last executing test programs: 6m23.623548483s ago: executing program 3 (id=198): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) r2 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x2) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000180)) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x28, 0x0, 0x1, 0xfffffffe, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x8, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000003060103000000000000000000000000050001000700"], 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x0, 0x0, 0x4}, 0x9}}, 0x18) 6m23.047909088s ago: executing program 3 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 6m21.895906186s ago: executing program 3 (id=203): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000340)}) 6m19.277077401s ago: executing program 3 (id=205): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010000, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 6m17.479414657s ago: executing program 3 (id=207): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000000)=0x5) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xca72}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x68000) 6m16.617490457s ago: executing program 3 (id=211): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 6m1.34751868s ago: executing program 32 (id=211): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x3, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 5m10.919086689s ago: executing program 0 (id=342): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4d9, 0xa055, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x3}}}}}]}}]}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x404}}]}) 5m8.987968003s ago: executing program 0 (id=350): syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 5m8.527552901s ago: executing program 0 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000034c0)={0x2020}, 0xcac) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r9, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 5m3.391563804s ago: executing program 0 (id=362): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 5m3.088961932s ago: executing program 0 (id=364): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 5m2.705075374s ago: executing program 0 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000170000008500000050000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0xa706e7bb97ec58a7, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m2.187377385s ago: executing program 33 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000170000008500000050000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0xa706e7bb97ec58a7, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x14, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.884422275s ago: executing program 4 (id=1136): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 8.540056695s ago: executing program 1 (id=1139): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) writev(r2, &(0x7f0000001e40)=[{&(0x7f0000001bc0)="279d74430046f5cafe716ee2e8a37651b2ec04b49e677e63a569217a8f94a7ae04fa3cdd26a8c2e4c67b4e38b74fc51a8701d7be5c1f51d06e07f5a4b27fe1cc47d113205508f04aa1ffb2ba6baf13fe3ecdb2d57797cfc3abd4a6eeec30dab6177fc4171d85fe703d910d7d1d054554f2aa86bd7ae2490360c49f6a282398eafa4f17484d90e0bb1ac5da8a0e6d825a640c55bc0b4a8fce72d24640d0bfc12d43961de762d1227f498d114c807fa755ce93271f4a2d6213", 0xb8}, {&(0x7f0000001c80)="dc7b4f0412aac344f4bcd8b131af08af353a4c5b3a07e90ca9542328634ec40edf3a32856879e0b9c87d951cf8fd6675efd430359f21b2e8b429421dc1fb4d8fc9e19a57fe266d33407f0413a3e41f3e8e0f2a7d6760b9b9927c01daffae3ab70554524cc9ae353bfbe372a29787bc18793b1e41a82ce9c3c2ecebfa1656c888eca9109fc0a1af4b9eed8c5a91bbe3dc0ac0b139f566a69fa4d6ca9b9e86386942e1850ff13b16422dab8a159857191ac270eae1a55ef8f03b655390156be050b67dd4e6df74198393cec4f67582c87fc8035958961c411cff97e7a20cc7188c9535a8a32377c40d1573f35ccc18d88d5d", 0xf1}, {&(0x7f0000001d80)="61580341be6afe276f3cbb7cad42922b7aa6f2aa876aa690d54e925fed066e29ed37044c7c7084b3054d7795ee332091e3380bd8b7decb2ded6c8dc3f2cf40eaec42f794b979a8808be7d0a88613079f2cdf1d1d3c34b560727365ced94f8be33dd2eb338b051c32aa0a9c602c5763383a6a89f0eb059733980e2a13e5a151eabbb69d10b5", 0x85}, {&(0x7f0000006180)="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", 0x1000}], 0x4) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x9) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) process_vm_writev(r5, &(0x7f0000000880)=[{&(0x7f0000000500)=""/236, 0xec}, {0x0}, {0x0}], 0x3, &(0x7f0000000340)=[{&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000001ac0)=""/211, 0xd3}], 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20048010) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x6e, 0x0, 0x0, 0x10, 0x1}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r6, 0x40140921, 0x200000000005) 7.586215091s ago: executing program 5 (id=1141): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 7.531678004s ago: executing program 4 (id=1142): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x235, &(0x7f0000000740)={0x0, 0x1c29, 0x10100, 0x0, 0x37c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) write$sequencer(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) 7.493599727s ago: executing program 1 (id=1143): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x68000) 7.399038853s ago: executing program 1 (id=1144): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 6.795620818s ago: executing program 2 (id=1145): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 6.795385148s ago: executing program 4 (id=1146): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0xa000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000002c0)={0x9, 0x2, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysinfo(&(0x7f0000000000)=""/196) 6.442090549s ago: executing program 1 (id=1147): timerfd_create(0x9, 0x80000) syz_open_dev$swradio(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r3, 0x8800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 5.350411824s ago: executing program 5 (id=1148): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f00000003c0)=[{0x20, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xfe}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @quote}], 0x38) 5.031605602s ago: executing program 5 (id=1149): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 4.495261194s ago: executing program 1 (id=1150): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2bc, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xa, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x318) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x7, 0x34565559, [0x34565348, 0xb22], [0x7], 0x1}}, 0x8}) r5 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) statx(r0, &(0x7f0000000180)='\x00', 0x1000, 0x310, &(0x7f00000004c0)) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) open(0x0, 0x40440, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="67e1000010000304000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32, @ANYBLOB="080003"], 0x80}}, 0x8000) 4.127317256s ago: executing program 2 (id=1151): openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) syz_open_procfs$namespace(0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) writev(r2, &(0x7f0000001e40)=[{&(0x7f0000001bc0)="279d74430046f5cafe716ee2e8a37651b2ec04b49e677e63a569217a8f94a7ae04fa3cdd26a8c2e4c67b4e38b74fc51a8701d7be5c1f51d06e07f5a4b27fe1cc47d113205508f04aa1ffb2ba6baf13fe3ecdb2d57797cfc3abd4a6eeec30dab6177fc4171d85fe703d910d7d1d054554f2aa86bd7ae2490360c49f6a282398eafa4f17484d90e0bb1ac5da8a0e6d825a640c55bc0b4a8fce72d24640d0bfc12d43961de762d1227f498d114c807fa755ce93271f4a2d6213", 0xb8}, {&(0x7f0000001c80)="dc7b4f0412aac344f4bcd8b131af08af353a4c5b3a07e90ca9542328634ec40edf3a32856879e0b9c87d951cf8fd6675efd430359f21b2e8b429421dc1fb4d8fc9e19a57fe266d33407f0413a3e41f3e8e0f2a7d6760b9b9927c01daffae3ab70554524cc9ae353bfbe372a29787bc18793b1e41a82ce9c3c2ecebfa1656c888eca9109fc0a1af4b9eed8c5a91bbe3dc0ac0b139f566a69fa4d6ca9b9e86386942e1850ff13b16422dab8a159857191ac270eae1a55ef8f03b655390156be050b67dd4e6df74198393cec4f67582c87fc8035958961c411cff97e7a20cc7188c9535a8a32377c40d1573f35ccc18d88d5d", 0xf1}, {&(0x7f0000001d80)="61580341be6afe276f3cbb7cad42922b7aa6f2aa876aa690d54e925fed066e29ed37044c7c7084b3054d7795ee332091e3380bd8b7decb2ded6c8dc3f2cf40eaec42f794b979a8808be7d0a88613079f2cdf1d1d3c34b560727365ced94f8be33dd2eb338b051c32aa0a9c602c5763383a6a89f0eb059733980e2a13e5a151eabbb69d10b5", 0x85}, {&(0x7f0000006180)="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", 0x1000}], 0x4) r3 = socket$inet(0x2, 0x1, 0x100) listen(r3, 0x9) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) process_vm_writev(r5, &(0x7f0000000880)=[{&(0x7f0000000500)=""/236, 0xec}, {0x0}, {0x0}], 0x3, &(0x7f0000000340)=[{&(0x7f0000000900)=""/215, 0xd7}, {&(0x7f0000000a00)=""/125, 0x7d}, {&(0x7f0000001ac0)=""/211, 0xd3}], 0x3, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20048010) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x6e, 0x0, 0x0, 0x10, 0x1}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r6, 0x40140921, 0x200000000005) 3.111860406s ago: executing program 4 (id=1152): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x68000) 3.104774546s ago: executing program 5 (id=1153): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x4000010) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) getpid() r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x2b2}, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x0) 2.222361139s ago: executing program 4 (id=1154): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)={@fallback, 0xffffffffffffffff, 0x2c}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x33) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8, 0x1b, 0x4000000}]}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.655520752s ago: executing program 2 (id=1155): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x401, &(0x7f0000000240)="b852cd44", 0x4) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={0x0}}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000180)={0x8, 0x20000800}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_FW_MASK={0x8, 0x5, 0xb08}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 1.629432243s ago: executing program 5 (id=1156): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x90}]}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 733.063136ms ago: executing program 2 (id=1157): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f00000003c0)=[{0x20, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xfe}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @quote}], 0x38) 722.362297ms ago: executing program 1 (id=1158): timerfd_create(0x9, 0x80000) syz_open_dev$swradio(0x0, 0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r3, 0x8800000) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) 426.548095ms ago: executing program 5 (id=1159): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0xc000, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e20, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) 382.942947ms ago: executing program 2 (id=1160): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) 213.471327ms ago: executing program 4 (id=1161): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 0s ago: executing program 2 (id=1162): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x8, 0xd}}}, 0x24}}, 0x68000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 77.828185][ T5755] cgroup: Unknown subsys name 'net' [ 77.966716][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.884670][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.046997][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.056197][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.069137][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.075250][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.087132][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.097320][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.098410][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.108977][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.113691][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.130738][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.136891][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.138829][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.153596][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.155969][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.170682][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.178769][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.181677][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.195734][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.196669][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.213719][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.222082][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.230991][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.239650][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.268423][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.013849][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 83.038285][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 83.072145][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 83.169047][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 83.289260][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.297388][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.304885][ T5767] bridge_slave_0: entered allmulticast mode [ 83.312608][ T5767] bridge_slave_0: entered promiscuous mode [ 83.333941][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.341463][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.349331][ T5767] bridge_slave_1: entered allmulticast mode [ 83.357336][ T5767] bridge_slave_1: entered promiscuous mode [ 83.391411][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.399261][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.407744][ T5765] bridge_slave_0: entered allmulticast mode [ 83.414729][ T5765] bridge_slave_0: entered promiscuous mode [ 83.452575][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.461350][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.469790][ T5765] bridge_slave_1: entered allmulticast mode [ 83.477095][ T5765] bridge_slave_1: entered promiscuous mode [ 83.507614][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.553941][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.578932][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.591185][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.614859][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.623012][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.631515][ T5768] bridge_slave_0: entered allmulticast mode [ 83.638842][ T5768] bridge_slave_0: entered promiscuous mode [ 83.647137][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.654750][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.662580][ T5768] bridge_slave_1: entered allmulticast mode [ 83.670357][ T5768] bridge_slave_1: entered promiscuous mode [ 83.740713][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.748610][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.756294][ T5766] bridge_slave_0: entered allmulticast mode [ 83.764336][ T5766] bridge_slave_0: entered promiscuous mode [ 83.777260][ T5765] team0: Port device team_slave_0 added [ 83.787632][ T5767] team0: Port device team_slave_0 added [ 83.807710][ T5767] team0: Port device team_slave_1 added [ 83.814186][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.821703][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.829640][ T5766] bridge_slave_1: entered allmulticast mode [ 83.837296][ T5766] bridge_slave_1: entered promiscuous mode [ 83.856697][ T5765] team0: Port device team_slave_1 added [ 83.864995][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.911738][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.940324][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.973208][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.980594][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.009340][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.025057][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.048851][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.060213][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.087202][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.111641][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.121514][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.151819][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.177138][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.184618][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.212049][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.227205][ T5768] team0: Port device team_slave_0 added [ 84.245997][ T5766] team0: Port device team_slave_0 added [ 84.275809][ T5768] team0: Port device team_slave_1 added [ 84.288212][ T5766] team0: Port device team_slave_1 added [ 84.326608][ T5765] hsr_slave_0: entered promiscuous mode [ 84.333648][ T5765] hsr_slave_1: entered promiscuous mode [ 84.347406][ T5083] Bluetooth: hci2: command tx timeout [ 84.353654][ T5083] Bluetooth: hci3: command tx timeout [ 84.361309][ T5782] Bluetooth: hci0: command tx timeout [ 84.369024][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.376143][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.404005][ T5774] Bluetooth: hci1: command tx timeout [ 84.411075][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.459171][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.469447][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.496792][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.514093][ T5767] hsr_slave_0: entered promiscuous mode [ 84.521954][ T5767] hsr_slave_1: entered promiscuous mode [ 84.528690][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.537420][ T5767] Cannot create hsr debugfs directory [ 84.553695][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.561149][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.587638][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.601591][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.609196][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.636971][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.715970][ T5768] hsr_slave_0: entered promiscuous mode [ 84.725176][ T5768] hsr_slave_1: entered promiscuous mode [ 84.733015][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.741767][ T5768] Cannot create hsr debugfs directory [ 84.881867][ T5766] hsr_slave_0: entered promiscuous mode [ 84.889252][ T5766] hsr_slave_1: entered promiscuous mode [ 84.897325][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.906298][ T5766] Cannot create hsr debugfs directory [ 85.261583][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.291270][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.303411][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.334064][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.431506][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.447865][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.478001][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.507892][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.555719][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.577479][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.591989][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.602883][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.722175][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.759845][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.792091][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.804229][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.869197][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.915306][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.941544][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.968109][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.983734][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.991698][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.026755][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.034238][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.070662][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.078216][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.108375][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.116222][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.150639][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.243702][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.305326][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.312699][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.336103][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.343971][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.382207][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.427474][ T5774] Bluetooth: hci3: command tx timeout [ 86.433252][ T5774] Bluetooth: hci0: command tx timeout [ 86.440216][ T5774] Bluetooth: hci1: command tx timeout [ 86.445860][ T5774] Bluetooth: hci2: command tx timeout [ 86.476129][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.501354][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.509602][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.580637][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.588373][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.798548][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.963967][ T5765] veth0_vlan: entered promiscuous mode [ 86.998602][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.064706][ T5765] veth1_vlan: entered promiscuous mode [ 87.085588][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.214699][ T5768] veth0_vlan: entered promiscuous mode [ 87.230567][ T5765] veth0_macvtap: entered promiscuous mode [ 87.247518][ T5765] veth1_macvtap: entered promiscuous mode [ 87.261899][ T5768] veth1_vlan: entered promiscuous mode [ 87.305762][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.320791][ T27] cfg80211: failed to load regulatory.db [ 87.348445][ T5767] veth0_vlan: entered promiscuous mode [ 87.374640][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.403754][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.432029][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.444881][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.457954][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.468980][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.494594][ T5767] veth1_vlan: entered promiscuous mode [ 87.542251][ T5768] veth0_macvtap: entered promiscuous mode [ 87.581873][ T5768] veth1_macvtap: entered promiscuous mode [ 87.639491][ T5766] veth0_vlan: entered promiscuous mode [ 87.696178][ T5766] veth1_vlan: entered promiscuous mode [ 87.742080][ T5767] veth0_macvtap: entered promiscuous mode [ 87.754534][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.771277][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.784386][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.800135][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.801714][ T5767] veth1_macvtap: entered promiscuous mode [ 87.809322][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.844127][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.855404][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.870449][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.913898][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.925427][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.935053][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.945147][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.973413][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.974850][ T5766] veth0_macvtap: entered promiscuous mode [ 87.989781][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.018725][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.030523][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.042105][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.052989][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.065775][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.108806][ T5766] veth1_macvtap: entered promiscuous mode [ 88.140752][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.156279][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.172234][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.185224][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.199749][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.233700][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.251636][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.263754][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.296836][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353941][ T5861] syz.3.4[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.376209][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.387815][ T5861] loop3: detected capacity change from 0 to 256 [ 88.400523][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.408887][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.420106][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.420152][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.420171][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.420184][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.420198][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.421861][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.507339][ T5782] Bluetooth: hci2: command tx timeout [ 88.516197][ T5774] Bluetooth: hci1: command tx timeout [ 88.522625][ T5083] Bluetooth: hci0: command tx timeout [ 88.522988][ T5774] Bluetooth: hci3: command tx timeout [ 88.567251][ T5861] FAT-fs (loop3): Directory bread(block 64) failed [ 88.609615][ T5861] FAT-fs (loop3): Directory bread(block 65) failed [ 88.618454][ T5861] FAT-fs (loop3): Directory bread(block 66) failed [ 88.623704][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.628378][ T5861] FAT-fs (loop3): Directory bread(block 67) failed [ 88.647831][ T5861] FAT-fs (loop3): Directory bread(block 68) failed [ 88.654974][ T5861] FAT-fs (loop3): Directory bread(block 69) failed [ 88.661723][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.664309][ T5861] FAT-fs (loop3): Directory bread(block 70) failed [ 88.685641][ T5861] FAT-fs (loop3): Directory bread(block 71) failed [ 88.695234][ T5861] FAT-fs (loop3): Directory bread(block 72) failed [ 88.705007][ T5861] FAT-fs (loop3): Directory bread(block 73) failed [ 88.705880][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.762454][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.796830][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.811864][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.824479][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.891207][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.926718][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.937089][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.951157][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.982184][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.007473][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.054182][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.101546][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.345156][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.372690][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.458420][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.479097][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.562013][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.576499][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.126405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.135119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 