last executing test programs: 10m47.587145585s ago: executing program 1 (id=910): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r1, 0xa, 0x80000ffe, 0x0, 0x0) 10m45.427286162s ago: executing program 4 (id=913): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000040)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000700)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000740)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, &(0x7f0000000800)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x16, 0x0, {}, 0x1f, r2, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) syz_open_procfs(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) 10m41.117462068s ago: executing program 4 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendfile(r4, r3, 0x0, 0x7ffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f0000000240)=[{0x3, 0x4, 0x1, 0xa}, {0x9c, 0x1, 0x64, 0x4}, {0x6, 0x6, 0x1, 0x5}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x4000}, 0x20008000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000380)="92ee7bcba3d1e9bf", 0x8}], 0x1, 0x4, 0x11, 0x15) 10m40.807193174s ago: executing program 4 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r2, 0xa, 0x80000ffe, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x34, r4, 0x1, 0x0, 0x2, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbb}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdf}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10m39.027562598s ago: executing program 4 (id=924): syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902860002010a30080904000001020d0000052406000126240006000d240f0103000000020080000106241a0700001524120000a317a88b045e4f01a607c0ffcb7e392a1524120c00a317a88b045e4f01a607c0ffcb7e392a0905810350046806080904010000020d0000090400090582"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0xb}, [{{0x254, 0x1, {{0x2, 0xfffffffa}, 0x4c, 0x6, 0x3, 0x0, 0x7, 'syz1\x00', "14df1841d3bad0286fcd6319951dbce79e4ca6ea9af95da0349e48750e9cd867", "9f927559a4f5d3888c77f7c2e4a9cae3869d24b30c330d819e30410f0fe74b08", [{0x1249, 0x0, {0x3}}, {0xf, 0x8, {0x3, 0x5}}, {0x7, 0x3, {0x2, 0x2}}, {0x9, 0x38, {0x0, 0x100}}, {0x5, 0x0, {0x3}}, {0x1, 0xd, {0x0, 0x667}}, {0x101, 0x6, {0x1, 0x7f}}, {0x7fff, 0x9, {0x3, 0x1}}, {0xed2, 0x7, {0x3, 0x8}}, {0x2, 0x63, {0x2, 0x3ff}}, {0xff, 0xb5, {0x1}}, {0x6, 0xeda7, {0x3, 0x100}}, {0x18, 0x0, {0x0, 0x3}}, {0x0, 0x8897, {0x3, 0xfffffffc}}, {0x6, 0x4, {0x1, 0x4}}, {0xd0, 0x3, {0x3, 0x1}}, {0x2, 0x2, {0x2, 0x2e55e5a0}}, {0x7fff, 0x2, {0x3, 0xbfe0}}, {0x9, 0x4, {0x1}}, {0x973, 0x200, {0x3, 0x40}}, {0x18, 0x8, {0x0, 0x7}}, {0x7, 0x5, {0x2, 0x4}}, {0x2, 0x3, {0x1, 0x6}}, {0x8001, 0xe, {0x1, 0xf526}}, {0x5, 0x2, {0x1, 0x8c}}, {0x3ff, 0xe406, {0x3}}, {0x3, 0xe, {0x1}}, {0x2, 0x2, {0x3, 0x1}}, {0x0, 0xb52, {0x1, 0x7}}, {0x8, 0xfff8, {0x2, 0xfffffff8}}, {0x2, 0x8, {0x1, 0x8001}}, {0xfff, 0xf001, {0x1, 0x8000}}, {0xffa7, 0x400, {0x0, 0x9}}, {0x7, 0x2, {0x1, 0xfff}}, {0x9, 0x1, {0x2, 0xffff}}, {0x1, 0x0, {0x2, 0x5}}, {0xc, 0xc3, {0x2, 0x3}}, {0x49, 0x74, {0x3, 0x101}}, {0xf9ab, 0x200, {0x0, 0x4}}, {0xc89, 0x5616, {0x0, 0x3}}]}}}]}, 0x268}}, 0xc004) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000001cc0)={0x2020}, 0xffffff16) 10m36.666817142s ago: executing program 1 (id=928): socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000001c0), 0x10) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f0000000200)=0x2, 0x4) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000900)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000940)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) 10m30.913848769s ago: executing program 4 (id=935): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x202000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x7, 0x101, 0x1, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)={0x7fff, 0x1, 0xfff, 0x0, 0x7, 0x401}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000280)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r7, &(0x7f0000000480)=""/102392, 0x18ff8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000019480), 0x2008c2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000194c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r8}, 0x68) connect$inet6(r2, &(0x7f0000019540)={0xa, 0x4e26, 0xfffffffa, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000019580)=[{{0x0, 0x0, &(0x7f00000195c0), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r2, &(0x7f0000019600), 0x4000000000000e7, 0x2400c8c4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x10ae, &(0x7f000001a700)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb81002d0008004deb109c006500000d0690780a01010064010100441c86700000000100000006000000010000000b0000000700000002441caae1ac141428000000c7ac141419000000007f00000100000001891ff80a010100e0000002ac1414bbac1414aaac1414aa64010101ac1414aa44090caa6d40b0227e4e214e22", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 10m30.779205004s ago: executing program 1 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) lsm_get_self_attr(0x67, 0xffffffffffffffff, &(0x7f00000000c0), 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) setns(0xc9, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x20000000000004) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = mq_open(&(0x7f00000005c0)='ba\xfbxtadv_sl\x03L\x00\xd31\x00\x01N\x95\xb3\x8f\xe8\"\x83\xd5N\xcd\xa3\xb3a\x9d\x8c\x95 O\xbe\x90\a\xfe\xe1^_\x9a\xdd5:s\xbaxV\xac\xd4\xac*\xd7\xf2\xd0\xa1\x82H-\xe2\xf0\xea\x82\x0f6\xcb\bko\xf6?\x92\xa9\xb6\xa6\xab]\x19\xf7\xe1E\xda\xc9\xa8\xd81\x9d\xf54\x14\xff\xc2<.0\xe3\x9dmx(\xc8a\xd1\xe9\xbaJ\xdd\xb4H\xdd', 0x40, 0x186, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x7, &(0x7f0000000540)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r9 = open(&(0x7f0000000700)='.\x00', 0x141080, 0x0) getdents(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00f28caaaa2f5757b3c6814fc07ecd427f7a87493722233a234e576916361baaf20caa4c6bb1d4b158e982e16ebf58a15414801a3752d5ad913e6451becb9556609e3973fba32b466f095224546e4b3479f296000000001f1d0e5f9b8f8bf63262674d9cff1b313791d2a950708e786c4e8f6e33547d4c8cbe2be86c940c0ca1908c3ed6a87b373575b8df411beb0c65c72532875207acd49982a07801b856a9911c486f75f3377cbd1e8f96d8e5b7d815a22cde0f21e355e06003e346c37d949e99"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x8, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r10 = dup(r6) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000080)=0xffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000c8c0d0d39aeaf5e59b52ee3590b22303000a2c000000180a010100000000000000000a0000000900010073797a31000000000c000540000000000000000114000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040080}, 0xc490) ioctl$KVM_RUN(r10, 0xae80, 0x0) r13 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230a29bd7000fbdbdf253100000008000300", @ANYRES32=r3, @ANYBLOB='\b\x00R\x00', @ANYRES32=r13, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000084) 10m26.916174115s ago: executing program 4 (id=938): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r1, 0xa, 0x80000ffe, 0x0, 0x0) 10m26.724959008s ago: executing program 1 (id=940): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000680), &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x800006, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x108c}}]}}) (fail_nth: 1) 10m26.579247704s ago: executing program 1 (id=941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) 10m24.314937601s ago: executing program 1 (id=943): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdb"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf782, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m9.659373398s ago: executing program 32 (id=943): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdb"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x2, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf782, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 10m9.412917529s ago: executing program 33 (id=938): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt(r1, 0xa, 0x80000ffe, 0x0, 0x0) 8m10.081464783s ago: executing program 0 (id=1117): syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000202505a1a44000010203010902860002010a30080904000001020d0000052406000126240006000d240f0103000000020080000106241a0700001524120000a317a88b045e4f01a607c0ffcb7e392a1524120c00a317a88b045e4f01a607c0ffcb7e392a0905810350046806080904010000020d0000090400090582"], 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x268, 0x0, 0x5, 0x101, 0x0, 0x0, {0xb}, [{{0x254, 0x1, {{0x2, 0xfffffffa}, 0x4c, 0x6, 0x3, 0x0, 0x7, 'syz1\x00', "14df1841d3bad0286fcd6319951dbce79e4ca6ea9af95da0349e48750e9cd867", "9f927559a4f5d3888c77f7c2e4a9cae3869d24b30c330d819e30410f0fe74b08", [{0x1249, 0x0, {0x3}}, {0xf, 0x8, {0x3, 0x5}}, {0x7, 0x3, {0x2, 0x2}}, {0x9, 0x38, {0x0, 0x100}}, {0x5, 0x0, {0x3}}, {0x1, 0xd, {0x0, 0x667}}, {0x101, 0x6, {0x1, 0x7f}}, {0x7fff, 0x9, {0x3, 0x1}}, {0xed2, 0x7, {0x3, 0x8}}, {0x2, 0x63, {0x2, 0x3ff}}, {0xff, 0xb5, {0x1}}, {0x6, 0xeda7, {0x3, 0x100}}, {0x18, 0x0, {0x0, 0x3}}, {0x0, 0x8897, {0x3, 0xfffffffc}}, {0x6, 0x4, {0x1, 0x4}}, {0xd0, 0x3, {0x3, 0x1}}, {0x2, 0x2, {0x2, 0x2e55e5a0}}, {0x7fff, 0x2, {0x3, 0xbfe0}}, {0x9, 0x4, {0x1}}, {0x973, 0x200, {0x3, 0x40}}, {0x18, 0x8, {0x0, 0x7}}, {0x7, 0x5, {0x2, 0x4}}, {0x2, 0x3, {0x1, 0x6}}, {0x8001, 0xe, {0x1, 0xf526}}, {0x5, 0x2, {0x1, 0x8c}}, {0x3ff, 0xe406, {0x3}}, {0x3, 0xe, {0x1}}, {0x2, 0x2, {0x3, 0x1}}, {0x0, 0xb52, {0x1, 0x7}}, {0x8, 0xfff8, {0x2, 0xfffffff8}}, {0x2, 0x8, {0x1, 0x8001}}, {0xfff, 0xf001, {0x1, 0x8000}}, {0xffa7, 0x400, {0x0, 0x9}}, {0x7, 0x2, {0x1, 0xfff}}, {0x9, 0x1, {0x2, 0xffff}}, {0x1, 0x0, {0x2, 0x5}}, {0xc, 0xc3, {0x2, 0x3}}, {0x49, 0x74, {0x3, 0x101}}, {0xf9ab, 0x200, {0x0, 0x4}}, {0xc89, 0x5616, {0x0, 0x3}}]}}}]}, 0x268}}, 0xc004) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000001cc0)={0x2020}, 0xffffff16) 8m4.117529643s ago: executing program 0 (id=1120): mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./sys\x00', 0x1ff) r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x7, 0x20001000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x2, 0x0, 0x0, 0xf}]}}, 0x0, 0x26}, 0x28) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e22, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r5, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0xdc}) ioctl$FIOCLEX(r0, 0x5451) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x3}) userfaultfd(0x801) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) 8m2.779909264s ago: executing program 0 (id=1123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x426701, 0x29) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r10, r9, &(0x7f00000004c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f00000007c0)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r11, 0x0, 0x1, 0x2004cfe9, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r11, &(0x7f0000000900)="81", 0x1, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000940)={0xffffffffffffffff}, 0x0) quotactl_fd$Q_GETINFO(r12, 0xffffffff80000502, 0x0, 0x0) 8m1.94364306s ago: executing program 0 (id=1125): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x202000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x7, 0x101, 0x1, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000200)={0x7fff, 0x1, 0xfff, 0x0, 0x7, 0x401}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000280)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000003c0)=[{}], &(0x7f0000000400)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r7, &(0x7f0000000480)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000019480), 0x2008c2, 0x0) connect$inet6(r2, &(0x7f0000019540)={0xa, 0x4e26, 0xfffffffa, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000019580)=[{{0x0, 0x0, &(0x7f00000195c0), 0x171}}], 0x400000000000172, 0x4000000) sendmmsg$inet(r2, &(0x7f0000019600), 0x4000000000000e7, 0x2400c8c4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x10ae, &(0x7f000001a700)=ANY=[@ANYBLOB="0380c2000003bbbbbbbbbbbb81002d0008004deb109c006500000d0690780a01010064010100441c86700000000100000006000000010000000b0000000700000002441caae1ac141428000000c7ac141419000000007f00000100000001891ff80a010100e0000002ac1414bbac1414aaac1414aa64010101ac1414aa44090caa6d40b0227e4e214e22", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 7m59.371766308s ago: executing program 0 (id=1128): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000780), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000800)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(0xffffffffffffffff, 0x200) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000840)=0xff) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r5 = syz_open_dev$usbmon(0x0, 0x8001, 0x0) shutdown(r4, 0x0) setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000980)=ANY=[@ANYBLOB="020000042100050000380e00000002000080000010000500000001002000020000000000f893cec4924cdb64dd29b327"], 0x24, 0x1) getxattr(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)=@known='system.posix_acl_access\x00', 0x0, 0x0) listen(r4, 0xb) sendmsg$unix(r4, &(0x7f0000000380)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="37e8b197c787", 0x6}, {&(0x7f0000000200)="1e64dd602eaa304af89d1297b1a2aaa9d904b27ab78da6d6236f25002034755f0c1c68d77afa7aa162ca18ad179d8da2336c930679634474f13696da2c4951ac53a7ca407aaaa8814325994a5cbfe57300c6075f187b8f1f439c79f9fc937d600e7a2a16fa748dea764f69dcec6a0ffbba8b87181a84ffa5c4602f946a6f0430d4f25d199ef222c590fa43c6d3ebce9a2a698246b527b2ffc958ad", 0x9b}, {&(0x7f00000002c0)="5d31e9e544adc6c43b806f6802f4d663c562a8a5ad0f552ca0ca8a4b402eb4eab27a5cf4c1325c864075e587ba4f227983ae567a0991821a0f66b5e85245073fd4098c285be729866ea81c7a2a8b96600d39f4cd541c14d8afb99a41fa946a75577f625f2f4c", 0x66}], 0x3, 0x0, 0x0, 0x4000090}, 0x20040085) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f00000003c0)) 7m52.341937067s ago: executing program 0 (id=1136): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x2a, 0x3, 0x0, {0x1, 0xfffffebb, 0x0, '/dev/sg#\x00'}}, 0x2a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8130fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2c, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1496a, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc814}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) 7m37.035707496s ago: executing program 34 (id=1136): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x2a, 0x3, 0x0, {0x1, 0xfffffebb, 0x0, '/dev/sg#\x00'}}, 0x2a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x5, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d8130fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2c, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x1496a, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffff}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc814}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r5, 0xa00, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c1}, 0x4000) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) 1m28.449645523s ago: executing program 3 (id=1498): syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./dev\x00', &(0x7f0000000740)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./dev/ram0\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000001cc0)={0x2020}, 0xffffff16) 1m25.295337572s ago: executing program 3 (id=1500): r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0x22, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x20ffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000440)="300000001c00010401000000000000002d000000010000008000000105000100260000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_io_uring_setup(0xf08, &(0x7f0000000200)={0x0, 0x595d, 0x1000, 0x20000, 0x1000051, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000003c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x1, {0x259a}, 0x1}) syz_io_uring_submit(r3, r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xb, 0x4004, @fd=r0, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000140)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000180)=0x9) ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, &(0x7f00000000c0)=0xf73f) 1m20.874533868s ago: executing program 3 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000000115d145f722ac65628fcaaa8700000000000200"/37, @ANYRES32=0x1, @ANYBLOB="8000500508000100ac1414aa08000f0001000000"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) syz_open_dev$vim2m(&(0x7f0000000080), 0x10, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000900)="cf", 0x1}, {&(0x7f0000000940)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000980)="8a", 0x1}, {&(0x7f00000009c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="ce90bfdb", 0x4}, {&(0x7f0000000b40)="f2e659", 0x3}, {&(0x7f0000000b80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="e1", 0x1}, {&(0x7f0000000c80)="fa", 0x1}, {&(0x7f0000000cc0)="d8", 0x1}, {&(0x7f0000000d00)="f2964dd1", 0x4}, {&(0x7f0000000d40)="b8a2f6", 0x3}, {&(0x7f0000000d80)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000e40)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="87", 0x1}, {&(0x7f0000000f00)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48d, 0x0, 0x800}]}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000f40)=0x7fffffff, 0x4) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1m19.282377157s ago: executing program 3 (id=1505): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x2a020600) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x28b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x3c5093, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x251001, 0x0) (fail_nth: 1) 1m18.992873771s ago: executing program 3 (id=1506): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="200000001400010000000000000000002d00000002000000050002"], 0x20}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019400)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019440)='./tracing\x00', &(0x7f0000019480)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000194c0)='./tracing/uprobe_events\x00', 0x401, 0x0) wait4(r3, &(0x7f0000019500), 0x20000000, &(0x7f0000019540)) write(r5, &(0x7f0000019600)='p:--s_/event1 ./file0:0', 0x17) r6 = syz_io_uring_setup(0xf08, &(0x7f0000019700)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000019780)=0x0, &(0x7f00000197c0)=0x0, &(0x7f0000019800)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000019840)=@IORING_OP_MKDIRAT={0x25, 0x45, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x100, 0x0, 0x1}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) read(r10, &(0x7f0000000100)=""/108, 0x6c) r11 = dup(r10) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f0000000180)=""/149, &(0x7f0000000240)=0x95) 1m16.45135227s ago: executing program 3 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000000115d145f722ac65628fcaaa8700000000000200"/37, @ANYRES32=0x1, @ANYBLOB="8000500508000100ac1414aa08000f0001000000"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000180)={0x0, 