last executing test programs: 8m48.001293646s ago: executing program 5 (id=418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 8m45.788380969s ago: executing program 5 (id=419): syz_io_uring_setup(0x28b5, &(0x7f0000000480)={0x0, 0xf6dd, 0xc0000, 0x0, 0x12}, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xf, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x100, 0xa5) read$FUSE(r5, 0x0, 0x0) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 8m45.506250517s ago: executing program 1 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) ioctl$BLKROSET(r4, 0x125d, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = semget$private(0x0, 0x6, 0x3b1) semop(r6, 0x0, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 8m44.159365764s ago: executing program 1 (id=423): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) readv(r1, &(0x7f0000000240)=[{0x0}], 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)}], 0x1, 0x0) openat$audio(0xffffff9c, 0x0, 0x6473bbe971804104, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) 8m42.130568425s ago: executing program 1 (id=427): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x40fac994) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x301041, 0x41) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x250) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x954, '\x00', 0x0, r9, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd=r0, 0x28ff, &(0x7f0000000900)=[{&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/30, 0x1e}], 0x5, 0x8, 0x1, {0x0, 0x0, 0x8, '\x00', 0x0, 0xfffffffffffffffa}}) 8m40.621848437s ago: executing program 1 (id=430): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x105}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r3 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r3, 0x0, 0x0) 8m39.392758619s ago: executing program 1 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 8m37.408142931s ago: executing program 1 (id=434): socket(0xa, 0x3, 0x87) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c111bc900ffffffffffffc31de7a9b7cc0210f9090000020873f19cee73a4635df0586429a41e7d19729d"], 0x14) 8m36.525092847s ago: executing program 5 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 8m33.959772411s ago: executing program 5 (id=442): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x40fac994) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x301041, 0x41) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x250) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x954, '\x00', 0x0, r9, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd=r0, 0x28ff, &(0x7f0000000900)=[{&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/30, 0x1e}], 0x5, 0x8, 0x1, {0x0, 0x0, 0x8, '\x00', 0x0, 0xfffffffffffffffa}}) 8m30.748743591s ago: executing program 5 (id=447): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) 8m27.308461766s ago: executing program 5 (id=452): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) writev(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8m22.197720926s ago: executing program 32 (id=434): socket(0xa, 0x3, 0x87) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e04692420"], 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042c111bc900ffffffffffffc31de7a9b7cc0210f9090000020873f19cee73a4635df0586429a41e7d19729d"], 0x14) 8m12.249908962s ago: executing program 33 (id=452): socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) writev(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 7m10.121368951s ago: executing program 3 (id=601): epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0x45da, &(0x7f0000000580)={0x0, 0xa355, 0x400, 0xa, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, r8, &(0x7f0000000080)='./file0\x00', 0x120) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r9, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) 7m7.97248908s ago: executing program 3 (id=607): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r4, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) 7m5.466765669s ago: executing program 3 (id=610): r0 = socket$kcm(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f00000003c0)="1197f57cfef6f85f7179a81fdf92775b6831ebd5d558ae5c6057c9196127995cefcf6a374809043cbd17a09fd5678ae8b9511a75ade7c06704ea5182fe58caa01b6edafdae9f61e8a5117db5ff5b47ba5c5c", 0x52}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="080001"], 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x1c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20040900) socket$nl_generic(0x10, 0x3, 0x10) 7m1.113103724s ago: executing program 3 (id=617): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8fc, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000680), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) 6m58.900846844s ago: executing program 3 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 6m55.717077749s ago: executing program 3 (id=631): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 6m40.340291009s ago: executing program 34 (id=631): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m58.206915684s ago: executing program 4 (id=903): bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='syscall\x00') r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x120}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), 0xffffffffffffffff) read$char_usb(r0, &(0x7f0000000600)=""/190, 0xbe) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) 4m57.240332565s ago: executing program 4 (id=904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) r5 = semget$private(0x0, 0x6, 0x3b1) semop(r5, 0x0, 0x0) r6 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080), 0x10) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 4m54.924120027s ago: executing program 4 (id=906): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() ptrace(0x10, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x1, 0x0, 0x3, 0x100, @val=0x80}, "1c01cf2877b163e1f03105f9"}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/mtdblock0\x00', 0x8800, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000200)={{0x2, 0x2}, 0x0, [0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000]}) 4m53.518999424s ago: executing program 4 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYBLOB="110000000000000092"], 0x14) 4m52.716257352s ago: executing program 4 (id=911): landlock_create_ruleset(&(0x7f0000000040)={0xc015, 0x3}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 4m49.388757019s ago: executing program 4 (id=916): syz_emit_ethernet(0x1e3, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) 4m33.463245749s ago: executing program 35 (id=916): syz_emit_ethernet(0x1e3, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) 4m28.779360448s ago: executing program 0 (id=959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2040400) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 4m28.34386229s ago: executing program 0 (id=962): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000180), 0x4, 0x2000000000000357}}, 0x3c) 4m27.301617219s ago: executing program 0 (id=963): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 4m26.108642096s ago: executing program 0 (id=968): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x22842, 0x44) memfd_create(&(0x7f0000000040)='rootmode', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f0000000c00), 0x803, 0x0) fsopen(&(0x7f0000000080)='ext4\x00', 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4m23.689301848s ago: executing program 0 (id=974): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b0001006272"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001000050401"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a01"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m21.086578644s ago: executing program 0 (id=978): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x105043, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) close(r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r5, &(0x7f0000000800), 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)={0x20000000}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 4m5.502291132s ago: executing program 36 (id=978): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x105043, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) close(r1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_int(r3, 0x1, 0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/raid_disks\x00', 0x2, 0x0) write(r5, &(0x7f0000000800), 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)={0x20000000}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m8.583439226s ago: executing program 2 (id=1271): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffd, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r5 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpgrp(0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, 0x0, 0x0) listen(r7, 0x40fac994) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r8 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x1, 0x0) r9 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x301041, 0x41) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x250) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x954, '\x00', 0x0, r10, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r11, @ANYRES32=r4, @ANYBLOB="110000000000000092"], 0x14) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd=r0, 0x28ff, &(0x7f0000000900)=[{&(0x7f0000000140)=""/207, 0xcf}, {&(0x7f0000000300)=""/113, 0x71}, {&(0x7f0000000480)=""/242, 0xf2}, {&(0x7f00000007c0)=""/228, 0xe4}, {&(0x7f00000008c0)=""/30, 0x1e}], 0x5, 0x8, 0x1, {0x0, 0x0, 0x8, '\x00', 0x0, 0xfffffffffffffffa}}) 2m7.342602644s ago: executing program 2 (id=1274): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd700000", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) mount$fuse(0x0, 0x0, 0x0, 0x1000430, &(0x7f0000000780)=ANY=[@ANYRESDEC=0x0, @ANYBLOB=',']) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2m3.136847323s ago: executing program 2 (id=1284): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {}, {0x0, 0xb}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 2m2.181762175s ago: executing program 2 (id=1289): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 2m1.312384845s ago: executing program 2 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') write(0xffffffffffffffff, &(0x7f0000000940)='dummy_udc.0', 0xb) 1m57.286531082s ago: executing program 2 (id=1297): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xfffffffffffffea3}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m55.265354078s ago: executing program 37 (id=1297): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xfffffffffffffea3}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}}}]}, 0x48}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 14.354772005s ago: executing program 6 (id=1430): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 12.805212474s ago: executing program 6 (id=1432): r0 = creat(0x0, 0x109) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) process_vm_readv(0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/80, 0x50}], 0x1, &(0x7f0000000c80), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000440)={0x2020}, 0x2020) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) r5 = fsmount(r3, 0x1, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r7 = syz_usb_connect$hid(0x2, 0x37, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) read(r4, &(0x7f0000000340)=""/101, 0x65) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) preadv(r6, &(0x7f0000002540)=[{&(0x7f0000002480)=""/167, 0xa7}], 0x1, 0x5, 0xfffffffc) 7.718861924s ago: executing program 6 (id=1435): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="a99018c47ca5f0b0000000000000000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000030000000400"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000400), 0x0) io_uring_enter(0xffffffffffffffff, 0x10062c4, 0xffffffdc, 0xa3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 6.515727098s ago: executing program 6 (id=1436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 5.01580173s ago: executing program 6 (id=1437): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000004000)=0x2, 0x5, 0x1, 0x0, 0x0, 0xa701fffc) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000019580)=""/102400, &(0x7f0000000400)=0x19000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x3c, 0x29, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x1, 0xfff1}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futex$unlock_pi_list64(&(0x7f0000000100)=0x5, 0x287, 0x2d0a, &(0x7f0000000240)={r2, r3+60000000}, &(0x7f0000000280)=0xffff, 0x5072) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) read$FUSE(r4, &(0x7f0000000d80)={0x2020}, 0x2020) 4.759474809s ago: executing program 7 (id=1438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) readv(r1, &(0x7f0000000240)=[{0x0}], 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000)=0xb4d5f59234a458bf, 0x4) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0) openat$audio(0xffffff9c, 0x0, 0x6473bbe971804104, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) modify_ldt$write(0x1, &(0x7f0000000280)={0x5, 0xffffffffffffffff, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x78, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0xc010) 3.668266666s ago: executing program 7 (id=1439): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x714, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x0, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc, 0x20000}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) removexattr(0x0, 0x0) memfd_create(0x0, 0x1) unshare(0x20000400) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, 0x0, 0x4040000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a, r5}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfa, 0x1000000000000192, 0x8000000009ba3, 0x642, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x40) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x1a, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 2.155787531s ago: executing program 7 (id=1440): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.865136804s ago: executing program 7 (id=1441): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x1, 0x13, 0x4}) r1 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x5, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c15000000000000000400", 0x3234564e}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000a00)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r4, 0x8b22, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0d000000ff0f0000040000000600000001000000", @ANYRES64=r6], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000200)}, 0x1e) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 950.08418ms ago: executing program 6 (id=1442): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8b, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x8, 0x0, 0x6, 0x0, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1000000004, 0x0, 0xffffffffffffff20, 0x0, 0x1, 0x0, 0x0, 0x10}) write(r1, &(0x7f0000000100)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='1', 0x1) 673.233969ms ago: executing program 7 (id=1443): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) 0s ago: executing program 7 (id=1444): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb2918d5bbd9de54afdded946def5ad284048b03557fc9fe9c0c21f0935578410511bc617e68c2a55a5f14d533dae3d3ac0eb71a835fc08573d0bac4d1797fd2b7702732baf91d796fd2c0be505fdabeef568a3d1b54ab870aa2e42100b0cdbe28891dcf3f2bcc450790c340f3b90c6cf74d2e3b", 0xfe2b, 0x10000485, 0x0, 0xfffffffffffffe91) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000002340)={{r1}, 0x0, 0x10, @inherit={0x0, 0x0}, @subvolid=0x40}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet6(0xa, 0x80003, 0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000003480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x54, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6aa}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048110) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r5, 0x5101) kernel console output (not intermixed with test programs): z.7.668'. [ 348.945984][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.960762][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.979169][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.989017][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.998197][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.055679][ T5638] Bluetooth: hci0: command tx timeout [ 352.442675][ T8171] netlink: 32 bytes leftover after parsing attributes in process `syz.6.678'. [ 353.132729][ T5638] Bluetooth: hci0: command tx timeout [ 353.788456][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.639288][ T1158] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.714808][ T5638] Bluetooth: hci0: command tx timeout [ 356.287496][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.688'. [ 357.590342][ T8133] lo speed is unknown, defaulting to 1000 [ 357.773233][ T5638] Bluetooth: hci0: command tx timeout [ 358.614280][ T1158] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.387584][ T8241] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.632792][ T1158] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.530259][ T1158] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.873422][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 362.992813][ T8284] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 363.174946][ T5771] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 363.273555][ T8290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.374277][ T5771] usb 3-1: Using ep0 maxpacket: 16 [ 363.410305][ T5771] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 363.489612][ T5771] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 363.560555][ T5771] usb 3-1: config 252 has an invalid descriptor of length 255, skipping remainder of the config [ 364.059341][ T5771] usb 3-1: config 252 has no interface number 0 [ 364.120708][ T1158] bridge_slave_1: left allmulticast mode [ 364.139700][ T5771] usb 3-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.169302][ T1158] bridge_slave_1: left promiscuous mode [ 364.191343][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.248446][ T1158] bridge_slave_0: left allmulticast mode [ 364.272059][ T1158] bridge_slave_0: left promiscuous mode [ 