I/O error, dev nbd48, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.559698][T19638] Buffer I/O error on dev nbd48, logical block 1, async page read [ 1509.593525][T19638] I/O error, dev nbd48, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.702666][T19638] Buffer I/O error on dev nbd48, logical block 2, async page read [ 1509.710679][T19638] I/O error, dev nbd48, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.838023][T21658] netlink: 'syz.4.4240': attribute type 21 has an invalid length. [ 1509.846838][T21658] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4240'. [ 1509.856385][T21658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4240'. [ 1510.322464][T19638] Buffer I/O error on dev nbd48, logical block 3, async page read [ 1510.330611][T19638] I/O error, dev nbd48, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.339904][T19638] Buffer I/O error on dev nbd48, logical block 0, async page read [ 1510.350456][T19638] I/O error, dev nbd48, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1510.414898][T19638] Buffer I/O error on dev nbd48, logical block 1, async page read [ 1510.544955][T19638] ldm_validate_partition_table(): Disk read failed. [ 1510.573589][ T11] block nbd49: Connection timed out, retrying (0/1 alive) [ 1510.580975][ T11] block nbd49: Connection timed out, retrying (0/1 alive) [ 1510.589669][T18843] block nbd49: Dead connection, failed to find a fallback [ 1510.598844][T18843] block nbd49: shutting down sockets [ 1510.604452][ T11] block nbd49: Connection timed out, retrying (0/1 alive) [ 1510.611682][ T11] block nbd49: Connection timed out, retrying (0/1 alive) [ 1510.667188][T19658] ldm_validate_partition_table(): Disk read failed. [ 1510.989972][T19658] Dev nbd49: unable to read RDB block 0 [ 1510.990374][T19638] Dev nbd48: unable to read RDB block 0 [ 1510.997777][T19658] nbd49: unable to read partition table [ 1511.017787][T19658] ldm_validate_partition_table(): Disk read failed. [ 1511.114031][T19638] nbd48: unable to read partition table [ 1511.211974][T19658] Dev nbd49: unable to read RDB block 0 [ 1511.219360][T19658] nbd49: unable to read partition table [ 1511.716517][T19638] ldm_validate_partition_table(): Disk read failed. [ 1512.064191][T19638] Dev nbd48: unable to read RDB block 0 [ 1512.071329][T19638] nbd48: unable to read partition table [ 1513.279055][T21693] overlayfs: missing 'lowerdir' [ 1513.682862][T11421] Bluetooth: hci0: command 0x0406 tx timeout [ 1514.247960][T21705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1515.792160][T21727] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1516.134850][ T5812] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1516.318344][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1516.337714][ T5812] usb 3-1: config 0 has no interface number 0 [ 1516.359793][ T5812] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1516.384125][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.785663][ T5812] usb 3-1: Product: syz [ 1516.789917][ T5812] usb 3-1: Manufacturer: syz [ 1516.795046][ T5812] usb 3-1: SerialNumber: syz [ 1516.805530][ T5812] usb 3-1: config 0 descriptor?? [ 1516.956364][T21746] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1517.041031][ T5812] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1517.075274][ T5812] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1517.674575][ T5812] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1517.683124][ T5812] usb 3-1: media controller created [ 1517.700610][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1517.725422][ T24] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1517.770312][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4263'. [ 1517.927039][ T5812] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1518.020394][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1518.027865][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1518.038819][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1518.048616][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1518.058717][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1518.088072][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1518.091339][ T5812] usb 3-1: USB disconnect, device number 43 [ 1518.100504][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.988901][T21769] overlayfs: missing 'lowerdir' [ 1519.095585][ T24] usb 1-1: usb_control_msg returned -32 [ 1519.101561][ T24] usbtmc 1-1:16.0: can't read capabilities [ 1519.852473][ T24] usb 1-1: USB disconnect, device number 50 [ 1522.231588][T21803] netlink: 'syz.2.4275': attribute type 21 has an invalid length. [ 1522.239718][T21803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1522.248920][T21803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4275'. [ 1522.727601][T21806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4277'. [ 1524.349593][T21832] hub 2-0:1.0: USB hub found [ 1524.354319][T21832] hub 2-0:1.0: 1 port detected [ 1525.487560][T21847] syzkaller0: entered promiscuous mode [ 1525.493219][T21847] syzkaller0: entered allmulticast mode [ 1525.505783][T21847] tipc: Started in network mode [ 1525.510703][T21847] tipc: Node identity ca3f1690cedb, cluster identity 4711 [ 1525.518483][T21847] tipc: Enabled bearer , priority 0 [ 1525.636903][T21847] tipc: Resetting bearer [ 1525.650325][T21845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4283'. [ 1525.670123][T21846] tipc: Resetting bearer [ 1526.094954][T21846] tipc: Disabling bearer [ 1526.452740][T21855] nbd50: detected capacity change from 0 to 127 [ 1526.470078][T21862] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1526.584472][T21864] fuse: Bad value for 'fd' [ 1526.951808][T21855] netlink: 'syz.3.4290': attribute type 10 has an invalid length. [ 1526.964237][T21855] openvswitch: netlink: Actions may not be safe on all matching packets [ 1526.993404][T11421] block nbd50: Receive control failed (result -104) [ 1528.317350][T21892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4298'. [ 1530.529217][T16786] block nbd50: Connection timed out, retrying (0/1 alive) [ 1530.568975][T16786] block nbd50: Connection timed out, retrying (0/1 alive) [ 1530.576250][T14482] block nbd50: Dead connection, failed to find a fallback [ 1530.583749][T14482] block nbd50: shutting down sockets [ 1530.590697][T14482] blk_print_req_error: 286 callbacks suppressed [ 1530.590710][T14482] I/O error, dev nbd50, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.606677][T16786] block nbd50: Connection timed out, retrying (0/1 alive) [ 1530.613929][T14482] buffer_io_error: 286 callbacks suppressed [ 1530.613941][T14482] Buffer I/O error on dev nbd50, logical block 0, async page read [ 1530.617439][T21908] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1530.619929][T16786] block nbd50: Connection timed out, retrying (0/1 alive) [ 1530.643299][T14482] I/O error, dev nbd50, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.652472][T14482] Buffer I/O error on dev nbd50, logical block 2, async page read [ 1530.660911][T14482] I/O error, dev nbd50, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.670254][T14482] Buffer I/O error on dev nbd50, logical block 1, async page read [ 1530.678592][T14482] I/O error, dev nbd50, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.687739][T14482] Buffer I/O error on dev nbd50, logical block 3, async page read [ 1530.695683][T19638] I/O error, dev nbd50, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.705712][T19638] Buffer I/O error on dev nbd50, logical block 0, async page read [ 1530.716600][T19638] I/O error, dev nbd50, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.726319][T19638] Buffer I/O error on dev nbd50, logical block 1, async page read [ 1530.737326][T19638] I/O error, dev nbd50, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.747364][T19638] Buffer I/O error on dev nbd50, logical block 2, async page read [ 1530.759314][T19638] I/O error, dev nbd50, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.768706][T19638] Buffer I/O error on dev nbd50, logical block 3, async page read [ 1530.779726][T19638] I/O error, dev nbd50, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.789946][T19638] Buffer I/O error on dev nbd50, logical block 0, async page read [ 1530.800753][T19638] I/O error, dev nbd50, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.810938][T19638] Buffer I/O error on dev nbd50, logical block 1, async page read [ 1530.845933][T19638] ldm_validate_partition_table(): Disk read failed. [ 1530.872140][T19638] Dev nbd50: unable to read RDB block 0 [ 1531.138317][T19638] nbd50: unable to read partition table [ 1531.172954][T19638] ldm_validate_partition_table(): Disk read failed. [ 1531.199575][T19638] Dev nbd50: unable to read RDB block 0 [ 1531.230773][T19638] nbd50: unable to read partition table [ 1532.912781][T21944] netlink: 'syz.0.4310': attribute type 21 has an invalid length. [ 1533.095114][T21944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1533.133847][T21952] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1533.153584][T21953] 9pnet_virtio: no channels available for device syz [ 1533.241812][T21944] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1533.257447][T21952] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1538.743207][T22006] netlink: 'syz.0.4327': attribute type 10 has an invalid length. [ 1538.774256][T22006] openvswitch: netlink: Actions may not be safe on all matching packets [ 1538.832933][T21999] nbd51: detected capacity change from 0 to 127 [ 1538.839638][T22004] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4327'. [ 1538.860392][T22004] block nbd0: reconnected socket [ 1538.901874][T22004] nbd: socks must be embedded in a SOCK_ITEM attr [ 1538.991096][T11421] block nbd51: Receive control failed (result -104) [ 1538.994860][T16872] block nbd0: Receive control failed (result -32) [ 1541.077395][T22028] IPVS: Scheduler module ip_vs_sip not found [ 1541.330059][T22038] netlink: 'syz.1.4333': attribute type 10 has an invalid length. [ 1541.511695][T22038] openvswitch: netlink: Actions may not be safe on all matching packets [ 1541.605483][T22032] nbd52: detected capacity change from 0 to 127 [ 1541.612051][T22037] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4333'. [ 1541.633294][T22037] block nbd0: reconnected socket [ 1541.660807][T22037] nbd: socks must be embedded in a SOCK_ITEM attr [ 1541.691959][T22042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1541.702413][T11421] block nbd0: Receive control failed (result -32) [ 1541.708901][T16872] block nbd52: Receive control failed (result -104) [ 1541.723034][T22042] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1541.861016][T22045] 9pnet_virtio: no channels available for device syz [ 1542.166007][ T11] block nbd51: Connection timed out, retrying (0/1 alive) [ 1542.173324][ T11] block nbd51: Connection timed out, retrying (0/1 alive) [ 1542.180527][ T11] block nbd51: Connection timed out, retrying (0/1 alive) [ 1542.189134][T18843] block nbd51: Dead connection, failed to find a fallback [ 1542.196415][T18843] block nbd51: shutting down sockets [ 1542.201813][T18843] blk_print_req_error: 138 callbacks suppressed [ 1542.201825][T18843] I/O error, dev nbd51, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.217387][ T11] block nbd51: Connection timed out, retrying (0/1 alive) [ 1542.224662][T18843] buffer_io_error: 138 callbacks suppressed [ 1542.224673][T18843] Buffer I/O error on dev nbd51, logical block 1, async page read [ 1542.239478][T18843] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.248746][T18843] Buffer I/O error on dev nbd51, logical block 0, async page read [ 1542.256706][T18843] I/O error, dev nbd51, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.265885][T18843] Buffer I/O error on dev nbd51, logical block 3, async page read [ 1542.273837][T18843] I/O error, dev nbd51, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.282977][T18843] Buffer I/O error on dev nbd51, logical block 2, async page read [ 1542.290983][T19638] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.300234][T19638] Buffer I/O error on dev nbd51, logical block 0, async page read [ 1542.308752][T19638] I/O error, dev nbd51, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.319809][T19638] Buffer I/O error on dev nbd51, logical block 1, async page read [ 1542.334747][T19638] I/O error, dev nbd51, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.344743][T19638] Buffer I/O error on dev nbd51, logical block 2, async page read [ 1542.354432][T19638] I/O error, dev nbd51, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.363864][T19638] Buffer I/O error on dev nbd51, logical block 3, async page read [ 1542.372802][T19638] I/O error, dev nbd51, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.382165][T19638] Buffer I/O error on dev nbd51, logical block 0, async page read [ 1542.391383][T19638] I/O error, dev nbd51, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.402793][T19638] Buffer I/O error on dev nbd51, logical block 1, async page read [ 1542.434645][T19638] ldm_validate_partition_table(): Disk read failed. [ 1542.442168][T19638] Dev nbd51: unable to read RDB block 0 [ 1542.454849][T19638] nbd51: unable to read partition table [ 1542.484286][T19638] ldm_validate_partition_table(): Disk read failed. [ 1542.493461][T19638] Dev