0x42474752, 0x0, @stepwise={0x0, 0xfff}}) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000900)="cf", 0x1}, {&(0x7f0000000940)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000980)="8a", 0x1}, {&(0x7f00000009c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="ce90bfdb", 0x4}, {&(0x7f0000000b40)="f2e659", 0x3}, {&(0x7f0000000b80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="e1", 0x1}, {&(0x7f0000000c80)="fa", 0x1}, {&(0x7f0000000cc0)="d8", 0x1}, {&(0x7f0000000d00)="f2964dd1", 0x4}, {&(0x7f0000000d40)="b8a2f6", 0x3}, {&(0x7f0000000d80)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000e40)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="87", 0x1}, {&(0x7f0000000f00)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48d, 0x0, 0x800}]}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000f40)=0x7fffffff, 0x4) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1m15.876005244s ago: executing program 35 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000000115d145f722ac65628fcaaa8700000000000200"/37, @ANYRES32=0x1, @ANYBLOB="8000500508000100ac1414aa08000f0001000000"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000640)=0x1, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000180)={0x0, 0x42474752, 0x0, @stepwise={0x0, 0xfff}}) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000900)="cf", 0x1}, {&(0x7f0000000940)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000980)="8a", 0x1}, {&(0x7f00000009c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="ce90bfdb", 0x4}, {&(0x7f0000000b40)="f2e659", 0x3}, {&(0x7f0000000b80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="e1", 0x1}, {&(0x7f0000000c80)="fa", 0x1}, {&(0x7f0000000cc0)="d8", 0x1}, {&(0x7f0000000d00)="f2964dd1", 0x4}, {&(0x7f0000000d40)="b8a2f6", 0x3}, {&(0x7f0000000d80)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000e40)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="87", 0x1}, {&(0x7f0000000f00)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_GET_MSRS_sys(r6, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x48d, 0x0, 0x800}]}) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000f40)=0x7fffffff, 0x4) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1m15.301924909s ago: executing program 2 (id=1510): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 1m15.049900461s ago: executing program 2 (id=1511): unshare(0x28000600) syz_io_uring_complete(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xffffffffffffffab, 0x0}}], 0x1, 0x8000) unshare(0x2060800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)=@udp=r1, 0x1}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1m14.952102854s ago: executing program 2 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd}) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x426701, 0x29) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000240)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000004c0)={0x0, 0xfb87, 0x1, 0x3, 0x32c}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf00, 0x200, 0x6, 0x15e, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x1, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x1, 0x121, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f00000007c0)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000880)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r11, 0x0, 0x1, 0x2004cfe9, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r11, &(0x7f0000000900)="81", 0x1, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000940), 0x0) 1m13.005957928s ago: executing program 2 (id=1513): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000003141a40a1b39033ea44240767bfb301002dbd700002dc00020073797a3100000000080041007278650014003300766c616e3100"/66], 0x38}, 0x1, 0x0, 0x0, 0x14f7325ddd07b80}, 0x44000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)={0x2c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x54) unshare(0x2a020600) unshare(0x20000400) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f00000000c0)={0x2108, r5}, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x28b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0xa2020, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x3c5093, 0x0) mount$bind(&(0x7f0000000540)='./file0/../file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x251001, 0x0) 1m10.729614905s ago: executing program 2 (id=1514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="200000001400010000000000000000002d00000002000000050002"], 0x20}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019400)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019440)='./tracing\x00', &(0x7f0000019480)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000194c0)='./tracing/uprobe_events\x00', 0x401, 0x0) wait4(r3, &(0x7f0000019500), 0x20000000, &(0x7f0000019540)) write(r5, &(0x7f0000019600)='p:--s_/event1 ./file0:0', 0x17) r6 = syz_io_uring_setup(0xf08, &(0x7f0000019700)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000019780)=0x0, &(0x7f00000197c0)=0x0, &(0x7f0000019800)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000019840)=@IORING_OP_MKDIRAT={0x25, 0x45, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x100, 0x0, 0x1}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) read(r10, &(0x7f0000000100)=""/108, 0x6c) r11 = dup(r10) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f0000000180)=""/149, &(0x7f0000000240)=0x95) 1m9.933229029s ago: executing program 2 (id=1515): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x4, @sliced={0x0, [0x5, 0x480, 0xaf, 0x668, 0x2, 0x0, 0x0, 0x7824, 0xe, 0x1, 0x2, 0x2000, 0x8, 0x1, 0xffff, 0xc5, 0xc7be, 0xcca, 0xc77d, 0x48, 0x8, 0x7, 0x7, 0x3, 0x2, 0x3ff, 0x0, 0x6e73, 0x6, 0x83d0, 0x6, 0x0, 0x101, 0xf6, 0x5, 0xfffa, 0x6, 0x101, 0x2, 0x2, 0x6, 0x4, 0x4, 0x1ff, 0x8, 0x4, 0x7f, 0x5], 0x62}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000700)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000740)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) fcntl$setstatus(r3, 0x4, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0xe0, 0x0, 0x10}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x16, @void}, 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000280)="be1c77cd933e1212c1a16bc54c3746d9a9dea5da386bbeea21cc461441357cade59ba46ad283e12ed72d45184b50328ad00a2d019a2d84fc74bda49a30b5033e878e368e5677b88d7cf19e5db8a7aeaf18e424805eb977c50140d6f6e1386e32773d4adc8477c8cea866dfd50e73d2d31491a8f235169c4f46f0f85e1b8ce17ed2a0fcc2ab709f3f4cecad86b23f9e406fc90a1e79ae3a7c932072e3ed913ca873bced477b454a27e373520384f32f43991deb4e1ef6d6b771219c6ffeceba8bb32b49fb896d39274b05d4c65d62fb28ce5a7bb2534d35d50866849464e7bbcdf513f92051b9c63d091aab7de2d555af4c0dfd0045b63ad25908214962039d26") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) 1m9.753806282s ago: executing program 36 (id=1515): mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000480)={0x4, @sliced={0x0, [0x5, 0x480, 0xaf, 0x668, 0x2, 0x0, 0x0, 0x7824, 0xe, 0x1, 0x2, 0x2000, 0x8, 0x1, 0xffff, 0xc5, 0xc7be, 0xcca, 0xc77d, 0x48, 0x8, 0x7, 0x7, 0x3, 0x2, 0x3ff, 0x0, 0x6e73, 0x6, 0x83d0, 0x6, 0x0, 0x101, 0xf6, 0x5, 0xfffa, 0x6, 0x101, 0x2, 0x2, 0x6, 0x4, 0x4, 0x1ff, 0x8, 0x4, 0x7f, 0x5], 0x62}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000700)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000740)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x101002, 0x0) fcntl$setstatus(r3, 0x4, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000180)={0xe0, 0x0, 0x10}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x16, @void}, 0x10) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000280)="be1c77cd933e1212c1a16bc54c3746d9a9dea5da386bbeea21cc461441357cade59ba46ad283e12ed72d45184b50328ad00a2d019a2d84fc74bda49a30b5033e878e368e5677b88d7cf19e5db8a7aeaf18e424805eb977c50140d6f6e1386e32773d4adc8477c8cea866dfd50e73d2d31491a8f235169c4f46f0f85e1b8ce17ed2a0fcc2ab709f3f4cecad86b23f9e406fc90a1e79ae3a7c932072e3ed913ca873bced477b454a27e373520384f32f43991deb4e1ef6d6b771219c6ffeceba8bb32b49fb896d39274b05d4c65d62fb28ce5a7bb2534d35d50866849464e7bbcdf513f92051b9c63d091aab7de2d555af4c0dfd0045b63ad25908214962039d26") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e, 0x0, 0x2}, 0x28) 12.196909195s ago: executing program 7 (id=1535): unshare(0x28000600) syz_io_uring_complete(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xffffffffffffffab, 0x0}}], 0x1, 0x8000) unshare(0x2060800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)=@udp=r1, 0x1}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 11.946230841s ago: executing program 7 (id=1537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0xd25f8e34d7c46251, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59}}}}}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000680)="f4", 0x1}], 0x1, 0x0, 0x28}}], 0x1, 0x20008084) 8.755414214s ago: executing program 7 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000c00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000c40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000c80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000d00)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000d80), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000dc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000e00)=0x6) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000e40)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a80), 0x400200, 0x0) fgetxattr(r4, &(0x7f0000000ac0)=@known='system.sockprotoname\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000380)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x0, 0x0, &(0x7f0000000440), 0x10000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80042, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000e80)=@newqdisc={0x25c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff1, 0x10}, {0xfff3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4a0171a5}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xb0, 0x1, 0x7, 0x2, 0x8, 0x9}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0xfd}}, @TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x1, 0xfff0, 0x200, 0x1, 0x5f, 0x9, 0x8}}, {0x14, 0x2, [0xfffb, 0x5, 0x8, 0x4, 0x7, 0x1879, 0x6, 0x1]}}, {{0x1c, 0x1, {0x2, 0x3, 0xfffc, 0xb5, 0x2, 0x4, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x8c, 0x5, 0x6, 0x5, 0x0, 0x9, 0xa3b4}}, {0x4}}, {{0x1c, 0x1, {0x4, 0xe3, 0x4, 0x5, 0x0, 0x6, 0x800009, 0x5}}, {0xe, 0x2, [0x4, 0x4, 0x6, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x0, 0xfffe, 0x8000, 0x0, 0x7, 0x5, 0xa}}, {0x18, 0x2, [0x1, 0x7fff, 0x4, 0x9, 0xde8e, 0x0, 0x4, 0x1c00, 0x5, 0x3]}}, {{0x1c, 0x1, {0xf8, 0x9, 0xf98, 0xa, 0x1, 0x2, 0x8546, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0xe, 0x4, 0x6, 0xfff, 0x2, 0x6, 0x4, 0x8}}, {0x14, 0x2, [0xd9db, 0x81, 0x5, 0xbd56, 0x70, 0x2, 0x5, 0x80]}}, {{0x1c, 0x1, {0x0, 0xd, 0x3, 0x1ff, 0x2, 0x9, 0x8, 0x8}}, {0x14, 0x2, [0x7d6, 0x1, 0x200, 0x2, 0xc, 0x6, 0xa, 0x5a]}}, {{0x1c, 0x1, {0x4, 0x4, 0xa, 0x2, 0x0, 0x91, 0xffff, 0x6}}, {0x10, 0x2, [0xfffe, 0x6, 0x6a, 0x9, 0x2, 0x1000]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xb, 0x3, 0x9c, 0xfffffff5, 0x0, 0x5, 0x200, 0x2}}, {0x8, 0x2, [0xcc, 0x2]}}, {{0x1c, 0x1, {0xf, 0x7, 0x8, 0x5, 0x2, 0x8, 0x7f, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x9, 0x4, 0x0, 0x6, 0x7, 0x4}}, {0xc, 0x2, [0x14, 0x8, 0xffdf, 0x3]}}]}]}, 0x25c}}, 0x0) 7.412862932s ago: executing program 7 (id=1540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019400)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019440)='./tracing\x00', &(0x7f0000019480)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000194c0)='./tracing/uprobe_events\x00', 0x401, 0x0) wait4(r3, &(0x7f0000019500), 0x20000000, &(0x7f0000019540)) write(r5, &(0x7f0000019600)='p:--s_/event1 ./file0:0', 0x17) r6 = syz_io_uring_setup(0xf08, &(0x7f0000019700)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000019780)=0x0, &(0x7f00000197c0)=0x0, &(0x7f0000019800)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000019840)=@IORING_OP_MKDIRAT={0x25, 0x45, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x100, 0x0, 0x1}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) read(r10, &(0x7f0000000100)=""/108, 0x6c) r11 = dup(r10) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f0000000180)=""/149, &(0x7f0000000240)=0x95) 5.98716198s ago: executing program 7 (id=1541): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$incfs(0xffffffffffffffff, 0x0, 0x1090c1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x0, 0x0, &(0x7f0000000180)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x48004}, 0x20000840) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) 3.587465243s ago: executing program 8 (id=1544): unshare(0x28000600) syz_io_uring_complete(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xffffffffffffffab, 0x0}}], 0x1, 0x8000) unshare(0x2060800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)=@udp=r1, 0x1}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 3.350469109s ago: executing program 8 (id=1545): prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000000115d145f722ac65628fcaaa8700000000000200"/37, @ANYRES32=0x1, @ANYBLOB="8000500508000100ac1414aa08000f0001000000"], 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x10, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000180)={0x0, 0x42474752, 0x0, @stepwise={0x0, 0xfff}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000000900)="cf", 0x1}, {&(0x7f0000000940)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000980)="8a", 0x1}, {&(0x7f00000009c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="ce90bfdb", 0x4}, {&(0x7f0000000b40)="f2e659", 0x3}, {&(0x7f0000000b80)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="e1", 0x1}, {&(0x7f0000000c80)="fa", 0x1}, {&(0x7f0000000cc0)="d8", 0x1}, {&(0x7f0000000d00)="f2964dd1", 0x4}, {&(0x7f0000000d40)="b8a2f6", 0x3}, {&(0x7f0000000d80)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000e40)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="87", 0x1}, {&(0x7f0000000f00)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) 2.968637042s ago: executing program 7 (id=1546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect(0x5, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="40160100003543"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x15, &(0x7f00000006c0)=""/4096, &(0x7f00000016c0)=0x1000) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/mnt\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) statx(r5, &(0x7f0000000000)='./file1\x00', 0x400, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r6, 0x4007) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, 0x0, &(0x7f00000003c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f00000001c0)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000440)}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000480), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000004c0)={0x4, r8, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f0000000500)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000540)=0x1) close_range(r8, r9, 0x0) setresuid(0xffffffffffffffff, r6, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e29, 0x0, @remote}, 0x1c) listen(r0, 0x0) 2.021177583s ago: executing program 8 (id=1547): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0x8, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000f80)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.859913888s ago: executing program 8 (id=1548): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000a80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000ac0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000b00)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000b40)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000c40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c80), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x1e, &(0x7f0000000cc0)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000d00)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000d40)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000d80)=0x4000, 0x4) bind$xdp(r3, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x5, 0xa8f}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000580)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000002780)="4c00000011000900"/23, 0x17) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x121000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000027c0)=ANY=[@ANYRES8=r4, @ANYRES64=r5], 0x0, 0x26, 0x0, 0x0, 0x3}, 0x28) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000001c0)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1) r6 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000007c0)="5c00000011007bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0040002eab556a705251e6182940200efe405d8fc677e821beee786a6d0001000000e4509c5bbcd72c6c9538418bbd4bbec19eb0065aea19004ea2a0000000000000000006f4800f86003022a33ce0f7154b7ae6efa305827d9ca362a5b1616c33e645504fc114c8667303bf06ba8f2b2bcd940903f9a830dffa71f3325bf83e7b34063", 0xa7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x880) 586.812758ms ago: executing program 8 (id=1549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="200000001400010000000000000000002d00000002000000050002"], 0x20}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010004000000fcdbdf25030000000800010003"], 0x38}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000300)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f00000193c0)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000019400)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000019440)='./tracing\x00', &(0x7f0000019480)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000194c0)='./tracing/uprobe_events\x00', 0x401, 0x0) wait4(r3, &(0x7f0000019500), 0x20000000, &(0x7f0000019540)) write(r5, &(0x7f0000019600)='p:--s_/event1 ./file0:0', 0x17) r6 = syz_io_uring_setup(0xf08, &(0x7f0000019700)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000019780)=0x0, &(0x7f00000197c0)=0x0, &(0x7f0000019800)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000019840)=@IORING_OP_MKDIRAT={0x25, 0x45, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x100, 0x0, 0x1}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) read(r10, &(0x7f0000000100)=""/108, 0x6c) r11 = dup(r10) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f0000000180)=""/149, &(0x7f0000000240)=0x95) 0s ago: executing program 8 (id=1550): sync() r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001380)=[{&(0x7f00000013c0)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) r3 = add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key$keyring(&(0x7f0000001200), &(0x7f0000001240)={'syz', 0x3}, 0x0, 0x0, r3) r6 = add_key$user(&(0x7f0000001280), &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)='q', 