90.587520][ T5774] Bluetooth: hci3: command tx timeout [ 90.593994][ T5774] Bluetooth: hci2: command tx timeout [ 90.600735][ T5774] Bluetooth: hci0: command tx timeout [ 90.619625][ T5774] Bluetooth: hci1: command tx timeout [ 90.946961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.956621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 90.997531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.008981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.019277][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.227549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.942591][ T5769] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.040712][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.531259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.717345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.032481][ T5769] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 95.053529][ T5769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.062726][ T5769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.078526][ T5769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.091347][ T5769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.136861][ T5769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.166916][ T5769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.248694][ T5769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.283191][ T5769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.323349][ T5769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.333897][ T5902] mkiss: ax0: crc mode is auto. [ 95.361221][ T5769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 95.404936][ T5902] /dev/nullb0: Can't open blockdev [ 95.419587][ T5769] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 95.446732][ T5769] usb 2-1: config 0 interface 0 has no altsetting 0 [ 95.536993][ T5912] 9pnet_virtio: no channels available for device syz [ 96.218556][ T5769] usb 2-1: unable to read config index 4 descriptor/all [ 96.292914][ T5769] usb 2-1: can't read configurations, error -71 [ 97.829878][ T5917] sched: RT throttling activated [ 100.195561][ T5939] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 100.794173][ T5943] macvlan2: entered promiscuous mode [ 100.812272][ T5943] macvlan2: entered allmulticast mode [ 100.822962][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 100.901941][ T5949] loop5: detected capacity change from 0 to 7 [ 100.956034][ T5784] Dev loop5: unable to read RDB block 7 [ 100.984442][ T5784] loop5: unable to read partition table [ 100.996249][ T5784] loop5: partition table beyond EOD, truncated [ 101.004430][ T5951] loop3: detected capacity change from 0 to 6 [ 101.043221][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.053324][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.063545][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.073148][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.092318][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.101940][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.120413][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.130213][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.146558][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.156120][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.170367][ T5951] ldm_validate_partition_table(): Disk read failed. [ 101.170640][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.170674][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.170873][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.170900][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.171084][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.171110][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.171291][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.171316][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.171351][ T5951] Dev loop3: unable to read RDB block 0 [ 101.171504][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.171529][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 101.172107][ T5951] loop3: unable to read partition table [ 101.172369][ T5951] loop3: partition table beyond EOD, truncated [ 101.197746][ T5951] loop_reread_partitions: partition scan of loop3 (þ被xüŸÑø éÚ¬§ÊdƤ´à–ƒÝ¡¯¨) failed (rc=-5) [ 101.206176][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 102.018058][ T5946] netlink: 45 bytes leftover after parsing attributes in process `syz.2.26'. [ 103.390107][ T5949] Dev loop5: unable to read RDB block 7 [ 103.489652][ T5958] 9pnet_virtio: no channels available for device syz [ 103.732614][ T5949] loop5: unable to read partition table [ 103.925366][ T5949] loop5: partition table beyond EOD, truncated [ 104.114571][ T5949] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 104.295241][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.30'. [ 104.795268][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.366651][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.567537][ T5987] 9pnet_virtio: no channels available for device syz [ 106.580493][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 106.610976][ T27] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.655816][ T27] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.685373][ T5985] Zero length message leads to an empty skb [ 106.700420][ T27] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 106.902932][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.933583][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 106.963477][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.630095][ T27] usb 3-1: config 0 descriptor?? [ 109.778394][ T27] usb 3-1: can't set config #0, error -71 [ 109.847902][ T27] usb 3-1: USB disconnect, device number 2 [ 111.185790][ T6013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 111.192701][ T6013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.295833][ T6013] vhci_hcd vhci_hcd.0: Device attached [ 111.566536][ T5769] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 111.682529][ T6014] vhci_hcd: connection reset by peer [ 111.756593][ T3472] vhci_hcd: stop threads [ 111.787380][ T3472] vhci_hcd: release socket [ 111.826372][ T3472] vhci_hcd: disconnect device [ 112.476549][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.798231][ T27] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 112.828795][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.872584][ T27] usb 4-1: config 0 descriptor?? [ 113.922291][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 113.935000][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 114.100420][ T27] usb 4-1: USB disconnect, device number 2 [ 115.875371][ T28] audit: type=1326 audit(1770460989.969:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6031 comm="syz.0.53" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecd259aeb9 code=0x0 [ 116.862869][ T5769] vhci_hcd: vhci_device speed not set [ 117.008306][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 121.756530][ T5843] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 122.058900][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.163020][ T5843] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.200071][ T5843] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 122.245259][ T5843] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 122.294855][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.329852][ T6067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.348964][ T5843] hub 2-1:1.0: bad descriptor, ignoring hub [ 122.383410][ T5843] hub: probe of 2-1:1.0 failed with error -5 [ 122.416764][ T5843] cdc_wdm 2-1:1.0: skipping garbage [ 122.465979][ T5843] cdc_wdm 2-1:1.0: skipping garbage [ 122.501423][ T5843] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 122.523418][ T5843] cdc_wdm 2-1:1.0: Unknown control protocol [ 122.740226][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.747876][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.755213][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.761937][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.768362][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.775052][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.781323][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.788259][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.795530][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.802247][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.808603][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.815409][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.822871][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.830029][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.838849][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.845649][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.856478][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.863423][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 122.876468][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 122.883235][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 123.187920][ T5769] usb 2-1: USB disconnect, device number 4 [ 124.140971][ T6090] 9pnet_virtio: no channels available for device syz [ 127.580216][ T6106] loop2: detected capacity change from 0 to 7 [ 127.608897][ T6106] Dev loop2: unable to read RDB block 7 [ 127.614655][ T6106] loop2: AHDI p2 p3 [ 127.636714][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 127.652947][ T6106] loop2: partition table partially beyond EOD, truncated [ 127.722313][ T6106] loop2: p2 start 1702059890 is beyond EOD, truncated [ 128.018605][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.401552][ T6119] overlayfs: failed to resolve './file1': -2 [ 128.556411][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 128.599921][ T786] usb 3-1: config 8 has an invalid interface number: 159 but max is 0 [ 128.644054][ T786] usb 3-1: config 8 has no interface number 0 [ 128.676631][ T786] usb 3-1: config 8 interface 159 has no altsetting 0 [ 128.703167][ T786] usb 3-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 128.736520][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.753136][ T786] usb 3-1: Product: syz [ 128.788311][ T786] usb 3-1: Manufacturer: syz [ 128.814653][ T6119] 9pnet_virtio: no channels available for device syz [ 128.821851][ T786] usb 3-1: SerialNumber: syz [ 130.074921][ T6134] autofs4:pid:6134:autofs_fill_super: called with bogus options [ 130.190663][ T6136] 9pnet_virtio: no channels available for device syz [ 131.226615][ T786] usb 3-1: can't set config #8, error -71 [ 131.247795][ T786] usb 3-1: USB disconnect, device number 3 [ 133.867309][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.874455][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.489497][ T6155] lo speed is unknown, defaulting to 1000 [ 135.499963][ T6155] lo speed is unknown, defaulting to 1000 [ 135.510725][ T6155] lo speed is unknown, defaulting to 1000 [ 135.642563][ T6155] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.734264][ T6155] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.019613][ T6155] lo speed is unknown, defaulting to 1000 [ 136.037375][ T6155] lo speed is unknown, defaulting to 1000 [ 136.048409][ T6167] autofs4:pid:6167:autofs_fill_super: called with bogus options [ 136.067496][ T6155] lo speed is unknown, defaulting to 1000 [ 136.075246][ T6155] lo speed is unknown, defaulting to 1000 [ 136.085833][ T6155] lo speed is unknown, defaulting to 1000 [ 136.156426][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 136.470216][ T786] usb 3-1: config 0 has no interfaces? [ 136.486077][ T786] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 136.496408][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.508707][ T786] usb 3-1: Product: syz [ 136.513025][ T786] usb 3-1: Manufacturer: syz [ 136.534499][ T786] usb 3-1: SerialNumber: syz [ 136.591043][ T786] usb 3-1: config 0 descriptor?? [ 137.284792][ T6159] veth1_vlan: left promiscuous mode [ 137.367981][ T6175] mkiss: ax0: crc mode is auto. [ 137.407461][ T5842] usb 3-1: USB disconnect, device number 4 [ 137.876496][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.076620][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 138.128199][ T786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 139.626279][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.646400][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.666837][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.681223][ T786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.696147][ T786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.716148][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.982958][ T786] usb 1-1: usb_control_msg returned -32 [ 139.989147][ T786] usbtmc 1-1:16.0: can't read capabilities [ 140.852822][ T6202] mkiss: ax0: crc mode is auto. [ 143.387881][ T5769] usb 1-1: USB disconnect, device number 2 [ 143.618404][ T6218] 9pnet_virtio: no channels available for device syz [ 148.964789][ T6237] Falling back ldisc for ttyS3. [ 150.813355][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 155.782525][ T6298] fuse: Bad value for 'rootmode' [ 156.162404][ T6295] mmap: syz.0.128 (6295) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 156.314004][ T6304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.336420][ T5770] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 156.421217][ T6295] pim6reg: entered allmulticast mode [ 156.509906][ T6304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.528083][ T5770] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 156.543036][ T5770] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 156.561287][ T5770] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 156.573374][ T5770] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.618138][ T6302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.655116][ T5770] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 156.793965][ T6304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.017512][ T6304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.183694][ T5882] usb 4-1: USB disconnect, device number 3 [ 157.247982][ T6304] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.268645][ T6304] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.310677][ T6304] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.352869][ T6304] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.726779][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 159.947406][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 159.983091][ T5882] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 160.051160][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.093625][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.166922][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.198527][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.264959][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.300233][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.573820][ T5882] usb 3-1: usb_control_msg returned -71 [ 160.590716][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 160.867629][ T5882] usb 3-1: USB disconnect, device number 5 [ 161.475202][ T6368] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 161.699250][ T6369] capability: warning: `syz.3.145' uses 32-bit capabilities (legacy support in use) [ 164.207110][ T5842] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 164.260437][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.153'. [ 164.391644][ T6388] 9pnet_virtio: no channels available for device syz [ 164.453719][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 164.616639][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.809300][ T5842] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.937123][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.950693][ T5842] usb 2-1: config 0 descriptor?? [ 165.205319][ T5842] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.371023][ T6405] netlink: 'syz.0.158': attribute type 39 has an invalid length. [ 165.923458][ T5842] usb 2-1: USB disconnect, device number 5 [ 166.497913][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 168.866511][ T6427] netlink: 45 bytes leftover after parsing attributes in process `syz.0.165'. [ 173.530774][ T6446] syz.2.170 uses obsolete (PF_INET,SOCK_PACKET) [ 176.594862][ T6451] syz.1.171 (6451) used greatest stack depth: 20712 bytes left [ 180.226480][ T6476] netlink: 45 bytes leftover after parsing attributes in process `syz.2.176'. [ 181.715678][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 181.835817][ T6491] autofs4:pid:6491:autofs_fill_super: called with bogus options [ 181.900192][ T6485] process 'syz.1.177' launched '/dev/fd/8' with NULL argv: empty string added [ 183.523662][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 183.525587][ T6506] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 184.623706][ T6506] kvm: pic: non byte read [ 184.668922][ T6506] kvm: pic: level sensitive irq not supported [ 184.669101][ T6506] kvm: pic: non byte read [ 185.030136][ T6522] mkiss: ax0: crc mode is auto. [ 185.064527][ T6522] exFAT-fs (nullb0): invalid boot record signature [ 185.072300][ T6522] exFAT-fs (nullb0): failed to read boot sector [ 185.079428][ T6522] exFAT-fs (nullb0): failed to recognize exfat type [ 187.717513][ T6545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.198'. [ 189.613211][ T6558] mkiss: ax0: crc mode is auto. [ 189.631338][ T6558] exFAT-fs (nullb0): invalid boot record signature [ 189.638527][ T6558] exFAT-fs (nullb0): failed to read boot sector [ 189.644990][ T6558] exFAT-fs (nullb0): failed to recognize exfat type [ 193.882804][ T6576] 9pnet_virtio: no channels available for device syz [ 194.533130][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'. [ 194.933793][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.944997][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.786074][ T6607] Bluetooth: MGMT ver 1.22 [ 200.126926][ T6624] netlink: 45 bytes leftover after parsing attributes in process `syz.2.219'. [ 202.367876][ T6622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.220'. [ 202.891143][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.223'. [ 203.477095][ T786] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 203.857649][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 203.954104][ T786] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 204.045340][ T786] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 204.179409][ T786] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 204.442289][ T786] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 204.481852][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 204.502116][ T786] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 204.522177][ T786] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 204.556813][ T786] usb 2-1: Product: syz [ 204.565259][ T786] usb 2-1: Manufacturer: syz [ 204.576320][ T786] usb 2-1: SerialNumber: syz [ 204.618363][ T786] usb 2-1: config 0 descriptor?? [ 204.647953][ T786] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 204.682592][ T786] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 205.413087][ T786] usb 2-1: USB disconnect, device number 6 [ 205.425333][ T786] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 206.868813][ T6673] program syz.0.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.086932][ T5842] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 207.123311][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 207.146415][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 207.151561][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 207.152590][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 207.160830][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.284542][ T5842] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 207.294422][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.310410][ T5842] usb 2-1: config 0 descriptor?? [ 208.298551][ T5842] usbhid 2-1:0.0: can't add hid device: -71 [ 208.305738][ T5842] usbhid: probe of 2-1:0.0 failed with error -71 [ 208.329828][ T5842] usb 2-1: USB disconnect, device number 7 [ 214.304244][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.319541][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.328774][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.349085][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.359734][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.375866][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.537167][ T5842] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 214.685219][ T6243] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.742019][ T5842] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 214.766368][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.804355][ T5842] usb 1-1: config 0 descriptor?? [ 214.954864][ T6243] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.955877][ T6729] 9pnet_virtio: no channels available for device syz [ 215.434028][ T6243] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.539333][ T5842] usbhid 1-1:0.0: can't add hid device: -71 [ 215.552972][ T5842] usbhid: probe of 1-1:0.0 failed with error -71 [ 215.589335][ T5842] usb 1-1: USB disconnect, device number 3 [ 215.690494][ T6243] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.857205][ T6721] chnl_net:caif_netlink_parms(): no params data found [ 216.324086][ T6744] 9pnet_virtio: no channels available for device syz [ 216.446393][ T5083] Bluetooth: hci4: command tx timeout [ 216.671627][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.917109][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.204247][ T6721] bridge_slave_0: entered allmulticast mode [ 217.215871][ T6721] bridge_slave_0: entered promiscuous mode [ 217.446782][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.505998][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.558965][ T6721] bridge_slave_1: entered allmulticast mode [ 217.613747][ T6721] bridge_slave_1: entered promiscuous mode [ 217.795619][ T6721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.932352][ T6721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.195088][ T6721] team0: Port device team_slave_0 added [ 218.226223][ T6721] team0: Port device team_slave_1 added [ 218.382372][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.396859][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.472082][ T6721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.507149][ T5083] Bluetooth: hci4: command tx timeout [ 218.687998][ T6721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.707324][ T6721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.777093][ T6721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.116817][ T6721] hsr_slave_0: entered promiscuous mode [ 219.133973][ T6721] hsr_slave_1: entered promiscuous mode [ 219.144691][ T6721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.166556][ T6721] Cannot create hsr debugfs directory [ 220.462018][ T6243] hsr_slave_0: left promiscuous mode [ 220.500474][ T6243] hsr_slave_1: left promiscuous mode [ 220.588963][ T5083] Bluetooth: hci4: command tx timeout [ 220.793200][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.856603][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.868398][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.894307][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.013041][ T6243] bridge_slave_1: left allmulticast mode [ 221.099631][ T6243] bridge_slave_1: left promiscuous mode [ 221.173160][ T6243] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.518831][ T6243] bridge_slave_0: left allmulticast mode [ 221.578859][ T6243] bridge_slave_0: left promiscuous mode [ 221.620662][ T6243] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.286824][ T6825] exFAT-fs (nullb0): invalid boot record signature [ 222.293550][ T6825] exFAT-fs (nullb0): failed to read boot sector [ 222.300332][ T6825] exFAT-fs (nullb0): failed to recognize exfat type [ 222.488763][ T6819] Falling back ldisc for ttyS3. [ 222.578594][ T6243] veth1_macvtap: left promiscuous mode [ 222.588762][ T6243] veth0_macvtap: left promiscuous mode [ 222.594452][ T6243] veth1_vlan: left promiscuous mode [ 222.602341][ T6243] veth0_vlan: left promiscuous mode [ 222.676859][ T5083] Bluetooth: hci4: command tx timeout [ 222.866133][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.271'. [ 223.423228][ T6243] team0 (unregistering): Port device team_slave_1 removed [ 223.475255][ T6243] team0 (unregistering): Port device team_slave_0 removed [ 223.532270][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.613207][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.980806][ T6243] bond0 (unregistering): Released all slaves [ 225.173368][ T6812] netlink: 56 bytes leftover after parsing attributes in process `syz.0.266'. [ 225.396020][ T6721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 225.459208][ T6721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.121215][ T6721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.199183][ T6721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.627247][ T6858] fuse: Bad value for 'rootmode' [ 227.779000][ T6721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.119977][ T6878] exFAT-fs (nullb0): invalid boot record signature [ 228.126687][ T6878] exFAT-fs (nullb0): failed to read boot sector [ 228.133020][ T6878] exFAT-fs (nullb0): failed to recognize exfat type [ 228.410651][ T6875] Falling back ldisc for ttyS3. [ 228.419865][ T6867] nbd0: detected capacity change from 0 to 8589934655 [ 229.101984][ T5083] block nbd0: Receive control failed (result -104) [ 229.139336][ T6721] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.183516][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.190786][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.201084][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.208298][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.187641][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.466511][ T5769] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 231.660909][ T5769] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 231.686804][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.785728][ T5769] usb 2-1: config 0 descriptor?? [ 232.055603][ T5769] usbhid 2-1:0.0: can't add hid device: -71 [ 232.152986][ T5769] usbhid: probe of 2-1:0.0 failed with error -71 [ 232.253696][ T5769] usb 2-1: USB disconnect, device number 8 [ 232.409540][ T6721] veth0_vlan: entered promiscuous mode [ 232.497504][ T6721] veth1_vlan: entered promiscuous mode [ 232.769948][ T6721] veth0_macvtap: entered promiscuous mode [ 232.866739][ T6721] veth1_macvtap: entered promiscuous mode [ 232.997379][ T6721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.048827][ T6721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.084493][ T6936] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 233.092362][ T6721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.092386][ T6721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.092396][ T6721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.092448][ T6721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.094302][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.333023][ T6721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.387241][ T6721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.405609][ T6721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.460064][ T6721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.486670][ T6721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.511448][ T6721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.532810][ T6721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.589377][ T6721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.589443][ T6721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.589460][ T6721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.589477][ T6721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.966806][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.974868][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.011855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.055025][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.370542][ T6954] mkiss: ax0: crc mode is auto. [ 234.388564][ T6956] exFAT-fs (nullb0): invalid boot record signature [ 234.395369][ T6956] exFAT-fs (nullb0): failed to read boot sector [ 234.402166][ T6956] exFAT-fs (nullb0): failed to recognize exfat type [ 237.836458][ T5842] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 238.102934][ T5842] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 238.130018][ T5842] usb 1-1: config 0 has no interface number 0 [ 238.200526][ T5842] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 238.220578][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.244319][ T5842] usb 1-1: Product: syz [ 238.254954][ T5842] usb 1-1: Manufacturer: syz [ 238.269539][ T5842] usb 1-1: SerialNumber: syz [ 238.301277][ T5842] usb 1-1: config 0 descriptor?? [ 242.346024][ T7019] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 243.401639][ T5842] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 243.529541][ T5842] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 243.583676][ T5842] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 243.606435][ T5842] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 243.660127][ T5842] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 243.742391][ T5842] usb 1-1: USB disconnect, device number 4 [ 243.748473][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 243.799908][ T5842] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 243.826026][ T5842] keyspan 1-1:0.133: device disconnected [ 243.969805][ T5892] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 243.993147][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.022982][ T5892] usb 3-1: config 0 descriptor?? [ 245.852963][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 246.276494][ T5892] usbhid: probe of 3-1:0.0 failed with error -71 [ 246.306168][ T5892] usb 3-1: USB disconnect, device number 7 [ 249.246407][ T5892] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 250.867104][ T5770] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 251.560719][ T5770] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 251.579907][ T5892] usb 3-1: config 0 has no interfaces? [ 251.586842][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.618866][ T5892] usb 3-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 251.624802][ T5770] usb 1-1: config 0 descriptor?? [ 251.662372][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.723182][ T5892] usb 3-1: config 0 descriptor?? [ 251.729877][ T5770] usbhid 1-1:0.0: can't add hid device: -71 [ 251.751142][ T5770] usbhid: probe of 1-1:0.0 failed with error -71 [ 251.797869][ T5770] usb 1-1: USB disconnect, device number 5 [ 251.964035][ T27] usb 3-1: USB disconnect, device number 8 [ 253.460699][ T7137] fuse: Bad value for 'rootmode' [ 254.073980][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 254.399618][ T7155] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 254.450345][ T7155] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 254.473076][ T7163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 254.536876][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.657789][ T7155] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 254.823877][ T5892] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 254.927984][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.993765][ T5892] usb 2-1: config 0 descriptor?? [ 255.296848][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 255.373063][ T5892] usbhid: probe of 2-1:0.0 failed with error -71 [ 255.603880][ T5892] usb 2-1: USB disconnect, device number 9 [ 257.516826][ T7155] syz.0.327 (7155) used greatest stack depth: 19944 bytes left [ 257.567717][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.574183][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.206592][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 30 seconds [ 259.794346][ T7219] ALSA: mixer_oss: invalid OSS volume '' [ 259.985609][ T7219] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 259.992271][ T7219] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 260.067597][ T7225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.160701][ T7219] vhci_hcd vhci_hcd.0: Device attached [ 260.306854][ T7223] vhci_hcd: connection closed [ 260.323100][ T11] vhci_hcd: stop threads [ 260.352882][ T11] vhci_hcd: release socket [ 260.357272][ T5770] vhci_hcd: vhci_device speed not set [ 260.376556][ T11] vhci_hcd: disconnect device [ 260.436782][ T5770] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 260.464988][ T5770] usb 35-1: enqueue for inactive port 0 [ 260.547827][ T5770] vhci_hcd: vhci_device speed not set [ 260.666457][ T5829] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 260.910137][ T5829] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 260.956011][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.007105][ T5829] usb 1-1: config 0 descriptor?? [ 261.082965][ T7240] ipvlan2: entered promiscuous mode [ 261.344331][ T5829] usbhid 1-1:0.0: can't add hid device: -71 [ 261.351068][ T5829] usbhid: probe of 1-1:0.0 failed with error -71 [ 262.450774][ T7257] 9pnet_fd: Insufficient options for proto=fd [ 262.847716][ T5829] usb 1-1: USB disconnect, device number 6 [ 265.507848][ T7287] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 265.585073][ T7287] kvm: pic: non byte read [ 265.620906][ T7287] kvm: pic: level sensitive irq not supported [ 265.621022][ T7287] kvm: pic: non byte read [ 266.704256][ T7305] nbd1: detected capacity change from 0 to 8589934655 [ 266.735984][ T5083] block nbd1: Receive control failed (result -32) [ 266.737066][ T10] block nbd1: Send control failed (result -32) [ 266.749762][ T10] block nbd1: Request send failed, requeueing [ 266.759677][ T10] block nbd1: Dead connection, failed to find a fallback [ 266.768312][ T10] block nbd1: shutting down sockets [ 266.773804][ T10] blk_print_req_error: 8 callbacks suppressed [ 266.773820][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.789680][ T10] buffer_io_error: 8 callbacks suppressed [ 266.789690][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 266.808163][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 266.816370][ T10] Buffer I/O error on dev nbd1, logical block 2, async page read [ 266.824117][ T10] Buffer I/O error on dev nbd1, logical block 3, async page read [ 266.833264][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.843125][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 266.851037][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 266.858850][ T10] Buffer I/O error on dev nbd1, logical block 2, async page read [ 266.866632][ T10] Buffer I/O error on dev nbd1, logical block 3, async page read [ 266.875771][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.884866][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 266.892648][ T10] Buffer I/O error on dev nbd1, logical block 1, async page read [ 266.901740][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.911269][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.920570][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.930041][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.939313][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 266.948408][ T6718] ldm_validate_partition_table(): Disk read failed. [ 266.955255][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 267.120261][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 267.131487][ T6718] Dev nbd1: unable to read RDB block 0 [ 267.159936][ T6718] nbd1: unable to read partition table [ 267.220649][ T6718] ldm_validate_partition_table(): Disk read failed. [ 267.257645][ T6718] Dev nbd1: unable to read RDB block 0 [ 267.316940][ T6718] nbd1: unable to read partition table [ 268.559087][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.702627][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.851043][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.010937][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.064855][ T7328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.369'. [ 269.328010][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.370'. [ 270.509675][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.523168][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.603113][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.625735][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.654613][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.676812][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.627833][ T7355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.375'. [ 272.747072][ T5774] Bluetooth: hci1: command tx timeout [ 273.441183][ T49] hsr_slave_0: left promiscuous mode [ 273.463205][ T49] hsr_slave_1: left promiscuous mode [ 273.469628][ T27] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 273.491019][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 273.517695][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.535504][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.558362][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.575307][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.608537][ T49] bridge_slave_1: left allmulticast mode [ 273.622822][ T49] bridge_slave_1: left promiscuous mode [ 273.635394][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.669463][ T49] bridge_slave_0: left allmulticast mode [ 273.679920][ T49] bridge_slave_0: left promiscuous mode [ 273.695224][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.724701][ T27] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 273.740566][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.784145][ T27] usb 3-1: config 0 descriptor?? [ 273.824154][ T49] veth1_macvtap: left promiscuous mode [ 273.830855][ T49] veth0_macvtap: left promiscuous mode [ 273.846956][ T49] veth1_vlan: left promiscuous mode [ 273.855044][ T49] veth0_vlan: left promiscuous mode [ 274.038691][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 274.079464][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 274.117962][ T27] usb 3-1: USB disconnect, device number 9 [ 274.404390][ T49] pim6reg (unregistering): left allmulticast mode [ 274.827027][ T5774] Bluetooth: hci1: command tx timeout [ 277.422957][ T5774] Bluetooth: hci1: command tx timeout [ 277.655125][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 278.302458][ T49] team0 (unregistering): Port device team_slave_1 removed [ 278.354915][ T49] team0 (unregistering): Port device team_slave_0 removed [ 278.409806][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.470227][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.822107][ T49] bond0 (unregistering): Released all slaves [ 278.930417][ T7346] chnl_net:caif_netlink_parms(): no params data found [ 279.466816][ T5774] Bluetooth: hci1: command tx timeout [ 279.756789][ T5843] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 279.969631][ T5843] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 279.989159][ T7441] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.996364][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.998319][ T7441] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.037624][ T5843] usb 3-1: config 0 descriptor?? [ 280.323277][ T5843] usbhid 3-1:0.0: can't add hid device: -71 [ 280.340867][ T5843] usbhid: probe of 3-1:0.0 failed with error -71 [ 280.387192][ T5843] usb 3-1: USB disconnect, device number 10 [ 280.635473][ T7476] exFAT-fs (nullb0): invalid boot record signature [ 280.642323][ T7476] exFAT-fs (nullb0): failed to read boot sector [ 280.648917][ T7476] exFAT-fs (nullb0): failed to recognize exfat type [ 282.649163][ T7483] fuse: Bad value for 'fd' [ 283.499322][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.554801][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.169208][ T7441] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.179981][ T7441] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.192770][ T7441] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.204507][ T7441] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.947204][ T7510] overlayfs: missing 'lowerdir' [ 285.044473][ T7517] overlayfs: failed to clone upperpath [ 285.120117][ T7520] exFAT-fs (nullb0): invalid boot record signature [ 285.128107][ T7520] exFAT-fs (nullb0): failed to read boot sector [ 285.134496][ T7520] exFAT-fs (nullb0): failed to recognize exfat type [ 285.223859][ T7514] mkiss: ax0: crc mode is auto. [ 285.285899][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.677153][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.685981][ T7346] bridge_slave_0: entered allmulticast mode [ 286.728715][ T7524] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 286.807943][ T7346] bridge_slave_0: entered promiscuous mode [ 286.815422][ T28] audit: type=1326 audit(1770461161.269:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7504 