364.294065][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.350446][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.403973][ T5771] usb 3-1: Product: syz [ 364.426498][ T5771] usb 3-1: Manufacturer: syz [ 364.454318][ T5771] usb 3-1: SerialNumber: syz [ 364.522254][ T5771] usb 3-1: can't set config #252, error -71 [ 364.570634][ T5771] usb 3-1: USB disconnect, device number 13 [ 366.919107][ T8349] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 369.074579][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 369.158205][ T8352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.274027][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.464705][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 369.727157][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.829732][ T1158] bond0 (unregistering): Released all slaves [ 369.862742][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 369.879279][ T30] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 369.918158][ T30] usb 8-1: config 252 has an invalid interface number: 15 but max is 0 [ 369.965624][ T30] usb 8-1: config 252 has an invalid descriptor of length 255, skipping remainder of the config [ 370.030288][ T30] usb 8-1: config 252 has no interface number 0 [ 370.077540][ T30] usb 8-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.148306][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.175090][ T30] usb 8-1: Product: syz [ 370.656617][ T30] usb 8-1: Manufacturer: syz [ 370.697811][ T30] usb 8-1: SerialNumber: syz [ 370.759323][ T30] usb 8-1: can't set config #252, error -71 [ 370.809240][ T30] usb 8-1: USB disconnect, device number 3 [ 371.894270][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 372.172323][ T8405] netlink: 'syz.6.740': attribute type 1 has an invalid length. [ 372.317510][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.355861][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.380066][ T8133] bridge_slave_0: entered allmulticast mode [ 372.401186][ T8133] bridge_slave_0: entered promiscuous mode [ 374.867060][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.906759][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.924530][ T8133] bridge_slave_1: entered allmulticast mode [ 374.936179][ T8133] bridge_slave_1: entered promiscuous mode [ 375.315113][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.467946][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.624333][ T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 375.994438][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 376.022278][ T30] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 376.055297][ T5742] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 376.150039][ T30] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 376.227349][ T30] usb 1-1: config 252 has no interface number 0 [ 376.245238][ T30] usb 1-1: config 252 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.315984][ T1158] hsr_slave_0: left promiscuous mode [ 376.334696][ T1158] hsr_slave_1: left promiscuous mode [ 376.337699][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.355352][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.374043][ T5742] usb 7-1: Using ep0 maxpacket: 32 [ 376.382279][ T5742] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 376.406313][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.421105][ T5742] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 376.450600][ T30] usb 1-1: Product: syz [ 376.459895][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.468755][ T30] usb 1-1: Manufacturer: syz [ 376.489002][ T30] usb 1-1: SerialNumber: syz [ 376.490839][ T5742] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 376.507561][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.522996][ T5742] usb 7-1: Product: syz [ 376.540439][ T5742] usb 7-1: Manufacturer: syz [ 376.563674][ T5742] usb 7-1: SerialNumber: syz [ 376.582392][ T5742] usb 7-1: config 0 descriptor?? [ 376.590403][ T1158] veth1_macvtap: left promiscuous mode [ 376.607437][ T1158] veth0_macvtap: left promiscuous mode [ 376.615071][ T8429] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 376.622451][ T1158] veth1_vlan: left promiscuous mode [ 376.625593][ T30] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 376.630133][ T5742] hub 7-1:0.0: bad descriptor, ignoring hub [ 376.643327][ T1158] veth0_vlan: left promiscuous mode [ 376.649410][ T5742] hub 7-1:0.0: probe with driver hub failed with error -5 [ 377.206999][ T13] usb 1-1: Failed to submit usb control message: -71 [ 377.220051][ T30] usb 1-1: USB disconnect, device number 9 [ 377.240177][ T13] usb 1-1: unable to send the bmi data to the device: -71 [ 377.267389][ T13] usb 1-1: unable to get target info from device [ 377.295913][ T13] usb 1-1: could not get target info (-71) [ 377.324591][ T13] usb 1-1: could not probe fw (-71) [ 377.642454][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.681868][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.870283][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.882774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.991267][ T8460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.039194][ T8460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.173193][ T8477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.755'. [ 379.261496][ T8479] netlink: 64 bytes leftover after parsing attributes in process `syz.2.755'. [ 379.339510][ T30] usb 7-1: USB disconnect, device number 6 [ 379.374415][ T8481] loop8: detected capacity change from 0 to 8 [ 379.713634][ T8481] Dev loop8: unable to read RDB block 8 [ 379.720362][ T8481] loop8: unable to read partition table [ 379.729834][ T8481] loop8: partition table beyond EOD, truncated [ 379.736368][ T8481] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 380.036227][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 380.190989][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 380.192651][ T30] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 380.574746][ T30] usb 7-1: device not accepting address 7, error -71 [ 381.157558][ T8493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.199611][ T8133] team0: Port device team_slave_0 added [ 383.262488][ T8509] netlink: 40 bytes leftover after parsing attributes in process `syz.7.762'. [ 383.282474][ T8509] netlink: 'syz.7.762': attribute type 10 has an invalid length. [ 383.319506][ T8509] team0: Device vxcan0 is of different type [ 383.348524][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 383.384925][ T8133] team0: Port device team_slave_1 added [ 383.548018][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.788651][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.817263][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.851368][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.611052][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.729513][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.809624][ T8133] hsr_slave_0: entered promiscuous mode [ 385.816587][ T8133] hsr_slave_1: entered promiscuous mode [ 385.823095][ T8133] debugfs: 'hsr0' already exists in 'hsr' [ 385.828917][ T8133] Cannot create hsr debugfs directory [ 386.278001][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.365714][ T5741] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 386.756076][ T5741] usb 7-1: Using ep0 maxpacket: 32 [ 387.642755][ T5741] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 387.741997][ T5741] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 387.846243][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 387.868550][ T5741] usb 7-1: Product: syz [ 387.927371][ T5741] usb 7-1: Manufacturer: syz [ 387.953837][ T5741] usb 7-1: SerialNumber: syz [ 387.989990][ T5741] usb 7-1: config 0 descriptor?? [ 388.007973][ T8546] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 388.058151][ T5741] hub 7-1:0.0: bad descriptor, ignoring hub [ 388.089546][ T5741] hub 7-1:0.0: probe with driver hub failed with error -5 [ 388.264445][ T8558] syzkaller0: entered promiscuous mode [ 388.296251][ T8558] syzkaller0: entered allmulticast mode [ 390.544243][ T10] usb 7-1: USB disconnect, device number 9 [ 394.216669][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 396.107333][ T8133] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 396.186339][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 396.205651][ T8133] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 396.244153][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 396.274315][ T8133] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 396.323572][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 396.346212][ T8133] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 396.851581][ T8133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.540758][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.729767][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.808918][ T8655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.781'. [ 399.826832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.834137][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.619558][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.626836][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.876076][ T29] libceph: connect (1)[c::]:6789 error -101 [ 400.895033][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 400.906548][ T8655] ceph: No mds server is up or the cluster is laggy [ 400.924949][ T29] libceph: connect (1)[c::]:6789 error -101 [ 400.934286][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 401.205953][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 401.229428][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 403.330354][ T8686] netlink: 'syz.6.806': attribute type 5 has an invalid length. [ 403.478126][ T8684] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 405.532644][ T5638] Bluetooth: hci0: command tx timeout [ 406.944438][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.814'. [ 407.002415][ T8715] netlink: 64 bytes leftover after parsing attributes in process `syz.6.814'. [ 407.290087][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.323902][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.341791][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.383622][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.434448][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.614965][ T5622] Bluetooth: hci5: command tx timeout [ 411.403559][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 411.692739][ T5622] Bluetooth: hci5: command tx timeout [ 411.899606][ T8766] jffs2: notice: (8766) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 412.378103][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.6.829'. [ 412.450316][ T8784] netlink: 64 bytes leftover after parsing attributes in process `syz.6.829'. [ 412.569041][ T31] audit: type=1326 audit(1787089892.667:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8783 comm="syz.0.830" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7faff5597e57 code=0x0 [ 413.772617][ T5622] Bluetooth: hci5: command tx timeout [ 413.898294][ T8800] jffs2: notice: (8800) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 415.853782][ T5622] Bluetooth: hci5: command tx timeout [ 416.216517][ T8819] futex_wake_op: syz.6.837 tries to shift op by 144; fix this program [ 416.248231][ T8720] lo speed is unknown, defaulting to 1000 [ 419.030116][ T8831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.866493][ T8842] netlink: 28 bytes leftover after parsing attributes in process `syz.6.843'. [ 419.930450][ T8845] netlink: 64 bytes leftover after parsing attributes in process `syz.6.843'. [ 419.987689][ T8843] input: syz0 as /devices/virtual/input/input7 [ 421.832188][ T58] bridge_slave_1: left allmulticast mode [ 421.861402][ T58] bridge_slave_1: left promiscuous mode [ 421.894358][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.951414][ T58] bridge_slave_0: left allmulticast mode [ 421.971796][ T58] bridge_slave_0: left promiscuous mode [ 421.994623][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.999357][ T8883] fuse: Bad value for 'fd' [ 425.684920][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.744272][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.777538][ T58] bond0 (unregistering): Released all slaves [ 426.118950][ T8891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.325299][ T8720] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.389519][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.458787][ T8720] bridge_slave_0: entered allmulticast mode [ 426.481676][ T8895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.857'. [ 426.501164][ T8720] bridge_slave_0: entered promiscuous mode [ 426.538734][ T8896] netlink: 64 bytes leftover after parsing attributes in process `syz.4.857'. [ 426.653217][ T58] hsr_slave_0: left promiscuous mode [ 426.691874][ T58] hsr_slave_1: left promiscuous mode [ 426.716969][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.787341][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.344523][ T8906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.388188][ T58] team0 (unregistering): Port device team_slave_1 removed [ 431.469144][ T58] team0 (unregistering): Port device team_slave_0 removed [ 432.072681][ T5797] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 432.257781][ T5797] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 432.297248][ T8720] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.297859][ T5797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.316901][ T5797] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.317103][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.329910][ T5797] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.419628][ T8720] bridge_slave_1: entered allmulticast mode [ 432.422112][ T5797] usb 8-1: config 0 descriptor?? [ 432.509212][ T8720] bridge_slave_1: entered promiscuous mode [ 432.539646][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 432.881092][ T8720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.969332][ T8720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.032778][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 433.075755][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 433.262840][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 433.270015][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 433.280273][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 433.287536][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 433.295245][ T5797] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 434.284597][ T5797] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 434.413611][ T5797] cp2112 0003:10C4:EA90.0003: Part Number: 0x82 Device Version: 0xFE [ 434.637610][ T8720] team0: Port device team_slave_0 added [ 434.707161][ T8975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.778174][ T8720] team0: Port device team_slave_1 added [ 434.792857][ T8977] jffs2: notice: (8977) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 435.282972][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.314320][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.531887][ T8720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.340921][ T8720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.407448][ T8720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.443827][ T5797] usb 8-1: reset high-speed USB device number 4 using dummy_hcd [ 436.564673][ T8720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.137537][ T8990] IPVS: sh: FWM 3 0x00000003 - no destination available [ 437.144666][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 437.191827][ T5594] IPVS: starting estimator thread 0... [ 437.760908][ T8993] IPVS: using max 25 ests per chain, 60000 per kthread [ 438.142098][ T8720] hsr_slave_0: entered promiscuous mode [ 438.191134][ T8720] hsr_slave_1: entered promiscuous mode [ 439.850439][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.857082][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.870976][ T9005] netlink: 28 bytes leftover after parsing attributes in process `syz.7.885'. [ 439.927776][ T9009] netlink: 64 bytes leftover after parsing attributes in process `syz.7.885'. [ 439.961824][ T8720] debugfs: 'hsr0' already exists in 'hsr' [ 439.987669][ T9008] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.883'. [ 440.027696][ T8720] Cannot create hsr debugfs directory [ 440.355438][ T29] usb 8-1: USB disconnect, device number 4 [ 440.545514][ T9017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.781485][ T9053] IPVS: sh: FWM 3 0x00000003 - no destination available [ 446.474295][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 447.054816][ T9059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.901'. [ 447.108994][ T9061] netlink: 64 bytes leftover after parsing attributes in process `syz.4.901'. [ 451.491239][ T9084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.677369][ T8720] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 452.790580][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.854895][ T8720] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 452.983064][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 453.024579][ T8720] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 453.113326][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 453.176801][ T8720] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 454.052277][ T8720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.757524][ T9126] netlink: 28 bytes leftover after parsing attributes in process `syz.6.913'. [ 455.816123][ T9128] netlink: 64 bytes leftover after parsing attributes in process `syz.6.913'. [ 456.740216][ T8720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.834312][ T9137] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.900'. [ 457.210309][ T9142] block device autoloading is deprecated and will be removed. [ 457.473430][ T8720] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.586945][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.594123][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.744033][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.751185][ T8282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.848176][ T9156] netlink: 5408 bytes leftover after parsing attributes in process `syz.2.920'. [ 459.995723][ T9156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.510497][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.6.927'. [ 465.577202][ T9193] netlink: 64 bytes leftover after parsing attributes in process `syz.6.927'. [ 468.931107][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.397992][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.151904][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.223078][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.357066][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.368926][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 472.413324][ T5622] Bluetooth: hci7: command 0x1003 tx timeout [ 472.423709][ T5638] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 472.494537][ T5638] Bluetooth: hci0: command tx timeout [ 472.900768][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.943'. [ 473.270168][ T9257] bridge_slave_1: left allmulticast mode [ 473.335477][ T9257] bridge_slave_1: left promiscuous mode [ 473.387006][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.483179][ T9257] bridge_slave_0: left allmulticast mode [ 473.535406][ T9257] bridge_slave_0: left promiscuous mode [ 473.578384][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.661882][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.677337][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.687031][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.702150][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.713957][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 474.585643][ T5622] Bluetooth: hci0: command tx timeout [ 475.203380][ T9282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.788634][ T5622] Bluetooth: hci5: command tx timeout [ 476.662645][ T5622] Bluetooth: hci0: command tx timeout [ 477.147953][ T9315] Bluetooth: MGMT ver 1.23 [ 477.807825][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.941'. [ 477.854113][ T5622] Bluetooth: hci5: command tx timeout [ 477.880826][ T9334] netlink: 64 bytes leftover after parsing attributes in process `syz.2.941'. [ 477.909791][ T9332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 477.929275][ T9226] lo speed is unknown, defaulting to 1000 [ 478.732785][ T5622] Bluetooth: hci0: command tx timeout [ 479.934152][ T5622] Bluetooth: hci5: command tx timeout [ 480.565999][ T9268] lo speed is unknown, defaulting to 1000 [ 482.307882][ T5622] Bluetooth: hci5: command tx timeout [ 482.997459][ T9371] netlink: 28 bytes leftover after parsing attributes in process `syz.0.974'. [ 483.041988][ T9372] futex_wake_op: syz.6.973 tries to shift op by 144; fix this program [ 483.074152][ T9373] netlink: 64 bytes leftover after parsing attributes in process `syz.0.974'. [ 484.929763][ T9386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.083640][ T9392] input: syz0 as /devices/virtual/input/input8 [ 487.714386][ T9426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.988'. [ 487.768349][ T9427] netlink: 64 bytes leftover after parsing attributes in process `syz.2.988'. [ 488.753805][ T8282] bridge_slave_1: left allmulticast mode [ 488.771685][ T8282] bridge_slave_1: left promiscuous mode [ 488.799593][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.860931][ T8282] bridge_slave_0: left allmulticast mode [ 488.875251][ T8282] bridge_slave_0: left promiscuous mode [ 488.910603][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.048517][ T9448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.390150][ T9458] netlink: 'syz.7.991': attribute type 10 has an invalid length. [ 489.469766][ T8282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.493347][ T8282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.516666][ T8282] bond0 (unregistering): Released all slaves [ 489.565776][ T9456] netlink: 'syz.7.991': attribute type 1 has an invalid length. [ 489.587405][ T9458] team0: Device vxcan0 is of different type [ 489.606676][ T9396] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 489.642427][ T9396] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 489.671039][ T9396] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 489.715386][ T9396] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 489.837473][ T9466] input: syz0 as /devices/virtual/input/input9 [ 492.450717][ T8282] hsr_slave_0: left promiscuous mode [ 492.495279][ T8282] hsr_slave_1: left promiscuous mode [ 492.513383][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.726137][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.736093][ T9500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.053312][ T8282] team0 (unregistering): Port device team_slave_1 removed [ 495.138000][ T8282] team0 (unregistering): Port device team_slave_0 removed [ 496.742226][ T9573] futex_wake_op: syz.7.1019 tries to shift op by 144; fix this program [ 498.656515][ T9396] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 498.672767][ T9396] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 498.777053][ T9396] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.783270][ T9396] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 498.834467][ T9595] netlink: 'syz.6.1023': attribute type 10 has an invalid length. [ 498.919249][ T9226] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.934538][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.944146][ T9226] bridge_slave_0: entered allmulticast mode [ 498.970633][ T9226] bridge_slave_0: entered promiscuous mode [ 499.659720][ T9588] netlink: 'syz.6.1023': attribute type 1 has an invalid length. [ 499.940113][ T9595] team0: Device vxcan0 is of different type [ 500.624586][ T9226] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.645887][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.676166][ T9226] bridge_slave_1: entered allmulticast mode [ 500.696791][ T9226] bridge_slave_1: entered promiscuous mode [ 500.737987][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.745204][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.957163][ T9396] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 500.981840][ T9396] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 501.011484][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.022644][ T5742] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 501.057868][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.062697][ T9396] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 501.080689][ T9268] bridge_slave_0: entered allmulticast mode [ 501.091258][ T9396] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 501.200057][ T5742] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 501.251404][ T5742] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 501.296337][ T5742] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.331138][ T5742] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.368272][ T5742] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.587283][ T9268] bridge_slave_0: entered promiscuous mode [ 501.809791][ T9614] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 501.851727][ T5741] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 502.000377][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.019395][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.032667][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.049661][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.054575][ T9226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.070538][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.115683][ T5741] usb 3-1: Using ep0 maxpacket: 16 [ 502.138840][ T5741] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.155803][ T9226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.170178][ T5741] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.195594][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 502.221264][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.228856][ T5741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 502.247863][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.291199][ T5741] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 502.307520][ T9268] bridge_slave_1: entered allmulticast mode [ 502.329397][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.340435][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.349161][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.362983][ T5741] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.378807][ T5741] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.387740][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.399009][ T5741] usb 3-1: Manufacturer: syz [ 502.405345][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.412385][ T9268] bridge_slave_1: entered promiscuous mode [ 502.430860][ T5741] usb 3-1: config 0 descriptor?? [ 502.461331][ T5594] usb 7-1: USB disconnect, device number 10 [ 502.464115][ T5622] Bluetooth: hci7: Reading Intel version command failed (-19) [ 502.873801][ T5741] rc_core: IR keymap rc-hauppauge not found [ 502.892506][ T8282] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.908806][ T5741] Registered IR keymap rc-empty [ 502.925272][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 502.964626][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.009241][ T5741] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 503.049855][ T5741] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 503.146154][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.147984][ T9226] team0: Port device team_slave_0 added [ 503.182017][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.207315][ T9226] team0: Port device team_slave_1 added [ 503.223079][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.263005][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.298717][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.342346][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.373059][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.405101][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 503.466067][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 504.233017][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 504.266073][ T5741] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 504.311823][ T5741] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 504.348845][ T5741] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 504.364700][ T5741] usb 3-1: USB disconnect, device number 14 [ 504.403386][ T9665] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1040'. [ 504.459694][ T9268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.463154][ T9666] netlink: 'syz.6.1040': attribute type 10 has an invalid length. [ 504.493137][ T5622] Bluetooth: hci2: command tx timeout [ 504.567673][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.586839][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.660027][ T9226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.672683][ T9663] netlink: 'syz.6.1040': attribute type 1 has an invalid length. [ 504.755538][ T8282] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.841285][ T9268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.876367][ T9666] team0: Device vxcan0 is of different type [ 504.892194][ T9226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.915305][ T9226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.974805][ T9226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.025257][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 505.287431][ T9268] team0: Port device team_slave_0 added [ 505.958056][ T8282] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.048873][ T9268] team0: Port device team_slave_1 added [ 506.160280][ T9615] lo speed is unknown, defaulting to 1000 [ 506.573072][ T5622] Bluetooth: hci2: command tx timeout [ 507.101489][ T8282] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.267240][ T9226] hsr_slave_0: entered promiscuous mode [ 507.310625][ T9226] hsr_slave_1: entered promiscuous mode [ 507.334650][ T9226] debugfs: 'hsr0' already exists in 'hsr' [ 507.358455][ T9226] Cannot create hsr debugfs directory [ 507.708732][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.724865][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.794860][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.365155][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.391652][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.467676][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.653347][ T5622] Bluetooth: hci2: command tx timeout [ 509.823872][ T9268] hsr_slave_0: entered promiscuous mode [ 509.836013][ T9268] hsr_slave_1: entered promiscuous mode [ 509.853627][ T9268] debugfs: 'hsr0' already exists in 'hsr' [ 509.864248][ T9268] Cannot create hsr debugfs directory [ 510.733155][ T5622] Bluetooth: hci2: command tx timeout [ 511.927017][ T8282] bridge_slave_1: left allmulticast mode [ 511.948586][ T8282] bridge_slave_1: left promiscuous mode [ 511.968434][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.014448][ T8282] bridge_slave_0: left allmulticast mode [ 512.040041][ T8282] bridge_slave_0: left promiscuous mode [ 512.058073][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.423144][ T8282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.435731][ T8282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.456822][ T8282] bond0 (unregistering): Released all slaves [ 514.619285][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 516.577259][ T9763] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 516.584278][ T9763] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep7out-bulk, IN ep6in-bulk [ 517.102090][ T5594] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 520.403802][ T8282] hsr_slave_0: left promiscuous mode [ 520.434612][ T8282] hsr_slave_1: left promiscuous mode [ 520.443292][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.452572][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.479035][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.502164][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.719634][ T8282] veth1_macvtap: left promiscuous mode [ 520.731553][ T8282] veth0_macvtap: left promiscuous mode [ 520.743796][ T8282] veth1_vlan: left promiscuous mode [ 520.754415][ T8282] veth0_vlan: left promiscuous mode [ 523.525595][ T8282] team0 (unregistering): Port device team_slave_1 removed [ 523.582361][ T8282] team0 (unregistering): Port device team_slave_0 removed [ 523.926528][ T9826] input: syz0 as /devices/virtual/input/input11 [ 524.263877][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.302370][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.318761][ T9615] bridge_slave_0: entered allmulticast mode [ 524.351111][ T9615] bridge_slave_0: entered promiscuous mode [ 524.369947][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.369956][ T9835] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1083'. [ 524.438887][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.464333][ T9615] bridge_slave_1: entered allmulticast mode [ 524.504392][ T9615] bridge_slave_1: entered promiscuous mode [ 524.724599][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.758053][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.806051][ T8282] IPVS: stop unused estimator thread 0... [ 524.917011][ T9615] team0: Port device team_slave_0 added [ 524.948735][ T9615] team0: Port device team_slave_1 added [ 525.101649][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1087'. [ 525.160410][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1087'. [ 525.275426][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.306582][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.371818][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.721279][ T8282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.788593][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.812851][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.909473][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.099198][ T1158] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.445344][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1091'. [ 529.259459][ T8282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.369486][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 529.381177][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 529.389132][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 529.406440][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 529.417750][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 529.537134][ T9615] hsr_slave_0: entered promiscuous mode [ 529.563258][ T9883] jffs2: notice: (9883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 529.572868][ T9615] hsr_slave_1: entered promiscuous mode [ 529.617891][ T5268] 8021q: adding VLAN 0 to HW filter on device eth13 [ 529.756458][ T8282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.134275][ T9874] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 530.340235][ T9874] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 530.638534][ T9874] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 530.809049][ T9874] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 531.022921][ T8282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.225301][ T9903] input: syz0 as /devices/virtual/input/input12 [ 531.514269][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1098'. [ 531.528867][ T9911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1098'. [ 533.241265][ T5621] Bluetooth: hci3: command tx timeout [ 533.920230][ T9877] lo speed is unknown, defaulting to 1000 [ 534.043331][ T9268] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 534.090831][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.897972][ T5268] 8021q: adding VLAN 0 to HW filter on device eth14 [ 534.935574][ T9943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.968001][ T9943] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 535.011496][ T9943] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 535.064967][ T9943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.087691][ T9943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 535.137793][ T9943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 535.161793][ T8282] bridge_slave_1: left allmulticast mode [ 535.181344][ T8282] bridge_slave_1: left promiscuous mode [ 