0x1, r5) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x6f) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r3, 0x1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r7, &(0x7f0000000240), 0x10106, 0x2, 0x0) sync() r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r9, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001100)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1062.316143][ T5605] Bluetooth: hci4: command tx timeout [ 1062.366890][ T1001] usb 4-1: USB disconnect, device number 44 [ 1063.153684][T12429] CIFS mount error: No usable UNC path provided in device string! [ 1063.153684][T12429] [ 1063.153816][T12429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1063.559925][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1063.560025][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1063.560782][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1063.937608][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.037978][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.098189][ T2580] bond0 (unregistering): Released all slaves [ 1065.103327][ T5605] Bluetooth: hci4: command 0x041b tx timeout [ 1065.409359][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.092442][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.370385][ T9744] Bluetooth: hci4: command 0x041b tx timeout [ 1067.836591][ T1169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1067.967348][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.115274][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.178424][ T2580] bond0 (unregistering): Released all slaves [ 1069.057412][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.116979][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1069.117534][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1069.117858][ T1169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1069.167873][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.230149][ T2580] bond0 (unregistering): Released all slaves [ 1069.414245][T12192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.414263][T12192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.414290][T12192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.436119][ T9744] Bluetooth: hci4: command 0x041b tx timeout [ 1070.583486][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.310529][T12474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1376'. [ 1071.516342][ T9744] Bluetooth: hci4: command 0x041b tx timeout [ 1071.952835][T12192] hsr_slave_0: entered promiscuous mode [ 1071.955816][T12192] hsr_slave_1: entered promiscuous mode [ 1071.969751][T12192] debugfs: 'hsr0' already exists in 'hsr' [ 1071.969779][T12192] Cannot create hsr debugfs directory [ 1072.321406][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1072.882442][ T1133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1074.237300][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1074.884425][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1074.912890][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.116463][T12494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 1075.684561][ T1133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1075.692924][T12407] rxe_eth0 speed is unknown, defaulting to 1000 [ 1077.142090][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1384'. [ 1078.076707][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.077396][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1078.080388][T12200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1078.319312][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1079.601471][T12200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1080.004305][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.076664][T12521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1386'. [ 1080.646616][ T1169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.654557][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.190244][T12525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1387'. [ 1081.237471][T12525] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.664579][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1083.224529][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1083.280353][T12200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1083.401386][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1083.404113][T12200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1083.477683][T12200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1083.607963][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1388'. [ 1083.893773][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1084.452190][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.452866][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1084.595752][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1084.607185][ T10] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1084.607236][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 1084.607262][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 1084.607290][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.607330][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.613191][ T10] usb 4-1: config 0 descriptor?? [ 1084.804039][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 1084.816068][ T2580] hsr_slave_0: left promiscuous mode [ 1084.837936][ T10] ath6kl: Failed to submit usb control message: -71 [ 1084.837987][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 1084.838002][ T10] ath6kl: Unable to send get target info: -71 [ 1084.893741][ T10] ath6kl: Failed to init ath6kl core: -71 [ 1084.895189][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1084.904179][ T10] usb 4-1: USB disconnect, device number 45 [ 1084.913292][ T2580] hsr_slave_1: left promiscuous mode [ 1084.940779][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.966731][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.176405][ T2580] hsr_slave_0: left promiscuous mode [ 1085.216122][ T2580] hsr_slave_1: left promiscuous mode [ 1085.218045][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.248225][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.406263][ T2580] hsr_slave_0: left promiscuous mode [ 1085.642307][ T2580] hsr_slave_1: left promiscuous mode [ 1085.669976][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.730452][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.769069][ T1133] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1085.848140][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1085.993190][ T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1086.157573][ T10] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1086.159509][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1086.159646][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.399733][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.421777][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1086.489881][ T10] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 1086.547317][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1086.657814][T12551] netlink: 'syz.3.1392': attribute type 2 has an invalid length. [ 1086.657841][T12551] netlink: 'syz.3.1392': attribute type 5 has an invalid length. [ 1086.915667][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.917882][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.918117][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.918139][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.918368][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.918386][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.918615][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.918636][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.918860][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.918882][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.919104][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.919126][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.919348][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.919363][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.919571][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.919587][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.919804][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.919822][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1086.920040][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1086.920056][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1087.036573][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1087.060000][ T10] wwan wwan0: port wwan0qmi0 attached [ 1088.021018][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1088.822966][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1090.175593][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1090.314731][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.533382][ T1169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1091.916269][ C1] wdm_int_callback: 15429 callbacks suppressed [ 1091.916332][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.916383][ C1] wdm_int_callback: 15429 callbacks suppressed [ 1091.916436][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.916774][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.916797][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.917143][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.917210][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.917565][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.917634][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.917960][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.918015][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.918474][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.918532][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.918940][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.918994][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.919368][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.919424][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.919840][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.919962][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1091.922630][ C1] qmi_wwan 4-1:1.0: nonzero urb status received: -71 [ 1091.922700][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - 0 bytes [ 1092.166701][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1092.167490][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1092.898426][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1093.265594][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1093.514889][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1093.608426][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1093.631528][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1093.687918][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1093.703719][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1095.278630][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1095.401146][ T2589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1095.885871][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1095.953145][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1095.965906][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1095.992899][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1096.022709][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1096.454364][T12200] kthread_run failed with err -4 [ 1096.476163][ T5605] Bluetooth: hci2: command tx timeout [ 1096.564018][ C1] qmi_wwan 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 1098.138415][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.139507][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.140123][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.140756][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1098.458544][ T5605] Bluetooth: hci6: command tx timeout [ 1098.556079][ T9744] Bluetooth: hci2: command tx timeout [ 1099.959506][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 1100.029547][ T10] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 0e:81:9b:52:7c:2a [ 1100.051424][ T10] usb 4-1: USB disconnect, device number 46 [ 1100.077976][ T10] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 1100.476524][ T9744] Bluetooth: hci6: command tx timeout [ 1100.482058][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1100.636949][ T9744] Bluetooth: hci2: command tx timeout [ 1100.692130][ T10] wwan wwan0: port wwan0qmi0 disconnected [ 1101.118478][ T2589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1102.745646][ T9744] Bluetooth: hci6: command tx timeout [ 1102.745682][ T9744] Bluetooth: hci2: command tx timeout [ 1102.908793][T12578] rxe_eth0 speed is unknown, defaulting to 1000 [ 1103.427442][ T5605] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1103.710441][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1103.727914][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1103.732248][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1103.778586][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1104.796105][ T5605] Bluetooth: hci6: command tx timeout [ 1106.172845][T12571] rxe_eth0 speed is unknown, defaulting to 1000 [ 1106.236512][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1106.435650][T12407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.435850][T12407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.451113][T12407] bridge_slave_0: entered allmulticast mode [ 1106.465130][T12407] bridge_slave_0: entered promiscuous mode [ 1106.497790][T12407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.497928][T12407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.498103][T12407] bridge_slave_1: entered allmulticast mode [ 1106.505202][T12407] bridge_slave_1: entered promiscuous mode [ 1106.733604][T12640] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1404'. [ 1106.750784][T12641] FAULT_INJECTION: forcing a failure. [ 1106.750784][T12641] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.750825][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz.2.1405 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1106.750852][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1106.750866][T12641] Call Trace: [ 1106.750875][T12641] [ 1106.750886][T12641] dump_stack_lvl+0xe8/0x150 [ 1106.750926][T12641] should_fail_ex+0x46b/0x600 [ 1106.750966][T12641] should_failslab+0xa8/0x100 [ 1106.750993][T12641] __kmalloc_noprof+0xfb/0x790 [ 1106.751026][T12641] ? security_sk_alloc+0x52/0x360 [ 1106.751055][T12641] ? security_sk_alloc+0x52/0x360 [ 1106.751091][T12641] security_sk_alloc+0x52/0x360 [ 1106.751124][T12641] sk_prot_alloc+0x101/0x210 [ 1106.751151][T12641] ? sk_alloc+0x27/0x390 [ 1106.751180][T12641] sk_alloc+0x3a/0x390 [ 1106.751210][T12641] alg_create+0xcf/0x160 [ 1106.751244][T12641] __sock_create+0x4b3/0x9d0 [ 1106.751270][T12641] __sys_socket+0xd6/0x1b0 [ 1106.751291][T12641] __x64_sys_socket+0x7a/0x90 [ 1106.751311][T12641] do_syscall_64+0x166/0x520 [ 1106.751334][T12641] ? trace_irq_disable+0x3b/0x140 [ 1106.751357][T12641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.751375][T12641] ? clear_bhb_loop+0x70/0xc0 [ 1106.751396][T12641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.751413][T12641] RIP: 0033:0x7fe3c298e559 [ 1106.751430][T12641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.751446][T12641] RSP: 002b:00007fe3c0ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1106.751467][T12641] RAX: ffffffffffffffda RBX: 00007fe3c2c16180 RCX: 00007fe3c298e559 [ 1106.751480][T12641] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 1106.751491][T12641] RBP: 00007fe3c2a258b0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.751503][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.751514][T12641] R13: 00007fe3c2c16218 R14: 00007fe3c2c16180 R15: 00007ffe8dae05c8 [ 1106.751541][T12641] [ 1107.020021][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1107.146162][ T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1107.373224][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1107.374360][ T10] usb 4-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1107.374415][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 1107.374442][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 1107.374471][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.374499][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.428462][ T10] usb 4-1: config 0 descriptor?? [ 1107.678626][ T10] ath6kl: Failed to submit usb control message: -71 [ 1107.678682][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 1107.683591][ T10] ath6kl: Unable to send get target info: -71 [ 1107.782104][ T10] ath6kl: Failed to init ath6kl core: -71 [ 1107.826763][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1107.858206][T12647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1406'. [ 1108.018582][ T10] usb 4-1: USB disconnect, device number 47 [ 1109.132604][T12407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.467979][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.468566][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.468969][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.469205][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1109.484893][T12407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.409338][T12407] team0: Port device team_slave_0 added [ 1110.419237][T12407] team0: Port device team_slave_1 added [ 1110.569484][T12658] FAULT_INJECTION: forcing a failure. [ 1110.569484][T12658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.569520][T12658] CPU: 1 UID: 0 PID: 12658 Comm: syz.3.1409 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1110.569542][T12658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1110.569554][T12658] Call Trace: [ 1110.569561][T12658] [ 1110.569571][T12658] dump_stack_lvl+0xe8/0x150 [ 1110.569605][T12658] should_fail_ex+0x46b/0x600 [ 1110.569641][T12658] _copy_from_user+0x2d/0xb0 [ 1110.569661][T12658] ___sys_sendmsg+0x1c6/0x360 [ 1110.569686][T12658] ? __lock_acquire+0x747/0x2de0 [ 1110.569718][T12658] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.569748][T12658] ? kstrtouint+0x6e/0xe0 [ 1110.569798][T12658] ? __fget_files+0x2a/0x420 [ 1110.569819][T12658] ? __fget_files+0x3a8/0x420 [ 1110.569848][T12658] __sys_sendmmsg+0x279/0x4d0 [ 1110.569886][T12658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1110.569918][T12658] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1110.569952][T12658] ? ksys_write+0x248/0x270 [ 1110.569977][T12658] ? __pfx_ksys_write+0x10/0x10 [ 1110.570007][T12658] __x64_sys_sendmmsg+0xa0/0xc0 [ 1110.570034][T12658] do_syscall_64+0x166/0x520 [ 1110.570059][T12658] ? trace_irq_disable+0x3b/0x140 [ 1110.570083][T12658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.570101][T12658] ? clear_bhb_loop+0x70/0xc0 [ 1110.570126][T12658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.570145][T12658] RIP: 