nbd51: unable to read RDB block 0 [ 1542.500082][T19638] nbd51: unable to read partition table [ 1542.906622][T22009] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1543.261343][T22057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4338'. [ 1544.616811][T22066] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1544.627352][T22071] netlink: 'syz.4.4342': attribute type 21 has an invalid length. [ 1544.662336][T22071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1544.672668][T22071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4342'. [ 1544.993194][T14482] block nbd52: Connection timed out, retrying (0/1 alive) [ 1545.000387][T14482] block nbd52: Connection timed out, retrying (0/1 alive) [ 1545.010146][T14482] block nbd52: Connection timed out, retrying (0/1 alive) [ 1545.017336][T21911] block nbd52: Dead connection, failed to find a fallback [ 1545.024523][T21911] block nbd52: shutting down sockets [ 1545.029964][T14482] block nbd52: Connection timed out, retrying (0/1 alive) [ 1545.041895][T19658] ldm_validate_partition_table(): Disk read failed. [ 1545.192205][T19658] Dev nbd52: unable to read RDB block 0 [ 1545.213707][T19658] nbd52: unable to read partition table [ 1545.276488][T19658] ldm_validate_partition_table(): Disk read failed. [ 1545.302140][T19658] Dev nbd52: unable to read RDB block 0 [ 1545.449199][T19658] nbd52: unable to read partition table [ 1545.880873][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.888786][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.901615][T22085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22085 comm=syz.2.4346 [ 1550.431430][T22135] hub 2-0:1.0: USB hub found [ 1550.437313][T22135] hub 2-0:1.0: 1 port detected [ 1551.392252][T22147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1551.401364][T22144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4359'. [ 1556.544288][ T5986] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1556.773104][ T5986] usb 2-1: Using ep0 maxpacket: 32 [ 1556.787482][ T5986] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1556.813164][ T5986] usb 2-1: config 0 has no interface number 0 [ 1556.842464][ T5986] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1556.853757][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.875622][ T5986] usb 2-1: Product: syz [ 1556.881075][ T5986] usb 2-1: Manufacturer: syz [ 1556.896046][ T5986] usb 2-1: SerialNumber: syz [ 1556.925447][ T5986] usb 2-1: config 0 descriptor?? [ 1556.954756][ T5986] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1557.367753][ T5986] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1557.466909][T22201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22201 comm=syz.2.4375 [ 1557.681424][ T5986] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1557.956377][ T30] audit: type=1400 audit(1763724388.812:369): avc: denied { connect } for pid=22187 comm="syz.1.4372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1557.979405][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1557.995226][ T5986] usb 2-1: USB disconnect, device number 44 [ 1558.023855][ T5986] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1558.048957][ T5986] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1558.071197][ T5986] quatech2 2-1:0.51: device disconnected [ 1558.951681][T22213] hub 2-0:1.0: USB hub found [ 1558.957243][T22213] hub 2-0:1.0: 1 port detected [ 1559.394458][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4381'. [ 1559.677216][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4382'. [ 1560.784141][T22231] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1560.983445][T22242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22242 comm=syz.3.4387 [ 1563.552255][ T30] audit: type=1400 audit(1763724394.402:370): avc: denied { create } for pid=22273 comm="syz.0.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1563.676428][ T30] audit: type=1400 audit(1763724394.442:371): avc: denied { setopt } for pid=22273 comm="syz.0.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1563.697447][T22285] fuse: Unknown parameter 'group_i00000000000000000000' [ 1563.743557][ T30] audit: type=1400 audit(1763724394.442:372): avc: denied { connect } for pid=22273 comm="syz.0.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1565.523242][ T5812] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1567.195425][ T5812] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1567.236602][ T5812] usb 3-1: can't read configurations, error -71 [ 1568.973445][T16872] block nbd53: Receive control failed (result -32) [ 1569.022702][T22335] nbd53: detected capacity change from 0 to 127 [ 1569.040692][T19638] block nbd53: Dead connection, failed to find a fallback [ 1569.054977][T22346] xt_hashlimit: max too large, truncated to 1048576 [ 1569.091158][T19638] block nbd53: shutting down sockets [ 1569.124826][T19638] blk_print_req_error: 286 callbacks suppressed [ 1569.124846][T19638] I/O error, dev nbd53, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.177352][T19638] buffer_io_error: 286 callbacks suppressed [ 1569.177369][T19638] Buffer I/O error on dev nbd53, logical block 0, async page read [ 1569.191573][T19638] I/O error, dev nbd53, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.201410][T19638] Buffer I/O error on dev nbd53, logical block 1, async page read [ 1569.211948][T19638] I/O error, dev nbd53, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.234456][T19638] Buffer I/O error on dev nbd53, logical block 2, async page read [ 1569.536954][T19638] I/O error, dev nbd53, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.638332][T19638] Buffer I/O error on dev nbd53, logical block 3, async page read [ 1569.646554][T19638] I/O error, dev nbd53, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.655760][T19638] Buffer I/O error on dev nbd53, logical block 0, async page read [ 1569.659427][T22351] tipc: Enabled bearer , priority 0 [ 1569.672746][T19638] I/O error, dev nbd53, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.681887][T19638] Buffer I/O error on dev nbd53, logical block 1, async page read [ 1569.702797][T19638] I/O error, dev nbd53, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.734832][T19638] Buffer I/O error on dev nbd53, logical block 2, async page read [ 1569.754148][T22351] tipc: Resetting bearer [ 1569.762175][T19638] I/O error, dev nbd53, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.777435][T19638] Buffer I/O error on dev nbd53, logical block 3, async page read [ 1569.795790][T22350] tipc: Disabling bearer [ 1569.802146][T19638] I/O error, dev nbd53, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.821067][T19638] Buffer I/O error on dev nbd53, logical block 0, async page read [ 1569.831201][T19638] I/O error, dev nbd53, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1569.841038][T19638] Buffer I/O error on dev nbd53, logical block 1, async page read [ 1569.851709][T19638] ldm_validate_partition_table(): Disk read failed. [ 1569.890265][T19638] Dev nbd53: unable to read RDB block 0 [ 1569.990022][T19638] nbd53: unable to read partition table [ 1570.020752][T19638] ldm_validate_partition_table(): Disk read failed. [ 1570.043610][T19638] Dev nbd53: unable to read RDB block 0 [ 1570.059043][T19638] nbd53: unable to read partition table [ 1572.247149][T22383] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1572.256249][T22383] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1575.633074][T22425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22425 comm=syz.2.4432 [ 1576.263638][T22433] xt_policy: too many policy elements [ 1576.605393][ T5881] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1576.616267][T20553] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1576.842666][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 1576.850653][ T5881] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1576.859164][T20553] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1576.873643][T20553] usb 2-1: config 0 has no interface number 0 [ 1576.879805][ T5881] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1577.142190][T20553] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1577.208755][ T5881] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1577.217133][T20553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.225455][T20553] usb 2-1: Product: syz [ 1577.230022][ T5881] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1577.242689][T20553] usb 2-1: Manufacturer: syz [ 1577.249752][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1577.292652][T20553] usb 2-1: SerialNumber: syz [ 1577.507623][T22447] overlayfs: missing 'lowerdir' [ 1577.532152][T20553] usb 2-1: config 0 descriptor?? [ 1577.537263][ T5881] usb 3-1: config 0 has no interface number 0 [ 1577.544296][ T5881] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1577.562948][ T5881] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1577.680341][ T5881] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1577.695452][ T5881] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1577.733106][ T5881] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1577.742921][ T5881] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1577.769108][T20553] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1577.779194][ T5881] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1577.795932][T20553] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1577.812788][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.826215][T20553] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1577.842266][ T5881] usb 3-1: Product: syz [ 1577.852443][ T5881] usb 3-1: Manufacturer: syz [ 1577.857772][T20553] usb 2-1: media controller created [ 1577.864530][ T5881] usb 3-1: SerialNumber: syz [ 1577.884033][T20553] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.905119][ T5881] usb 3-1: config 0 descriptor?? [ 1577.921009][ T5881] usb 3-1: selecting invalid altsetting 2 [ 1578.285477][T20553] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1578.329721][T20553] usb 2-1: USB disconnect, device number 45 [ 1579.206808][ T5881] get_1284_register timeout [ 1579.215246][ T5881] uss720 3-1:0.125: probe with driver uss720 failed with error -5 [ 1579.223328][ C0] usb 3-1: async_complete: urb error -104 [ 1579.968106][T22468] binder: 22466:22468 ioctl c0306201 0 returned -14 [ 1580.808690][ T5932] usb 3-1: USB disconnect, device number 46 [ 1581.395174][T22483] 9pnet_fd: Insufficient options for proto=fd [ 1581.451280][T22488] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4451'. [ 1581.923166][ T5932] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1582.194069][ T5932] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1582.202369][ T5932] usb 3-1: config 0 has no interface number 0 [ 1582.224632][ T5932] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1582.257353][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.326902][ T5932] usb 3-1: Product: syz [ 1582.331095][ T5932] usb 3-1: Manufacturer: syz [ 1582.340583][ T5932] usb 3-1: SerialNumber: syz [ 1582.353667][ T5932] usb 3-1: config 0 descriptor?? [ 1582.477634][ T30] audit: type=1400 audit(1763724413.332:373): avc: denied { mounton } for pid=22495 comm="syz.1.4453" path="/proc/1022/task" dev="proc" ino=80133 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1582.585428][ T5932] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1582.623341][ T5932] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1582.655181][ T5932] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1582.682621][ T5932] usb 3-1: media controller created [ 1582.735810][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.862195][ T5932] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1584.289200][ T5932] usb 3-1: USB disconnect, device number 47 [ 1586.202720][ T5932] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1586.364680][ T5932] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.472258][ T5932] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1586.487528][ T5932] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1586.505910][ T5932] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1586.521699][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.617019][ T5932] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1586.657856][ T5932] usb 2-1: invalid MIDI out EP 0 [ 1587.139596][ T5932] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1588.417722][T22549] xt_hashlimit: max too large, truncated to 1048576 [ 1588.832506][T22557] overlayfs: failed to resolve './bus': -2 [ 1591.269793][ T42] usb 2-1: USB disconnect, device number 46 [ 1593.772748][ T5881] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1593.792697][ T5932] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1593.927126][ T5881] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1593.942299][ T5881] usb 2-1: config 0 has no interface number 0 [ 1593.955087][ T5881] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1593.982708][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.990984][ T5881] usb 2-1: Product: syz [ 1593.995385][ T5881] usb 2-1: Manufacturer: syz [ 1593.999970][ T5881] usb 2-1: SerialNumber: syz [ 1594.008187][ T5881] usb 2-1: config 0 descriptor?? [ 1594.022504][ T5932] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1594.034225][ T5932] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1594.065758][ T5932] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1594.089547][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.145410][ T5932] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1594.217835][ T5881] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1594.238154][ T5932] usb 5-1: invalid MIDI out EP 0 [ 1594.244174][ T5881] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1594.244388][ T5881] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1594.380354][ T5881] usb 2-1: media controller created [ 1594.850798][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1595.017772][ T5932] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1595.038510][ T5881] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1595.086733][ T5881] usb 2-1: USB disconnect, device number 47 [ 1595.486196][T22620] fuse: Bad value for 'group_id' [ 1595.491208][T22620] fuse: Bad value for 'group_id' [ 1595.881142][T11421] Bluetooth: hci0: command 0x0406 tx timeout [ 1596.121068][T20553] usb 5-1: USB disconnect, device number 38 [ 1596.409308][T22631] overlayfs: failed to resolve './bus': -2 [ 1597.743340][T22652] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1597.806771][ T30] audit: type=1400 audit(1763724428.662:374): avc: denied { read } for pid=22651 comm="syz.4.4492" path="socket:[79373]" dev="sockfs" ino=79373 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1597.900908][ T30] audit: type=1400 audit(1763724428.722:375): avc: denied { ioctl } for pid=22651 comm="syz.4.4492" path="/dev/sg0" dev="devtmpfs" ino=758 ioctlcmd=0x227c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1598.653923][T15311] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1598.721701][T22670] overlayfs: missing 'workdir' [ 1598.948478][T15311] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1598.987133][T15311] usb 4-1: config 0 has no interface number 0 [ 1599.030501][T15311] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1599.043850][T15311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.052087][T15311] usb 4-1: Product: syz [ 1599.058118][T15311] usb 4-1: Manufacturer: syz [ 1599.073483][T15311] usb 4-1: SerialNumber: syz [ 1599.087624][T15311] usb 4-1: config 0 descriptor?? [ 1599.326216][T15311] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1599.338174][T15311] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1599.349093][T15311] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1599.813564][T15311] usb 4-1: media controller created [ 1599.838144][T15311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1599.924068][T15311] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1599.954707][T15311] usb 4-1: USB disconnect, device number 35 [ 1600.933473][T22704] overlayfs: missing 'lowerdir' [ 1601.332627][T18100] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1601.690743][T18100] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1601.785556][T18100] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1601.819414][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4509'. [ 1601.986058][T18100] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1601.995659][T18100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.109774][T18100] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1602.348051][T18100] usb 4-1: invalid MIDI out EP 0 [ 1603.732967][T18100] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1603.840931][T20526] udevd[20526]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.155922][T15311] usb 4-1: USB disconnect, device number 36 [ 1606.643278][T15311] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1606.742897][ T5932] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1606.835469][T15311] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1606.858168][T15311] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1606.880035][T15311] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1606.903961][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.915053][T15311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.939860][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.950519][T21526] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1606.966777][T15311] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1606.982443][ T5932] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1606.993423][T15311] usb 1-1: invalid MIDI out EP 0 [ 1607.017627][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.056641][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.063626][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.105095][ T5932] usb 4-1: config 0 descriptor?? [ 1607.141408][T21526] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1607.203999][T15311] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1607.213385][T21526] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1607.227728][T21526] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1607.272881][T21526] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1607.304145][T21526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.337403][T21526] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1607.370136][T21526] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1607.578756][T22783] program syz.3.4525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1607.845538][T19748] udevd[19748]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1607.971608][ T5932] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 1608.078344][ T5932] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1609.461974][ T5881] usb 4-1: USB disconnect, device number 37 [ 1609.618731][ T42] usb 1-1: USB disconnect, device number 51 [ 1610.236627][ T5881] usb 5-1: USB disconnect, device number 39 [ 1610.304675][T22811] netlink: 'syz.4.4535': attribute type 3 has an invalid length. [ 1610.312495][T22811] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1610.377081][T19638] block nbd0: Dead connection, failed to find a fallback [ 1611.506033][T22821] xt_policy: too many policy elements [ 1612.813374][ T5881] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1613.112671][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 1613.124236][ T5881] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1613.135541][ T5881] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1613.152927][ T5881] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1613.161368][ T5881] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1613.186364][ T5881] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1613.230281][ T5881] usb 4-1: config 0 has no interface number 0 [ 1613.253194][ T5881] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1613.269393][ T5881] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1613.280169][ T5881] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1613.290823][ T5881] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1613.305228][ T5881] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1613.312261][ T5881] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1613.322998][ T5881] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1613.332102][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.340189][ T5881] usb 4-1: Product: syz [ 1613.344453][ T5881] usb 4-1: Manufacturer: syz [ 1613.349064][ T5881] usb 4-1: SerialNumber: syz [ 1613.355639][ T5881] usb 4-1: config 0 descriptor?? [ 1613.362672][ T5881] usb 4-1: selecting invalid altsetting 2 [ 1613.492714][T18100] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1613.664349][T18100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1613.680227][T18100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1613.697713][T18100] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1613.709356][T18100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.723078][T18100] usb 3-1: config 0 descriptor?? [ 1614.125673][T22855] program syz.2.4547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1614.900906][T18100] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 1614.914488][T18100] arvo 0003:1E7D:30D4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1614.916297][ T42] usb 4-1: USB disconnect, device number 38 [ 1615.341993][T18100] usb 3-1: USB disconnect, device number 48 [ 1615.802610][ T42] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1616.313999][T22887] fuse: Invalid rootmode [ 1616.414715][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1616.436123][ T42] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1616.492438][ T42] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1616.550523][ T42] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1616.585018][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.765679][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1616.918070][T22900] overlayfs: missing 'lowerdir' [ 1617.569490][ T42] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1617.832706][ T5881] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1617.925916][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4558'. [ 1619.164386][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.179606][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.190530][ T42] usb 5-1: USB disconnect, device number 40 [ 1619.228633][ T5881] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1619.266789][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.320901][ T5881] usb 3-1: config 0 descriptor?? [ 1620.538331][T22921] program syz.2.4562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1620.932904][T18100] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1620.982354][ T5881] arvo 0003:1E7D:30D4.001D: unknown main item tag 0x0 [ 1621.012980][ T5881] arvo 0003:1E7D:30D4.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1621.106539][T18100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1621.162653][T18100] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1621.173039][T18100] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1621.190687][T18100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.226144][T18100] usb 1-1: config 0 descriptor?? [ 1621.430328][ T5932] usb 3-1: USB disconnect, device number 49 [ 1621.688135][T22939] program syz.0.4567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1621.972157][T18100] arvo 0003:1E7D:30D4.001E: unknown main item tag 0x0 [ 1621.995999][T18100] arvo 0003:1E7D:30D4.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1622.037838][T22944] netlink: 'syz.3.4570': attribute type 21 has an invalid length. [ 1622.078646][T22944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1622.124361][T22944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1622.867812][ T5986] usb 1-1: USB disconnect, device number 52 [ 1624.451697][ T42] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1624.689726][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.986881][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.996944][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1625.006377][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.017504][ T42] usb 1-1: config 0 descriptor?? [ 1626.039935][T22997] overlayfs: failed to resolve './file0': -2 [ 1626.095280][T22993] program syz.0.4579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1626.871225][ T42] arvo 0003:1E7D:30D4.001F: unknown main item tag 0x0 [ 1626.890223][ T42] arvo 0003:1E7D:30D4.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1627.585883][T23010] program syz.1.4577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1627.853525][ T5932] usb 1-1: USB disconnect, device number 53 [ 1627.990132][T23016] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1628.382717][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1629.152813][T15311] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1629.306601][T15311] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1629.315973][T15311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.431383][T15311] usb 4-1: Product: syz [ 1629.447873][T15311] usb 4-1: Manufacturer: syz [ 1629.453047][T15311] usb 4-1: SerialNumber: syz [ 1629.495141][T15311] usb 4-1: config 0 descriptor?? [ 1629.508972][T23045] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1629.518739][T15311] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1629.559931][T15311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1629.581999][T15311] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1629.602948][T15311] usb 4-1: media controller created [ 1629.622079][T15311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1629.683970][T15311] DVB: Unable to find symbol mt352_attach() [ 1629.734922][T15311] DVB: Unable to find symbol nxt6000_attach() [ 1629.741068][T15311] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1629.761436][T15311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 1629.811798][T15311] dvb-usb: schedule remote query interval to 1000 msecs. [ 1629.820236][T23055] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1629.836148][T15311] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1629.856098][T15311] dvb-usb: bulk message failed: -22 (7/0) [ 1629.871062][T15311] dvb-usb: bulk message failed: -22 (7/0) [ 1629.901700][T15311] usb 4-1: USB disconnect, device number 39 [ 1629.911981][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4600'. [ 