535.211224][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.267352][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.305804][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.314127][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.325096][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.332896][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.418739][ T8282] bridge_slave_0: left allmulticast mode [ 535.432457][ T8282] bridge_slave_0: left promiscuous mode [ 535.458929][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.226996][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 537.283218][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 537.603254][ T8282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.628971][ T5622] Bluetooth: hci0: command tx timeout [ 537.651159][ T8282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.688253][ T8282] bond0 (unregistering): Released all slaves [ 537.874466][ T9961] input: syz0 as /devices/virtual/input/input13 [ 539.169346][ T5797] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 539.418033][ T8282] hsr_slave_0: left promiscuous mode [ 539.428461][ T5797] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 539.439227][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.469975][ T8282] hsr_slave_1: left promiscuous mode [ 539.481550][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.503108][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.572696][ T5797] usb 7-1: config 0 has no interfaces? [ 539.578283][ T5797] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.579288][ T8282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.588327][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 539.601136][ T5797] usb 7-1: config 0 descriptor?? [ 539.630888][ T8282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.726604][ T8282] veth1_macvtap: left promiscuous mode [ 539.742684][ T8282] veth0_macvtap: left promiscuous mode [ 539.749073][ T8282] veth1_vlan: left promiscuous mode [ 539.787226][ T8282] veth0_vlan: left promiscuous mode [ 539.870907][ T5622] Bluetooth: hci0: command tx timeout [ 539.884471][ T5594] usb 7-1: USB disconnect, device number 11 [ 540.681715][ T8282] team0 (unregistering): Port device team_slave_1 removed [ 540.763382][ T8282] team0 (unregistering): Port device team_slave_0 removed [ 540.965124][T10001] Bluetooth: MGMT ver 1.23 [ 541.209354][ T13] smbdirect: ib_dev[syz2] removed [ 541.289667][ T9934] Set syz1 is full, maxelem 65536 reached [ 541.404007][T10010] input: syz0 as /devices/virtual/input/input14 [ 541.535200][ T5268] 8021q: adding VLAN 0 to HW filter on device eth15 [ 541.560882][ T5594] lo speed is unknown, defaulting to 1000 [ 541.616379][ T5594] infiniband syz2: ib_query_port failed (-19) [ 541.691616][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 541.778446][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 542.124915][ T5622] Bluetooth: hci0: command tx timeout [ 543.147640][ T9615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 543.204656][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.371516][ T9615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 543.432936][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.985202][ T9877] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.000191][ T9877] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.010729][ T9877] bridge_slave_0: entered allmulticast mode [ 544.032739][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 544.068317][ T9877] bridge_slave_0: entered promiscuous mode [ 544.155777][ T9615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 544.173903][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.214795][ T9877] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.379350][ T5622] Bluetooth: hci0: command tx timeout [ 545.249646][ T9877] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.467062][ T9877] bridge_slave_1: entered allmulticast mode [ 545.514141][ T9877] bridge_slave_1: entered promiscuous mode [ 545.596781][ T9615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 545.663105][ T9615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.915591][ T24] IPVS: starting estimator thread 0... [ 546.037453][T10062] IPVS: using max 26 ests per chain, 62400 per kthread [ 546.286554][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 546.763521][ T9877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.795323][ T9877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.007805][T10079] netlink: 'syz.6.1131': attribute type 10 has an invalid length. [ 547.062878][T10076] netlink: 'syz.6.1131': attribute type 1 has an invalid length. [ 547.109670][T10079] team0: Device vxcan0 is of different type [ 547.301751][ T9877] team0: Port device team_slave_0 added [ 547.328534][ T9877] team0: Port device team_slave_1 added [ 549.405583][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.413617][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.476351][ T9877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.679214][ T9877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.708701][ T9877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.938527][ T9877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.951426][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 550.220207][ T5594] IPVS: starting estimator thread 0... [ 552.005853][T10125] IPVS: using max 37 ests per chain, 88800 per kthread [ 552.232986][T10146] netlink: 'syz.6.1144': attribute type 10 has an invalid length. [ 552.313649][ T9877] hsr_slave_0: entered promiscuous mode [ 552.321455][ T9877] hsr_slave_1: entered promiscuous mode [ 552.331000][ T9877] debugfs: 'hsr0' already exists in 'hsr' [ 552.338489][ T9877] Cannot create hsr debugfs directory [ 552.350294][T10140] netlink: 'syz.6.1144': attribute type 1 has an invalid length. [ 552.391518][T10146] team0: Device vxcan0 is of different type [ 552.447973][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.470043][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.521228][ T9944] bridge_slave_0: entered allmulticast mode [ 552.541110][ T9944] bridge_slave_0: entered promiscuous mode [ 552.561666][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.580323][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.589288][T10155] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1147'. [ 552.611406][ T9944] bridge_slave_1: entered allmulticast mode [ 552.623642][T10157] jffs2: notice: (10157) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 552.637038][T10158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1147'. [ 552.647909][ T9944] bridge_slave_1: entered promiscuous mode [ 553.249573][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.536979][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.635107][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.658752][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.164727][ T9944] team0: Port device team_slave_0 added [ 556.273023][ T9944] team0: Port device team_slave_1 added [ 556.581120][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.588306][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.652694][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.678459][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.747963][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.812713][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.819883][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.869014][T10216] xt_bpf: check failed: parse error [ 557.006164][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.027783][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.097076][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.021586][ T9944] hsr_slave_0: entered promiscuous mode [ 559.030087][ T9944] hsr_slave_1: entered promiscuous mode [ 559.040454][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 559.046259][ T9944] Cannot create hsr debugfs directory [ 559.593300][ T5808] bridge_slave_1: left allmulticast mode [ 559.626170][ T5808] bridge_slave_1: left promiscuous mode [ 559.652343][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.715981][ T5808] bridge_slave_0: left allmulticast mode [ 560.864969][ T5808] bridge_slave_0: left promiscuous mode [ 560.945619][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.702824][ T5808] bridge_slave_1: left allmulticast mode [ 562.724883][ T5808] bridge_slave_1: left promiscuous mode [ 562.746880][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.818460][ T5808] bridge_slave_0: left allmulticast mode [ 562.833403][ T5808] bridge_slave_0: left promiscuous mode [ 562.850401][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.221811][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.261739][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.308156][ T5808] bond0 (unregistering): Released all slaves [ 563.630374][ T5808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.668369][ T5808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.696264][ T5808] bond0 (unregistering): Released all slaves [ 564.087552][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 564.679157][ T5808] hsr_slave_0: left promiscuous mode [ 564.722874][ T5808] hsr_slave_1: left promiscuous mode [ 564.736423][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.790004][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.883674][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 564.895270][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 564.904030][ T5808] hsr_slave_0: left promiscuous mode [ 564.912027][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 564.922428][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 564.935003][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 564.989638][ T5808] hsr_slave_1: left promiscuous mode [ 565.008540][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.059901][ T5808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.799104][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.812842][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.515699][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 566.558910][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 566.884897][ T5808] team0 (unregistering): Port device team_slave_1 removed [ 566.902125][ T5808] team0 (unregistering): Port device team_slave_0 removed [ 567.181959][ T5622] Bluetooth: hci5: command tx timeout [ 567.246328][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 567.307321][ T9877] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 567.435437][ T9877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 567.480126][ T9877] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 567.533970][ T9877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 567.551882][ T9877] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 567.721401][ T9877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 567.801060][ T9877] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 568.056565][ T9877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.436077][ T5622] Bluetooth: hci5: command tx timeout [ 571.703311][ T5622] Bluetooth: hci5: command tx timeout [ 572.219040][ T9877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.045180][ T9877] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.498748][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1190'. [ 573.968416][ T5622] Bluetooth: hci5: command tx timeout [ 574.649855][T10392] comedi comedi0: pc212e: a I/O base address must be specified [ 575.273653][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.280959][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.364308][ T5268] 8021q: adding VLAN 0 to HW filter on device eth11 [ 575.385562][T10397] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1196'. [ 575.413401][T10397] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1196'. [ 577.665786][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.673096][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.640802][T10435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 579.671805][T10435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 579.696935][T10435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 579.776352][T10435] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 579.853503][T10435] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 579.902048][T10435] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 579.941343][ T9944] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 579.997331][T10435] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 580.046899][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.167815][ T9944] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 580.285612][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.326283][ T9944] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 580.403869][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.537577][ T9944] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 580.617669][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 581.834507][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 581.921318][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.105776][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout [ 584.207769][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 585.171110][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout [ 585.574069][T10272] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.615069][T10272] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.661667][T10272] bridge_slave_0: entered allmulticast mode [ 585.738675][T10272] bridge_slave_0: entered promiscuous mode [ 585.799945][T10272] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.859938][T10272] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.916588][T10272] bridge_slave_1: entered allmulticast mode [ 585.984169][T10272] bridge_slave_1: entered promiscuous mode [ 586.096597][ T1158] bridge_slave_1: left allmulticast mode [ 586.143939][ T1158] bridge_slave_1: left promiscuous mode [ 586.188771][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.305368][ T1158] bridge_slave_0: left allmulticast mode [ 586.361488][ T1158] bridge_slave_0: left promiscuous mode [ 586.403330][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.429705][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 587.311582][ T9630] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 587.394595][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout [ 587.537392][ T9630] usb 7-1: unable to get BOS descriptor or descriptor too short [ 587.590619][ T9630] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 587.635670][ T9630] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.855598][ T9630] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.210730][ T9630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.267696][ T9630] usb 7-1: Product: syz [ 588.291321][ T9630] usb 7-1: Manufacturer: syz [ 588.314559][ T9630] usb 7-1: SerialNumber: syz [ 588.412003][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.439447][ T9630] usb 7-1: selecting invalid altsetting 1 [ 588.588448][ T9630] usb 7-1: unit 6 not found! [ 588.652042][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.713173][ T1158] bond0 (unregistering): Released all slaves [ 589.504022][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.529998][ T9630] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 589.573011][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.612899][ T9630] usb 7-1: USB disconnect, device number 12 [ 589.762058][ T9089] udevd[9089]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.339485][ T1158] hsr_slave_0: left promiscuous mode [ 590.382107][ T1158] hsr_slave_1: left promiscuous mode [ 590.413401][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.474051][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.592694][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 591.679727][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 592.402592][T10272] team0: Port device team_slave_0 added [ 592.572749][T10272] team0: Port device team_slave_1 added [ 592.582464][T10550] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.596442][T10550] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.624757][T10550] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 592.939607][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.980376][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.525110][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.711500][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.829972][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.995404][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.753344][ T5622] Bluetooth: hci3: command 0x040f tx timeout [ 594.840771][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 594.846909][ T5622] Bluetooth: hci5: command 0x0c1a tx timeout [ 595.080407][T10272] hsr_slave_0: entered promiscuous mode [ 595.162264][T10272] hsr_slave_1: entered promiscuous mode [ 595.566647][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 595.586086][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 595.600885][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 595.617529][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 595.631649][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 596.800067][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.874358][ T5622] Bluetooth: hci2: command tx timeout [ 600.148612][ T5622] Bluetooth: hci2: command tx timeout [ 601.416748][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 601.434263][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 601.449272][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 601.461015][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 601.480275][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 602.256244][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 602.382652][ T5621] Bluetooth: hci2: command tx timeout [ 603.926734][ T5621] Bluetooth: hci3: command tx timeout [ 604.950353][ T5621] Bluetooth: hci2: command tx timeout [ 606.111419][ T5621] Bluetooth: hci3: command tx timeout [ 608.219838][ T1158] bridge_slave_1: left allmulticast mode [ 608.245060][ T1158] bridge_slave_1: left promiscuous mode [ 608.300628][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.365575][ T5621] Bluetooth: hci3: command tx timeout [ 608.445305][ T1158] bridge_slave_0: left allmulticast mode [ 608.484590][ T1158] bridge_slave_0: left promiscuous mode [ 