0033:0x7fa4a29fe559 [ 1110.570164][T12658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.570179][T12658] RSP: 002b:00007fa4a0c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1110.570200][T12658] RAX: ffffffffffffffda RBX: 00007fa4a2c85fa0 RCX: 00007fa4a29fe559 [ 1110.570214][T12658] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1110.570227][T12658] RBP: 00007fa4a0c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.570239][T12658] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 1110.570251][T12658] R13: 00007fa4a2c86038 R14: 00007fa4a2c85fa0 R15: 00007fffab3f5c48 [ 1110.570281][T12658] [ 1110.853574][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 1110.943651][T12407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.943669][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.943695][T12407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.996059][T12407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.996077][T12407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.996104][T12407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.269065][T12407] hsr_slave_0: entered promiscuous mode [ 1111.269932][T12407] hsr_slave_1: entered promiscuous mode [ 1111.273010][T12407] debugfs: 'hsr0' already exists in 'hsr' [ 1111.273036][T12407] Cannot create hsr debugfs directory [ 1111.998643][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1112.156501][T12578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.156700][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.156845][T12578] bridge_slave_0: entered allmulticast mode [ 1112.158536][T12578] bridge_slave_0: entered promiscuous mode [ 1112.328689][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.328830][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.328947][T12578] bridge_slave_1: entered allmulticast mode [ 1112.330558][T12578] bridge_slave_1: entered promiscuous mode [ 1112.547319][T12578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1112.589913][T12578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1112.633971][T12571] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.634123][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.634228][T12571] bridge_slave_0: entered allmulticast mode [ 1112.635817][T12571] bridge_slave_0: entered promiscuous mode [ 1112.646588][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1112.982961][T12571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.983071][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.983235][T12571] bridge_slave_1: entered allmulticast mode [ 1112.985390][T12571] bridge_slave_1: entered promiscuous mode [ 1113.098787][T12578] team0: Port device team_slave_0 added [ 1113.122096][T12578] team0: Port device team_slave_1 added [ 1113.349339][T12571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.371298][T12571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.372090][T12578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.372103][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.372125][T12578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.392409][T12578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.392425][T12578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.392451][T12578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1113.437263][T12571] team0: Port device team_slave_0 added [ 1113.443839][T12571] team0: Port device team_slave_1 added [ 1113.647912][T12571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1113.647926][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.647941][T12571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1113.688782][T12578] hsr_slave_0: entered promiscuous mode [ 1113.693790][T12578] hsr_slave_1: entered promiscuous mode [ 1113.698197][T12578] debugfs: 'hsr0' already exists in 'hsr' [ 1113.698224][T12578] Cannot create hsr debugfs directory [ 1113.704079][T12571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1113.704096][T12571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1113.704123][T12571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.307448][T12571] hsr_slave_0: entered promiscuous mode [ 1114.308347][T12571] hsr_slave_1: entered promiscuous mode [ 1114.308879][T12571] debugfs: 'hsr0' already exists in 'hsr' [ 1114.308903][T12571] Cannot create hsr debugfs directory [ 1114.566472][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1114.989082][T12703] FAULT_INJECTION: forcing a failure. [ 1114.989082][T12703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1114.989117][T12703] CPU: 1 UID: 0 PID: 12703 Comm: syz.2.1418 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1114.989141][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1114.989153][T12703] Call Trace: [ 1114.989162][T12703] [ 1114.989171][T12703] dump_stack_lvl+0xe8/0x150 [ 1114.989206][T12703] should_fail_ex+0x46b/0x600 [ 1114.989239][T12703] _copy_from_user+0x2d/0xb0 [ 1114.989261][T12703] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 1114.989285][T12703] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1114.989309][T12703] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1114.989349][T12703] ? __pfx_ksys_write+0x10/0x10 [ 1114.989388][T12703] do_syscall_64+0x166/0x520 [ 1114.989414][T12703] ? trace_irq_disable+0x3b/0x140 [ 1114.989440][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.989461][T12703] ? clear_bhb_loop+0x70/0xc0 [ 1114.989492][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.989512][T12703] RIP: 0033:0x7fe3c298e559 [ 1114.989531][T12703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.989548][T12703] RSP: 002b:00007fe3c0be5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1114.989570][T12703] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007fe3c298e559 [ 1114.989585][T12703] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000002d5 [ 1114.989600][T12703] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 1114.989613][T12703] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1114.989627][T12703] R13: 0000200000000890 R14: 00007fe3c0be5fd8 R15: 0000000000000000 [ 1114.989659][T12703] [ 1115.142285][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 1115.201160][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.202535][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.203149][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.142605][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.142685][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.757587][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1117.789009][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.316852][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.321792][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.943545][ T9744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1120.959925][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1120.963443][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1121.037901][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1121.044131][ T9744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.065252][ T9744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.074205][ T9744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.075711][ T9744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1121.886130][ T1001] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1122.057198][ T1001] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1122.059474][ T1001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1122.059503][ T1001] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1122.059543][ T1001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.106098][ T8970] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1122.261043][ T1001] usb 4-1: probing VID:PID(0424:012C) [ 1122.359745][ T1001] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 1122.359783][ T1001] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1122.359803][ T1001] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 1122.359823][ T1001] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1122.359843][ T1001] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1122.517045][ T8970] usb 3-1: Using ep0 maxpacket: 8 [ 1122.519888][ T8970] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.86 [ 1122.519942][ T8970] usb 3-1: no configurations [ 1122.519957][ T8970] usb 3-1: can't read configurations, error -22 [ 1122.656091][ T8970] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1122.680583][ T1001] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1122.807076][ T8970] usb 3-1: Using ep0 maxpacket: 8 [ 1122.808297][ T8970] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.86 [ 1122.808367][ T8970] usb 3-1: no configurations [ 1122.808381][ T8970] usb 3-1: can't read configurations, error -22 [ 1122.808988][ T8970] usb usb3-port1: attempt power cycle [ 1122.882406][ T1001] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 1123.100522][T12407] netdevsim netdevsim7: probe with driver netdevsim failed with error -12 [ 1123.214961][ T8970] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1123.241905][ T2580] bridge_slave_1: left allmulticast mode [ 1123.241944][ T2580] bridge_slave_1: left promiscuous mode [ 1123.242227][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.247366][ T8970] usb 3-1: Using ep0 maxpacket: 8 [ 1123.248154][ T8970] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.86 [ 1123.248211][ T8970] usb 3-1: no configurations [ 1123.248224][ T8970] usb 3-1: can't read configurations, error -22 [ 1123.376133][ T8970] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1123.396826][ T8970] usb 3-1: Using ep0 maxpacket: 8 [ 1123.399136][ T8970] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.86 [ 1123.399207][ T8970] usb 3-1: no configurations [ 1123.399221][ T8970] usb 3-1: can't read configurations, error -22 [ 1123.399615][ T8970] usb usb3-port1: unable to enumerate USB device [ 1123.447085][ T2580] bridge_slave_0: left allmulticast mode [ 1123.447114][ T2580] bridge_slave_0: left promiscuous mode [ 1123.447353][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.526335][ T5605] Bluetooth: hci3: command tx timeout [ 1123.526542][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.527483][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.752817][ T2580] bridge_slave_1: left allmulticast mode [ 1123.752854][ T2580] bridge_slave_1: left promiscuous mode [ 1123.754377][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.980315][ T2580] bridge_slave_0: left allmulticast mode [ 1123.980352][ T2580] bridge_slave_0: left promiscuous mode [ 1123.980617][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.206228][ T2580] bridge_slave_1: left allmulticast mode [ 1124.206324][ T2580] bridge_slave_1: left promiscuous mode [ 1124.206537][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.308160][ T2580] bridge_slave_0: left allmulticast mode [ 1124.308338][ T2580] bridge_slave_0: left promiscuous mode [ 1124.308630][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.066229][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.138401][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 1125.162527][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.238705][ T2580] bond0 (unregistering): Released all slaves [ 1125.606116][ T5605] Bluetooth: hci3: command tx timeout [ 1125.629137][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.726952][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.772565][ T2580] bond0 (unregistering): Released all slaves [ 1126.027607][ T8970] usb 4-1: USB disconnect, device number 48 [ 1126.076953][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.077734][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.078396][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.297856][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.393740][T12789] comedi comedi3: dt2815: I/O base address not correctly aligned [ 1126.400586][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.467671][ T2580] bond0 (unregistering): Released all slaves [ 1126.508320][ T5249] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1127.276790][ T5605] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1128.020829][ T5605] Bluetooth: hci3: command tx timeout [ 1128.288170][T12745] rxe_eth0 speed is unknown, defaulting to 1000 [ 1129.104890][T12816] input: syz0 as /devices/virtual/input/input9 [ 1129.280992][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.281779][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.670509][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 1130.078132][ T5605] Bluetooth: hci3: command tx timeout [ 1130.337983][T12839] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1438'. [ 1130.378029][T12839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1130.576852][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.237954][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.838569][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1131.860702][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.397614][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.442095][ T2580] hsr_slave_0: left promiscuous mode [ 1134.476159][ T2580] hsr_slave_1: left promiscuous mode [ 1134.477373][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.575312][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.842590][T12861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1444'. [ 1134.887394][T12861] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1135.026613][ T2580] hsr_slave_0: left promiscuous mode [ 1135.051937][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1135.100087][ T2580] hsr_slave_1: left promiscuous mode [ 1135.184995][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.348937][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.677356][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.717431][ T2580] hsr_slave_0: left promiscuous mode [ 1136.962263][ T2589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.126392][ T2580] hsr_slave_1: left promiscuous mode [ 1137.149236][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.247234][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.481198][T12869] FAULT_INJECTION: forcing a failure. [ 1137.481198][T12869] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.481221][T12869] CPU: 0 UID: 0 PID: 12869 Comm: syz.2.1445 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1137.481234][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1137.481242][T12869] Call Trace: [ 1137.481247][T12869] [ 1137.481253][T12869] dump_stack_lvl+0xe8/0x150 [ 1137.481275][T12869] should_fail_ex+0x46b/0x600 [ 1137.481296][T12869] should_failslab+0xa8/0x100 [ 1137.481310][T12869] __kmalloc_noprof+0xfb/0x790 [ 1137.481327][T12869] ? tomoyo_realpath_from_path+0xef/0x640 [ 1137.481352][T12869] ? tomoyo_realpath_from_path+0xef/0x640 [ 1137.481368][T12869] tomoyo_realpath_from_path+0xef/0x640 [ 1137.481385][T12869] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1137.481401][T12869] tomoyo_path_number_perm+0x246/0x5f0 [ 1137.481419][T12869] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1137.481434][T12869] ? __lock_acquire+0x747/0x2de0 [ 1137.481457][T12869] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1137.481473][T12869] ? hook_file_ioctl+0x1f5/0x610 [ 1137.481497][T12869] ? __fget_files+0x2a/0x420 [ 1137.481512][T12869] ? __fget_files+0x2a/0x420 [ 1137.481525][T12869] ? __fget_files+0x3a8/0x420 [ 1137.481537][T12869] ? __fget_files+0x2a/0x420 [ 1137.481552][T12869] security_file_ioctl+0xc3/0x2a0 [ 1137.481570][T12869] __se_sys_ioctl+0x47/0x170 [ 1137.481589][T12869] do_syscall_64+0x166/0x520 [ 1137.481604][T12869] ? trace_irq_disable+0x3b/0x140 [ 1137.481619][T12869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.481630][T12869] ? clear_bhb_loop+0x70/0xc0 [ 1137.481644][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.481654][T12869] RIP: 0033:0x7fe3c298e559 [ 1137.481666][T12869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.481675][T12869] RSP: 002b:00007fe3c0bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1137.481688][T12869] RAX: ffffffffffffffda RBX: 00007fe3c2c16090 RCX: 00007fe3c298e559 [ 1137.481696][T12869] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 1137.481703][T12869] RBP: 00007fe3c0bc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.481710][T12869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.481717][T12869] R13: 00007fe3c2c16128 R14: 00007fe3c2c16090 R15: 00007ffe8dae05c8 [ 1137.481734][T12869] [ 1137.481739][T12869] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1137.596760][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.597580][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.998357][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1139.126614][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1139.133144][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 1140.156434][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1140.796539][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1141.436560][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.442136][T12887] FAULT_INJECTION: forcing a failure. [ 1142.442136][T12887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.442172][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.3.1450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1142.442196][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1142.442207][T12887] Call Trace: [ 1142.442216][T12887] [ 1142.442225][T12887] dump_stack_lvl+0xe8/0x150 [ 1142.442259][T12887] should_fail_ex+0x46b/0x600 [ 1142.442293][T12887] _copy_from_user+0x2d/0xb0 [ 1142.442316][T12887] ___sys_sendmsg+0x1c6/0x360 [ 1142.442342][T12887] ? __lock_acquire+0x747/0x2de0 [ 1142.442373][T12887] ? __pfx____sys_sendmsg+0x10/0x10 [ 1142.442441][T12887] ? __fget_files+0x2a/0x420 [ 1142.442463][T12887] ? __fget_files+0x3a8/0x420 [ 1142.442497][T12887] __x64_sys_sendmsg+0x1b7/0x290 [ 1142.442524][T12887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1142.442572][T12887] do_syscall_64+0x166/0x520 [ 1142.442599][T12887] ? trace_irq_disable+0x3b/0x140 [ 1142.442624][T12887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.442645][T12887] ? clear_bhb_loop+0x70/0xc0 [ 1142.442674][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.442693][T12887] RIP: 0033:0x7fa4a29fe559 [ 1142.442712][T12887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.442730][T12887] RSP: 002b:00007fa4a0c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1142.442753][T12887] RAX: ffffffffffffffda RBX: 00007fa4a2c85fa0 RCX: 00007fa4a29fe559 [ 1142.442768][T12887] RDX: 0000000000000844 RSI: 0000200000000280 RDI: 0000000000000006 [ 1142.442781][T12887] RBP: 00007fa4a0c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.442797][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.442810][T12887] R13: 00007fa4a2c86038 