1630.145259][T15311] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1630.150030][T23057] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4601'. [ 1630.247369][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 1630.253175][T23057] block nbd0: reconnected socket [ 1630.253952][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 1630.267282][T23059] netlink: 'syz.0.4601': attribute type 10 has an invalid length. [ 1630.275291][T23057] nbd: socks must be embedded in a SOCK_ITEM attr [ 1630.275354][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 1630.284681][T23059] openvswitch: netlink: Actions may not be safe on all matching packets [ 1630.288276][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 1630.376104][T16872] block nbd0: Receive control failed (result -104) [ 1630.509316][T23067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4602'. [ 1630.752471][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 1630.758567][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 1630.822849][T23069] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1630.869040][T23058] ceph: No mds server is up or the cluster is laggy [ 1631.092606][ T42] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1631.125849][ T5986] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1631.183757][ T5881] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1631.289684][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.326781][ T5986] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.360127][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.372839][ T5986] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1631.382405][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1631.394618][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.406254][ T5881] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1631.430347][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.458312][ T5986] usb 5-1: config 0 descriptor?? [ 1631.526170][ T5881] usb 3-1: config 0 descriptor?? [ 1632.204286][ T5986] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 1632.217795][ T5986] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 1632.622696][ T5986] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device [ 1632.630189][ T5986] arvo 0003:1E7D:30D4.0020: couldn't install keyboard [ 1632.675890][T23077] program syz.2.4607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1632.686490][ T5986] arvo 0003:1E7D:30D4.0020: probe with driver arvo failed with error -32 [ 1632.705993][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.720505][ T5986] usb 5-1: USB disconnect, device number 41 [ 1632.726730][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.726771][ T42] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1632.726792][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.755252][ T42] usb 4-1: config 0 descriptor?? [ 1633.198243][ T5881] arvo 0003:1E7D:30D4.0021: unknown main item tag 0x0 [ 1633.224401][ T5881] arvo 0003:1E7D:30D4.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 1633.300489][T23093] program syz.3.4604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1633.635761][T21911] block nbd0: Connection timed out, retrying (0/1 alive) [ 1633.643494][T21911] block nbd0: Connection timed out, retrying (0/1 alive) [ 1633.650619][T21911] block nbd0: Connection timed out, retrying (0/1 alive) [ 1633.658036][T21911] block nbd0: Connection timed out, retrying (0/1 alive) [ 1633.665240][T14482] block nbd0: Dead connection, failed to find a fallback [ 1633.823434][ T5881] usb 3-1: USB disconnect, device number 50 [ 1633.824162][ T42] arvo 0003:1E7D:30D4.0022: unknown main item tag 0x0 [ 1633.852923][ T42] arvo 0003:1E7D:30D4.0022: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1634.095709][T23111] netlink: 'syz.4.4613': attribute type 3 has an invalid length. [ 1634.104026][T23111] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4613'. [ 1634.298532][ T42] usb 4-1: USB disconnect, device number 40 [ 1635.950092][T23134] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 1636.147639][T23136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4619'. [ 1636.877922][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1636.893112][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1637.155572][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 1637.183125][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 1637.194416][T23137] ceph: No mds server is up or the cluster is laggy [ 1637.262778][ T42] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1637.464801][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1637.484155][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1637.494546][ T42] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1637.504161][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.523765][ T42] usb 4-1: config 0 descriptor?? [ 1637.843072][T23152] program syz.3.4620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1638.130502][ T42] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0 [ 1638.147885][ T42] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 1638.401298][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1638.895514][T15311] usb 4-1: USB disconnect, device number 41 [ 1639.394573][T23172] 9pnet_virtio: no channels available for device syz [ 1640.284973][T23183] netlink: 'syz.1.4630': attribute type 10 has an invalid length. [ 1640.294209][T23183] openvswitch: netlink: Actions may not be safe on all matching packets [ 1640.382691][ T42] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1640.452602][T10628] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1640.533962][ T42] usb 4-1: config 4 has an invalid interface number: 247 but max is 0 [ 1640.542234][ T42] usb 4-1: config 4 has no interface number 0 [ 1640.548499][ T42] usb 4-1: config 4 interface 247 has no altsetting 0 [ 1640.557443][ T42] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 1640.566580][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.574594][ T42] usb 4-1: Product: syz [ 1640.578729][ T42] usb 4-1: Manufacturer: syz [ 1640.583550][ T42] usb 4-1: SerialNumber: syz [ 1640.594623][ T42] comedi comedi4: Wrong number of endpoints [ 1640.600553][ T42] ni6501 4-1:4.247: driver 'ni6501' failed to auto-configure device. [ 1640.613709][T10628] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1640.623235][T10628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.632180][T10628] usb 1-1: Product: syz [ 1640.637100][T10628] usb 1-1: Manufacturer: syz [ 1640.641715][T10628] usb 1-1: SerialNumber: syz [ 1640.648124][T10628] usb 1-1: config 0 descriptor?? [ 1640.655610][T10628] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1640.665987][T10628] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1640.675704][T10628] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1640.685018][T10628] usb 1-1: media controller created [ 1640.697426][T10628] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1640.727950][T10628] DVB: Unable to find symbol mt352_attach() [ 1640.750347][T10628] DVB: Unable to find symbol nxt6000_attach() [ 1640.757593][T10628] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1640.771349][T10628] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 1640.785978][T10628] dvb-usb: schedule remote query interval to 1000 msecs. [ 1640.793178][T10628] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1640.803334][T10628] dvb-usb: bulk message failed: -22 (7/0) [ 1640.809455][T10628] dvb-usb: bulk message failed: -22 (7/0) [ 1640.816387][ T5986] usb 4-1: USB disconnect, device number 42 [ 1640.904447][T10628] usb 1-1: USB disconnect, device number 54 [ 1640.926727][T10628] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1642.182823][T15311] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1642.202602][T10628] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1642.333936][T15311] usb 4-1: config 4 has an invalid interface number: 247 but max is 0 [ 1642.342188][T15311] usb 4-1: config 4 has no interface number 0 [ 1642.348386][T15311] usb 4-1: config 4 interface 247 has no altsetting 0 [ 1642.356615][T10628] usb 1-1: config 4 has an invalid interface number: 247 but max is 0 [ 1642.365099][T10628] usb 1-1: config 4 has no interface number 0 [ 1642.371192][T10628] usb 1-1: config 4 interface 247 has no altsetting 0 [ 1642.379197][T15311] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 1642.388414][T15311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.399253][T15311] usb 4-1: Product: syz [ 1642.404544][T10628] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 1642.413619][T15311] usb 4-1: Manufacturer: syz [ 1642.418201][T15311] usb 4-1: SerialNumber: syz [ 1642.422904][T10628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.430874][T10628] usb 1-1: Product: syz [ 1642.435958][T10628] usb 1-1: Manufacturer: syz [ 1642.441336][T10628] usb 1-1: SerialNumber: syz [ 1642.448625][T15311] comedi comedi4: Wrong number of endpoints [ 1642.455221][T15311] ni6501 4-1:4.247: driver 'ni6501' failed to auto-configure device. [ 1642.467660][T10628] sysfs: cannot create duplicate filename '/class/comedi/comedi4' [ 1642.475704][T10628] CPU: 1 UID: 0 PID: 10628 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 1642.475729][T10628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1642.475742][T10628] Workqueue: usb_hub_wq hub_event [ 1642.475767][T10628] Call Trace: [ 1642.475773][T10628] [ 1642.475788][T10628] dump_stack_lvl+0x16c/0x1f0 [ 1642.475810][T10628] sysfs_warn_dup+0x7f/0xa0 [ 1642.475835][T10628] sysfs_do_create_link_sd+0x124/0x140 [ 1642.475861][T10628] sysfs_create_link+0x61/0xc0 [ 1642.475884][T10628] device_add+0x62c/0x1aa0 [ 1642.475904][T10628] ? __pfx_device_add+0x10/0x10 [ 1642.475931][T10628] ? kfree_const+0x55/0x60 [ 1642.475952][T10628] device_create_groups_vargs+0x1f8/0x270 [ 1642.475981][T10628] device_create+0xed/0x130 [ 1642.476006][T10628] ? __pfx_device_create+0x10/0x10 [ 1642.476041][T10628] comedi_alloc_board_minor+0x24c/0x3b0 [ 1642.476066][T10628] comedi_auto_config+0x74/0x440 [ 1642.476090][T10628] usb_probe_interface+0x303/0xa40 [ 1642.476120][T10628] ? __pfx_usb_probe_interface+0x10/0x10 [ 1642.476148][T10628] really_probe+0x241/0xa90 [ 1642.476172][T10628] __driver_probe_device+0x1de/0x440 [ 1642.476193][T10628] driver_probe_device+0x4c/0x1b0 [ 1642.476218][T10628] __device_attach_driver+0x1df/0x310 [ 1642.476237][T10628] ? __pfx___device_attach_driver+0x10/0x10 [ 1642.476257][T10628] bus_for_each_drv+0x159/0x1e0 [ 1642.476281][T10628] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1642.476308][T10628] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.476325][T10628] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1642.476357][T10628] __device_attach+0x1e4/0x4b0 [ 1642.476374][T10628] ? __pfx___device_attach+0x10/0x10 [ 1642.476396][T10628] ? do_raw_spin_unlock+0x172/0x230 [ 1642.476424][T10628] bus_probe_device+0x17f/0x1c0 [ 1642.476454][T10628] device_add+0x1148/0x1aa0 [ 1642.476481][T10628] ? __pfx_device_add+0x10/0x10 [ 1642.476504][T10628] ? mark_held_locks+0x49/0x80 [ 1642.476529][T10628] usb_set_configuration+0x1187/0x1e20 [ 1642.476575][T10628] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1642.476595][T10628] usb_generic_driver_probe+0xb1/0x110 [ 1642.476617][T10628] usb_probe_device+0xef/0x3e0 [ 1642.476641][T10628] ? __pfx_usb_probe_device+0x10/0x10 [ 1642.476668][T10628] really_probe+0x241/0xa90 [ 1642.476691][T10628] __driver_probe_device+0x1de/0x440 [ 1642.476709][T10628] ? usb_driver_applicable+0x1c7/0x220 [ 1642.476739][T10628] driver_probe_device+0x4c/0x1b0 [ 1642.476758][T10628] __device_attach_driver+0x1df/0x310 [ 1642.476780][T10628] ? __pfx___device_attach_driver+0x10/0x10 [ 1642.476808][T10628] bus_for_each_drv+0x159/0x1e0 [ 1642.476837][T10628] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1642.476866][T10628] ? lockdep_hardirqs_on+0x7c/0x110 [ 1642.476884][T10628] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1642.476916][T10628] __device_attach+0x1e4/0x4b0 [ 1642.476936][T10628] ? __pfx___device_attach+0x10/0x10 [ 1642.476954][T10628] ? do_raw_spin_unlock+0x172/0x230 [ 1642.476978][T10628] bus_probe_device+0x17f/0x1c0 [ 1642.477006][T10628] device_add+0x1148/0x1aa0 [ 1642.477030][T10628] ? __pfx_device_add+0x10/0x10 [ 1642.477050][T10628] ? add_device_randomness+0xb7/0xf0 [ 1642.477069][T10628] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1642.477096][T10628] usb_new_device+0xd07/0x1a60 [ 1642.477124][T10628] ? do_raw_spin_lock+0x12c/0x2b0 [ 1642.477144][T10628] ? __pfx_usb_new_device+0x10/0x10 [ 1642.477170][T10628] ? mark_held_locks+0x49/0x80 [ 1642.477191][T10628] hub_event+0x2f34/0x4fe0 [ 1642.477241][T10628] ? __pfx_hub_event+0x10/0x10 [ 1642.477264][T10628] ? assoc_array_destroy_subtree.part.0+0x2c0/0x4d0 [ 1642.477302][T10628] ? rcu_is_watching+0x12/0xc0 [ 1642.477331][T10628] process_one_work+0x9cf/0x1b70 [ 1642.477360][T10628] ? __pfx_hcd_resume_work+0x10/0x10 [ 1642.477386][T10628] ? __pfx_process_one_work+0x10/0x10 [ 1642.477415][T10628] ? assign_work+0x1a0/0x250 [ 1642.477435][T10628] worker_thread+0x6c8/0xf10 [ 1642.477468][T10628] ? __pfx_worker_thread+0x10/0x10 [ 1642.477485][T10628] kthread+0x3c5/0x780 [ 1642.477502][T10628] ? __pfx_kthread+0x10/0x10 [ 1642.477520][T10628] ? rcu_is_watching+0x12/0xc0 [ 1642.477543][T10628] ? __pfx_kthread+0x10/0x10 [ 1642.477561][T10628] ret_from_fork+0x675/0x7d0 [ 1642.477578][T10628] ? __pfx_kthread+0x10/0x10 [ 1642.477595][T10628] ret_from_fork_asm+0x1a/0x30 [ 1642.477631][T10628] [ 1642.887702][ C1] vkms_vblank_simulate: vblank timer overrun [ 1642.920679][T10628] (NULL device *): Wrong number of endpoints [ 1642.926752][T10628] ni6501 1-1:4.247: driver 'ni6501' failed to auto-configure device. [ 1642.935773][ T5881] usb 4-1: USB disconnect, device number 43 [ 1642.940223][T10628] usb 1-1: USB disconnect, device number 55 [ 1643.556705][T23197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4634'. [ 1644.627895][T23211] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1644.653121][T23211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1644.756504][T23214] overlayfs: missing 'lowerdir' [ 1646.552045][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4641'. [ 1646.822600][ T5932] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1646.975698][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.987030][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.996869][ T5932] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1647.005915][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.015435][ T5932] usb 1-1: config 0 descriptor?? [ 1647.282035][T23226] program syz.0.4642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1647.520119][ T5932] arvo 0003:1E7D:30D4.0024: unknown main item tag 0x0 [ 1647.550806][ T5932] arvo 0003:1E7D:30D4.0024: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1647.938403][ T5881] usb 1-1: USB disconnect, device number 56 [ 1648.712705][ T42] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1648.864525][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.875640][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.885433][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1648.894523][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.904523][ T42] usb 1-1: config 0 descriptor?? [ 1649.119269][T23229] program syz.0.4643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1649.333673][ T42] arvo 0003:1E7D:30D4.0025: unknown main item tag 0x0 [ 1649.343965][ T42] arvo 0003:1E7D:30D4.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1649.766960][ T42] usb 1-1: USB disconnect, device number 57 [ 1649.887601][T11421] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1649.897052][T11421] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1649.905716][T11421] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1649.916517][T11421] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1649.924802][T11421] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1649.947542][T11421] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1649.958885][T11421] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1649.968955][T11421] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1649.979740][T11421] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1649.987371][T11421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1650.110418][T23233] chnl_net:caif_netlink_parms(): no params data found [ 1650.199303][T23233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.207125][T23233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.214753][T23233] bridge_slave_0: entered allmulticast mode [ 1650.222145][T23233] bridge_slave_0: entered promiscuous mode [ 1650.235638][T23233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.242913][T23233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.250071][T23233] bridge_slave_1: entered allmulticast mode [ 1650.257218][T23233] bridge_slave_1: entered promiscuous mode [ 1650.265294][T23235] chnl_net:caif_netlink_parms(): no params data found [ 1650.299856][T23233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.354614][T23233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.456473][T23235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.466022][T23235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.473735][T23235] bridge_slave_0: entered allmulticast mode [ 1650.482044][T23235] bridge_slave_0: entered promiscuous mode [ 1650.510353][T23233] team0: Port device team_slave_0 added [ 1650.517831][T23235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.525315][T23235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.532479][T23235] bridge_slave_1: entered allmulticast mode [ 1650.539767][T23235] bridge_slave_1: entered promiscuous mode [ 1650.547712][T23233] team0: Port device team_slave_1 added [ 1650.941318][T23233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1650.948532][T23233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1650.974377][ C0] vkms_vblank_simulate: vblank timer overrun [ 1650.981252][T23233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1650.995707][T23235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.005496][T23233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.012487][T23233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.039113][T23233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.056762][T23235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.091431][T23235] team0: Port device team_slave_0 added [ 1651.106226][T23235] team0: Port device team_slave_1 added [ 1651.115691][T23233] hsr_slave_0: entered promiscuous mode [ 1651.122280][T23233] hsr_slave_1: entered promiscuous mode [ 1651.128563][T23233] debugfs: 'hsr0' already exists in 'hsr' [ 1651.134785][T23233] Cannot create hsr debugfs directory [ 1651.171440][T23235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.178538][T23235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.206066][T23235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.218781][T23235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.228687][T23235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.254632][ C0] vkms_vblank_simulate: vblank timer overrun [ 1651.265127][T23235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.376604][T23235] hsr_slave_0: entered promiscuous mode [ 1651.383913][T23235] hsr_slave_1: entered promiscuous mode [ 1651.409692][T23235] debugfs: 'hsr0' already exists in 'hsr' [ 1651.417822][T23235] Cannot create hsr debugfs directory [ 1652.004146][T11421] Bluetooth: hci4: command tx timeout [ 1652.009930][T16872] Bluetooth: hci6: command tx timeout [ 1654.082771][T16872] Bluetooth: hci6: command tx timeout [ 1654.088934][T16872] Bluetooth: hci4: command tx timeout [ 1654.253718][ T5812] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1654.404472][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.415513][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.425303][ T5812] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1654.434438][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.443823][ T5812] usb 1-1: config 0 descriptor?? [ 1654.858250][ T5812] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 1654.868966][ T5812] arvo 0003:1E7D:30D4.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 1655.058542][ T5812] arvo 0003:1E7D:30D4.0026: couldn't init struct arvo_device [ 1655.066013][ T5812] arvo 0003:1E7D:30D4.0026: couldn't install keyboard [ 1655.077167][ T5812] arvo 0003:1E7D:30D4.0026: probe with driver arvo failed with error -5 [ 1655.262463][T11421] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1655.274549][T11421] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1655.281909][ T5812] usb 1-1: USB disconnect, device number 58 [ 1655.290972][T11421] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1655.299740][T11421] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1655.310276][T11421] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1655.409654][T23278] chnl_net:caif_netlink_parms(): no params data found [ 1655.458849][T23278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.466191][T23278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.473540][T23278] bridge_slave_0: entered allmulticast mode [ 1655.480234][T23278] bridge_slave_0: entered promiscuous mode [ 1655.488491][T23278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.496214][T23278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.503356][T23278] bridge_slave_1: entered allmulticast mode [ 1655.509984][T23278] bridge_slave_1: entered promiscuous mode [ 1655.532341][T23278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1655.544525][T23278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1655.567577][T23278] team0: Port device team_slave_0 added [ 1655.575084][T23278] team0: Port device team_slave_1 added [ 1655.597621][T23278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1655.605381][T23278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.631591][T23278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1655.645220][T23278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1655.652148][T23278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1655.678642][T23278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.709848][T23278] hsr_slave_0: entered promiscuous mode [ 1655.716128][T23278] hsr_slave_1: entered promiscuous mode [ 1655.722071][T23278] debugfs: 'hsr0' already exists in 'hsr' [ 1655.727870][T23278] Cannot create hsr debugfs directory [ 1656.182625][T16872] Bluetooth: hci4: command tx timeout [ 1656.188484][T16872] Bluetooth: hci6: command tx timeout [ 1656.822473][T23294] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1656.831232][T23294] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1657.372919][T11421] Bluetooth: hci7: command tx timeout [ 1658.243046][T11421] Bluetooth: hci6: command tx timeout [ 1658.243079][T16872] Bluetooth: hci4: command tx timeout [ 1659.443032][T16872] Bluetooth: hci7: command tx timeout [ 1660.762291][T11421] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1660.771017][T11421] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1660.778582][T11421] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1660.786717][T11421] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1660.795237][T11421] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1660.904474][T23304] chnl_net:caif_netlink_parms(): no params data found [ 1660.953225][T23304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.960316][T23304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.968127][T23304] bridge_slave_0: entered allmulticast mode [ 1660.975141][T23304] bridge_slave_0: entered promiscuous mode [ 1660.982304][T23304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.989783][T23304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.997126][T23304] bridge_slave_1: entered allmulticast mode [ 1661.003978][T23304] bridge_slave_1: entered promiscuous mode [ 1661.026471][T23304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.037505][T23304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1661.060991][T23304] team0: Port device team_slave_0 added [ 1661.068788][T23304] team0: Port device team_slave_1 added [ 1661.091160][T23304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.098303][T23304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.125362][T23304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.137492][T23304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.144622][T23304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.170729][T23304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.203852][T23304] hsr_slave_0: entered promiscuous mode [ 1661.210045][T23304] hsr_slave_1: entered promiscuous mode [ 1661.217102][T23304] debugfs: 'hsr0' already exists in 'hsr' [ 1661.222858][T23304] Cannot create hsr debugfs directory [ 1661.526752][T16872] Bluetooth: hci7: command tx timeout [ 1662.882688][T16872] Bluetooth: hci8: command tx timeout [ 1663.602828][T16872] Bluetooth: hci7: command tx timeout [ 1664.962690][T16872] Bluetooth: hci8: command tx timeout [ 1667.042717][T16872] Bluetooth: hci8: command tx timeout [ 1668.487057][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.493735][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.122817][T16872] Bluetooth: hci8: command tx timeout [ 1672.482333][T16872] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1672.490652][T16872] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1672.499240][T16872] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1672.507020][T16872] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1672.514624][T16872] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1672.620649][T23313] chnl_net:caif_netlink_parms(): no params data found [ 1672.672902][T23313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.680023][T23313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.688745][T23313] bridge_slave_0: entered allmulticast mode [ 1672.695825][T23313] bridge_slave_0: entered promiscuous mode [ 1672.703512][T23313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.710587][T23313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.718351][T23313] bridge_slave_1: entered allmulticast mode [ 1672.725706][T23313] bridge_slave_1: entered promiscuous mode [ 1672.750499][T23313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.762113][T23313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.788561][T23313] team0: Port device team_slave_0 added [ 1672.796194][T23313] team0: Port device team_slave_1 added [ 