608.521193][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.590187][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1255'. [ 609.454061][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.523343][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.564697][ T1158] bond0 (unregistering): Released all slaves [ 610.486625][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1259'. [ 610.531960][ T1158] hsr_slave_0: left promiscuous mode [ 610.562267][ T1158] hsr_slave_1: left promiscuous mode [ 610.593243][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.595731][T10737] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1259'. [ 610.619649][ T5621] Bluetooth: hci3: command tx timeout [ 610.653309][T10729] random: crng reseeded on system resumption [ 610.687103][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.852524][T10739] jffs2: notice: (10739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 612.150906][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 612.208261][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 614.848021][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.095395][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.643047][T10790] comedi comedi0: Minor -4 is invalid! [ 617.176559][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.221636][T10785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.425736][ T37] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.486542][T10272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 617.578762][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.605077][T10586] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.623775][T10586] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.646219][T10586] bridge_slave_0: entered allmulticast mode [ 617.669309][T10586] bridge_slave_0: entered promiscuous mode [ 617.905007][T10272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 617.984589][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.040587][T10272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 618.582558][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.620380][T10586] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.650725][T10586] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.754747][T10586] bridge_slave_1: entered allmulticast mode [ 618.802415][T10586] bridge_slave_1: entered promiscuous mode [ 618.950467][T10272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 619.005495][T10272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 619.278812][ T5797] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 619.376384][ T37] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 619.458647][T10586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.472647][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 619.497283][ T5797] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 619.528362][T10586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.564889][ T5797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.621642][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.713656][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 619.765627][ T5797] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 619.830194][ T5797] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 619.868240][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1276'. [ 619.879799][ T5797] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 619.896144][ T5797] usb 3-1: Manufacturer: syz [ 619.925749][T10586] team0: Port device team_slave_0 added [ 619.951413][ T5797] usb 3-1: config 0 descriptor?? [ 620.010512][T10586] team0: Port device team_slave_1 added [ 620.998332][ T5797] rc_core: IR keymap rc-hauppauge not found [ 621.022693][ T5797] Registered IR keymap rc-empty [ 621.061176][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.111791][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.163304][ T5797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 621.225223][ T5797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 621.287614][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.339212][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.349718][T10857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.371986][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.403944][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.436093][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.479591][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.537143][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.623228][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.667283][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.708997][ T5797] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 621.777564][ T5797] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.850095][ T5797] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 621.920799][ T5797] usb 3-1: USB disconnect, device number 15 [ 623.103718][T10586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.148781][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.295797][T10586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.383914][T10586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.430570][T10586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.545803][T10586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.716460][T10886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1287'. [ 624.405305][T10897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.015757][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.052792][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.154451][T10644] bridge_slave_0: entered allmulticast mode [ 625.308525][T10644] bridge_slave_0: entered promiscuous mode [ 625.551174][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.637857][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.710793][T10644] bridge_slave_1: entered allmulticast mode [ 626.010695][T10644] bridge_slave_1: entered promiscuous mode [ 626.785019][T10586] hsr_slave_0: entered promiscuous mode [ 626.807039][T10586] hsr_slave_1: entered promiscuous mode [ 626.829683][T10586] debugfs: 'hsr0' already exists in 'hsr' [ 626.844498][T10586] Cannot create hsr debugfs directory [ 626.886340][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.950605][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.315290][T10644] team0: Port device team_slave_0 added [ 627.355327][T10644] team0: Port device team_slave_1 added [ 627.850217][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.883190][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.999883][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.140669][T10928] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1295'. [ 628.174325][T10928] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1295'. [ 628.213776][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.246329][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.359225][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.711610][T10935] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 629.801166][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 629.812465][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 629.824206][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 629.834200][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 629.842218][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 630.483279][T10644] hsr_slave_0: entered promiscuous mode [ 630.502048][T10644] hsr_slave_1: entered promiscuous mode [ 630.520411][T10644] debugfs: 'hsr0' already exists in 'hsr' [ 630.542541][T10644] Cannot create hsr debugfs directory [ 630.643788][ T1158] bridge_slave_1: left allmulticast mode [ 630.670529][ T1158] bridge_slave_1: left promiscuous mode [ 630.694727][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.761359][ T1158] bridge_slave_0: left allmulticast mode [ 630.797063][ T1158] bridge_slave_0: left promiscuous mode [ 630.816055][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.199168][T10960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.038365][ T5622] Bluetooth: hci0: command tx timeout [ 632.383827][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.468965][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.885656][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.898832][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.917604][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.137472][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.153465][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.222007][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.252753][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.267020][ T1158] bond0 (unregistering): Released all slaves [ 633.270344][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 633.541223][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 633.562273][ T24] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 633.611337][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 633.639570][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 633.670344][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.690142][ T24] usb 7-1: Product: syz [ 633.707447][ T24] usb 7-1: Manufacturer: syz [ 633.722689][ T24] usb 7-1: SerialNumber: syz [ 633.766371][ T24] usb 7-1: config 0 descriptor?? [ 633.798983][ T1158] hsr_slave_0: left promiscuous mode [ 633.818010][ T1158] hsr_slave_1: left promiscuous mode [ 633.852673][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.874983][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.175943][ T24] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input16 [ 634.294513][ T5621] Bluetooth: hci0: command tx timeout [ 634.416008][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 634.441165][ T24] rc_core: IR keymap rc-imon-pad not found [ 634.460478][ T24] Registered IR keymap rc-empty [ 634.469066][ T24] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 634.483922][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 634.493690][ T24] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 634.566750][ T24] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 634.638395][ T24] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input17 [ 634.677254][ T24] imon 7-1:0.0: iMON device (15c2:0041, intf0) on usb<7:13> initialized [ 634.801304][ C1] imon 7-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 2, intf0) [ 635.097822][ C1] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 635.107360][ T24] usb 7-1: USB disconnect, device number 13 [ 635.420357][ T5621] Bluetooth: hci4: command tx timeout [ 636.951319][ T5621] Bluetooth: hci0: command tx timeout [ 637.670800][ T5621] Bluetooth: hci4: command tx timeout [ 638.005555][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1311'. [ 638.116528][T11042] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1311'. [ 639.144832][ T5621] Bluetooth: hci0: command tx timeout [ 639.936898][ T5621] Bluetooth: hci4: command tx timeout [ 642.140794][T10974] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.164030][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.181499][ T5621] Bluetooth: hci4: command tx timeout [ 642.185849][T10974] bridge_slave_0: entered allmulticast mode [ 642.210013][T10974] bridge_slave_0: entered promiscuous mode [ 642.230189][T10974] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.266016][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.275245][T10974] bridge_slave_1: entered allmulticast mode [ 642.295427][T10974] bridge_slave_1: entered promiscuous mode [ 642.970957][T10974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.039544][T10974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.154454][ T9629] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 643.340996][ T9629] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 643.361937][ T9629] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 643.398374][ T9629] usb 7-1: config 0 interface 0 has no altsetting 0 [ 643.416389][ T9629] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.426861][T10939] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.452458][T10939] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.455722][ T9629] usb 7-1: config 0 descriptor?? [ 643.469338][T10939] bridge_slave_0: entered allmulticast mode [ 643.487827][T11107] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 643.508868][T10939] bridge_slave_0: entered promiscuous mode [ 643.683237][T10939] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.721904][T10939] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.751233][T10939] bridge_slave_1: entered allmulticast mode [ 643.778564][T10939] bridge_slave_1: entered promiscuous mode [ 643.824136][T10586] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 643.871932][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 643.908209][T10586] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 643.944441][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.187676][T10586] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 644.202373][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.239328][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.247369][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.727835][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.738923][T10974] team0: Port device team_slave_0 added [ 644.761933][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.795503][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.832400][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.865488][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.865566][ T1158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.909276][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.940382][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 644.969138][ T9629] waterforce 0003:1044:7A4D.0004: unknown main item tag 0x0 [ 645.002406][ T9629] waterforce 0003:1044:7A4D.0004: unexpected long global item [ 645.035512][ T9629] waterforce 0003:1044:7A4D.0004: hid parse failed with -22 [ 645.072791][ T9629] waterforce 0003:1044:7A4D.0004: probe with driver waterforce failed with error -22 [ 645.109848][T10586] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 645.142264][T10586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.144879][ T9629] usb 7-1: USB disconnect, device number 14 [ 645.163228][T10974] team0: Port device team_slave_1 added [ 645.501178][T11137] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1320'. [ 645.627435][T11141] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1320'. [ 645.877323][ T1158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.659552][T10939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.674146][T10939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.684602][T10974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.716343][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.752006][T10974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.765751][T10974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.777580][T10974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.806810][T10974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.665308][ T1158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.662080][T10939] team0: Port device team_slave_0 added [ 649.826631][T10939] team0: Port device team_slave_1 added [ 650.327671][T10974] hsr_slave_0: entered promiscuous mode [ 650.342921][T10974] hsr_slave_1: entered promiscuous mode [ 650.350013][T10974] debugfs: 'hsr0' already exists in 'hsr' [ 650.356457][T10974] Cannot create hsr debugfs directory [ 650.477030][T10644] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 650.553589][T10644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.585791][T10644] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 650.618473][T10644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.615517][ T1158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.846340][T10644] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 651.894079][T10644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 652.121795][T10939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.149756][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.178514][T10939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.310859][T10644] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 652.369864][T10644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.414055][T10939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.452137][T10939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.520440][T10939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.481827][T11218] nbd0: detected capacity change from 0 to 127 [ 655.742260][ T5621] block nbd0: Receive control failed (result -32) [ 655.755320][ T9049] block nbd0: Send control failed (result -32) [ 655.762252][ T9049] block nbd0: Request send failed, requeueing [ 655.785829][ T9049] block nbd0: Dead connection, failed to find a fallback [ 655.796612][ T9049] block nbd0: shutting down sockets [ 655.803349][ T9049] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.817922][ T9049] Buffer I/O error on dev nbd0, logical block 0, async page read [ 655.875621][ T4934] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 655.891714][ T4934] Buffer I/O error on dev nbd0, logical block 1, async page read [ 655.899866][ T4934] Buffer I/O error on dev nbd0, logical block 2, async page read [ 655.907604][ T4934] Buffer I/O error on dev nbd0, logical block 3, async page read [ 656.105594][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.118294][ T4934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 656.127191][ T4934] Buffer I/O error on dev nbd0, logical block 1, async page read [ 656.136720][ T4934] Buffer I/O error on dev nbd0, logical block 2, async page read [ 656.147528][ T4934] Buffer I/O error on dev nbd0, logical block 3, async page read [ 656.158536][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.170299][ T4934] Buffer I/O error on dev nbd0, logical block 0, async page read [ 656.178258][ T4934] Buffer I/O error on dev nbd0, logical block 1, async page read [ 656.186404][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.196347][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.208804][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.221507][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.231506][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 