comm="syz.4.406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27def9aeb9 code=0x0 [ 286.836980][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.845951][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.976711][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.025284][ T7346] bridge_slave_1: entered allmulticast mode [ 287.045469][ T7346] bridge_slave_1: entered promiscuous mode [ 287.192616][ T7346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.335031][ T7346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.495628][ T7542] netlink: 64 bytes leftover after parsing attributes in process `syz.1.410'. [ 287.581292][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.411'. [ 287.669091][ T7346] team0: Port device team_slave_0 added [ 287.689349][ T7346] team0: Port device team_slave_1 added [ 287.770781][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 287.832038][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.859717][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.886816][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.973072][ T7346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.015403][ T7346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.045777][ T7346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.072207][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.128630][ T7556] 9pnet_virtio: no channels available for device syz [ 288.205008][ T7346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.442574][ T2128] IPVS: starting estimator thread 0... [ 288.457899][ T7346] hsr_slave_0: entered promiscuous mode [ 288.480900][ T7346] hsr_slave_1: entered promiscuous mode [ 288.557053][ T7563] IPVS: using max 19 ests per chain, 45600 per kthread [ 289.026724][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 289.231777][ T7577] exFAT-fs (nullb0): invalid boot record signature [ 289.238738][ T7577] exFAT-fs (nullb0): failed to read boot sector [ 289.245061][ T7577] exFAT-fs (nullb0): failed to recognize exfat type [ 290.192214][ T7575] mkiss: ax0: crc mode is auto. [ 290.944029][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 60 seconds [ 291.576052][ T5882] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 291.585357][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.613573][ T5882] usb 3-1: config 0 descriptor?? [ 291.645662][ T7346] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.700137][ T7346] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.721776][ T7346] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.743699][ T7586] netlink: 72 bytes leftover after parsing attributes in process `syz.4.420'. [ 291.753209][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 291.772850][ T7346] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.785321][ T5882] usbhid 3-1:0.0: can't add hid device: -71 [ 291.794089][ T5882] usbhid: probe of 3-1:0.0 failed with error -71 [ 291.811069][ T5882] usb 3-1: USB disconnect, device number 11 [ 291.942136][ T7593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 292.943640][ T7346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.186621][ T7346] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.253545][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.260923][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.291911][ T7608] vlan2: entered promiscuous mode [ 293.300513][ T7608] bridge0: entered promiscuous mode [ 293.436981][ T2128] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 293.632609][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.640155][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.650527][ T2128] usb 5-1: Using ep0 maxpacket: 8 [ 293.673893][ T2128] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 293.689448][ T2128] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.704149][ T2128] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.716065][ T2128] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.732006][ T2128] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.746796][ T2128] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 293.766515][ T2128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.042285][ T2128] usb 5-1: GET_CAPABILITIES returned 0 [ 294.061428][ T2128] usbtmc 5-1:16.0: can't read capabilities [ 294.399915][ T7637] mkiss: ax0: crc mode is auto. [ 294.433052][ T7636] exFAT-fs (nullb0): invalid boot record signature [ 294.440143][ T7636] exFAT-fs (nullb0): failed to read boot sector [ 294.446651][ T7636] exFAT-fs (nullb0): failed to recognize exfat type [ 296.338395][ T5882] usb 5-1: USB disconnect, device number 2 [ 296.560142][ T7346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.757608][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 296.792463][ T7649] netlink: 72 bytes leftover after parsing attributes in process `syz.1.431'. [ 296.937523][ T7654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.432'. [ 296.946929][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 297.168742][ T5882] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 297.205781][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.273330][ T5882] usb 5-1: config 0 descriptor?? [ 298.447883][ T7346] veth0_vlan: entered promiscuous mode [ 298.525489][ T7346] veth1_vlan: entered promiscuous mode [ 298.787598][ T7346] veth0_macvtap: entered promiscuous mode [ 298.811490][ T7346] veth1_macvtap: entered promiscuous mode [ 298.938002][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.986913][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.037426][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.082390][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.141760][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.214445][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.266018][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.303315][ T7346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.349407][ T7346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.395262][ T7346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.460477][ T7346] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.499729][ T7346] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.528367][ T7346] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.562394][ T7346] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.572855][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 299.586992][ T5882] usbhid: probe of 5-1:0.0 failed with error -71 [ 299.606858][ T5882] usb 5-1: USB disconnect, device number 3 [ 299.623999][ T7674] warning: `syz.2.435' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 303.089055][ T7700] exFAT-fs (nullb0): invalid boot record signature [ 303.095696][ T7700] exFAT-fs (nullb0): failed to read boot sector [ 303.102237][ T7700] exFAT-fs (nullb0): failed to recognize exfat type [ 303.210888][ T7695] mkiss: ax0: crc mode is auto. [ 304.398958][ T5774] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 305.029174][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.082540][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.410449][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 305.430212][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.462418][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.038065][ T7726] 9pnet_fd: Insufficient options for proto=fd [ 309.287524][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 309.747398][ T7771] mkiss: ax0: crc mode is auto. [ 309.782090][ T7770] exFAT-fs (nullb0): invalid boot record signature [ 309.788853][ T7770] exFAT-fs (nullb0): failed to read boot sector [ 309.795143][ T7770] exFAT-fs (nullb0): failed to recognize exfat type [ 311.803131][ T7755] sctp: failed to load transform for md5: -2 [ 312.368297][ T7790] 9pnet_fd: Insufficient options for proto=fd [ 312.412886][ T7788] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 313.105049][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.5.459'. [ 315.433418][ T7813] syzkaller0: entered promiscuous mode [ 315.467129][ T7813] syzkaller0: entered allmulticast mode [ 316.829977][ T7829] mkiss: ax0: crc mode is auto. [ 316.866155][ T7828] exFAT-fs (nullb0): invalid boot record signature [ 316.873312][ T7828] exFAT-fs (nullb0): failed to read boot sector [ 316.880174][ T7828] exFAT-fs (nullb0): failed to recognize exfat type [ 317.710698][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.717179][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.216121][ T7838] 9pnet_fd: Insufficient options for proto=fd [ 319.787274][ T5843] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 319.990173][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.002904][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.050317][ T5843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.115193][ T5843] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.165404][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.215983][ T5843] usb 3-1: config 0 descriptor?? [ 320.704684][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.779697][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.836920][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.856602][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.923351][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.948753][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.967013][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.975080][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.983912][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 320.993078][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.036810][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.063843][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.091324][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.119964][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.151464][ T5843] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 321.225121][ T5843] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 321.334499][ T5843] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 321.385980][ T5843] usb 3-1: USB disconnect, device number 12 [ 321.711722][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 90 seconds [ 322.122158][ T7881] fido_id[7881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 322.445609][ T7893] mkiss: ax0: crc mode is auto. [ 322.464490][ T7893] exFAT-fs (nullb0): invalid boot record signature [ 322.471432][ T7893] exFAT-fs (nullb0): failed to read boot sector [ 322.477923][ T7893] exFAT-fs (nullb0): failed to recognize exfat type [ 324.576290][ T7899] fuse: Bad value for 'fd' [ 333.200755][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 333.726464][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.501'. [ 334.056936][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 336.157124][ T8019] hsr_slave_1 (unregistering): left promiscuous mode [ 340.267697][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 340.663396][ T8090] fuse: Bad value for 'group_id' [ 341.896819][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.5.530'. [ 342.097936][ T8131] fuse: Bad value for 'group_id' [ 348.802163][ T8207] netlink: 45 bytes leftover after parsing attributes in process `syz.1.549'. [ 352.852166][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 120 seconds [ 356.115574][ T8270] netlink: 45 bytes leftover after parsing attributes in process `syz.1.561'. [ 357.579282][ T8275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.564'. [ 357.914598][ T2128] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 358.106797][ T2128] usb 6-1: Using ep0 maxpacket: 8 [ 358.120713][ T2128] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 358.151213][ T2128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.190998][ T2128] pvrusb2: Hardware description: Terratec Grabster AV400 [ 358.223631][ T2128] pvrusb2: ********** [ 358.263243][ T2128] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 358.333445][ T8290] fuse: Bad value for 'fd' [ 359.076337][ T2128] pvrusb2: Important functionality might not be entirely working. [ 359.105671][ T2128] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 359.180382][ T2128] pvrusb2: ********** [ 359.192297][ T2318] pvrusb2: Invalid write control endpoint [ 359.418758][ T2128] usb 6-1: USB disconnect, device number 2 [ 359.420217][ T2318] pvrusb2: Invalid write control endpoint [ 359.476469][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 359.496318][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 359.516303][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 359.558974][ T2318] pvrusb2: Device being rendered inoperable [ 359.605736][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 359.615180][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 359.636046][ T2318] pvrusb2: Attached sub-driver cx25840 [ 359.642083][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 359.653082][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 361.551373][ T8320] netlink: 45 bytes leftover after parsing attributes in process `syz.5.572'. [ 362.099475][ T8326] nbd2: detected capacity change from 0 to 8589934655 [ 362.640265][ T5774] block nbd2: Receive control failed (result -104) [ 365.607525][ T8366] fuse: Bad value for 'fd' [ 365.716860][ T5843] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 366.004678][ T5843] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.033815][ T5843] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.064922][ T5843] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.102522][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.143509][ T8364] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 366.166691][ T5843] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 366.686841][ T8382] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 366.713636][ T8382] kvm: pic: non byte read [ 366.759705][ T5892] usb 6-1: USB disconnect, device