1672.818297][T23313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1672.825820][T23313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.851821][T23313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1672.864455][T23313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.871402][T23313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1672.898633][T23313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.933189][T23313] hsr_slave_0: entered promiscuous mode [ 1672.939398][T23313] hsr_slave_1: entered promiscuous mode [ 1672.945596][T23313] debugfs: 'hsr0' already exists in 'hsr' [ 1672.951309][T23313] Cannot create hsr debugfs directory [ 1674.562838][T11421] Bluetooth: hci9: command tx timeout [ 1676.061413][ T5183] udevd[5183]: worker [19638] /devices/virtual/block/nbd0 is taking a long time [ 1676.642678][T11421] Bluetooth: hci9: command tx timeout [ 1678.723197][T11421] Bluetooth: hci9: command tx timeout [ 1680.802788][T11421] Bluetooth: hci9: command tx timeout [ 1710.654887][T16872] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1710.663673][T16872] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1710.673642][T16872] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1710.684279][T16872] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1710.691828][T16872] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1710.703575][T15032] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1710.711926][T15032] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1710.728979][T11421] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1710.744066][T11421] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1710.751747][T11421] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1710.923448][T23328] chnl_net:caif_netlink_parms(): no params data found [ 1710.963545][T23330] chnl_net:caif_netlink_parms(): no params data found [ 1711.023232][T23328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.030361][T23328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.038320][T23328] bridge_slave_0: entered allmulticast mode [ 1711.045816][T23328] bridge_slave_0: entered promiscuous mode [ 1711.057277][T23328] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.064457][T23328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.071617][T23328] bridge_slave_1: entered allmulticast mode [ 1711.079074][T23328] bridge_slave_1: entered promiscuous mode [ 1711.118274][T23330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.125845][T23330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.133889][T23330] bridge_slave_0: entered allmulticast mode [ 1711.140769][T23330] bridge_slave_0: entered promiscuous mode [ 1711.150333][T23328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.162105][T23328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.171662][T23330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.178791][T23330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.186130][T23330] bridge_slave_1: entered allmulticast mode [ 1711.194127][T23330] bridge_slave_1: entered promiscuous mode [ 1711.234432][T23328] team0: Port device team_slave_0 added [ 1711.242272][T23330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.253699][T23328] team0: Port device team_slave_1 added [ 1711.260952][T23330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.305490][T23330] team0: Port device team_slave_0 added [ 1711.311870][T23328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.319026][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.345277][T23328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.357508][T23330] team0: Port device team_slave_1 added [ 1711.375154][T23328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1711.382171][T23328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.409933][T23328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.433038][T23330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.439983][T23330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.469035][T23330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1711.481693][T23330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1711.488688][T23330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1711.516759][T23330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1711.565318][T23328] hsr_slave_0: entered promiscuous mode [ 1711.571572][T23328] hsr_slave_1: entered promiscuous mode [ 1711.577902][T23328] debugfs: 'hsr0' already exists in 'hsr' [ 1711.584426][T23328] Cannot create hsr debugfs directory [ 1711.593990][T23330] hsr_slave_0: entered promiscuous mode [ 1711.601141][T23330] hsr_slave_1: entered promiscuous mode [ 1711.607489][T23330] debugfs: 'hsr0' already exists in 'hsr' [ 1711.613296][T23330] Cannot create hsr debugfs directory [ 1712.802772][T11421] Bluetooth: hci11: command tx timeout [ 1712.802777][T16872] Bluetooth: hci10: command tx timeout [ 1714.882689][T11421] Bluetooth: hci11: command tx timeout [ 1714.882737][T16872] Bluetooth: hci10: command tx timeout [ 1715.573255][T11421] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1715.581931][T11421] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1715.592282][T11421] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1715.601273][T11421] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1715.609960][T11421] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1715.718710][T23347] chnl_net:caif_netlink_parms(): no params data found [ 1715.767965][T23347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.775356][T23347] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.782720][T23347] bridge_slave_0: entered allmulticast mode [ 1715.790459][T23347] bridge_slave_0: entered promiscuous mode [ 1715.799160][T23347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.806425][T23347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.813825][T23347] bridge_slave_1: entered allmulticast mode [ 1715.820800][T23347] bridge_slave_1: entered promiscuous mode [ 1715.846146][T23347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.857574][T23347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.882761][T23347] team0: Port device team_slave_0 added [ 1715.890038][T23347] team0: Port device team_slave_1 added [ 1715.913424][T23347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.920386][T23347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.946654][T23347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1715.958552][T23347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1715.965962][T23347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1715.991905][T23347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.026283][T23347] hsr_slave_0: entered promiscuous mode [ 1716.032427][T23347] hsr_slave_1: entered promiscuous mode [ 1716.038606][T23347] debugfs: 'hsr0' already exists in 'hsr' [ 1716.044352][T23347] Cannot create hsr debugfs directory [ 1716.962744][T11421] Bluetooth: hci11: command tx timeout [ 1716.968248][T11421] Bluetooth: hci10: command tx timeout [ 1717.683064][T11421] Bluetooth: hci12: command tx timeout [ 1719.042636][T11421] Bluetooth: hci10: command tx timeout [ 1719.052957][T11421] Bluetooth: hci11: command tx timeout [ 1719.763497][T11421] Bluetooth: hci12: command tx timeout [ 1721.080031][T16872] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1721.089843][T16872] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1721.098437][T16872] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1721.106315][T16872] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1721.113909][T16872] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1721.218908][T23356] chnl_net:caif_netlink_parms(): no params data found [ 1721.267331][T23356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.274497][T23356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.281676][T23356] bridge_slave_0: entered allmulticast mode [ 1721.289677][T23356] bridge_slave_0: entered promiscuous mode [ 1721.297319][T23356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.304767][T23356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.311974][T23356] bridge_slave_1: entered allmulticast mode [ 1721.318969][T23356] bridge_slave_1: entered promiscuous mode [ 1721.342035][T23356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1721.353447][T23356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1721.378031][T23356] team0: Port device team_slave_0 added [ 1721.386071][T23356] team0: Port device team_slave_1 added [ 1721.406042][T23356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.413097][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.440385][T23356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.452194][T23356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.459178][T23356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.485357][T23356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.517169][T23356] hsr_slave_0: entered promiscuous mode [ 1721.523974][T23356] hsr_slave_1: entered promiscuous mode [ 1721.530904][T23356] debugfs: 'hsr0' already exists in 'hsr' [ 1721.537083][T23356] Cannot create hsr debugfs directory [ 1721.843048][T11421] Bluetooth: hci12: command tx timeout [ 1723.202765][T11421] Bluetooth: hci13: command tx timeout [ 1723.922754][T11421] Bluetooth: hci12: command tx timeout [ 1725.292619][T11421] Bluetooth: hci13: command tx timeout [ 1727.362623][T11421] Bluetooth: hci13: command tx timeout [ 1729.442664][T11421] Bluetooth: hci13: command tx timeout [ 1729.924645][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.931293][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.091145][T16872] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1733.099538][T16872] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1733.108594][T16872] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1733.116990][T16872] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1733.127364][T16872] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1733.231910][T23365] chnl_net:caif_netlink_parms(): no params data found [ 1733.280073][T23365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.287366][T23365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.294717][T23365] bridge_slave_0: entered allmulticast mode [ 1733.301831][T23365] bridge_slave_0: entered promiscuous mode [ 1733.310675][T23365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.317911][T23365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.325367][T23365] bridge_slave_1: entered allmulticast mode [ 1733.332088][T23365] bridge_slave_1: entered promiscuous mode [ 1733.353512][T23365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.364962][T23365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.388363][T23365] team0: Port device team_slave_0 added [ 1733.395843][T23365] team0: Port device team_slave_1 added [ 1733.417209][T23365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.424288][T23365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.450671][T23365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.462423][T23365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.469418][T23365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.495525][T23365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1733.529134][T23365] hsr_slave_0: entered promiscuous mode [ 1733.535363][T23365] hsr_slave_1: entered promiscuous mode [ 1733.541293][T23365] debugfs: 'hsr0' already exists in 'hsr' [ 1733.547083][T23365] Cannot create hsr debugfs directory [ 1735.202844][T16872] Bluetooth: hci14: command tx timeout [ 1737.282790][T16872] Bluetooth: hci14: command tx timeout [ 1739.372607][T16872] Bluetooth: hci14: command tx timeout [ 1741.443169][T16872] Bluetooth: hci14: command tx timeout [ 1770.749280][T11421] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1770.759395][T11421] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1770.768278][T11421] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1770.777574][T23333] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1770.777694][T11421] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1770.786533][T23333] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1770.800684][T23333] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1770.810767][T23333] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1770.822349][T23333] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1770.830430][T23333] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1771.005081][T23380] chnl_net:caif_netlink_parms(): no params data found [ 1771.040501][T23382] chnl_net:caif_netlink_parms(): no params data found [ 1771.100369][T23380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.107729][T23380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.115051][T23380] bridge_slave_0: entered allmulticast mode [ 1771.121765][T23380] bridge_slave_0: entered promiscuous mode [ 1771.132565][T23380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.139673][T23380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.147047][T23380] bridge_slave_1: entered allmulticast mode [ 1771.154357][T23380] bridge_slave_1: entered promiscuous mode [ 1771.189691][T23382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.198176][T23382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.206170][T23382] bridge_slave_0: entered allmulticast mode [ 1771.213622][T23382] bridge_slave_0: entered promiscuous mode [ 