656.242444][ T9089] ldm_validate_partition_table(): Disk read failed. [ 656.278932][ T4934] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.301084][ T9089] Dev nbd0: unable to read RDB block 0 [ 656.336903][ T9089] nbd0: unable to read partition table [ 657.015414][ T9089] ldm_validate_partition_table(): Disk read failed. [ 657.023479][ T9089] Dev nbd0: unable to read RDB block 0 [ 657.033881][T10939] hsr_slave_0: entered promiscuous mode [ 657.060119][ T9089] nbd0: unable to read partition table [ 657.069864][T10939] hsr_slave_1: entered promiscuous mode [ 657.109141][T10939] debugfs: 'hsr0' already exists in 'hsr' [ 657.129078][T10939] Cannot create hsr debugfs directory [ 657.157315][T11214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.235494][ T5268] 8021q: adding VLAN 0 to HW filter on device eth12 [ 659.594411][ T1158] bridge_slave_1: left allmulticast mode [ 659.627437][ T1158] bridge_slave_1: left promiscuous mode [ 659.656247][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.731632][ T1158] bridge_slave_0: left allmulticast mode [ 659.776842][ T1158] bridge_slave_0: left promiscuous mode [ 659.809541][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.969105][ T1158] bridge_slave_1: left allmulticast mode [ 660.022782][ T1158] bridge_slave_1: left promiscuous mode [ 660.070419][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.137262][ T1158] bridge_slave_0: left allmulticast mode [ 660.195512][ T1158] bridge_slave_0: left promiscuous mode [ 660.243677][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.778629][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 660.796056][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 660.814398][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 660.830578][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 660.852452][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.179963][T11247] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1344'. [ 662.259084][T11248] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1344'. [ 662.560120][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.642311][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.718995][ T1158] bond0 (unregistering): Released all slaves [ 663.074248][ T5622] Bluetooth: hci5: command tx timeout [ 664.106587][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.163497][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.227177][ T1158] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 664.303744][ T1158] bond0 (unregistering): Released all slaves [ 665.331141][ T5622] Bluetooth: hci5: command tx timeout [ 665.449189][ T5594] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 665.617140][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 665.630308][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 665.639514][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 665.667937][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 665.688513][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.690121][ T5594] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 665.833651][ T5594] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.891180][ T5594] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 665.948714][ T5594] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.970298][ T5594] usb 7-1: Product: syz [ 665.994379][ T5594] usb 7-1: Manufacturer: syz [ 666.016338][ T5594] usb 7-1: SerialNumber: syz [ 666.145223][T10974] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.759595][ T5594] speedtch 7-1:1.0: usbatm_usb_probe: invalid endpoint 07! [ 666.995146][ T5594] speedtch 7-1:1.0: probe with driver speedtch failed with error -22 [ 667.212041][ T5594] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 667.316178][ T5594] speedtch 7-1:1.1: probe with driver speedtch failed with error -71 [ 667.524919][ T5594] usb 7-1: USB disconnect, device number 15 [ 667.583552][ T5622] Bluetooth: hci5: command tx timeout [ 667.780583][T10974] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.016444][ T5622] Bluetooth: hci2: command tx timeout [ 668.529145][T10974] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.837388][ T5622] Bluetooth: hci5: command tx timeout [ 670.232199][T10974] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.270598][ T5622] Bluetooth: hci2: command tx timeout [ 670.454082][ T1158] hsr_slave_0: left promiscuous mode [ 670.495877][ T1158] hsr_slave_1: left promiscuous mode [ 670.524387][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.556570][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.634992][ T1158] hsr_slave_0: left promiscuous mode [ 670.675447][ T1158] hsr_slave_1: left promiscuous mode [ 670.711144][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.746062][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.791423][ T1158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.811756][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.889888][ T1158] veth1_macvtap: left promiscuous mode [ 670.919866][ T1158] veth0_macvtap: left promiscuous mode [ 670.944976][ T1158] veth1_vlan: left promiscuous mode [ 670.966166][ T1158] veth0_vlan: left promiscuous mode [ 672.476055][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 672.502289][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 672.557250][ T5622] Bluetooth: hci2: command tx timeout [ 673.383510][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 673.440843][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 674.578370][T10974] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 674.613519][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 674.764508][T10974] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 674.779823][ T5622] Bluetooth: hci2: command tx timeout [ 674.826120][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.330042][T10974] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 675.390234][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.510065][T10974] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 675.565737][T10974] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.188672][T10939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 678.163783][T10939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 678.261577][T10939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 678.466117][T10939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 678.498057][T10939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.053993][T10939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.537632][T10939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.597993][T10939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.644252][T11238] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.667331][T11238] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.699450][T11238] bridge_slave_0: entered allmulticast mode [ 679.726155][T11238] bridge_slave_0: entered promiscuous mode [ 679.789679][T11238] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.810495][T11238] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.829478][T11238] bridge_slave_1: entered allmulticast mode [ 679.845531][T11238] bridge_slave_1: entered promiscuous mode [ 680.294051][T11238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.420338][T11262] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.456894][T11262] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.487341][T11262] bridge_slave_0: entered allmulticast mode [ 680.511660][T11262] bridge_slave_0: entered promiscuous mode [ 680.766176][T11238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.796533][T11262] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.817377][T11262] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.842626][T11262] bridge_slave_1: entered allmulticast mode [ 680.877300][T11262] bridge_slave_1: entered promiscuous mode [ 682.467521][T11238] team0: Port device team_slave_0 added [ 682.479607][T11238] team0: Port device team_slave_1 added [ 682.493391][T11262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.574186][T11262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.599356][T11238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.609668][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.645598][T11238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.703779][T11238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.719257][T11238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.746958][T11238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.800016][T11262] team0: Port device team_slave_0 added [ 682.852688][T11262] team0: Port device team_slave_1 added [ 682.975345][T11262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.016574][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.107580][T11262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.422988][T11262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.473000][T11262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.580403][T11262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.689976][T11238] hsr_slave_0: entered promiscuous mode [ 683.717959][T11238] hsr_slave_1: entered promiscuous mode [ 685.071608][T11262] hsr_slave_0: entered promiscuous mode [ 685.088646][T11262] hsr_slave_1: entered promiscuous mode [ 685.111551][T11262] debugfs: 'hsr0' already exists in 'hsr' [ 685.129479][T11262] Cannot create hsr debugfs directory [ 687.399321][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1375'. [ 687.413833][T10974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.051925][T10939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.025979][T10974] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.026530][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.033691][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.253886][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.261247][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.323787][T10939] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.379997][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.387152][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.456544][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.463720][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.113899][ T31] audit: type=1326 audit(1787090158.832:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11427 comm="syz.7.1384" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9117b9e0d9 code=0x0 [ 692.277086][ T1158] bridge_slave_1: left allmulticast mode [ 692.303277][ T1158] bridge_slave_1: left promiscuous mode [ 692.335885][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.376567][ T1158] bridge_slave_0: left allmulticast mode [ 692.409620][ T1158] bridge_slave_0: left promiscuous mode [ 692.440870][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.522475][ T1158] bridge_slave_1: left allmulticast mode [ 692.534624][ T1158] bridge_slave_1: left promiscuous mode [ 692.551232][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.578701][ T1158] bridge_slave_0: left allmulticast mode [ 692.593019][ T1158] bridge_slave_0: left promiscuous mode [ 692.600820][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.082567][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1385'. [ 693.137151][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.248892][T11442] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1386'. [ 693.258211][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1386'. [ 695.118692][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.635013][ T1158] bond0 (unregistering): Released all slaves [ 696.237834][ T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 696.252135][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 696.264430][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 696.275734][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 696.286808][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 696.298718][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 696.412455][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 696.459312][ T24] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 696.485317][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 696.502153][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 696.526760][ T24] usb 7-1: Product: syz [ 696.536973][ T24] usb 7-1: Manufacturer: syz [ 696.575294][ T1158] bond0 (unregistering): Released all slaves [ 697.007727][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 697.024385][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 697.037573][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 697.052679][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 697.066720][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 698.400863][ T24] msi2500 7-1:1.0: Registered as swradio24 [ 698.431547][ T24] msi2500 7-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 698.539261][ T5622] Bluetooth: hci3: command tx timeout [ 698.751593][ T24] usb 7-1: USB disconnect, device number 16 [ 698.984898][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.012300][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 699.351666][ T5622] Bluetooth: hci7: command tx timeout [ 699.628950][ T1158] hsr_slave_0: left promiscuous mode [ 699.735948][ T1158] hsr_slave_1: left promiscuous mode [ 699.759705][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.806691][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.854694][T11477] random: crng reseeded on system resumption [ 699.863343][ T1158] hsr_slave_0: left promiscuous mode [ 699.898832][ T1158] hsr_slave_1: left promiscuous mode [ 699.910330][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.983619][T11484] jffs2: notice: (11484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 700.235533][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.789573][ T5622] Bluetooth: hci3: command tx timeout [ 701.282607][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 701.324665][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 701.570218][ T5622] Bluetooth: hci7: command tx timeout [ 701.987328][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 702.065108][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 703.050416][ T5622] Bluetooth: hci3: command tx timeout [ 703.064484][ T31] audit: type=1326 audit(1787090168.935:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11498 comm="syz.6.1394" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f65f9e0d9 code=0x0 [ 703.829833][ T5622] Bluetooth: hci7: command tx timeout [ 704.549871][T11521] sctp: [Deprecated]: syz.7.1396 (pid 11521) Use of int in max_burst socket option deprecated. [ 704.549871][T11521] Use struct sctp_assoc_value instead [ 705.026500][T11520] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1396'. [ 705.048232][T11520] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 705.321288][ T5622] Bluetooth: hci3: command tx timeout [ 705.815017][ T31] audit: type=1800 audit(1787090171.463:8): pid=11529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1398" name="iface_name" dev="configfs" ino=32468 res=0 errno=0 [ 706.078825][ T5622] Bluetooth: hci7: command tx timeout [ 706.667333][T11544] comedi comedi0: Minor -4 is invalid! [ 707.852638][T11238] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 707.933299][T11238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.923825][T11238] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 708.949437][T11238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.957564][T11238] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 708.973083][T11238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.153426][T11238] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 710.189895][T11238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.353178][T11462] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.386184][T11462] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.425429][T11462] bridge_slave_0: entered allmulticast mode [ 711.469197][T11462] bridge_slave_0: entered promiscuous mode [ 713.763625][T11462] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.793675][T11462] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.831319][T11462] bridge_slave_1: entered allmulticast mode [ 713.866125][T11462] bridge_slave_1: entered promiscuous mode [ 714.849859][T11462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.008032][T11462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.078826][T11451] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.106970][T11451] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.122750][T11451] bridge_slave_0: entered allmulticast mode [ 715.144626][T11451] bridge_slave_0: entered promiscuous mode [ 715.423193][T11451] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.452245][T11451] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.492339][T11451] bridge_slave_1: entered allmulticast mode [ 715.539751][ T31] audit: type=1326 audit(1787090180.441:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11614 comm="syz.6.1408" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f65f9e0d9 code=0x0 [ 715.589762][T11451] bridge_slave_1: entered promiscuous mode [ 715.732752][T11462] team0: Port device team_slave_0 added [ 716.817075][T11462] team0: Port device team_slave_1 added [ 716.927941][T11451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.083633][T11451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.381741][T11462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.405417][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.436956][T11462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.471650][T11462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.479615][T11462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.506655][T11462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.906937][T11451] team0: Port device team_slave_0 added [ 718.994839][T11451] team0: Port device team_slave_1 added [ 719.303720][T11451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.314338][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.343115][T11451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.383251][T11451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.406572][T11451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.445020][T11451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.484112][T11462] hsr_slave_0: entered promiscuous