number 3 [ 366.772197][ T8382] kvm: pic: level sensitive irq not supported [ 366.772263][ T8382] kvm: pic: non byte read [ 366.832965][ T8382] kvm: pic: level sensitive irq not supported [ 366.833140][ T8382] kvm: pic: non byte read [ 368.417712][ T8412] fuse: Unknown parameter 'grou00000000000000000000' [ 370.647590][ T8429] nbd3: detected capacity change from 0 to 8589934655 [ 370.761581][ T5774] block nbd3: Receive control failed (result -104) [ 372.346988][ T8453] netlink: 45 bytes leftover after parsing attributes in process `syz.2.607'. [ 372.922520][ T8457] fuse: Unknown parameter 'grou00000000000000000000' [ 375.670418][ T8481] 9pnet_fd: Insufficient options for proto=fd [ 379.837649][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.852852][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.155850][ T8493] Falling back ldisc for ttyS3. [ 382.779419][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 382.820508][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 382.883122][ T8517] ceph: No mds server is up or the cluster is laggy [ 383.178827][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 383.373197][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 383.627432][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 150 seconds [ 385.850733][ T8577] netlink: 32 bytes leftover after parsing attributes in process `syz.2.628'. [ 391.405752][ T8653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.649'. [ 393.086733][ T5905] block nbd2: Possible stuck request ffff888021da8000: control (read@0,1024B). Runtime 30 seconds [ 393.097742][ T5905] block nbd2: Possible stuck request ffff888021da8200: control (read@1024,1024B). Runtime 30 seconds [ 393.926726][ T5905] block nbd2: Possible stuck request ffff888021da8400: control (read@2048,2048B). Runtime 30 seconds [ 394.721002][ T786] libceph: connect (1)[c::]:6789 error -101 [ 394.732910][ T786] libceph: mon0 (1)[c::]:6789 connect error [ 394.774385][ T8679] ceph: No mds server is up or the cluster is laggy [ 394.788342][ T8685] syzkaller0: entered promiscuous mode [ 394.794805][ T8685] syzkaller0: entered allmulticast mode [ 396.906988][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 400.039214][ T8724] syzkaller0: entered promiscuous mode [ 400.045512][ T8724] syzkaller0: entered allmulticast mode [ 401.110604][ T10] block nbd3: Possible stuck request ffff888021e18000: control (read@0,4096B). Runtime 30 seconds [ 401.240550][ T5774] Bluetooth: hci0: unexpected event for opcode 0x200d [ 401.767924][ T8742] (null): rxe_set_mtu: Set mtu to 4096 [ 401.817266][ T8742] lo speed is unknown, defaulting to 1000 [ 401.872344][ T8742] lo speed is unknown, defaulting to 1000 [ 402.044781][ T8742] lo speed is unknown, defaulting to 1000 [ 405.340203][ T2128] lo speed is unknown, defaulting to 1000 [ 405.356933][ T8742] infiniband sz1: set active [ 405.386933][ T8742] infiniband sz1: added lo [ 405.393565][ T8742] sz1: rxe_create_cq: returned err = -12 [ 405.426753][ T8742] infiniband sz1: Couldn't create ib_mad CQ [ 405.432902][ T8742] infiniband sz1: Couldn't open port 1 [ 405.584248][ T8742] RDS/IB: sz1: added [ 405.625652][ T8789] fuse: Bad value for 'fd' [ 405.631025][ T8742] smc: adding ib device sz1 with port count 1 [ 405.667124][ T8742] smc: ib device sz1 port 1 has pnetid [ 405.694104][ T5769] lo speed is unknown, defaulting to 1000 [ 405.717316][ T8742] lo speed is unknown, defaulting to 1000 [ 406.204499][ T8742] lo speed is unknown, defaulting to 1000 [ 406.631355][ T8742] lo speed is unknown, defaulting to 1000 [ 407.882393][ T8827] fuse: Bad value for 'fd' [ 408.169169][ T8742] lo speed is unknown, defaulting to 1000 [ 408.304665][ T8838] syzkaller0: entered promiscuous mode [ 408.311344][ T8838] syzkaller0: entered allmulticast mode [ 410.827164][ T8872] syzkaller0: entered promiscuous mode [ 410.832723][ T8872] syzkaller0: entered allmulticast mode [ 410.996440][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 413.697208][ T8901] overlayfs: failed to clone upperpath [ 415.561792][ T8900] fuse: Bad value for 'fd' [ 415.578646][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 180 seconds [ 415.801180][ T8908] syzkaller0: entered promiscuous mode [ 415.821658][ T8908] syzkaller0: entered allmulticast mode [ 416.137051][ T8920] fuse: Bad value for 'fd' [ 420.753719][ T8948] syzkaller0: entered promiscuous mode [ 420.759824][ T8948] syzkaller0: entered allmulticast mode [ 421.040559][ T8954] fuse: Bad value for 'fd' [ 421.349510][ T8958] fuse: Bad value for 'fd' [ 423.204579][ T8970] /dev/nullb0: Can't lookup blockdev [ 423.306486][ T10] block nbd2: Possible stuck request ffff888021da8000: control (read@0,1024B). Runtime 60 seconds [ 425.283169][ T5905] block nbd2: Possible stuck request ffff888021da8200: control (read@1024,1024B). Runtime 60 seconds [ 425.297196][ T5905] block nbd2: Possible stuck request ffff888021da8400: control (read@2048,2048B). Runtime 60 seconds [ 425.733246][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 425.780252][ T8984] netlink: 'syz.5.744': attribute type 4 has an invalid length. [ 426.027202][ T8982] fuse: Bad value for 'fd' [ 426.047183][ T8993] netlink: 'syz.5.744': attribute type 4 has an invalid length. [ 426.561766][ T5138] udevd[5138]: worker [6717] /devices/virtual/block/nbd0 timeout; kill it [ 426.585419][ T8996] fuse: Bad value for 'fd' [ 426.677229][ T5138] udevd[5138]: seq 11487 '/devices/virtual/block/nbd0' killed [ 426.704653][ T5138] udevd[5138]: worker [6718] /devices/virtual/block/nbd2 is taking a long time [ 426.717230][ T8993] syz.5.744 (8993) used greatest stack depth: 19880 bytes left [ 429.464066][ T9030] fuse: Bad value for 'fd' [ 432.355874][ T10] block nbd3: Possible stuck request ffff888021e18000: control (read@0,4096B). Runtime 60 seconds [ 433.212016][ T9041] fuse: Bad value for 'fd' [ 434.911779][ T9064] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 436.159273][ T9064] team0: Port device dummy0 added [ 436.164901][ T9067] netlink: 'syz.1.766': attribute type 10 has an invalid length. [ 436.289991][ T9067] team0: Port device dummy0 removed [ 436.343994][ T9067] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 437.777168][ T9091] fuse: Bad value for 'fd' [ 438.536138][ T9100] fuse: Invalid rootmode [ 439.394599][ T9124] syz_tun: entered allmulticast mode [ 439.447160][ T9124] pimreg: entered allmulticast mode [ 439.774821][ T9134] fuse: Bad value for 'fd' [ 440.527282][ T9121] syz_tun: left allmulticast mode [ 440.617716][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.624282][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.792572][ T9142] fuse: Invalid rootmode [ 442.221934][ T9167] fuse: Bad value for 'fd' [ 443.219703][ T9175] fuse: Invalid rootmode [ 443.788637][ T9195] fuse: Bad value for 'fd' [ 446.036805][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 210 seconds [ 446.183153][ T9207] fuse: Bad value for 'rootmode' [ 448.117276][ T9230] overlayfs: failed to clone upperpath [ 449.997480][ T9236] fuse: Bad value for 'rootmode' [ 450.151719][ T9241] fuse: Bad value for 'fd' [ 454.833354][ T5138] udevd[5138]: worker [6846] /devices/virtual/block/nbd3 is taking a long time [ 454.849038][ T10] block nbd2: Possible stuck request ffff888021da8000: control (read@0,1024B). Runtime 90 seconds [ 455.237366][ T9273] fuse: Bad value for 'rootmode' [ 455.296470][ T10] block nbd2: Possible stuck request ffff888021da8200: control (read@1024,1024B). Runtime 90 seconds [ 455.316587][ T10] block nbd2: Possible stuck request ffff888021da8400: control (read@2048,2048B). Runtime 90 seconds [ 455.622752][ T9284] fuse: Bad value for 'fd' [ 455.822282][ T9288] syz.2.825 (9288): /proc/9267/oom_adj is deprecated, please use /proc/9267/oom_score_adj instead. [ 456.068506][ T9294] syz_tun: entered allmulticast mode [ 456.080405][ T9292] pimreg: entered allmulticast mode [ 456.541529][ T9307] syz_tun: entered allmulticast mode [ 456.611721][ T9307] dvmrp6: entered allmulticast mode [ 456.743802][ T9289] syz_tun: left allmulticast mode [ 457.836090][ T9332] fuse: Bad value for 'fd' [ 459.892832][ T9358] syz_tun: entered allmulticast mode [ 460.240967][ T9364] autofs4:pid:9364:autofs_fill_super: called with bogus options [ 460.648063][ T9354] syz_tun: left allmulticast mode [ 462.367890][ T9383] fuse: Bad value for 'fd' [ 463.329613][ T10] block nbd3: Possible stuck request ffff888021e18000: control (read@0,4096B). Runtime 90 seconds [ 463.818451][ T9397] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 464.228744][ T9420] syz_tun: entered allmulticast mode [ 466.366990][ T9412] syz_tun: left allmulticast mode [ 467.762188][ T9439] fuse: Bad value for 'fd' [ 468.096238][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 468.815675][ T9447] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 471.425072][ T9472] pimreg: entered allmulticast mode [ 472.441577][ T9483] fuse: Bad value for 'fd' [ 473.567801][ T9495] ALSA: mixer_oss: invalid OSS volume '' [ 474.260200][ T9502] overlayfs: failed to clone upperpath [ 479.375376][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 240 seconds [ 479.629310][ T9511] syz_tun: entered allmulticast mode [ 479.671115][ T9511] pimreg: entered allmulticast mode [ 480.490594][ T9508] syz_tun: left allmulticast mode [ 481.058749][ T9528] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 482.287134][ T9539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.888'. [ 483.762841][ T9550] random: crng reseeded on system resumption [ 484.783141][ T9556] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 484.952338][ T9556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 485.305796][ T9567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'. [ 485.466793][ T5905] block nbd2: Possible stuck request ffff888021da8000: control (read@0,1024B). Runtime 120 seconds [ 485.478118][ T5905] block nbd2: Possible stuck request ffff888021da8200: control (read@1024,1024B). Runtime 120 seconds [ 485.493621][ T5905] block nbd2: Possible stuck request ffff888021da8400: control (read@2048,2048B). Runtime 120 seconds [ 485.662315][ T9556] 8021q: VLANs not supported on ip6tnl0 [ 485.683460][ T9556] random: crng reseeded on system resumption [ 485.744200][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.763516][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.188763][ T9585] syz_tun: entered allmulticast mode [ 487.225617][ T9585] dvmrp6: entered allmulticast mode [ 488.034640][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.913'. [ 493.706471][ T10] block nbd3: Possible stuck request ffff888021e18000: control (read@0,4096B). Runtime 120 seconds [ 494.703239][ T9641] random: crng reseeded on system resumption [ 499.436884][ T9661] lo speed is unknown, defaulting to 1000 [ 502.030258][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.036832][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.136073][ T28] audit: type=1326 audit(1770461378.629:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4688b9aeb9 code=0x7ffc0000 [ 504.295322][ T9690] netlink: 39 bytes leftover after parsing attributes in process `syz.2.939'. [ 504.326891][ T28] audit: type=1326 audit(1770461378.629:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4688b9aeb9 code=0x7ffc0000 [ 504.351062][ T28] audit: type=1326 audit(1770461378.669:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4688b9aeb9 code=0x7ffc0000 [ 504.432459][ T28] audit: type=1326 audit(1770461378.669:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4688b9aeb9 code=0x7ffc0000 [ 504.455183][ T28] audit: type=1326 audit(1770461378.669:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4688b9c747 code=0x7ffc0000 [ 504.478231][ T28] audit: type=1326 audit(1770461378.669:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4688b5b78e code=0x7ffc0000 [ 504.501178][ T28] audit: type=1326 audit(1770461378.669:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4688b5b78e code=0x7ffc0000 [ 504.524287][ T28] audit: type=1326 audit(1770461378.