1771.222323][T23380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.231802][T23382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.239021][T23382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.246332][T23382] bridge_slave_1: entered allmulticast mode [ 1771.253304][T23382] bridge_slave_1: entered promiscuous mode [ 1771.261415][T23380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.303517][T23380] team0: Port device team_slave_0 added [ 1771.311485][T23380] team0: Port device team_slave_1 added [ 1771.320423][T23382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.338919][T23382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1771.365396][T23380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.372341][T23380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.399532][T23380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.411858][T23380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.418867][T23380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.445469][T23380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.469577][T23382] team0: Port device team_slave_0 added [ 1771.477889][T23382] team0: Port device team_slave_1 added [ 1771.510126][T23382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1771.517335][T23382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.543664][T23382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.556134][T23382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.563366][T23382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1771.589411][T23382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.619038][T23380] hsr_slave_0: entered promiscuous mode [ 1771.625596][T23380] hsr_slave_1: entered promiscuous mode [ 1771.631519][T23380] debugfs: 'hsr0' already exists in 'hsr' [ 1771.637421][T23380] Cannot create hsr debugfs directory [ 1771.677382][T23382] hsr_slave_0: entered promiscuous mode [ 1771.683848][T23382] hsr_slave_1: entered promiscuous mode [ 1771.689756][T23382] debugfs: 'hsr0' already exists in 'hsr' [ 1771.695760][T23382] Cannot create hsr debugfs directory [ 1772.802782][T11421] Bluetooth: hci15: command tx timeout [ 1772.882725][T11421] Bluetooth: hci16: command tx timeout [ 1772.965342][T16872] Bluetooth: hci6: command 0x0406 tx timeout [ 1772.965337][T11421] Bluetooth: hci4: command 0x0406 tx timeout [ 1774.882624][T15032] Bluetooth: hci15: command tx timeout [ 1774.962758][T15032] Bluetooth: hci16: command tx timeout [ 1775.670306][T23333] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1775.679199][T23333] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1775.688637][T23333] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1775.696574][T23333] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1775.705267][T23333] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1775.815833][T23397] chnl_net:caif_netlink_parms(): no params data found [ 1775.868903][T23397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.876317][T23397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.883741][T23397] bridge_slave_0: entered allmulticast mode [ 1775.890512][T23397] bridge_slave_0: entered promiscuous mode [ 1775.897997][T23397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.905897][T23397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.913433][T23397] bridge_slave_1: entered allmulticast mode [ 1775.920330][T23397] bridge_slave_1: entered promiscuous mode [ 1775.946419][T23397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.957968][T23397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.982679][T23397] team0: Port device team_slave_0 added [ 1775.990140][T23397] team0: Port device team_slave_1 added [ 1776.021881][T23397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.029035][T23397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.055354][T23397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.069428][T23397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.076752][T23397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.104893][T23397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.161466][T23397] hsr_slave_0: entered promiscuous mode [ 1776.169761][T23397] hsr_slave_1: entered promiscuous mode [ 1776.177236][T23397] debugfs: 'hsr0' already exists in 'hsr' [ 1776.183090][T23397] Cannot create hsr debugfs directory [ 1776.962940][T23333] Bluetooth: hci15: command tx timeout [ 1777.042660][T23333] Bluetooth: hci16: command tx timeout [ 1777.762764][T23333] Bluetooth: hci17: command tx timeout [ 1778.083796][T23333] Bluetooth: hci7: command 0x0406 tx timeout [ 1779.042977][T15032] Bluetooth: hci15: command tx timeout [ 1779.122729][T15032] Bluetooth: hci16: command tx timeout [ 1779.842756][T15032] Bluetooth: hci17: command tx timeout [ 1781.659098][T16872] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1781.667129][T16872] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1781.675985][T16872] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1781.684949][T16872] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1781.694604][T16872] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1781.807716][T23406] chnl_net:caif_netlink_parms(): no params data found [ 1781.859998][T23406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.868322][T23406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.875775][T23406] bridge_slave_0: entered allmulticast mode [ 1781.882684][T23406] bridge_slave_0: entered promiscuous mode [ 1781.890472][T23406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.897769][T23406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.905038][T23406] bridge_slave_1: entered allmulticast mode [ 1781.911885][T23406] bridge_slave_1: entered promiscuous mode [ 1781.932758][T16872] Bluetooth: hci17: command tx timeout [ 1781.943395][T23406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.955680][T23406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.979208][T23406] team0: Port device team_slave_0 added [ 1781.987468][T23406] team0: Port device team_slave_1 added [ 1782.011850][T23406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.019284][T23406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.045332][T23406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.057884][T23406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.065235][T23406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.091476][T23406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1782.124686][T23406] hsr_slave_0: entered promiscuous mode [ 1782.131049][T23406] hsr_slave_1: entered promiscuous mode [ 1782.137300][T23406] debugfs: 'hsr0' already exists in 'hsr' [ 1782.143074][T23406] Cannot create hsr debugfs directory [ 1782.404936][ T31] INFO: task kworker/1:3H:14482 blocked for more than 143 seconds. [ 1782.416671][ T31] Not tainted syzkaller #0 [ 1782.421645][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1782.430559][ T31] task:kworker/1:3H state:D stack:27192 pid:14482 tgid:14482 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1782.443489][ T31] Workqueue: kblockd blk_mq_requeue_work [ 1782.449164][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1782.452626][ T31] [ 1782.455572][ T31] __schedule+0x1190/0x5de0 [ 1782.472573][ T31] ? __pfx___schedule+0x10/0x10 [ 1782.477472][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1782.484865][ T31] ? find_held_lock+0x2b/0x80 [ 1782.512574][ T31] ? schedule+0x2d7/0x3a0 [ 1782.527926][ T31] schedule+0xe7/0x3a0 [ 1782.532051][ T31] schedule_timeout+0x123/0x290 [ 1782.545779][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1782.551235][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1782.556740][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1782.563380][ T31] ? prepare_to_wait_event+0xd0/0x6a0 [ 1782.568788][ T31] nbd_queue_rq+0xd12/0x12d0 [ 1782.573440][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1782.578457][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1782.584570][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1782.589505][ T31] blk_mq_dispatch_rq_list+0x416/0x1e20 [ 1782.595127][ T31] ? sbitmap_find_bit+0x420/0x6f0 [ 1782.600168][ T31] ? sbitmap_get+0x1e5/0x360 [ 1782.604814][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1782.610800][ T31] ? __blk_mq_alloc_driver_tag+0x4f7/0x7a0 [ 1782.616757][ T31] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 1782.623148][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1782.629939][ T31] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1782.636181][ T31] blk_mq_run_hw_queue+0x239/0x670 [ 1782.641302][ T31] ? blk_mq_run_hw_queue+0x22b/0x670 [ 1782.646735][ T31] blk_mq_run_hw_queues+0x117/0x450 [ 1782.651942][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1782.656984][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 1782.663602][ T31] ? mark_held_locks+0x49/0x80 [ 1782.668435][ T31] blk_mq_requeue_work+0x59f/0x7d0 [ 1782.673927][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 1782.679904][ T31] ? rcu_is_watching+0x12/0xc0 [ 1782.684946][ T31] process_one_work+0x9cf/0x1b70 [ 1782.690098][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1782.695598][ T31] ? assign_work+0x1a0/0x250 [ 1782.700188][ T31] worker_thread+0x6c8/0xf10 [ 1782.704834][ T31] ? __kthread_parkme+0x19e/0x250 [ 1782.709942][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1782.715201][ T31] kthread+0x3c5/0x780 [ 1782.719264][ T31] ? __pfx_kthread+0x10/0x10 [ 1782.724102][ T31] ? rcu_is_watching+0x12/0xc0 [ 1782.728858][ T31] ? __pfx_kthread+0x10/0x10 [ 1782.733541][ T31] ret_from_fork+0x675/0x7d0 [ 1782.738133][ T31] ? __pfx_kthread+0x10/0x10 [ 1782.742789][ T31] ret_from_fork_asm+0x1a/0x30 [ 1782.747557][ T31] [ 1782.750651][ T31] INFO: task syz.4.4613:23111 blocked for more than 143 seconds. [ 1782.758709][ T31] Not tainted syzkaller #0 [ 1782.763675][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1782.772632][ T31] task:syz.4.4613 state:D stack:26344 pid:23111 tgid:23110 ppid:17000 task_flags:0x480140 flags:0x00080002 [ 1782.784944][ T31] Call Trace: [ 1782.788212][ T31] [ 1782.791118][ T31] __schedule+0x1190/0x5de0 [ 1782.795812][ T31] ? __lock_acquire+0x622/0x1c90 [ 1782.800744][ T31] ? __pfx___schedule+0x10/0x10 [ 1782.805670][ T31] ? find_held_lock+0x2b/0x80 [ 1782.810342][ T31] ? schedule+0x2d7/0x3a0 [ 1782.814701][ T31] schedule+0xe7/0x3a0 [ 1782.818786][ T31] blk_mq_freeze_queue_wait+0x143/0x1b0 [ 1782.824353][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1782.830416][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1782.836580][ T31] ? blk_freeze_queue_start+0xec/0x140 [ 1782.842036][ T31] queue_limits_commit_update_frozen+0x93/0x110 [ 1782.848319][ T31] nbd_set_size+0x4da/0x720 [ 1782.852869][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1782.857882][ T31] ? __asan_memcpy+0x3c/0x60 [ 1782.862530][ T31] nbd_genl_size_set+0x2d7/0x3e0 [ 1782.868080][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 1782.873599][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1782.878258][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1782.883796][ T31] nbd_genl_reconfigure+0x604/0x1ca0 [ 1782.889083][ T31] ? rcu_is_watching+0x12/0xc0 [ 1782.894037][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1782.899754][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1782.907440][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1782.914899][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1782.920437][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1782.926568][ T31] ? genl_get_cmd+0x194/0x580 [ 1782.931248][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 1782.936199][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 1782.941044][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1782.946406][ T31] genl_rcv_msg+0x55c/0x800 [ 1782.950901][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1782.955966][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1782.961688][ T31] ? __lock_acquire+0x622/0x1c90 [ 1782.966905][ T31] netlink_rcv_skb+0x158/0x420 [ 1782.972314][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1782.977421][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1782.982788][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1782.988096][ T31] genl_rcv+0x28/0x40 [ 1782.992069][ T31] netlink_unicast+0x5aa/0x870 [ 1782.996885][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1783.002171][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1783.007163][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1783.012440][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1783.017771][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1783.023293][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1783.028569][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1783.034049][ T31] ? try_to_wake_up+0xa67/0x1870 [ 1783.038991][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1783.044130][ T31] ? find_held_lock+0x2b/0x80 [ 1783.048856][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1783.054105][ T31] ? __lock_acquire+0x622/0x1c90 [ 1783.059142][ T31] __sys_sendmsg+0x16d/0x220 [ 1783.063822][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1783.068930][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1783.074362][ T31] do_syscall_64+0xcd/0xfa0 [ 1783.078870][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.084831][ T31] RIP: 0033:0x7fad31d8f749 [ 1783.089231][ T31] RSP: 002b:00007fad32c7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1783.097685][ T31] RAX: ffffffffffffffda RBX: 00007fad31fe5fa0 RCX: 00007fad31d8f749 [ 1783.105789][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1783.113989][ T31] RBP: 00007fad31e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1783.121961][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1783.130536][ T31] R13: 00007fad31fe6038 R14: 00007fad31fe5fa0 R15: 00007ffe5249bea8 [ 1783.138761][ T31] [ 1783.141941][ T31] INFO: task syz.2.4614:23114 blocked for more than 144 seconds. [ 1783.150054][ T31] Not tainted syzkaller #0 [ 1783.157395][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1783.166143][ T31] task:syz.2.4614 state:D stack:28984 pid:23114 tgid:23113 ppid:17124 task_flags:0x400040 flags:0x00080002 [ 1783.178556][ T31] Call Trace: [ 1783.181839][ T31] [ 1783.184819][ T31] __schedule+0x1190/0x5de0 [ 1783.189327][ T31] ? __lock_acquire+0x622/0x1c90 [ 1783.194303][ T31] ? __pfx___schedule+0x10/0x10 [ 1783.199157][ T31] ? find_held_lock+0x2b/0x80 [ 1783.204243][T16872] Bluetooth: hci8: command 0x0406 tx timeout [ 1783.212966][ T31] ? schedule+0x2d7/0x3a0 [ 1783.217344][ T31] ? genl_rcv_msg+0x577/0x800 [ 1783.222023][ T31] schedule+0xe7/0x3a0 [ 1783.226373][ T31] schedule_preempt_disabled+0x13/0x30 [ 1783.231864][ T31] __mutex_lock+0x818/0x1060 [ 1783.236490][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 1783.241161][ T31] ? genl_rcv_msg+0x577/0x800 [ 1783.245957][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1783.251016][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 1783.256342][ T31] ? __dev_queue_xmit+0xaf1/0x4490 [ 1783.261455][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1783.266784][ T31] ? genl_rcv_msg+0x577/0x800 [ 1783.271450][ T31] genl_rcv_msg+0x577/0x800 [ 1783.275976][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1783.281737][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1783.286910][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 1783.291846][ T31] netlink_rcv_skb+0x158/0x420 [ 1783.296653][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1783.301667][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1783.307002][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1783.312283][ T31] genl_rcv+0x28/0x40 [ 1783.316281][ T31] netlink_unicast+0x5aa/0x870 [ 1783.321046][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1783.326403][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1783.331177][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1783.336680][ T31] __sys_sendto+0x4a3/0x520 [ 1783.341166][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1783.346227][ T31] ? find_held_lock+0x2b/0x80 [ 1783.350907][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 1783.355793][ T31] ? do_syscall_64+0x91/0xfa0 [ 1783.360466][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1783.365821][ T31] do_syscall_64+0xcd/0xfa0 [ 1783.370331][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1783.376285][ T31] RIP: 0033:0x7f8dbe9915dc [ 1783.381352][ T31] RSP: 002b:00007f8dbf89eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1783.389841][ T31] RAX: ffffffffffffffda RBX: 00007f8dbf89efc0 RCX: 00007f8dbe9915dc [ 1783.398109][ T31] RDX: 0000000000000020 RSI: 00007f8dbf89f010 RDI: 0000000000000004 [ 1783.406127][ T31] RBP: 0000000000000000 R08: 00007f8dbf89ef14 R09: 000000000000000c [ 1783.414115][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1783.422060][ T31] R13: 00007f8dbf89ef68 R14: 00007f8dbf89f010 R15: 0000000000000000 [ 1783.430069][ T31] [ 1783.433178][ T31] [ 1783.433178][ T31] Showing all locks held in the system: [ 1783.440930][ T31] 1 lock held by khungtaskd/31: [ 1783.446310][ T31] #0: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1783.456189][ T31] 4 locks held by kworker/u8:6/769: [ 1783.461369][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1783.472731][ T31] #1: ffffc900038f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1783.483506][ T31] #2: ffffffff900e7bc8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1783.492623][ T31] #3: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1783.502758][ T31] 2 locks held by getty/5575: [ 1783.507439][ T31] #0: ffff88814d99a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1783.517255][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1783.527669][ T31] 4 locks held by kworker/1:3H/14482: [ 1783.533109][ T31] #0: ffff88801e2cbd48 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1783.543677][ T31] #1: ffffc9000bdbfd00 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1783.556220][ T31] #2: ffff888142300d10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x22b/0x670 [ 1783.566075][ T31] #3: ffff888026d6ebf8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xbd/0x12d0 [ 1783.575131][ T31] 5 locks held by kworker/u9:1/15032: [ 1783.580484][ T31] #0: ffff88801d71b148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1783.591259][ T31] #1: ffffc900041ffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1783.603574][ T31] #2: ffff888044654dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 1783.613525][ T31] #3: ffff8880446540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x13f/0xb20 [ 1783.623267][ T31] #4: ffffffff8e3cfcf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1783.633461][ T31] 1 lock held by ipvs-e:11:0/18557: [ 1783.638656][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1783.648614][ T31] 1 lock held by udevd/19638: [ 1783.653297][ T31] #0: ffff888142f32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1783.662944][ T31] 6 locks held by syz.4.4613/23111: [ 1783.668144][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.676629][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.686851][ T31] #2: ffff888026cf5270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x487/0x1ca0 [ 1783.697276][ T31] #3: ffff888026d010d8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2b6/0x720 [ 1783.706716][ T31] #4: ffff888026d00a78 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1783.718413][ T31] #5: ffff888026d00ab0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1783.730400][ T31] 2 locks held by syz.2.4614/23114: [ 1783.735645][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.744290][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.753327][ T31] 2 locks held by syz.1.4630/23179: [ 1783.758507][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.766809][T16872] Bluetooth: hci18: command tx timeout [ 1783.772788][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.781779][ T31] 2 locks held by syz.1.4630/23182: [ 1783.789613][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.798077][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.807091][ T31] 2 locks held by syz.1.4630/23183: [ 1783.812261][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.820494][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.829477][ T31] 2 locks held by syz.3.4639/23216: [ 1783.834910][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.843234][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.852189][ T31] 2 locks held by syz-executor/23233: [ 1783.857632][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.865883][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.875151][ T31] 2 locks held by syz-executor/23235: [ 1783.880570][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.888772][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.898935][ T31] 2 locks held by syz-executor/23278: [ 1783.904346][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.912657][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.921715][ T31] 2 locks held by syz.0.4660/23301: [ 1783.927355][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.935674][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.944741][ T31] 2 locks held by syz-executor/23304: [ 1783.950093][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.958329][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.967303][ T31] 2 locks held by syz-executor/23313: [ 1783.972747][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1783.980943][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1783.989981][ T31] 2 locks held by syz-executor/23328: [ 1783.996391][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.004949][T16872] Bluetooth: hci17: command tx timeout [ 1784.010464][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.019535][ T31] 2 locks held by syz-executor/23330: [ 1784.024914][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.033111][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.042085][ T31] 2 locks held by syz-executor/23347: [ 1784.047496][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.055695][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.064683][ T31] 2 locks held by syz-executor/23356: [ 1784.070048][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.078236][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.087525][ T31] 2 locks held by syz-executor/23365: [ 1784.092939][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.101812][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.110878][ T31] 2 locks held by syz-executor/23380: [ 1784.116298][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.124544][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.133540][ T31] 2 locks held by syz-executor/23382: [ 1784.138895][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.147083][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.156134][ T31] 2 locks held by syz-executor/23397: [ 1784.161489][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.170076][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.179088][ T31] 2 locks held by syz-executor/23406: [ 1784.184482][ T31] #0: ffffffff9018b990 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1784.192727][ T31] #1: ffffffff9018ba48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 1784.203733][ T31] [ 1784.206604][ T31] ============================================= [ 1784.206604][ T31] [ 1784.215088][ T31] NMI backtrace for cpu 0 [ 1784.215102][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1784.215121][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1784.215129][ T31] Call Trace: [ 1784.215134][ T31] [ 1784.215140][ T31] dump_stack_lvl+0x116/0x1f0 [ 1784.215159][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1784.215174][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1784.215195][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1784.215218][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1784.215237][ T31] watchdog+0xf3f/0x1170 [ 1784.215257][ T31] ? rcu_is_watching+0x12/0xc0 [ 1784.215276][ T31] ? __pfx_watchdog+0x10/0x10 [ 1784.215291][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1784.215306][ T31] ? __kthread_parkme+0x19e/0x250 [ 1784.215328][ T31] ? __pfx_watchdog+0x10/0x10 [ 1784.215344][ T31] kthread+0x3c5/0x780 [ 1784.215359][ T31] ? __pfx_kthread+0x10/0x10 [ 1784.215374][ T31] ? rcu_is_watching+0x12/0xc0 [ 1784.215391][ T31] ? __pfx_kthread+0x10/0x10 [ 1784.215406][ T31] ret_from_fork+0x675/0x7d0 [ 1784.215420][ T31] ? __pfx_kthread+0x10/0x10 [ 1784.215435][ T31] ret_from_fork_asm+0x1a/0x30 [ 1784.215469][ T31] [ 1784.215475][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1784.342225][ C1] NMI backtrace for cpu 1 [ 1784.342238][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1784.342254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1784.342261][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1784.342286][ C1] Code: b7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 65 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1784.342299][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 1784.342311][ C1] RAX: 0000000009a044a5 RBX: 0000000000000001 RCX: ffffffff8b60c2a9 [ 1784.342320][ C1] RDX: 0000000000000000 RSI: ffffffff8da2c11f RDI: ffffffff8bf073c0 [ 1784.342329][ C1] RBP: ffffed1003ad7490 R08: 0000000000000001 R09: ffffed10170a6655 [ 1784.342337][ C1] R10: ffff8880b85332ab R11: 0000000000000001 R12: 0000000000000001 [ 1784.342345][ C1] R13: ffff88801d6ba480 R14: ffffffff908214d0 R15: 0000000000000000 [ 1784.342354][ C1] FS: 0000000000000000(0000) GS:ffff888124b05000(0000) knlGS:0000000000000000 [ 1784.342368][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1784.342377][ C1] CR2: 0000562fb26dfad8 CR3: 000000000e182000 CR4: 00000000003526f0 [ 1784.342386][ C1] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 1784.342395][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1784.342403][ C1] Call Trace: [ 1784.342408][ C1] [ 1784.342413][ C1] default_idle+0x13/0x20 [ 1784.342429][ C1] default_idle_call+0x6c/0xb0 [ 1784.342443][ C1] do_idle+0x38d/0x500 [ 1784.342465][ C1] ? __pfx_do_idle+0x10/0x10 [ 1784.342481][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1784.342498][ C1] cpu_startup_entry+0x4f/0x60 [ 1784.342515][ C1] start_secondary+0x21d/0x2b0 [ 1784.342534][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1784.342554][ C1] common_startup_64+0x13e/0x148 [ 1784.342574][ C1] [ 1785.842704][T15032] Bluetooth: hci18: command tx timeout [ 1787.922674][T15032] Bluetooth: hci18: command tx timeout [ 1790.002612][T15032] Bluetooth: hci18: command tx timeout [ 1791.374495][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.380800][ T1298] ieee802154 phy1 wpan1: encryption failed: -22