mode [ 719.499214][T11462] hsr_slave_1: entered promiscuous mode [ 719.518255][T11462] debugfs: 'hsr0' already exists in 'hsr' [ 719.525705][T11462] Cannot create hsr debugfs directory [ 719.541434][T11262] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 719.565287][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.583477][T11262] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 719.608490][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.757064][T11262] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 719.791343][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 719.813434][T11262] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 719.868595][T11262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.257874][T11238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.067964][T11451] hsr_slave_0: entered promiscuous mode [ 721.086162][T11451] hsr_slave_1: entered promiscuous mode [ 721.107808][T11451] debugfs: 'hsr0' already exists in 'hsr' [ 721.158311][T11451] Cannot create hsr debugfs directory [ 722.474926][T11668] lo speed is unknown, defaulting to 1000 [ 722.480997][T11668] lo speed is unknown, defaulting to 1000 [ 722.649350][T11668] lo speed is unknown, defaulting to 1000 [ 722.674622][T11668] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 722.713408][T11668] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 722.757688][T11668] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 722.953756][T11238] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.980386][T11668] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 723.844544][T11668] lo speed is unknown, defaulting to 1000 [ 723.980456][T11668] lo speed is unknown, defaulting to 1000 [ 723.994764][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 724.027809][ T31] audit: type=1326 audit(1787090188.284:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.6.1421" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f65f9e0d9 code=0x0 [ 724.138490][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.145664][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.237209][T11668] lo speed is unknown, defaulting to 1000 [ 724.520396][T11668] lo speed is unknown, defaulting to 1000 [ 724.590052][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.597193][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.705116][T11668] lo speed is unknown, defaulting to 1000 [ 724.875254][T11668] lo speed is unknown, defaulting to 1000 [ 725.045383][T11668] lo speed is unknown, defaulting to 1000 [ 725.098484][ T1158] bridge_slave_1: left allmulticast mode [ 725.117054][ T1158] bridge_slave_1: left promiscuous mode [ 725.137226][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.169806][ T1158] bridge_slave_0: left allmulticast mode [ 725.180924][ T1158] bridge_slave_0: left promiscuous mode [ 725.205588][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.298779][ T1158] bridge_slave_1: left allmulticast mode [ 725.320178][ T1158] bridge_slave_1: left promiscuous mode [ 725.336534][ T1158] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.386200][ T1158] bridge_slave_0: left allmulticast mode [ 725.403685][ T1158] bridge_slave_0: left promiscuous mode [ 725.414657][ T1158] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.197978][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.262816][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.300920][ T1158] bond0 (unregistering): Released all slaves [ 726.449479][T11710] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 726.591234][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 726.608654][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 726.621029][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 726.633110][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.648737][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 726.787415][ T1158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.841350][ T1158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.880367][ T1158] bond0 (unregistering): Released all slaves [ 726.919895][T11668] lo speed is unknown, defaulting to 1000 [ 726.926127][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 727.077227][T11668] lo speed is unknown, defaulting to 1000 [ 727.737748][ T1158] hsr_slave_0: left promiscuous mode [ 727.772038][ T1158] hsr_slave_1: left promiscuous mode [ 727.793111][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.825002][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.879559][ T1158] hsr_slave_0: left promiscuous mode [ 727.894906][ T1158] hsr_slave_1: left promiscuous mode [ 727.916058][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.930709][ T1158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.768158][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 728.834327][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 728.881214][ T5621] Bluetooth: hci0: command tx timeout [ 729.570602][ T1158] team0 (unregistering): Port device team_slave_1 removed [ 729.599707][ T1158] team0 (unregistering): Port device team_slave_0 removed [ 730.901101][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 731.134643][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 731.143075][ T5638] Bluetooth: hci0: command tx timeout [ 731.181053][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 731.219187][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 731.292096][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 731.324397][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 733.395976][ T5621] Bluetooth: hci0: command tx timeout [ 733.740863][ T5621] Bluetooth: hci4: command tx timeout [ 733.913294][T11711] lo speed is unknown, defaulting to 1000 [ 734.107328][T11680] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 734.495834][T11680] usb 7-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 735.904058][ T5621] Bluetooth: hci0: command tx timeout [ 735.976345][T11680] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 735.990900][ T5622] Bluetooth: hci4: command tx timeout [ 736.098463][T11680] usb 7-1: config 0 interface 0 has no altsetting 0 [ 736.176128][T11754] lo speed is unknown, defaulting to 1000 [ 736.185677][T11680] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.264145][T11680] usb 7-1: config 0 descriptor?? [ 737.113617][ T5268] 8021q: adding VLAN 0 to HW filter on device eth17 [ 737.909798][T11462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 737.960795][T11462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 737.995250][T11462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 738.027834][T11462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.181867][T11711] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.190490][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.201067][T11711] bridge_slave_0: entered allmulticast mode [ 738.211037][T11711] bridge_slave_0: entered promiscuous mode [ 738.232172][T11711] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.245455][ T5622] Bluetooth: hci4: command tx timeout [ 738.265409][T11711] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.277533][T11711] bridge_slave_1: entered allmulticast mode [ 738.286702][T11711] bridge_slave_1: entered promiscuous mode [ 738.316595][T11680] usbhid 7-1:0.0: can't add hid device: -71 [ 738.339060][T11680] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 738.339342][T11462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 738.408756][T11680] usb 7-1: USB disconnect, device number 17 [ 738.413299][T11462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.469075][T11462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 738.537520][T11462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.030726][T11711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.506946][ T5622] Bluetooth: hci4: command tx timeout [ 741.018063][ T5268] 8021q: adding VLAN 0 to HW filter on device eth18 [ 741.075442][T11711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.485345][T11680] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 742.496448][T11711] team0: Port device team_slave_0 added [ 742.740731][T11680] usb 7-1: Using ep0 maxpacket: 32 [ 742.747326][T11680] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 742.758773][T11680] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 742.766985][T11680] usb 7-1: config 0 has no interface number 0 [ 742.780092][T11680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.788598][T11680] usb 7-1: Product: syz [ 742.792795][T11680] usb 7-1: Manufacturer: syz [ 742.799215][T11680] usb 7-1: SerialNumber: syz [ 742.811360][T11680] usb 7-1: config 0 descriptor?? [ 743.559584][T11680] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 743.627234][T11680] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 743.683680][T11680] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 743.780804][T11711] team0: Port device team_slave_1 added [ 744.291140][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 744.301782][ T5797] usb 7-1: USB disconnect, device number 18 [ 744.408417][ T5797] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 744.755588][ T5797] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 745.017882][ T5797] quatech2 7-1:0.51: device disconnected [ 745.454608][T11711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.483508][T11711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.615517][T11711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.658896][T11875] smpboot: CPU 1 is now offline [ 746.180249][T11876] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 746.228837][T11711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.258547][T11746] ------------[ cut here ]------------ [ 746.259415][T11746] [ 746.259422][T11746] ====================================================== [ 746.259431][T11746] WARNING: possible circular locking dependency detected [ 746.259444][T11746] syzkaller #0 Tainted: G L [ 746.259456][T11746] ------------------------------------------------------ [ 746.259464][T11746] syz.6.1427/11746 is trying to acquire lock: [ 746.259476][T11746] ffffffff8eb4c040 (console_owner){..-.}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 746.259533][T11746] [ 746.259533][T11746] but task is already holding lock: [ 746.259541][T11746] ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 746.259596][T11746] [ 746.259596][T11746] which lock already depends on the new lock. [ 746.259596][T11746] [ 746.259604][T11746] [ 746.259604][T11746] the existing dependency chain (in reverse order) is: [ 746.259612][T11746] [ 746.259612][T11746] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 746.259642][T11746] _raw_spin_lock_nested+0x32/0x50 [ 746.259676][T11746] raw_spin_rq_lock_nested+0x2d/0x160 [ 746.259701][T11746] _task_rq_lock+0xc0/0x440 [ 746.259726][T11746] cgroup_move_task+0x9a/0x350 [ 746.259759][T11746] css_set_move_task+0x62d/0x820 [ 746.259791][T11746] cgroup_post_fork+0x209/0x9b0 [ 746.259821][T11746] copy_process+0x4062/0x43e0 [ 746.259844][T11746] kernel_clone+0x2d7/0x940 [ 746.259870][T11746] rest_init+0xbf/0x3a0 [ 746.259892][T11746] start_kernel+0x392/0x3e0 [ 746.259926][T11746] x86_64_start_reservations+0x24/0x30 [ 746.259953][T11746] x86_64_start_kernel+0x137/0x1b0 [ 746.259979][T11746] common_startup_64+0x13e/0x157 [ 746.260002][T11746] [ 746.260002][T11746] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 746.260032][T11746] _raw_spin_lock_irqsave+0x40/0x60 [ 746.260061][T11746] try_to_wake_up+0x67/0x14d0 [ 746.260093][T11746] __wake_up_common_lock+0x13a/0x1f0 [ 746.260115][T11746] pty_unthrottle+0x3c/0x60 [ 746.260140][T11746] tty_unthrottle_safe+0x111/0x160 [ 746.260163][T11746] n_tty_receive_buf_common+0x100c/0x13d0 [ 746.260185][T11746] tty_port_default_receive_buf+0x6e/0xa0 [ 746.260218][T11746] flush_to_ldisc+0x247/0x6c0 [ 746.260246][T11746] process_scheduled_works+0xa8e/0x14e0 [ 746.260270][T11746] worker_thread+0xa47/0xfb0 [ 746.260293][T11746] kthread+0x388/0x470 [ 746.260321][T11746] ret_from_fork+0x514/0xb70 [ 746.260351][T11746] ret_from_fork_asm+0x1a/0x30 [ 746.260384][T11746] [ 746.260384][T11746] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 746.260419][T11746] _raw_spin_lock_irqsave+0x40/0x60 [ 746.260447][T11746] __wake_up_common_lock+0x30/0x1f0 [ 746.260469][T11746] tty_port_default_wakeup+0xc8/0x100 [ 746.260500][T11746] serial8250_tx_chars+0x70e/0x950 [ 746.260529][T11746] serial8250_handle_irq+0x166/0x550 [ 746.260557][T11746] serial8250_default_handle_irq+0xbf/0x1e0 [ 746.260591][T11746] serial8250_interrupt+0x8d/0x160 [ 746.260615][T11746] __handle_irq_event_percpu+0x216/0x9a0 [ 746.260639][T11746] handle_irq_event+0x8b/0x1e0 [ 746.260662][T11746] handle_edge_irq+0x1f4/0x8a0 [ 746.260681][T11746] __common_interrupt+0x141/0x1f0 [ 746.260709][T11746] common_interrupt+0xb6/0xe0 [ 746.260733][T11746] asm_common_interrupt+0x26/0x40 [ 746.260755][T11746] pv_native_safe_halt+0xf/0x20 [ 746.260787][T11746] default_idle+0x9/0x20 [ 746.260806][T11746] default_idle_call+0x72/0xb0 [ 746.260828][T11746] do_idle+0x1cc/0x540 [ 746.260854][T11746] cpu_startup_entry+0x43/0x60 [ 746.260881][T11746] start_secondary+0x101/0x110 [ 746.260909][T11746] common_startup_64+0x13e/0x157 [ 746.260931][T11746] [ 746.260931][T11746] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 746.260961][T11746] _raw_spin_lock_irqsave+0x40/0x60 [ 746.260990][T11746] serial8250_console_write+0x153/0x1ba0 [ 746.261021][T11746] console_flush_all+0x6ea/0xaf0 [ 746.261042][T11746] console_unlock+0xd1/0x1c0 [ 746.261076][T11746] vprintk_emit+0x485/0x560 [ 746.261109][T11746] _printk+0xdd/0x130 [ 746.261129][T11746] register_console+0xbc3/0xfc0 [ 746.261151][T11746] univ8250_console_init+0x3a/0x70 [ 746.261186][T11746] console_init+0x10b/0x4a0 [ 746.261214][T11746] start_kernel+0x238/0x3e0 [ 746.261247][T11746] x86_64_start_reservations+0x24/0x30 [ 746.261275][T11746] x86_64_start_kernel+0x137/0x1b0 [ 746.261301][T11746] common_startup_64+0x13e/0x157 [ 746.261324][T11746] [ 746.261324][T11746] -> #0 (console_owner){..-.}-{0:0}: [ 746.261354][T11746] __lock_acquire+0x1520/0x2cf0 [ 746.261382][T11746] lock_acquire+0x106/0x350 [ 746.261416][T11746] console_flush_all+0x693/0xaf0 [ 746.261437][T11746] console_unlock+0xd1/0x1c0 [ 746.261470][T11746] vprintk_emit+0x485/0x560 [ 746.261503][T11746] _printk+0xdd/0x130 [ 746.261522][T11746] __report_bug+0x349/0x570 [ 746.261555][T11746] report_bug+0x16a/0x220 [ 746.261588][T11746] handle_bug+0x9c/0x200 [ 746.261608][T11746] exc_invalid_op+0x1a/0x50 [ 746.261629][T11746] asm_exc_invalid_op+0x1a/0x20 [ 746.261650][T11746] update_rq_clock+0x34d/0x560 [ 746.261676][T11746] __schedule+0x388e/0x56c0 [ 746.261704][T11746] preempt_schedule_common+0x82/0xd0 [ 746.261735][T11746] preempt_schedule_thunk+0x16/0x40 [ 746.261758][T11746] _raw_spin_unlock+0x3f/0x50 [ 746.261785][T11746] filemap_remove_folio+0x1b4/0x3a0 [ 746.261816][T11746] truncate_inode_folio+0x5d/0x70 [ 746.261844][T11746] shmem_undo_range+0x3fb/0x15d0 [ 746.261877][T11746] shmem_evict_inode+0x280/0xa80 [ 746.261902][T11746] evict+0x624/0xb50 [ 746.261924][T11746] dentry_kill+0x1b9/0x880 [ 746.261948][T11746] finish_dput+0x1a/0x260 [ 746.261978][T11746] __fput+0x675/0xa50 [ 746.262005][T11746] task_work_run+0x1d9/0x270 [ 746.262036][T11746] do_exit+0x73a/0x2360 [ 746.262066][T11746] do_group_exit+0x22d/0x2f0 [ 746.262097][T11746] get_signal+0x121b/0x12c0 [ 746.262119][T11746] arch_do_signal_or_restart+0xbb/0x860 [ 746.262145][T11746] irqentry_exit+0x2ba/0x910 [ 746.262178][T11746] asm_exc_page_fault+0x26/0x30 [ 746.262198][T11746] [ 746.262198][T11746] other info that might help us debug this: [ 746.262198][T11746] [ 746.262206][T11746] Chain exists of: [ 746.262206][T11746] console_owner --> &p->pi_lock --> &rq->__lock [ 746.262206][T11746] [ 746.262242][T11746] Possible unsafe locking scenario: [ 746.262242][T11746] [ 746.262248][T11746] CPU0 CPU1 [ 746.262256][T11746] ---- ---- [ 746.262263][T11746] lock(&rq->__lock); [ 746.262277][T11746] lock(&p->pi_lock); [ 746.262294][T11746] lock(&rq->__lock); [ 746.262311][T11746] lock(console_owner); [ 746.262326][T11746] [ 746.262326][T11746] *** DEADLOCK *** [ 746.262326][T11746] [ 746.262332][T11746] 3 locks held by syz.6.1427/11746: [ 746.262346][T11746] #0: ffff8880b863b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 746.262408][T11746] #1: ffffffff8eb4c0a0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 746.262460][T11746] #2: ffffffff8ea33938 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 746.262513][T11746] [ 746.262513][T11746] stack backtrace: [ 746.262527][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.6.