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4688b5b78e code=0x7ffc0000 [ 504.572232][ T9690] netlink: 1 bytes leftover after parsing attributes in process `syz.2.939'. [ 504.581538][ T28] audit: type=1326 audit(1770461378.679:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4688b5b78e code=0x7ffc0000 [ 504.604097][ T28] audit: type=1326 audit(1770461378.689:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.2.939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4688b9aeb9 code=0x7ffc0000 [ 504.663528][ T9698] tipc: Started in network mode [ 504.670872][ T9698] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 504.690697][ T9698] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 504.706069][ T9698] tipc: Enabled bearer , priority 10 [ 505.709044][ T5882] tipc: Node number set to 1 [ 509.805138][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 270 seconds [ 516.186386][ T10] block nbd2: Possible stuck request ffff888021da8000: control (read@0,1024B). Runtime 150 seconds [ 516.197505][ T10] block nbd2: Possible stuck request ffff888021da8200: control (read@1024,1024B). Runtime 150 seconds [ 516.208715][ T10] block nbd2: Possible stuck request ffff888021da8400: control (read@2048,2048B). Runtime 150 seconds [ 517.096303][ T5829] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 517.229032][ T9776] netlink: 'syz.2.966': attribute type 1 has an invalid length. [ 517.266641][ T5829] usb 2-1: device descriptor read/64, error -71 [ 517.546348][ T5829] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 517.618548][ T9780] fuse: Bad value for 'group_id' [ 518.427452][ T9783] overlayfs: failed to resolve './file1': -2 [ 518.916283][ T5829] usb 2-1: device descriptor read/64, error -71 [ 519.977949][ T5829] usb usb2-port1: attempt power cycle [ 520.133750][ T9795] autofs4:pid:9795:autofs_fill_super: called with bogus options [ 520.401695][ T23] delete_channel: no stack [ 522.676981][ T9824] overlayfs: failed to resolve './file1': -2 [ 523.848153][ T10] block nbd3: Possible stuck request ffff888021e18000: control (read@0,4096B). Runtime 150 seconds [ 524.265435][ T9829] autofs4:pid:9829:autofs_fill_super: called with bogus options [ 524.670641][ T9837] random: crng reseeded on system resumption [ 525.653681][ T9836] syz.5.983 (9836) used greatest stack depth: 19624 bytes left [ 528.897415][ T9860] overlayfs: failed to resolve './file1': -2 [ 531.396414][ T7497] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 531.702209][ T7497] usb 2-1: Using ep0 maxpacket: 16 [ 531.720373][ T7497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.749949][ T7497] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 531.786441][ T7497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.821296][ T7497] usb 2-1: config 0 descriptor?? [ 531.894754][ T9886] random: crng reseeded on system resumption [ 532.327144][ T9887] fuse: Bad value for 'fd' [ 532.630300][ T7497] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0002/input/input5 [ 532.851686][ T7497] creative-sb0540 0003:041E:3100.0002: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 532.945440][ T7497] usb 2-1: USB disconnect, device number 13 [ 533.588209][ T9896] overlayfs: failed to clone upperpath [ 535.173574][ T9894] fido_id[9894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 535.973951][ T9917] fuse: Bad value for 'fd' [ 536.789777][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1008'. [ 540.439427][ T8823] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 300 seconds [ 540.472019][ T9948] random: crng reseeded on system resumption [ 541.006915][ T9947] fuse: Bad value for 'fd' [ 542.284701][ T9986] fuse: Bad value for 'fd' [ 543.958908][T10013] syz_tun: entered allmulticast mode [ 543.993841][T10013] dvmrp6: entered allmulticast mode [ 544.039588][T10017] fuse: Bad value for 'fd' [ 544.317460][T10025] fuse: Unknown parameter 'grou00000000000000000000' [ 545.618802][T10050] fuse: Bad value for 'fd' [ 545.922731][T10055] fuse: Unknown parameter 'grou00000000000000000000' [ 546.724142][T10068] syz_tun: entered allmulticast mode [ 546.846854][ T10] block nbd2: Possible stuck request ffff888021da8000: control (read@0,1024B). Runtime 180 seconds [ 546.860221][ T10] block nbd2: Possible stuck request ffff888021da8200: control (read@1024,1024B). Runtime 180 seconds [ 546.871966][ T10] block nbd2: Possible stuck request ffff888021da8400: control (read@2048,2048B). Runtime 180 seconds [ 546.885879][T10073] hpfs: Bad magic ... probably not HPFS [ 546.931200][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.938867][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.948386][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 546.992519][T10073] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 547.206479][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.246786][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.276565][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.307819][T10073] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.775707][T10080] fuse: Unknown parameter 'grou00000000000000000000' [ 548.017451][T10082] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1067'. [ 550.715642][T10123] fuse: Unknown parameter 'group_i00000000000000000000' [ 552.872997][T10151] random: crng reseeded on system resumption [ 553.769268][T10155] fuse: Bad value for 'fd' [ 553.867784][ T10] block nbd3: Possible stuck request ffff888021e18000: control (read@0,4096B). Runtime 180 seconds [ 554.267060][T10164] random: crng reseeded on system resumption [ 555.048096][T10182] fuse: Unknown parameter 'group_i00000000000000000000' [ 556.045952][T10203] fuse: Bad value for 'fd' [ 558.405219][T10231] fuse: Bad value for 'fd' [ 560.147128][T10260] fuse: Bad value for 'fd' [ 562.874108][T10288] fuse: Bad value for 'fd' [ 563.474315][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.481538][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.429169][T10302] dvmrp6: entered allmulticast mode [ 567.190385][T10327] random: crng reseeded on system resumption [ 568.230964][T10335] fuse: Bad value for 'fd' [ 570.516734][ T24] block nbd0: Possible stuck request ffff888021d00000: control (read@0,4096B). Runtime 330 seconds [ 571.159213][ T29] INFO: task udevd:6717 blocked for more than 143 seconds. [ 571.187785][ T29] Not tainted syzkaller #0 [ 571.192878][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.203056][ T29] task:udevd state:D stack:25680 pid:6717 ppid:5138 flags:0x00004006 [ 571.212641][ T29] Call Trace: [ 571.216848][ T29] [ 571.219880][ T29] __schedule+0x1553/0x45a0 [ 571.224560][ T29] ? asan.module_dtor+0x20/0x20 [ 571.233329][ T29] ? mark_lock+0x94/0x320 [ 571.293142][ T29] ? lock_chain_count+0x20/0x20 [ 571.334479][T10367] overlayfs: failed to resolve './file2': -2 [ 571.347177][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 571.352445][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 571.359216][ T29] schedule+0xbd/0x170 [ 571.363443][ T29] io_schedule+0x80/0xd0 [ 571.368787][ T29] folio_wait_bit_common+0x714/0xfa0 [ 571.374388][ T29] ? folio_wait_bit+0x30/0x30 [ 571.382654][ T29] ? _compound_head+0x120/0x120 [ 571.399186][ T29] ? filemap_add_folio+0x192/0x3c0 [ 571.407023][ T29] ? __filemap_get_folio+0x704/0xbb0 [ 571.420566][ T29] ? blkdev_writepage+0x30/0x30 [ 571.425667][ T29] do_read_cache_folio+0x1c0/0x7d0 [ 571.440867][ T29] ? blkdev_writepage+0x30/0x30 [ 571.445985][ T29] read_part_sector+0xd2/0x340 [ 571.457332][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 571.496242][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 571.501999][ T29] ? put_partition+0x370/0x370 [ 571.512552][ T29] ? alloc_pages+0x4dc/0x740 [ 571.561387][ T29] bdev_disk_changed+0x740/0x1420 [ 571.575078][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 571.585267][ T29] ? iput+0x343/0x920 [ 571.597023][ T29] blkdev_get_whole+0x30d/0x390 [ 571.611686][ T29] blkdev_get_by_dev+0x279/0x600 [ 571.626859][ T29] blkdev_open+0x152/0x360 [ 571.736287][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 571.741215][ T29] do_dentry_open+0x8c6/0x1500 [ 571.746034][ T29] path_openat+0x27f1/0x3230 [ 571.765446][ T29] ? do_sys_openat2+0xda/0x1d0 [ 571.770626][ T29] ? verify_lock_unused+0x140/0x140 [ 571.777366][ T29] ? do_filp_open+0x430/0x430 [ 571.782163][ T29] ? __virt_addr_valid+0x18c/0x540 [ 571.842459][ T29] do_filp_open+0x1f5/0x430 [ 571.859607][ T29] ? vfs_tmpfile+0x490/0x490 [ 571.881966][ T29] ? _raw_spin_unlock+0x28/0x40 [ 571.926818][ T29] ? alloc_fd+0x58f/0x630 [ 572.006738][ T29] do_sys_openat2+0x134/0x1d0 [ 572.011616][ T29] ? do_sys_open+0xe0/0xe0 [ 572.017104][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 572.023247][ T29] ? lock_chain_count+0x20/0x20 [ 572.029236][ T29] __x64_sys_openat+0x139/0x160 [ 572.034243][ T29] do_syscall_64+0x55/0xa0 [ 572.039927][ T29] ? clear_bhb_loop+0x40/0x90 [ 572.044726][ T29] ? clear_bhb_loop+0x40/0x90 [ 572.050502][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.056931][ T29] RIP: 0033:0x7f0ddc0a7407 [ 572.061622][ T29] RSP: 002b:00007ffe44b19420 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 572.071264][ T29] RAX: ffffffffffffffda RBX: 00007f0ddc752880 RCX: 00007f0ddc0a7407 [ 572.080312][ T29] RDX: 00000000000a0800 RSI: 0000564ae264c980 RDI: ffffffffffffff9c [ 572.089292][ T29] RBP: 0000564ae2641910 R08: 0000000000000000 R09: 0000000000000000 [ 572.098259][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000564ae265ef10 [ 572.107272][ T29] R13: 0000564ae2659410 R14: 0000000000000000 R15: 0000564ae265ef10 [ 572.115520][ T29] [ 572.127897][ T29] [ 572.127897][ T29] Showing all locks held in the system: [ 572.157223][ T29] 2 locks held by ksoftirqd/0/16: [ 572.192920][ T29] #0: ffff8880b8e3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xa9/0x140 [ 572.247888][ T29] #1: ffff8880b8e289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0 [ 572.273424][ T29] 1 lock held by khungtaskd/29: [ 572.292526][ T29] #0: ffffffff8d131fe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 572.326397][ T29] 2 locks held by kworker/0:2/786: [ 572.343817][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 572.382627][ T29] #1: ffffc900039c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 572.415427][ T29] 3 locks held by kworker/u4:5/1001: [ 572.421500][ T29] 2 locks held by getty/5526: [ 572.426904][ T29] #0: ffff88803180a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 572.437692][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 572.448593][ T29] 1 lock held by syz-executor/5767: [ 572.453862][ T29] 2 locks held by kworker/u4:11/6137: [ 572.460615][ T29] 1 lock held by udevd/6717: [ 572.465248][ T29] #0: ffff888141f694c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 572.476658][ T29] 1 lock held by udevd/6718: [ 572.481313][ T29] #0: ffff888021ce04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 572.492431][ T29] 1 lock held by udevd/6846: [ 572.497766][ T29] #0: ffff888021d634c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 572.513264][ T29] 2 locks held by syz.5.1159/10368: [ 572.519283][ T29] 2 locks held by syz.2.1162/10371: [ 572.524616][ T29] #0: ffff88805bebfa20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 572.539500][ T29] #1: ffffffff8d1379b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 572.551280][ T29] [ 572.553737][ T29] ============================================= [ 572.553737][ T29] [ 572.563927][ T29] NMI backtrace for cpu 1 [ 572.568400][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 572.575637][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 572.585838][ T29] Call Trace: [ 572.589166][ T29] [ 572.592308][ T29] dump_stack_lvl+0x18c/0x250 [ 572.597126][ T29] ? show_regs_print_info+0x20/0x20 [ 572.602814][ T29] ? load_image+0x400/0x400 [ 572.607463][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 572.612537][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 572.619003][ T29] ? _printk+0xde/0x130 [ 572.623199][ T29] ? load_image+0x400/0x400 [ 572.627751][ T29] ? load_image+0x400/0x400 [ 572.632398][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 572.638613][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 572.644672][ T29] watchdog+0xf3d/0xf80 [ 572.648891][ T29] ? watchdog+0x1e1/0xf80 [ 572.653336][ T29] kthread+0x2fa/0x390 [ 572.657457][ T29] ? hungtask_pm_notify+0x90/0x90 [ 572.662548][ T29] ? kthread_blkcg+0xd0/0xd0 [ 572.667201][ T29] ret_from_fork+0x48/0x80 [ 572.671941][ T29] ? kthread_blkcg+0xd0/0xd0 [ 572.676769][ T29] ret_from_fork_asm+0x11/0x20 [ 572.681613][ T29] [ 572.685700][ T29] Sending NMI from CPU 1 to CPUs 0: [ 572.691281][ C0] NMI backtrace for cpu 0 [ 572.691294][ C0] CPU: 0 PID: 6137 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 572.691309][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 572.691318][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 572.691339][ C0] RIP: 0010:kfence_guarded_free+0xb4/0x4b0 [ 572.691364][ C0] Code: f6 e8 50 bd a7 ff 4d 39 f7 0f 85 a3 00 00 00 4c 89 7c 24 10 4c 89 e8 4c 8d ab 80 00 00 00 4c 89 ed 48 c1 ed 03 80 7c 05 00 00 <74> 08 4c 89 ef e8 02 e4 ff ff 4d 8b 7d 00 31 ff 4c 89 fe e8 44 bf [ 572.691376][ C0] RSP: 0018:ffffc9000b99fa30 EFLAGS: 00000046 [ 572.691388][ C0] RAX: dffffc0000000000 RBX: ffff88823ffbabb8 RCX: ffff8880238b0000 [ 572.691399][ C0] RDX: 0000000000000000 RSI: ffff88823bd20f00 RDI: ffff88823bd20f00 [ 572.691409][ C0] RBP: 1ffff11047ff7587 R08: 0000000000000003 R09: 0000000000000004 [ 572.691418][ C0] R10: dffffc0000000000 R11: fffff52001733f24 R12: ffff88823ffbabd8 [ 572.691428][ C0] R13: ffff88823ffbac38 R14: ffff88823bd20f00 R15: ffff88823bd20f00 [ 572.691439][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 572.691451][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.691461][ C0] CR2: 00007f4688de4198 CR3: 000000007d856000 CR4: 00000000003506f0 [ 572.691477][ C0] Call Trace: [ 572.691482][ C0] [ 572.691491][ C0] ? nsim_dev_trap_report_work+0x76f/0xb00 [ 572.691505][ C0] kmem_cache_free+0x189/0x270 [ 572.691527][ C0] nsim_dev_trap_report_work+0x76f/0xb00 [ 572.691550][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 572.691568][ C0] process_scheduled_works+0xa5d/0x15d0 [ 572.691597][ C0] ? assign_work+0x430/0x430 [ 572.691616][ C0] ? assign_work+0x3d0/0x430 [ 572.691635][ C0] worker_thread+0xa55/0xfc0 [ 572.691664][ C0] kthread+0x2fa/0x390 [ 572.691678][ C0] ? pr_cont_work+0x560/0x560 [ 572.691695][ C0] ? kthread_blkcg+0xd0/0xd0 [ 572.691708][ C0] ret_from_fork+0x48/0x80 [ 572.691725][ C0] ? kthread_blkcg+0xd0/0xd0 [ 572.691740][ C0] ret_from_fork_asm+0x11/0x20 [ 572.691765][ C0] [ 572.692931][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 572.902271][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 572.909565][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 572.919733][ T29] Call Trace: [ 572.923079][ T29] [ 572.926018][ T29] dump_stack_lvl+0x18c/0x250 [ 572.930807][ T29] ? show_regs_print_info+0x20/0x20 [ 572.936129][ T29] ? load_image+0x400/0x400 [ 572.940667][ T29] panic+0x2dc/0x730 [ 572.944573][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 572.950227][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 572.954839][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 572.961104][ T29] watchdog+0xf7c/0xf80 [ 572.965295][ T29] ? watchdog+0x1e1/0xf80 [ 572.969649][ T29] kthread+0x2fa/0x390 [ 572.973729][ T29] ? hungtask_pm_notify+0x90/0x90 [ 572.978768][ T29] ? kthread_blkcg+0xd0/0xd0 [ 572.983378][ T29] ret_from_fork+0x48/0x80 [ 572.987816][ T29] ? kthread_blkcg+0xd0/0xd0 [ 572.992427][ T29] ret_from_fork_asm+0x11/0x20 [ 572.997219][ T29] [ 573.000374][ T29] Kernel Offset: disabled [ 573.005238][ T29] Rebooting in 86400 seconds..