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.262557][T11746] Tainted: [L]=SOFTLOCKUP [ 746.262565][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 746.262579][T11746] Call Trace: [ 746.262587][T11746] [ 746.262596][T11746] dump_stack_lvl+0xe8/0x150 [ 746.262628][T11746] print_circular_bug+0x2e1/0x300 [ 746.262667][T11746] check_noncircular+0x12e/0x150 [ 746.262708][T11746] __lock_acquire+0x1520/0x2cf0 [ 746.262752][T11746] ? console_flush_all+0x123/0xaf0 [ 746.262775][T11746] lock_acquire+0x106/0x350 [ 746.262804][T11746] ? console_flush_all+0x123/0xaf0 [ 746.262829][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.262858][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.262884][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 746.262909][T11746] ? console_flush_all+0x123/0xaf0 [ 746.262933][T11746] console_flush_all+0x693/0xaf0 [ 746.262956][T11746] ? console_flush_all+0x123/0xaf0 [ 746.262982][T11746] ? console_flush_all+0x123/0xaf0 [ 746.263008][T11746] ? __pfx_console_flush_all+0x10/0x10 [ 746.263033][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.263060][T11746] ? is_printk_cpu_sync_owner+0x32/0x40 [ 746.263090][T11746] console_unlock+0xd1/0x1c0 [ 746.263126][T11746] ? __pfx_console_unlock+0x10/0x10 [ 746.263161][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.263187][T11746] ? _raw_spin_unlock_irqrestore+0x20/0x80 [ 746.263220][T11746] ? _printk+0xdd/0x130 [ 746.263242][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.263271][T11746] vprintk_emit+0x485/0x560 [ 746.263308][T11746] ? __pfx_vprintk_emit+0x10/0x10 [ 746.263349][T11746] _printk+0xdd/0x130 [ 746.263370][T11746] ? kernel_text_address+0xa5/0xe0 [ 746.263412][T11746] ? __pfx__printk+0x10/0x10 [ 746.263432][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.263463][T11746] ? find_bug+0xa5/0x370 [ 746.263496][T11746] ? update_rq_clock+0x34d/0x560 [ 746.263522][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.263550][T11746] ? update_rq_clock+0x34d/0x560 [ 746.263578][T11746] __report_bug+0x349/0x570 [ 746.263612][T11746] ? __pfx_stack_trace_save+0x10/0x10 [ 746.263641][T11746] ? update_rq_clock+0x34d/0x560 [ 746.263669][T11746] ? __pfx___report_bug+0x10/0x10 [ 746.263704][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.263730][T11746] ? __lock_acquire+0x683/0x2cf0 [ 746.263762][T11746] ? kasan_save_stack+0x3e/0x60 [ 746.263790][T11746] ? kasan_record_aux_stack+0xbd/0xd0 [ 746.263812][T11746] ? call_rcu+0xee/0x8b0 [ 746.263847][T11746] ? xas_store+0xe61/0x17f0 [ 746.263865][T11746] ? __filemap_remove_folio+0x3e8/0x530 [ 746.263897][T11746] ? filemap_remove_folio+0xf1/0x3a0 [ 746.263928][T11746] ? truncate_inode_folio+0x5d/0x70 [ 746.263957][T11746] ? shmem_undo_range+0x3fb/0x15d0 [ 746.263990][T11746] ? shmem_evict_inode+0x280/0xa80 [ 746.264017][T11746] ? evict+0x624/0xb50 [ 746.264039][T11746] ? finish_dput+0x1a/0x260 [ 746.264070][T11746] ? __fput+0x675/0xa50 [ 746.264097][T11746] ? task_work_run+0x1d9/0x270 [ 746.264131][T11746] ? update_rq_clock+0x34d/0x560 [ 746.264158][T11746] report_bug+0x16a/0x220 [ 746.264193][T11746] ? update_rq_clock+0x34d/0x560 [ 746.264219][T11746] ? update_rq_clock+0x34f/0x560 [ 746.264245][T11746] handle_bug+0x9c/0x200 [ 746.264269][T11746] exc_invalid_op+0x1a/0x50 [ 746.264292][T11746] asm_exc_invalid_op+0x1a/0x20 [ 746.264314][T11746] RIP: 0010:update_rq_clock+0x34d/0x560 [ 746.264343][T11746] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 cb 28 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 20 bd 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 746.264362][T11746] RSP: 0018:ffffc90003ea6ff8 EFLAGS: 00010046 [ 746.264392][T11746] RAX: 0000000000000000 RBX: ffff8880b873b300 RCX: 0000000000000002 [ 746.264412][T11746] RDX: 0000000000000000 RSI: ffffffff8e4b3e80 RDI: ffffffff8c4bdc80 [ 746.264428][T11746] RBP: dffffc0000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 746.264446][T11746] R10: dffffc0000000000 R11: ffffffff819fdfa0 R12: ffff8880292d65a8 [ 746.264463][T11746] R13: dffffc0000000001 R14: ffff8880b873c1c8 R15: ffff8880b873b300 [ 746.264483][T11746] ? __pfx_pick_task_stop+0x10/0x10 [ 746.264516][T11746] ? update_rq_clock+0x8f/0x560 [ 746.264541][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.264571][T11746] __schedule+0x388e/0x56c0 [ 746.264617][T11746] ? __pfx___schedule+0x10/0x10 [ 746.264649][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.264675][T11746] ? lockdep_hardirqs_on+0x7a/0x110 [ 746.264710][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.264736][T11746] ? irqentry_exit+0x218/0x910 [ 746.264771][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.264801][T11746] ? preempt_schedule_thunk+0x16/0x40 [ 746.264826][T11746] preempt_schedule_common+0x82/0xd0 [ 746.264860][T11746] preempt_schedule_thunk+0x16/0x40 [ 746.264887][T11746] _raw_spin_unlock+0x3f/0x50 [ 746.264917][T11746] filemap_remove_folio+0x1b4/0x3a0 [ 746.264952][T11746] truncate_inode_folio+0x5d/0x70 [ 746.264982][T11746] shmem_undo_range+0x3fb/0x15d0 [ 746.265024][T11746] ? __pfx_shmem_undo_range+0x10/0x10 [ 746.265071][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265115][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265141][T11746] ? __lock_acquire+0x683/0x2cf0 [ 746.265174][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265201][T11746] ? stack_trace_save+0xa9/0x100 [ 746.265229][T11746] shmem_evict_inode+0x280/0xa80 [ 746.265257][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265287][T11746] ? inode_wait_for_writeback+0x16d/0x3b0 [ 746.265313][T11746] ? __pfx_shmem_evict_inode+0x10/0x10 [ 746.265341][T11746] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 746.265366][T11746] ? do_raw_spin_lock+0x12b/0x2f0 [ 746.265391][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265422][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265451][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265477][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 746.265503][T11746] ? __pfx_shmem_evict_inode+0x10/0x10 [ 746.265530][T11746] evict+0x624/0xb50 [ 746.265559][T11746] ? __pfx_evict+0x10/0x10 [ 746.265583][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265609][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 746.265635][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.265661][T11746] ? _raw_spin_unlock+0x28/0x50 [ 746.265691][T11746] ? iput+0xb84/0xf00 [ 746.265725][T11746] dentry_kill+0x1b9/0x880 [ 746.265753][T11746] finish_dput+0x1a/0x260 [ 746.265787][T11746] __fput+0x675/0xa50 [ 746.265820][T11746] task_work_run+0x1d9/0x270 [ 746.265855][T11746] ? __pfx_task_work_run+0x10/0x10 [ 746.265889][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 746.265918][T11746] do_exit+0x73a/0x2360 [ 746.265954][T11746] ? __pfx_do_exit+0x10/0x10 [ 746.265986][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 746.266013][T11746] ? proc_coredump_connector+0x187/0x4e0 [ 746.266050][T11746] do_group_exit+0x22d/0x2f0 [ 746.266083][T11746] ? _raw_spin_unlock_irq+0x23/0x50 [ 746.266116][T11746] get_signal+0x121b/0x12c0 [ 746.266151][T11746] arch_do_signal_or_restart+0xbb/0x860 [ 746.266181][T11746] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.266222][T11746] irqentry_exit+0x2ba/0x910 [ 746.266256][T11746] ? trace_irq_disable+0x3b/0x140 [ 746.266286][T11746] asm_exc_page_fault+0x26/0x30 [ 746.266308][T11746] RIP: 0033:0x7f2f65f9e0e1 [ 746.266327][T11746] Code: Unable to access opcode bytes at 0x7f2f65f9e0b7. [ 746.266338][T11746] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 746.266357][T11746] RAX: 0000000000000000 RBX: 00007f2f66226090 RCX: 00007f2f65f9e0d9 [ 746.266373][T11746] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 746.266388][T11746] RBP: 00007f2f66035024 R08: 0000000000000000 R09: 0000000000000000 [ 746.266406][T11746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 746.266420][T11746] R13: 00007f2f66226128 R14: 00007f2f66226090 R15: 00007ffdb8d332c8 [ 746.266446][T11746] [ 747.728931][T11746] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 747.728951][T11746] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x34d/0x560, CPU#0: syz.6.1427/11746 [ 747.746875][T11746] Modules linked in: [ 747.750777][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.6.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.761710][T11746] Tainted: [L]=SOFTLOCKUP [ 747.766017][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 747.776065][T11746] RIP: 0010:update_rq_clock+0x34d/0x560 [ 747.781615][T11746] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 cb 28 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 20 bd 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 747.801217][T11746] RSP: 0018:ffffc90003ea6ff8 EFLAGS: 00010046 [ 747.807281][T11746] RAX: 0000000000000000 RBX: ffff8880b873b300 RCX: 0000000000000002 [ 747.815240][T11746] RDX: 0000000000000000 RSI: ffffffff8e4b3e80 RDI: ffffffff8c4bdc80 [ 747.823205][T11746] RBP: dffffc0000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 747.831171][T11746] R10: dffffc0000000000 R11: ffffffff819fdfa0 R12: ffff8880292d65a8 [ 747.839135][T11746] R13: dffffc0000000001 R14: ffff8880b873c1c8 R15: ffff8880b873b300 [ 747.847097][T11746] FS: 0000000000000000(0000) GS:ffff888124f3f000(0000) knlGS:0000000000000000 [ 747.856013][T11746] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.862589][T11746] CR2: 00007f9118b23ff8 CR3: 0000000077960000 CR4: 0000000000350ef0 [ 747.870556][T11746] Call Trace: [ 747.873824][T11746] [ 747.876742][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.882377][T11746] __schedule+0x388e/0x56c0 [ 747.886900][T11746] ? __pfx___schedule+0x10/0x10 [ 747.891748][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.897374][T11746] ? lockdep_hardirqs_on+0x7a/0x110 [ 747.902582][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.908218][T11746] ? irqentry_exit+0x218/0x910 [ 747.913071][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.918703][T11746] ? preempt_schedule_thunk+0x16/0x40 [ 747.924071][T11746] preempt_schedule_common+0x82/0xd0 [ 747.929360][T11746] preempt_schedule_thunk+0x16/0x40 [ 747.934554][T11746] _raw_spin_unlock+0x3f/0x50 [ 747.939229][T11746] filemap_remove_folio+0x1b4/0x3a0 [ 747.944431][T11746] truncate_inode_folio+0x5d/0x70 [ 747.949454][T11746] shmem_undo_range+0x3fb/0x15d0 [ 747.954400][T11746] ? __pfx_shmem_undo_range+0x10/0x10 [ 747.959786][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.965430][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.971054][T11746] ? __lock_acquire+0x683/0x2cf0 [ 747.975992][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.981617][T11746] ? stack_trace_save+0xa9/0x100 [ 747.986551][T11746] shmem_evict_inode+0x280/0xa80 [ 747.991487][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 747.997120][T11746] ? inode_wait_for_writeback+0x16d/0x3b0 [ 748.002836][T11746] ? __pfx_shmem_evict_inode+0x10/0x10 [ 748.008289][T11746] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 748.014349][T11746] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.019370][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.024998][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.030627][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.036255][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 748.041363][T11746] ? __pfx_shmem_evict_inode+0x10/0x10 [ 748.046819][T11746] evict+0x624/0xb50 [ 748.050713][T11746] ? __pfx_evict+0x10/0x10 [ 748.055120][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.060745][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 748.065850][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.071514][T11746] ? _raw_spin_unlock+0x28/0x50 [ 748.076363][T11746] ? iput+0xb84/0xf00 [ 748.080350][T11746] dentry_kill+0x1b9/0x880 [ 748.084765][T11746] finish_dput+0x1a/0x260 [ 748.089095][T11746] __fput+0x675/0xa50 [ 748.093075][T11746] task_work_run+0x1d9/0x270 [ 748.097666][T11746] ? __pfx_task_work_run+0x10/0x10 [ 748.102783][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 748.107899][T11746] do_exit+0x73a/0x2360 [ 748.112062][T11746] ? __pfx_do_exit+0x10/0x10 [ 748.116652][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.122366][T11746] ? proc_coredump_connector+0x187/0x4e0 [ 748.128005][T11746] do_group_exit+0x22d/0x2f0 [ 748.132597][T11746] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.137800][T11746] get_signal+0x121b/0x12c0 [ 748.142314][T11746] arch_do_signal_or_restart+0xbb/0x860 [ 748.147858][T11746] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.154027][T11746] irqentry_exit+0x2ba/0x910 [ 748.158655][T11746] ? trace_irq_disable+0x3b/0x140 [ 748.163684][T11746] asm_exc_page_fault+0x26/0x30 [ 748.168528][T11746] RIP: 0033:0x7f2f65f9e0e1 [ 748.172931][T11746] Code: Unable to access opcode bytes at 0x7f2f65f9e0b7. [ 748.179929][T11746] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 748.185984][T11746] RAX: 0000000000000000 RBX: 00007f2f66226090 RCX: 00007f2f65f9e0d9 [ 748.193942][T11746] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 748.201904][T11746] RBP: 00007f2f66035024 R08: 0000000000000000 R09: 0000000000000000 [ 748.209862][T11746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.217821][T11746] R13: 00007f2f66226128 R14: 00007f2f66226090 R15: 00007ffdb8d332c8 [ 748.225792][T11746] [ 748.228796][T11746] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 748.236070][T11746] CPU: 0 UID: 0 PID: 11746 Comm: syz.6.1427 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.247022][T11746] Tainted: [L]=SOFTLOCKUP [ 748.251330][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 748.261368][T11746] Call Trace: [ 748.264633][T11746] [ 748.267559][T11746] vpanic+0x56c/0xa60 [ 748.271548][T11746] ? __pfx__printk+0x10/0x10 [ 748.276129][T11746] ? __pfx_vpanic+0x10/0x10 [ 748.280636][T11746] ? is_bpf_text_address+0x292/0x2b0 [ 748.285929][T11746] ? is_bpf_text_address+0x26/0x2b0 [ 748.291135][T11746] panic+0xc5/0xd0 [ 748.294857][T11746] ? __pfx_panic+0x10/0x10 [ 748.299284][T11746] __warn+0x315/0x4c0 [ 748.303264][T11746] ? update_rq_clock+0x34d/0x560 [ 748.308202][T11746] ? update_rq_clock+0x34d/0x560 [ 748.313163][T11746] __report_bug+0x276/0x570 [ 748.317673][T11746] ? __pfx_stack_trace_save+0x10/0x10 [ 748.323044][T11746] ? update_rq_clock+0x34d/0x560 [ 748.327981][T11746] ? __pfx___report_bug+0x10/0x10 [ 748.333009][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.338634][T11746] ? __lock_acquire+0x683/0x2cf0 [ 748.343574][T11746] ? kasan_save_stack+0x3e/0x60 [ 748.348422][T11746] ? kasan_record_aux_stack+0xbd/0xd0 [ 748.353782][T11746] ? call_rcu+0xee/0x8b0 [ 748.358028][T11746] ? xas_store+0xe61/0x17f0 [ 748.362530][T11746] ? __filemap_remove_folio+0x3e8/0x530 [ 748.368075][T11746] ? filemap_remove_folio+0xf1/0x3a0 [ 748.373400][T11746] ? truncate_inode_folio+0x5d/0x70 [ 748.378601][T11746] ? shmem_undo_range+0x3fb/0x15d0 [ 748.383718][T11746] ? shmem_evict_inode+0x280/0xa80 [ 748.388834][T11746] ? evict+0x624/0xb50 [ 748.392905][T11746] ? finish_dput+0x1a/0x260 [ 748.397412][T11746] ? __fput+0x675/0xa50 [ 748.401568][T11746] ? task_work_run+0x1d9/0x270 [ 748.406335][T11746] ? update_rq_clock+0x34d/0x560 [ 748.411268][T11746] report_bug+0x16a/0x220 [ 748.415604][T11746] ? update_rq_clock+0x34d/0x560 [ 748.420540][T11746] ? update_rq_clock+0x34f/0x560 [ 748.425475][T11746] handle_bug+0x9c/0x200 [ 748.429713][T11746] exc_invalid_op+0x1a/0x50 [ 748.434209][T11746] asm_exc_invalid_op+0x1a/0x20 [ 748.439048][T11746] RIP: 0010:update_rq_clock+0x34d/0x560 [ 748.444596][T11746] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 cb 28 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 20 bd 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 748.464204][T11746] RSP: 0018:ffffc90003ea6ff8 EFLAGS: 00010046 [ 748.470274][T11746] RAX: 0000000000000000 RBX: ffff8880b873b300 RCX: 0000000000000002 [ 748.478237][T11746] RDX: 0000000000000000 RSI: ffffffff8e4b3e80 RDI: ffffffff8c4bdc80 [ 748.486203][T11746] RBP: dffffc0000000000 R08: ffffffff90579f37 R09: 1ffffffff20af3e6 [ 748.494169][T11746] R10: dffffc0000000000 R11: ffffffff819fdfa0 R12: ffff8880292d65a8 [ 748.502133][T11746] R13: dffffc0000000001 R14: ffff8880b873c1c8 R15: ffff8880b873b300 [ 748.510188][T11746] ? __pfx_pick_task_stop+0x10/0x10 [ 748.515400][T11746] ? update_rq_clock+0x8f/0x560 [ 748.520250][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.525882][T11746] __schedule+0x388e/0x56c0 [ 748.530411][T11746] ? __pfx___schedule+0x10/0x10 [ 748.535265][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.540897][T11746] ? lockdep_hardirqs_on+0x7a/0x110 [ 748.546099][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.551733][T11746] ? irqentry_exit+0x218/0x910 [ 748.556503][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.562131][T11746] ? preempt_schedule_thunk+0x16/0x40 [ 748.567504][T11746] preempt_schedule_common+0x82/0xd0 [ 748.572796][T11746] preempt_schedule_thunk+0x16/0x40 [ 748.577995][T11746] _raw_spin_unlock+0x3f/0x50 [ 748.582673][T11746] filemap_remove_folio+0x1b4/0x3a0 [ 748.587876][T11746] truncate_inode_folio+0x5d/0x70 [ 748.592905][T11746] shmem_undo_range+0x3fb/0x15d0 [ 748.597939][T11746] ? __pfx_shmem_undo_range+0x10/0x10 [ 748.603327][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.608972][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.614604][T11746] ? __lock_acquire+0x683/0x2cf0 [ 748.619549][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.625177][T11746] ? stack_trace_save+0xa9/0x100 [ 748.630121][T11746] shmem_evict_inode+0x280/0xa80 [ 748.635057][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.640686][T11746] ? inode_wait_for_writeback+0x16d/0x3b0 [ 748.646398][T11746] ? __pfx_shmem_evict_inode+0x10/0x10 [ 748.651854][T11746] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 748.657915][T11746] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.662933][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.668565][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.674201][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.679834][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 748.684942][T11746] ? __pfx_shmem_evict_inode+0x10/0x10 [ 748.690400][T11746] evict+0x624/0xb50 [ 748.694297][T11746] ? __pfx_evict+0x10/0x10 [ 748.698704][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.704328][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 748.709439][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.715071][T11746] ? _raw_spin_unlock+0x28/0x50 [ 748.719924][T11746] ? iput+0xb84/0xf00 [ 748.723914][T11746] dentry_kill+0x1b9/0x880 [ 748.728330][T11746] finish_dput+0x1a/0x260 [ 748.732666][T11746] __fput+0x675/0xa50 [ 748.736653][T11746] task_work_run+0x1d9/0x270 [ 748.741269][T11746] ? __pfx_task_work_run+0x10/0x10 [ 748.746389][T11746] ? do_raw_spin_unlock+0xf5/0x210 [ 748.751540][T11746] do_exit+0x73a/0x2360 [ 748.755759][T11746] ? __pfx_do_exit+0x10/0x10 [ 748.760361][T11746] ? srso_alias_return_thunk+0x5/0xfbef5 [ 748.765989][T11746] ? proc_coredump_connector+0x187/0x4e0 [ 748.771631][T11746] do_group_exit+0x22d/0x2f0 [ 748.776311][T11746] ? _raw_spin_unlock_irq+0x23/0x50 [ 748.781510][T11746] get_signal+0x121b/0x12c0 [ 748.786015][T11746] arch_do_signal_or_restart+0xbb/0x860 [ 748.791629][T11746] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.797792][T11746] irqentry_exit+0x2ba/0x910 [ 748.802387][T11746] ? trace_irq_disable+0x3b/0x140 [ 748.807414][T11746] asm_exc_page_fault+0x26/0x30 [ 748.812255][T11746] RIP: 0033:0x7f2f65f9e0e1 [ 748.816658][T11746] Code: Unable to access opcode bytes at 0x7f2f65f9e0b7. [ 748.823655][T11746] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 748.829715][T11746] RAX: 0000000000000000 RBX: 00007f2f66226090 RCX: 00007f2f65f9e0d9 [ 748.837670][T11746] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 748.845626][T11746] RBP: 00007f2f66035024 R08: 0000000000000000 R09: 0000000000000000 [ 748.853581][T11746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 748.861624][T11746] R13: 00007f2f66226128 R14: 00007f2f66226090 R15: 00007ffdb8d332c8 [ 748.869595][T11746] [ 748.872774][T11746] Kernel Offset: disabled [ 748.877082][T11746] Rebooting in 86400 seconds..