R14: 00007fa4a2c85fa0 R15: 00007fffab3f5c48 [ 1142.442842][T12887] [ 1142.636444][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1143.927732][T12891] FAULT_INJECTION: forcing a failure. [ 1143.927732][T12891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1143.927755][T12891] CPU: 1 UID: 0 PID: 12891 Comm: syz.3.1452 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1143.927769][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1143.927776][T12891] Call Trace: [ 1143.927781][T12891] [ 1143.927814][T12891] dump_stack_lvl+0xe8/0x150 [ 1143.927838][T12891] should_fail_ex+0x46b/0x600 [ 1143.927859][T12891] _copy_from_user+0x2d/0xb0 [ 1143.927872][T12891] ___sys_sendmsg+0x1c6/0x360 [ 1143.927887][T12891] ? __lock_acquire+0x747/0x2de0 [ 1143.927905][T12891] ? __pfx____sys_sendmsg+0x10/0x10 [ 1143.927938][T12891] ? __fget_files+0x2a/0x420 [ 1143.927951][T12891] ? __fget_files+0x3a8/0x420 [ 1143.927969][T12891] __x64_sys_sendmsg+0x1b7/0x290 [ 1143.927986][T12891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1143.928011][T12891] do_syscall_64+0x166/0x520 [ 1143.928027][T12891] ? trace_irq_disable+0x3b/0x140 [ 1143.928042][T12891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.928052][T12891] ? clear_bhb_loop+0x70/0xc0 [ 1143.928066][T12891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.928076][T12891] RIP: 0033:0x7fa4a29fe559 [ 1143.928088][T12891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.928097][T12891] RSP: 002b:00007fa4a0c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1143.928110][T12891] RAX: ffffffffffffffda RBX: 00007fa4a2c85fa0 RCX: 00007fa4a29fe559 [ 1143.928117][T12891] RDX: 0000000000000000 RSI: 0000200000019780 RDI: 0000000000000006 [ 1143.928125][T12891] RBP: 00007fa4a0c56090 R08: 0000000000000000 R09: 0000000000000000 [ 1143.928131][T12891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1143.928138][T12891] R13: 00007fa4a2c86038 R14: 00007fa4a2c85fa0 R15: 00007fffab3f5c48 [ 1143.928155][T12891] [ 1143.942125][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1143.945484][ T2589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.183664][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1144.242984][T12899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1454'. [ 1144.936761][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1145.398923][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1145.530517][T12910] FAULT_INJECTION: forcing a failure. [ 1145.530517][T12910] name failslab, interval 1, probability 0, space 0, times 0 [ 1145.530556][T12910] CPU: 1 UID: 0 PID: 12910 Comm: syz.3.1456 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1145.530583][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1145.530596][T12910] Call Trace: [ 1145.530606][T12910] [ 1145.530616][T12910] dump_stack_lvl+0xe8/0x150 [ 1145.530652][T12910] should_fail_ex+0x46b/0x600 [ 1145.530691][T12910] should_failslab+0xa8/0x100 [ 1145.530717][T12910] __kmalloc_noprof+0xfb/0x790 [ 1145.530749][T12910] ? security_inode_alloc+0x39/0x310 [ 1145.530775][T12910] ? sk_prot_alloc+0xe7/0x210 [ 1145.530800][T12910] ? sk_prot_alloc+0xe7/0x210 [ 1145.530833][T12910] sk_prot_alloc+0xe7/0x210 [ 1145.530858][T12910] ? sk_alloc+0x27/0x390 [ 1145.530887][T12910] sk_alloc+0x3a/0x390 [ 1145.530918][T12910] alg_create+0xcf/0x160 [ 1145.530953][T12910] __sock_create+0x4b3/0x9d0 [ 1145.530985][T12910] __sys_socket+0xd6/0x1b0 [ 1145.531013][T12910] __x64_sys_socket+0x7a/0x90 [ 1145.531038][T12910] do_syscall_64+0x166/0x520 [ 1145.531067][T12910] ? trace_irq_disable+0x3b/0x140 [ 1145.531096][T12910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.531116][T12910] ? clear_bhb_loop+0x70/0xc0 [ 1145.531140][T12910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.531161][T12910] RIP: 0033:0x7fa4a29fe559 [ 1145.531182][T12910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.531200][T12910] RSP: 002b:00007fa4a0c35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1145.531233][T12910] RAX: ffffffffffffffda RBX: 00007fa4a2c86090 RCX: 00007fa4a29fe559 [ 1145.531250][T12910] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 1145.531265][T12910] RBP: 00007fa4a2a958b0 R08: 0000000000000000 R09: 0000000000000000 [ 1145.531280][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.531294][T12910] R13: 00007fa4a2c86128 R14: 00007fa4a2c86090 R15: 00007fffab3f5c48 [ 1145.531328][T12910] [ 1145.770899][T12901] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1454'. [ 1145.916440][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.477190][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.559912][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.561591][T12930] FAULT_INJECTION: forcing a failure. [ 1146.561591][T12930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.561625][T12930] CPU: 0 UID: 0 PID: 12930 Comm: syz.3.1459 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1146.561649][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1146.561661][T12930] Call Trace: [ 1146.561670][T12930] [ 1146.561679][T12930] dump_stack_lvl+0xe8/0x150 [ 1146.561713][T12930] should_fail_ex+0x46b/0x600 [ 1146.561748][T12930] _copy_from_user+0x2d/0xb0 [ 1146.561769][T12930] __sys_sendto+0x2b5/0x5d0 [ 1146.561805][T12930] ? __pfx___sys_sendto+0x10/0x10 [ 1146.561854][T12930] ? __pfx_ksys_write+0x10/0x10 [ 1146.561887][T12930] __x64_sys_sendto+0xde/0x100 [ 1146.561913][T12930] do_syscall_64+0x166/0x520 [ 1146.561940][T12930] ? trace_irq_disable+0x3b/0x140 [ 1146.561967][T12930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.561986][T12930] ? clear_bhb_loop+0x70/0xc0 [ 1146.562009][T12930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.562028][T12930] RIP: 0033:0x7fa4a29fe559 [ 1146.562046][T12930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.562063][T12930] RSP: 002b:00007fa4a0c56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1146.562084][T12930] RAX: ffffffffffffffda RBX: 00007fa4a2c85fa0 RCX: 00007fa4a29fe559 [ 1146.562100][T12930] RDX: 0000000000034000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1146.562114][T12930] RBP: 00007fa4a0c56090 R08: 0000200000000b00 R09: 0000000000000010 [ 1146.562128][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.562140][T12930] R13: 00007fa4a2c86038 R14: 00007fa4a2c85fa0 R15: 00007fffab3f5c48 [ 1146.562172][T12930] [ 1148.503711][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1149.748790][T12578] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1149.760278][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1149.811159][T12578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1149.921869][T12578] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1150.863068][T12578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.921603][T12578] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1150.991506][T12578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1151.032992][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1463'. [ 1151.190082][T12578] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1151.314014][T12578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1151.314913][T12745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.315044][T12745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.315659][T12745] bridge_slave_0: entered allmulticast mode [ 1151.349676][T12745] bridge_slave_0: entered promiscuous mode [ 1151.371436][T12967] FAULT_INJECTION: forcing a failure. [ 1151.371436][T12967] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.371473][T12967] CPU: 1 UID: 0 PID: 12967 Comm: syz.2.1466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1151.371499][T12967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1151.371512][T12967] Call Trace: [ 1151.371521][T12967] [ 1151.371530][T12967] dump_stack_lvl+0xe8/0x150 [ 1151.371567][T12967] should_fail_ex+0x46b/0x600 [ 1151.371598][T12967] should_failslab+0xa8/0x100 [ 1151.371621][T12967] __kmalloc_noprof+0xfb/0x790 [ 1151.371652][T12967] ? security_inode_alloc+0x39/0x310 [ 1151.371676][T12967] ? sk_prot_alloc+0xe7/0x210 [ 1151.371703][T12967] ? sk_prot_alloc+0xe7/0x210 [ 1151.371735][T12967] sk_prot_alloc+0xe7/0x210 [ 1151.371759][T12967] ? sk_alloc+0x27/0x390 [ 1151.371787][T12967] sk_alloc+0x3a/0x390 [ 1151.371817][T12967] alg_create+0xcf/0x160 [ 1151.371852][T12967] __sock_create+0x4b3/0x9d0 [ 1151.371883][T12967] __sys_socket+0xd6/0x1b0 [ 1151.371909][T12967] __x64_sys_socket+0x7a/0x90 [ 1151.371933][T12967] do_syscall_64+0x166/0x520 [ 1151.371962][T12967] ? trace_irq_disable+0x3b/0x140 [ 1151.371991][T12967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.372013][T12967] ? clear_bhb_loop+0x70/0xc0 [ 1151.372039][T12967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.372060][T12967] RIP: 0033:0x7fe3c298e559 [ 1151.372080][T12967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.372098][T12967] RSP: 002b:00007fe3c0bc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1151.372121][T12967] RAX: ffffffffffffffda RBX: 00007fe3c2c16090 RCX: 00007fe3c298e559 [ 1151.372138][T12967] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 1151.372151][T12967] RBP: 00007fe3c2a258b0 R08: 0000000000000000 R09: 0000000000000000 [ 1151.372165][T12967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.372179][T12967] R13: 00007fe3c2c16128 R14: 00007fe3c2c16090 R15: 00007ffe8dae05c8 [ 1151.372213][T12967] [ 1151.487594][T12745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.487807][T12745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.488007][T12745] bridge_slave_1: entered allmulticast mode [ 1151.490648][T12745] bridge_slave_1: entered promiscuous mode [ 1151.642068][T12745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.684578][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1151.703635][T12745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1151.832349][T12745] team0: Port device team_slave_0 added [ 1151.877574][T12745] team0: Port device team_slave_1 added [ 1152.290988][T12571] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1152.318335][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1152.323657][T12571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.325454][T12745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.325471][T12745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.325498][T12745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.340755][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1152.441782][T12571] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1154.303159][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1154.324103][T12571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1154.355547][T12745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1154.355565][T12745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.355594][T12745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.646670][T12745] hsr_slave_0: entered promiscuous mode [ 1154.648091][T12745] hsr_slave_1: entered promiscuous mode [ 1154.650706][T12745] debugfs: 'hsr0' already exists in 'hsr' [ 1154.650732][T12745] Cannot create hsr debugfs directory [ 1155.139462][T12578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.516409][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1155.661425][ T9744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1155.691105][ T9744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1155.695007][ T9744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1155.710409][ T9744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1155.723228][ T9744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1156.162549][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1156.417204][T13033] FAULT_INJECTION: forcing a failure. [ 1156.417204][T13033] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.417236][T13033] CPU: 1 UID: 0 PID: 13033 Comm: syz.2.1470 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1156.417259][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1156.417272][T13033] Call Trace: [ 1156.417279][T13033] [ 1156.417287][T13033] dump_stack_lvl+0xe8/0x150 [ 1156.417321][T13033] should_fail_ex+0x46b/0x600 [ 1156.417357][T13033] should_failslab+0xa8/0x100 [ 1156.417381][T13033] __kmalloc_noprof+0xfb/0x790 [ 1156.417408][T13033] ? tomoyo_realpath_from_path+0xef/0x640 [ 1156.417429][T13033] ? tomoyo_realpath_from_path+0xef/0x640 [ 1156.417458][T13033] tomoyo_realpath_from_path+0xef/0x640 [ 1156.417489][T13033] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1156.417517][T13033] tomoyo_path_number_perm+0x246/0x5f0 [ 1156.417545][T13033] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1156.417571][T13033] ? __lock_acquire+0x747/0x2de0 [ 1156.417611][T13033] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1156.417631][T13033] ? hook_file_ioctl+0x1f5/0x610 [ 1156.417664][T13033] ? __fget_files+0x2a/0x420 [ 1156.417683][T13033] ? __fget_files+0x2a/0x420 [ 1156.417698][T13033] ? __fget_files+0x3a8/0x420 [ 1156.417713][T13033] ? __fget_files+0x2a/0x420 [ 1156.417732][T13033] security_file_ioctl+0xc3/0x2a0 [ 1156.417755][T13033] __se_sys_ioctl+0x47/0x170 [ 1156.417778][T13033] do_syscall_64+0x166/0x520 [ 1156.417797][T13033] ? trace_irq_disable+0x3b/0x140 [ 1156.417816][T13033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.417831][T13033] ? clear_bhb_loop+0x70/0xc0 [ 1156.417848][T13033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.417863][T13033] RIP: 0033:0x7fe3c298e559 [ 1156.417878][T13033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1156.417891][T13033] RSP: 002b:00007fe3c0be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1156.417917][T13033] RAX: ffffffffffffffda RBX: 00007fe3c2c15fa0 RCX: 00007fe3c298e559 [ 1156.417928][T13033] RDX: 0000200000000c00 RSI: 000000008010640b RDI: 0000000000000003 [ 1156.417938][T13033] RBP: 00007fe3c0be6090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.417948][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.417957][T13033] R13: 00007fe3c2c16038 R14: 00007fe3c2c15fa0 R15: 00007ffe8dae05c8 [ 1156.417982][T13033] [ 1156.417989][T13033] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1157.094656][ T9744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1157.129020][ T9744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1157.157336][ T9744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1157.162198][ T9744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1157.165790][ T9744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1157.437105][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.721548][T13031] vlan0: entered allmulticast mode [ 1157.721572][T13031] bond0: entered allmulticast mode [ 1157.928272][ T9744] Bluetooth: hci2: command tx timeout [ 1158.284203][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1158.285066][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1158.308310][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1473'. [ 1159.707351][ T9744] Bluetooth: hci4: command tx timeout [ 1159.997505][ T9744] Bluetooth: hci2: command tx timeout [ 1160.427764][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1166.106090][ T9744] Bluetooth: hci4: command tx timeout [ 1166.106123][ T9744] Bluetooth: hci2: command tx timeout [ 1167.317465][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.318908][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.323617][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.324275][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.324640][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.357273][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.971037][T13106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1478'. [ 1168.031669][T13014] rxe_eth0 speed is unknown, defaulting to 1000 [ 1168.156163][ T5605] Bluetooth: hci2: command tx timeout [ 1168.156184][ T9744] Bluetooth: hci4: command tx timeout [ 1168.236032][ T5725] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1168.386934][ T5725] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1168.388557][ T5725] usb 3-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1168.388612][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7 [ 1168.388640][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024 [ 1168.388668][ T5725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.388710][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.430459][ T5725] usb 3-1: config 0 descriptor?? [ 1168.649864][ T5725] ath6kl: Failed to submit usb control message: -71 [ 1168.649917][ T5725] ath6kl: unable to send the bmi data to the device: -71 [ 1168.649933][ T5725] ath6kl: Unable to send get target info: -71 [ 1168.707639][ T5725] ath6kl: Failed to init ath6kl core: -71 [ 1168.709075][ T5725] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1168.727189][ T5725] usb 3-1: USB disconnect, device number 49 [ 1169.421946][T13041] rxe_eth0 speed is unknown, defaulting to 1000 [ 1169.508372][T12745] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1169.560833][T12745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.248071][ T9744] Bluetooth: hci4: command tx timeout [ 1171.498748][T12745] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1171.579953][T12745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1171.700669][T12745] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1171.760587][T12745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1171.791973][T12745] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1171.922622][T12745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1172.396530][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1172.920764][ T9744] Bluetooth: hci0: link tx timeout [ 1172.920786][ T9744] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1173.417187][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1173.419319][ T2589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1173.421341][ T3336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1173.422186][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1173.422962][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.956496][ T9744] Bluetooth: hci0: command 0x0406 tx timeout [ 1177.218032][T13189] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1488'. [ 1177.278830][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.278899][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.343123][T13190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.343713][T13190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.896227][ T2580] bridge_slave_1: left allmulticast mode [ 1177.896276][ T2580] bridge_slave_1: left promiscuous mode [ 1177.896622][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.925055][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1178.017788][ T2580] bridge_slave_0: left allmulticast mode [ 1178.017827][ T2580] bridge_slave_0: left promiscuous mode [ 1178.018088][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.369853][ T2580] bridge_slave_1: left allmulticast mode [ 1178.369894][ T2580] bridge_slave_1: left promiscuous mode [ 1178.370136][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.478077][ T68] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1178.628550][ T5605] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1178.737324][ T9530] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1178.930121][ T48] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.259715][T12439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.314266][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1179.661181][ T2580] bridge_slave_0: left allmulticast mode [ 1179.661550][ T2580] bridge_slave_0: left promiscuous mode [ 1179.676749][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.639346][ T9744] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1181.644719][ T9744] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1181.660806][ T9744] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1181.664719][ T9744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1181.666112][ T9744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1183.190297][ T5605] Bluetooth: hci1: unexpected event 0x1d length: 4 < 5 [ 1183.216933][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.296889][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.358757][ T2580] bond0 (unregistering): Released all slaves [ 1183.523087][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1183.701787][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.316446][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.338859][ T5605] Bluetooth: hci5: command tx timeout [ 1184.457606][T13233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.460904][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.526821][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.647902][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.743839][ T2580] bond0 (unregistering): Released all slaves [ 1185.108087][T13245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1186.450811][ T5605] Bluetooth: hci5: command tx timeout [ 1186.555700][T13014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.556644][T13014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.556828][T13014] bridge_slave_0: entered allmulticast mode [ 1186.558806][T13014] bridge_slave_0: entered promiscuous mode [ 1187.023518][T13014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.023647][T13014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.024434][T13014] bridge_slave_1: entered allmulticast mode [ 1187.028538][T13014] bridge_slave_1: entered promiscuous mode [ 1187.468422][ T5605] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1188.477267][ T5605] Bluetooth: hci5: command tx timeout [ 1188.801183][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.138879][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.139414][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.179133][T13041] bridge_slave_0: entered allmulticast mode [ 1189.323037][T13041] bridge_slave_0: entered promiscuous mode [ 1189.449641][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.451740][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.536622][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1189.588400][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1190.360469][T13014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.415289][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.415499][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.415669][T13041] bridge_slave_1: entered allmulticast mode [ 1190.440641][T13041] bridge_slave_1: entered promiscuous mode [ 1190.462564][T13014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.465031][T13212] rxe_eth0 speed is unknown, defaulting to 1000 [ 1190.556363][ T5605] Bluetooth: hci5: command tx timeout [ 1190.720227][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1190.937570][T13288] CIFS mount error: No usable UNC path provided in device string! [ 1190.937570][T13288] [ 1190.937594][T13288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1192.716884][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.755587][T13014] team0: Port device team_slave_0 added [ 1192.790144][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.800707][T13014] team0: Port device team_slave_1 added [ 1194.539618][T13041] team0: Port device team_slave_0 added [ 1194.543599][T13014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.543618][T13014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.543644][T13014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.566388][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1194.833773][ T2580] hsr_slave_0: left promiscuous mode [ 1194.866922][ T2580] hsr_slave_1: left promiscuous mode [ 1194.867735][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.947439][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.076161][ T5872] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1195.166239][ T2580] hsr_slave_0: left promiscuous mode [ 1195.197012][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.197685][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.198542][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.198825][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.207171][ T2580] hsr_slave_1: left promiscuous mode [ 1195.208428][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1195.229820][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1195.230405][ T5872] usb 3-1: not running at top speed; connect to a high speed hub [ 1195.230441][ T5872] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1195.276733][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.276759][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1195.276810][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.280829][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1195.280855][ T5872] usb 3-1: Product: 扪朻咂푶颭键쌍䫀瞌幊鈱铴ᨰጧ塀勿涀⊵啞ﺇꏘ샗୺⍦룪聯䆺钘ၙ谔翜뎪꜒兆⛉뙷䙳篌惉♐利㳃摁㟕寮爍ߎ酕평傧৻晽⽁䫣⌝烰瀯뵓尉椱㒋咨蓨⒮짝گ尶甛ꌴ龀ᄛφ盒했屚買ப봎㾴긛헼ॽ躆爿껑굮뚯闅츚褙৯䃊揁⠀∽ᰵ槙⮉嘢嫻 [ 1195.280887][ T5872] usb 3-1: Manufacturer: ࠾ [ 1195.315523][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1195.319772][ T5872] uvcvideo 3-1:1.0: Found UVC 1.00 device 扪朻咂푶颭键쌍䫀瞌幊鈱铴ᨰጧ塀勿涀⊵啞ﺇꏘ샗୺⍦룪聯䆺钘ၙ谔翜뎪꜒兆⛉뙷䙳篌惉♐利㳃摁㟕寮爍ߎ酕평傧৻晽⽁䫣⌝烰瀯뵓尉椱㒋咨蓨⒮짝گ尶甛ꌴ龀ᄛφ盒했屚買ப봎㾴긛헼ॽ躆爿껑굮뚯闅츚褙৯䃊揁⠀∽ᰵ槙⮉嘢嫻 (8086:0ad2) [ 1195.826830][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1195.877556][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1196.447627][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1196.477704][T13233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1196.508084][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1196.741109][T13041] team0: Port device team_slave_1 added [ 1196.750190][T13014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.750208][T13014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.750236][T13014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.070146][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1197.174188][ T5872] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 3: -71 (exp. 1). [ 1197.179139][ T5872] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1). [ 1197.190901][ T5872] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 3: -71 (exp. 1). [ 1197.190996][ T5872] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 1197.288946][ T5872] uvcvideo 3-1:1.0: Failed to create links for entity 3 [ 1197.288964][ T5872] uvcvideo 3-1:1.0: Failed to register entities (-22). [ 1197.329451][ T5872] usb 3-1: USB disconnect, device number 50 [ 1197.429070][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.429087][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.429107][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.521585][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.521603][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.521626][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.670656][T13014] hsr_slave_0: entered promiscuous mode [ 1197.672248][T13014] hsr_slave_1: entered promiscuous mode [ 1197.675136][T13014] debugfs: 'hsr0' already exists in 'hsr' [ 1197.675160][T13014] Cannot create hsr debugfs directory [ 1198.013396][T13041] hsr_slave_0: entered promiscuous mode [ 1198.100531][T13330] CIFS mount error: No usable UNC path provided in device string! [ 1198.100531][T13330] [ 1198.100557][T13330] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1198.193496][ T9744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1198.280063][T13041] hsr_slave_1: entered promiscuous mode [ 1198.282371][T13041] debugfs: 'hsr0' already exists in 'hsr' [ 1198.282393][T13041] Cannot create hsr debugfs directory [ 1198.310055][ T9744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1198.318801][ T9744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1198.324427][ T9744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1198.326491][ T9744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1200.496267][ T9744] Bluetooth: hci1: command tx timeout [ 1200.536178][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.956419][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.989185][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.989954][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.994116][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1202.246764][T13233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1202.576181][ T9744] Bluetooth: hci1: command tx timeout [ 1202.745462][T13331] rxe_eth0 speed is unknown, defaulting to 1000 [ 1202.839813][T13212] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.840778][T13212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.840980][T13212] bridge_slave_0: entered allmulticast mode [ 1202.844588][T13212] bridge_slave_0: entered promiscuous mode [ 1203.084445][T13212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1203.084812][T13212] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.085013][T13212] bridge_slave_1: entered allmulticast mode [ 1203.109213][T13212] bridge_slave_1: entered promiscuous mode [ 1203.437166][T13212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.588736][T13212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.968289][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1203.971665][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1203.975181][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1204.009559][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1204.012745][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1204.568870][T13212] team0: Port device team_slave_0 added [ 1204.583935][T13212] team0: Port device team_slave_1 added [ 1204.636332][ T9744] Bluetooth: hci1: command tx timeout [ 1204.878881][T13212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.878902][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.878926][T13212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.882924][T13212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.882940][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.882967][T13212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.320898][T13212] hsr_slave_0: entered promiscuous mode [ 1205.322236][T13212] hsr_slave_1: entered promiscuous mode [ 1205.323220][T13212] debugfs: 'hsr0' already exists in 'hsr' [ 1205.323246][T13212] Cannot create hsr debugfs directory [ 1206.085670][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.086488][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.265841][ T9744] Bluetooth: hci0: command tx timeout [ 1206.338928][T13378] rxe_eth0 speed is unknown, defaulting to 1000 [ 1206.719781][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.720466][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.727316][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.740506][ T9744] Bluetooth: hci1: command tx timeout [ 1206.909557][T13331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.909782][T13331] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.909985][T13331] bridge_slave_0: entered allmulticast mode [ 1206.914320][T13331] bridge_slave_0: entered promiscuous mode [ 1207.136911][T13331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.137039][T13331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.137239][T13331] bridge_slave_1: entered allmulticast mode [ 1207.139309][T13331] bridge_slave_1: entered promiscuous mode [ 1207.267135][T13331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.276891][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1207.324149][T13331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.370365][T13331] team0: Port device team_slave_0 added [ 1207.373967][T13331] team0: Port device team_slave_1 added [ 1207.428503][T13331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.428520][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.428546][T13331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.435181][T13331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.435198][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.435218][T13331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.706458][ T2580] bridge_slave_1: left allmulticast mode [ 1207.706501][ T2580] bridge_slave_1: left promiscuous mode [ 1207.706790][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.827440][ T2580] bridge_slave_0: left allmulticast mode [ 1207.827467][ T2580] bridge_slave_0: left promiscuous mode [ 1207.827696][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.026424][ T2580] bridge_slave_1: left allmulticast mode [ 1208.026451][ T2580] bridge_slave_1: left promiscuous mode [ 1208.026616][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.157983][ T2580] bridge_slave_0: left allmulticast mode [ 1208.158024][ T2580] bridge_slave_0: left promiscuous mode [ 1208.158275][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.315986][ T9744] Bluetooth: hci0: command tx timeout [ 1208.726718][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.806654][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.867615][ T2580] bond0 (unregistering): Released all slaves [ 1209.406606][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.506776][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.567590][ T2580] bond0 (unregistering): Released all slaves [ 1210.041798][T13331] hsr_slave_0: entered promiscuous mode [ 1210.043644][T13331] hsr_slave_1: entered promiscuous mode [ 1210.044200][T13331] debugfs: 'hsr0' already exists in 'hsr' [ 1210.044225][T13331] Cannot create hsr debugfs directory [ 1210.395997][ T9744] Bluetooth: hci0: command tx timeout [ 1210.519497][T13014] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1210.584642][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1210.769987][T13014] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1210.857545][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.390846][T13378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.391048][T13378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.391249][T13378] bridge_slave_0: entered allmulticast mode [ 1211.394003][T13378] bridge_slave_0: entered promiscuous mode [ 1211.396766][T13014] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1211.452023][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.479407][T13378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.479525][T13378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.479712][T13378] bridge_slave_1: entered allmulticast mode [ 1211.482335][T13378] bridge_slave_1: entered promiscuous mode [ 1211.483992][T13014] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1211.560577][T13014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.836535][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1211.837267][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1211.841480][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1211.868867][ T2580] hsr_slave_0: left promiscuous mode [ 1211.906218][ T2580] hsr_slave_1: left promiscuous mode [ 1211.907435][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.947151][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.146281][ T2580] hsr_slave_0: left promiscuous mode [ 1212.186038][ T2580] hsr_slave_1: left promiscuous mode [ 1212.186885][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.226855][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.316527][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1212.476218][ T9744] Bluetooth: hci0: command tx timeout [ 1212.477392][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1212.639497][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1212.686866][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1213.087409][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1213.106514][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1213.116560][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1213.329887][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.353570][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.495575][T13378] team0: Port device team_slave_0 added [ 1213.538829][T13378] team0: Port device team_slave_1 added [ 1213.580133][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.580152][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.580173][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.584104][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.584131][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.584154][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.843033][T13378] hsr_slave_0: entered promiscuous mode [ 1213.844438][T13378] hsr_slave_1: entered promiscuous mode [ 1213.845424][T13378] debugfs: 'hsr0' already exists in 'hsr' [ 1213.845448][T13378] Cannot create hsr debugfs directory [ 1214.788313][T13014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.923592][T13014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.026815][T13041] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1215.097221][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1215.098913][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.148520][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.165320][T13041] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1215.244062][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1215.312922][T13041] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1215.380089][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1215.486622][T13041] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1215.544664][T13041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1215.548198][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.548447][ T9500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.017183][ T9744] Bluetooth: hci4: link tx timeout [ 1216.017205][ T9744] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1216.093040][ T9744] Bluetooth: hci4: link tx timeout [ 1216.093062][ T9744] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1216.296879][ T9744] Bluetooth: hci4: link tx timeout [ 1216.296900][ T9744] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1216.322994][T13212] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1216.386446][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1216.431473][T13212] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1216.524324][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1216.534709][T13212] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1216.578521][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1216.646677][T13212] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1216.678923][T13212] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1216.922217][ T9744] Bluetooth: hci4: link tx timeout [ 1216.922239][ T9744] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1216.995229][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.354061][ T2580] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.385058][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1217.423044][ T5596] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1217.425529][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1217.430652][ T5596] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1217.431355][ T5596] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1217.598533][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.599220][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.602542][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.076497][ T9744] Bluetooth: hci4: command 0x0406 tx timeout [ 1218.224930][ T2580] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.239931][T13234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.301309][T13331] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1218.343706][T13331] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.362826][T13331] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1218.498715][T13331] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.514841][T13331] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1218.564384][T13331] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.858371][ T2580] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.877982][T13236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.903575][T13331] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1218.938923][T13331] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1219.314755][ T9744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1219.385705][ T9744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1219.388666][ T9744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1219.394553][ T9744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1219.400884][ T9744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1219.596035][ T5605] Bluetooth: hci2: command tx timeout [ 1220.383378][ T2580] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.648117][T13491] rxe_eth0 speed is unknown, defaulting to 1000 [ 1221.424953][T13378] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1221.450834][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1221.463143][T13506] rxe_eth0 speed is unknown, defaulting to 1000 [ 1221.494875][T13378] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1221.572540][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1221.596613][ T5605] Bluetooth: hci3: command tx timeout [ 1221.676048][ T5605] Bluetooth: hci2: command tx timeout [ 1221.722609][T13378] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1221.770466][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1221.802141][T13378] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1221.831814][T13378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1222.249055][T13212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.408013][ T2580] bridge_slave_1: left allmulticast mode [ 1222.408051][ T2580] bridge_slave_1: left promiscuous mode [ 1222.408304][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.568296][ T2580] bridge_slave_0: left allmulticast mode [ 1222.568336][ T2580] bridge_slave_0: left promiscuous mode [ 1222.568659][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.728016][T13236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1223.358737][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1223.676051][ T5605] Bluetooth: hci3: command tx timeout [ 1223.694895][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.746521][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.756106][ T5605] Bluetooth: hci2: command tx timeout [ 1223.800815][ T2580] bond0 (unregistering): Released all slaves [ 1223.996422][ T3338] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1224.076458][T13212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.228596][ T2580] IPVS: stopping backup sync thread 12362 ... [ 1224.251343][ T2581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.251582][ T2581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.340453][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.340587][ T2581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.627095][T13331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.645177][T13236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1225.410682][ T5249] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1225.471614][T13331] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.685000][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.685111][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.685216][T13491] bridge_slave_0: entered allmulticast mode [ 1225.687858][T13491] bridge_slave_0: entered promiscuous mode [ 1225.720853][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.720923][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.721043][T13491] bridge_slave_1: entered allmulticast mode [ 1225.722469][T13491] bridge_slave_1: entered promiscuous mode [ 1225.757831][ T5605] Bluetooth: hci3: command tx timeout [ 1225.765460][T13236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.765550][T13236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.836168][ T5605] Bluetooth: hci2: command tx timeout [ 1225.915419][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.949584][ T2581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.951177][ T2581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.028227][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1226.159087][T13506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.159284][T13506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.159465][T13506] bridge_slave_0: entered allmulticast mode [ 1226.160942][T13506] bridge_slave_0: entered promiscuous mode [ 1226.306099][ T2580] hsr_slave_0: left promiscuous mode [ 1226.327302][ T2580] hsr_slave_1: left promiscuous mode [ 1226.328939][ T2580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.328959][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.367244][ T2580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.367273][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.461406][ T2580] veth1_macvtap: left promiscuous mode [ 1226.461475][ T2580] veth0_macvtap: left promiscuous mode [ 1226.461617][ T2580] veth1_vlan: left promiscuous mode [ 1226.461731][ T2580] veth0_vlan: left promiscuous mode [ 1227.146618][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1227.187584][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1227.444404][T13491] team0: Port device team_slave_0 added [ 1227.444615][T13506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.444754][T13506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.444927][T13506] bridge_slave_1: entered allmulticast mode [ 1227.485681][T13506] bridge_slave_1: entered promiscuous mode [ 1227.541873][T13491] team0: Port device team_slave_1 added [ 1227.632107][T13378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.672510][T13506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.676822][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.676837][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.676861][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.753554][T13506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.773781][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.773799][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.773825][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.873088][ T5605] Bluetooth: hci3: command tx timeout [ 1227.889817][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1227.987779][T13506] team0: Port device team_slave_0 added [ 1228.100847][T13506] team0: Port device team_slave_1 added [ 1228.424008][T13491] hsr_slave_0: entered promiscuous mode [ 1228.433392][T13491] hsr_slave_1: entered promiscuous mode [ 1228.451551][T13378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1228.452699][T13506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1228.452713][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.452739][T13506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1228.511470][T13506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1228.511487][T13506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1228.511514][T13506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1228.684299][ T5249] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1228.806974][ T9500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.807106][ T9500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1228.951182][T13506] hsr_slave_0: entered promiscuous mode [ 1228.951971][T13506] hsr_slave_1: entered promiscuous mode [ 1228.952496][T13506] debugfs: 'hsr0' already exists in 'hsr' [ 1228.952520][T13506] Cannot create hsr debugfs directory [ 1228.973709][ T9500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.973857][ T9500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.103094][ T2580] IPVS: stop unused estimator thread 0... [ 1229.116652][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.484841][T13212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.757479][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1230.413472][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1230.758735][ T5249] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1231.591768][T13331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.435532][ T5249] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1232.452917][T13212] veth0_vlan: entered promiscuous mode [ 1232.564402][T13212] veth1_vlan: entered promiscuous mode [ 1232.920975][T13331] veth0_vlan: entered promiscuous mode [ 1233.233190][T13212] veth0_macvtap: entered promiscuous mode [ 1233.235243][T13331] veth1_vlan: entered promiscuous mode [ 1233.324457][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.325725][T13212] veth1_macvtap: entered promiscuous mode [ 1233.597413][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1233.636753][ T2580] bridge_slave_1: left allmulticast mode [ 1233.636780][ T2580] bridge_slave_1: left promiscuous mode [ 1233.636975][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.777194][ T2580] bridge_slave_0: left allmulticast mode [ 1233.777223][ T2580] bridge_slave_0: left promiscuous mode [ 1233.777452][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.976916][ T2580] bridge_slave_1: left allmulticast mode [ 1233.976950][ T2580] bridge_slave_1: left promiscuous mode [ 1233.977161][ T2580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.116994][ T2580] bridge_slave_0: left allmulticast mode [ 1234.117020][ T2580] bridge_slave_0: left promiscuous mode [ 1234.117190][ T2580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.727850][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1234.806697][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1234.868188][ T2580] bond0 (unregistering): Released all slaves [ 1234.884669][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.416644][ T2580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1235.496590][ T2580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1235.516569][T13236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.516799][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.521577][ T2580] bond0 (unregistering): Released all slaves [ 1235.672582][T13212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.693856][T13212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.957752][T13331] veth0_macvtap: entered promiscuous mode [ 1236.049136][T13331] veth1_macvtap: entered promiscuous mode [ 1236.329604][T13331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1236.680435][T13331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1237.646155][ T2580] hsr_slave_0: left promiscuous mode [ 1237.668661][ T2580] hsr_slave_1: left promiscuous mode [ 1237.669445][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.716828][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1237.856282][ T2580] hsr_slave_0: left promiscuous mode [ 1237.896081][ T2580] hsr_slave_1: left promiscuous mode [ 1237.898222][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1237.926914][ T2580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.331339][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1238.388515][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1238.719612][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.719681][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.818045][ T2580] team0 (unregistering): Port device team_slave_1 removed [ 1238.847419][ T2580] team0 (unregistering): Port device team_slave_0 removed [ 1239.072152][T13239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.072178][T13239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.092127][T13378] veth0_vlan: entered promiscuous mode [ 1239.364302][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1239.491621][T13378] veth1_vlan: entered promiscuous mode [ 1239.530236][T13236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.530255][T13236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1239.719406][ T2581] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.719656][ T2581] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1239.973081][ T2581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1239.973101][ T2581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.327679][ T9500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1240.327701][ T9500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1240.587295][T13378] veth0_macvtap: entered promiscuous mode [ 1240.593820][T13378] veth1_macvtap: entered promiscuous mode [ 1240.644500][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.277006][ T8186] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.316650][T13233] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.337791][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.951641][T13491] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1242.056181][T13233] IPVS: starting estimator thread 0... [ 1242.150387][T13751] IPVS: using max 7 ests per chain, 16800 per kthread [ 1242.220986][T13753] FAULT_INJECTION: forcing a failure. [ 1242.220986][T13753] name failslab, interval 1, probability 0, space 0, times 0 [ 1242.221010][T13753] CPU: 1 UID: 0 PID: 13753 Comm: syz.8.1520 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1242.221024][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1242.221031][T13753] Call Trace: [ 1242.221036][T13753] [ 1242.221050][T13753] dump_stack_lvl+0xe8/0x150 [ 1242.221074][T13753] should_fail_ex+0x46b/0x600 [ 1242.221095][T13753] should_failslab+0xa8/0x100 [ 1242.221109][T13753] __kmalloc_cache_noprof+0xa1/0x680 [ 1242.221127][T13753] ? bdi_split_work_to_wbs+0x537/0x940 [ 1242.221137][T13753] ? bdi_split_work_to_wbs+0x537/0x940 [ 1242.221152][T13753] bdi_split_work_to_wbs+0x537/0x940 [ 1242.221162][T13753] ? bdi_split_work_to_wbs+0x104/0x940 [ 1242.221178][T13753] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 1242.221192][T13753] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1242.221213][T13753] ? rwbase_write_lock+0x550/0x720 [ 1242.221236][T13753] sync_inodes_sb+0x221/0xc30 [ 1242.221247][T13753] ? super_lock+0xe0/0x3d0 [ 1242.221265][T13753] ? __pfx_sync_inodes_sb+0x10/0x10 [ 1242.221282][T13753] ? rt_spin_unlock+0x165/0x200 [ 1242.221296][T13753] __iterate_supers+0x282/0x420 [ 1242.221309][T13753] ? wakeup_flusher_threads+0x6d/0x210 [ 1242.221327][T13753] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1242.221344][T13753] ? __pfx___iterate_supers+0x10/0x10 [ 1242.221357][T13753] ? wakeup_flusher_threads+0x6d/0x210 [ 1242.221378][T13753] __ia32_sys_sync+0xa0/0x120 [ 1242.221394][T13753] ? __pfx___ia32_sys_sync+0x10/0x10 [ 1242.221412][T13753] ? do_syscall_64+0xc8/0x520 [ 1242.221429][T13753] do_syscall_64+0x166/0x520 [ 1242.221443][T13753] ? trace_irq_disable+0x3b/0x140 [ 1242.221458][T13753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.221470][T13753] ? clear_bhb_loop+0x70/0xc0 [ 1242.221483][T13753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.221495][T13753] RIP: 0033:0x7faf09c2e559 [ 1242.221505][T13753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1242.221515][T13753] RSP: 002b:00007faf07e86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1242.221528][T13753] RAX: ffffffffffffffda RBX: 00007faf09eb5fa0 RCX: 00007faf09c2e559 [ 1242.221537][T13753] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1242.221547][T13753] RBP: 00007faf07e86090 R08: 0000000000000000 R09: 0000000000000000 [ 1242.221554][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1242.221561][T13753] R13: 00007faf09eb6038 R14: 00007faf09eb5fa0 R15: 00007ffffd877368 [ 1242.221579][T13753] [ 1242.248371][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1242.310324][T13491] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1243.920908][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1243.925463][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.944847][T13491] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1243.978596][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1243.981928][T13491] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1244.134184][T13491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1244.477933][T13234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1246.864150][T13245] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.071185][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.071791][ T9500] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.138504][T13506] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1247.383301][T13506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1247.971136][T13506] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1249.156691][T13506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1249.255369][T13506] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1249.398536][T13506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1249.527120][T13237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1249.682394][ T5576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.179108][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.203053][ T2581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.803277][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1255.390671][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1257.916730][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1257.917603][T13238] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1258.435535][T13819] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1533'. [ 1258.491125][T13820] process 'syz.8.1533' launched '/dev/fd/7' with NULL argv: empty string added [ 1258.570200][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1259.270865][ T199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1260.560162][ T199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.116504][T13243] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.166203][T13506] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1261.203820][T13506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1261.390792][ T8186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.390814][ T8186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.643289][ T2581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.643313][ T2581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.048302][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.691684][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.351273][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.893333][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.984135][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1265.061436][ T3363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.061671][ T3363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1265.972412][ T5726] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.099051][ T3363] IPVS: starting estimator thread 0... [ 1266.526315][T13868] CIFS mount error: No usable UNC path provided in device string! [ 1266.526315][T13868] [ 1266.526341][T13868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1267.082071][T13506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1267.089648][ T3336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.089878][ T3336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.672973][T13861] IPVS: using max 8 ests per chain, 19200 per kthread [ 1267.743598][T13234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1267.852437][ T9744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1267.893024][ T9744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1267.936750][ T9744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1267.938231][ T9744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1267.980106][ T9744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1268.236015][T12995] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1268.296822][T13506] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.391509][T12995] usb 9-1: Using ep0 maxpacket: 16 [ 1268.394634][T12995] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1268.395821][T12995] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1268.396317][T12995] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1268.407935][T13243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.408904][T13243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.457917][T12995] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.457949][T12995] usb 9-1: Product: ᠉ [ 1268.457964][T12995] usb 9-1: Manufacturer: ⪌섙䂿ퟑᱶ㴌䞅Ȕ긋鵇੧뱣빺喑쌡砸묬褑哞᝛塃෷♱芀ꛉↀ慧嬱䍖믻ꍘ鮪⍶柨઒碸캐꡻鼉얦啑㌃㛜큡뮿̐퇒葧ꬰ먍ق޻處൓ﶣ㾀뉉 ܕ뵎곕ࢸᕮዢ죔ᐥ᤯ℷ涤䠀൶ꦖ쯬 [ 1268.457991][T12995] usb 9-1: SerialNumber: 챂쎓 [ 1268.522161][T13878] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1268.522302][T13878] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1268.782456][T13234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.782990][T13234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.826895][ T2580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1268.885198][T11538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1268.971521][T12995] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 1269.049359][T12995] usb 9-1: USB disconnect, device number 2 [ 1269.099423][T13732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1269.437071][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.026274][T13243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.079516][T13732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.082326][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.158122][ T5605] Bluetooth: hci4: command tx timeout [ 1270.382005][ T5576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1271.686052][T11538] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1271.841362][T11538] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1271.843113][T11538] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1271.843146][T11538] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1271.845721][T11538] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1271.845748][T11538] usb 8-1: Product: syz [ 1271.845764][T11538] usb 8-1: Manufacturer: syz [ 1271.970966][T11538] mos7840 8-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1272.344612][ T5605] Bluetooth: hci4: command tx timeout [ 1272.976292][T11538] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 1273.014462][ T199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1274.037277][ T199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1274.201196][ T2580] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1274.296098][ T199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1274.304606][T13857] rxe_eth0 speed is unknown, defaulting to 1000 [ 1274.322317][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.338674][ T3336] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.476033][ T3336] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.476221][ T5605] Bluetooth: hci4: command tx timeout [ 1274.476445][ T3336] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.476940][ T3336] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.477354][ T3336] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.477768][ T3336] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.478125][ T3336] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.626872][T13239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1274.636352][ T199] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.196682][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.197381][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.441087][T13234] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.574286][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.513213][ T38] INFO: task kworker/1:3:1883 blocked for more than 144 seconds. [ 1276.513243][ T38] Tainted: G L syzkaller #0 [ 1276.513256][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1276.513267][ T38] task:kworker/1:3 state:D stack:14848 pid:1883 tgid:1883 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1276.513313][ T38] Workqueue: events_freezable mmc_rescan [ 1276.513431][ T38] Call Trace: [ 1276.513439][ T38] [ 1276.513455][ T38] __schedule+0x16d9/0x5700 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1276.513500][ T38] ? __pfx___schedule+0x10/0x10 [ 1276.513536][ T38] ? __pfx___schedule+0x10/0x10 [ 1276.513572][ T38] ? schedule+0x90/0x2b0 [ 1276.513600][ T38] schedule+0x164/0x2b0 [ 1276.513628][ T38] schedule_timeout+0xc0/0x2c0 [ 1276.513654][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1276.513680][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.513713][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.513740][ T38] ? wait_for_completion+0x272/0x5e0 [ 1276.513768][ T38] wait_for_completion+0x2ca/0x5e0 [ 1276.513808][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1276.513837][ T38] ? vub300_mmc_request+0x1000/0x1910 [ 1276.513929][ T38] ? trace_mmc_request_start+0x81/0x1e0 [ 1276.513960][ T38] mmc_wait_for_req_done+0x37/0x490 [ 1276.513990][ T38] ? mmc_start_request+0x202/0x2d0 [ 1276.514018][ T38] ? mmc_wait_for_req+0x1b5/0x240 [ 1276.514046][ T38] mmc_wait_for_cmd+0x183/0x2a0 [ 1276.514076][ T38] ? __pfx_mmc_wait_for_cmd+0x10/0x10 [ 1276.514129][ T38] ? __pfx_mmc_wait_done+0x10/0x10 [ 1276.514160][ T38] ? rt_spin_unlock+0x165/0x200 [ 1276.514191][ T38] sdio_reset+0x1fa/0x3a0 [ 1276.514246][ T38] ? __pfx_sdio_reset+0x10/0x10 [ 1276.514280][ T38] ? __mmc_claim_host+0x15d/0x640 [ 1276.514313][ T38] ? irqentry_exit+0x218/0x920 [ 1276.514341][ T38] ? mmc_power_up+0x5d/0x650 [ 1276.514367][ T38] ? mmc_attach_sd_uhs2+0x5e/0x900 [ 1276.514388][ T38] ? trace_irq_disable+0x3b/0x140 [ 1276.514422][ T38] mmc_rescan+0x6ee/0x1040 [ 1276.514471][ T38] ? process_scheduled_works+0x97a/0x1630 [ 1276.514499][ T38] process_scheduled_works+0xc3d/0x1630 [ 1276.514561][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1276.514595][ T38] ? assign_work+0x3cf/0x5d0 [ 1276.514628][ T38] worker_thread+0xa47/0xfb0 [ 1276.514685][ T38] kthread+0x38b/0x470 [ 1276.514707][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1276.514733][ T38] ? __pfx_kthread+0x10/0x10 [ 1276.514756][ T38] ret_from_fork+0x514/0xb70 [ 1276.514781][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.514802][ T38] ? __switch_to+0xc89/0x1420 [ 1276.514833][ T38] ? __pfx_kthread+0x10/0x10 [ 1276.514857][ T38] ret_from_fork_asm+0x1a/0x30 [ 1276.514895][ T38] [ 1276.514986][ T38] INFO: task kworker/0:3:8970 blocked for more than 144 seconds. [ 1276.515005][ T38] Tainted: G L syzkaller #0 [ 1276.515017][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1276.515027][ T38] task:kworker/0:3 state:D stack:23328 pid:8970 tgid:8970 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 1276.515076][ T38] Workqueue: usb_hub_wq hub_event [ 1276.515217][ T38] Call Trace: [ 1276.515225][ T38] [ 1276.515238][ T38] __schedule+0x16d9/0x5700 [ 1276.515264][ T38] ? __lock_acquire+0x747/0x2de0 [ 1276.515319][ T38] ? __pfx___schedule+0x10/0x10 [ 1276.515356][ T38] ? schedule+0x90/0x2b0 [ 1276.515385][ T38] schedule+0x164/0x2b0 [ 1276.515413][ T38] schedule_timeout+0xc0/0x2c0 [ 1276.515438][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1276.515465][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1276.515500][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1276.515527][ T38] ? wait_for_completion+0x272/0x5e0 [ 1276.515555][ T38] wait_for_completion+0x2ca/0x5e0 [ 1276.515594][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1276.515629][ T38] ? __flush_work+0x101/0xd70 [ 1276.515663][ T38] __flush_work+0x9c2/0xd70 [ 1276.515690][ T38] ? __flush_work+0x101/0xd70 [ 1276.515725][ T38] ? __pfx___flush_work+0x10/0x10 [ 1276.515755][ T38] ? __pfx_wq_barrier_func+0x10/0x10 [ 1276.515806][ T38] ? __cancel_work_sync+0x5c/0x110 [ 1276.516334][ T38] __cancel_work_sync+0xbf/0x110 [ 1276.516363][ T38] mmc_stop_host+0xd9/0x460 [ 1276.516398][ T38] mmc_remove_host+0x15/0x60 [ 1276.516420][ T38] vub300_disconnect+0x154/0x2f0 [ 1276.516453][ T38] usb_unbind_interface+0x295/0x9f0 [ 1276.516536][ T38] ? kernfs_remove_by_name_ns+0x101/0 ** replaying previous printk message ** [ 1276.516536][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1276.516560][ T38] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1276.516585][ T38] device_release_driver_internal+0x4f5/0x880 [ 1276.516654][ T38] bus_remove_device+0x449/0x560 [ 1276.516718][ T38] ? __pfx_bus_remove_device+0x10/0x10 [ 1276.516748][ T38] ? up_read+0x34/0x180 [ 1276.516770][ T38] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1276.516794][ T38] device_del+0x528/0x8f0 [ 1276.516827][ T38] ? __pfx_device_del+0x10/0x10 [ 1276.516849][ T38] ? kobject_put+0x516/0x550 [ 1276.516914][ T38] usb_disable_device+0x3d4/0x8d0 [ 1276.516949][ T38] usb_disconnect+0x32d/0x990 [ 1276.516980][ T38] hub_event+0x1bb7/0x4cf0 [ 1276.517014][ T38] ? __lock_acquire+0x747/0x2de0 [ 1276.517049][ T38] ? __lock_acquire+0x747/0x2de0 [ 1276.517079][ T38] ? register_lock_class+0x31/0x2e0 [ 1276.517270][ T38] ? __pfx_hub_event+0x10/0x10 [ 1276.517306][ T38] ? rcu_is_watching+0x16/0xb0 [ 1276.517329][ T38] ? process_scheduled_works+0x97a/0x1630 [ 1276.517357][ T38] process_scheduled_works+0xc3d/0x1630 [ 1276.517418][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1276.517454][ T38] ? assign_work+0x3cf/0x5d0 [ 1276.517487][ T38] worker_thread+0xa47/0xfb0 [ 1276.517530][ T38] ? __kthread_parkme+0x71/0x1f0 [ 1276.517570][ T38] kthread+0x38b/0x470 [ 1276.517592][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1276.517618][ T38] ? __pfx_kthread+0x10/0x10 [ 1276.517641][ T38] ret_from_fork+0x514/0xb70 [ 1276.517666][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1276.517688][ T38] ? __switch_to+0xc89/0x1420 [ 1276.517720][ T38] ? __pfx_kthread+0x10/0x10 [ 1276.517742][ T38] ret_from_fork_asm+0x1a/0x30 [ 1276.517780][ T38] [ 1276.517861][ T38] [ 1276.517861][ T38] Showing all locks held in the system: [ 1276.517871][ T38] locks held by ksoftirqd/0/15: 3, last CPU#0: [ 1276.517887][ T38] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1276.517947][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1276.518000][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1276.518052][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 1276.518069][ T38] #0: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1276.519871][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1276.519926][ T38] #2: ffffffff8f1c3e20 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 1276.519985][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 1276.520000][ T38] #0: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1276.520061][ T38] locks held by kworker/1:3/1883: 2, on CPU#1: [ 1276.520076][ T38] #0: ffff88813ff2a938 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.520140][ T38] #1: ffffc900075bfc40 ((work_completion)(&(&host->detect)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.520200][ T38] locks held by kworker/u8:11/2580: 3, on CPU#1: [ 1276.520214][ T38] #0: ffff888033eaa938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.520267][ T38] #1: ffffc9000a957c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.520322][ T38] #2: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 1276.520463][ T38] locks held by dhcpcd/5249: 5, last CPU#0: [ 1276.520479][ T38] #0: ffffffff8f29f470 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 1276.520638][ T38] #1: ffff88801b7803b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18e/0x1d80 [ 1276.520694][ T38] #2: ffff88813ff551b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x27d/0x1d80 [ 1276.520753][ T38] #3: ffff8880b8443ef8 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_noprof+0x182/0x690 [ 1276.520809][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 1276.520860][ T38] locks held by dhcpcd/5251: 2, last CPU#0: [ 1276.520875][ T38] #0: ffff88803815a8f0 (&u->iolock){+.+.}-{4:4}, at: unix_stream_read_generic+0x43c/0x22e0 [ 1276.520956][ T38] #1: ffff88803815aa08 (&u->lock){+.+.}-{3:3}, at: unix_stream_read_generic+0x45e/0x22e0 [ 1276.521008][ T38] locks held by getty/5338: 2, on CPU#1: [ 1276.521023][ T38] #0: ffff888036dde0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1276.521203][ T38] #1: ffffc900044eb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1276.521256][ T38] locks held by kworker/1:4/5725: 5, last CPU#1: [ 1276.521272][ T38] #0: ffff88813ff2a538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.521327][ T38] #1: ffffc90006127c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.521382][ T38] #2: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1276.521436][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1276.521488][ T38] #4: ffffffff907062b8 (&tbl->lock){+...}-{3:3}, at: neigh_periodic_work+0xc6b/0xe90 [ 1276.585502][ T5605] Bluetooth: hci4: command tx timeout [ 1276.703964][ T38] locks held by kworker/0:5/5726: 3, last CPU#0: [ 1276.703985][ T38] #0: ffff888033bcfd38 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.704062][ T38] #1: ffffc90006137c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.704118][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1276.704170][ T38] locks held by kworker/u8:18/8186: 2, on CPU#0: [ 1276.704186][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1276.707036][ T38] #1: ffffc9001f0b7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.002276][ T38] locks held by kworker/0:3/8970: 5, on CPU#0: [ 1277.002292][ T38] #0: ffff8880212d8938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.002347][ T38] #1: ffffc9002040fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.002401][ T38] #2: ffff88802617a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 1277.002471][ T38] #3: ffff88803359a210 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xe3/0x990 [ 1277.002516][ T38] #4: ffff8880278691d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1277.002569][ T38] locks held by kworker/u8:19/9500: 6, last CPU#0: [ 1277.002584][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.002636][ T38] #1: ffffc900117c7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.002690][ T38] #2: ffff888026b58310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1277.002867][ T38] #3: ffff88805f78cd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1277.002921][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.002969][ T38] #5: ffff8880b8437350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 1277.003058][ T38] locks held by kworker/u8:21/13233: 2, on CPU#1: [ 1277.003073][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.003126][ T38] #1: ffffc90004d4fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.003179][ T38] locks held by kworker/u8:22/13234: 7, on CPU#0: [ 1277.003193][ T38] #0: ffff88801beb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.003245][ T38] #1: ffffc90004d67c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.003295][ T38] #2: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1277.003376][ T38] #3: ffff88803d81b160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1277.003465][ T38] #4: ffff8880237f0310 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1277.003519][ T38] #5: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1277.003565][ T38] #6: ffff888038205060 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2130 [ 1277.030076][ T38] locks held by kworker/u8:27/13239: 6, last CPU#0: [ 1277.030097][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.030161][ T38] #1: ffffc900045b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.030215][ T38] #2: ffff88803c26c310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1277.030270][ T38] #3: ffff8880382be120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1277.030324][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.030370][ T38] #5: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.030416][ T38] locks held by kworker/u8:28/13240: 5, last CPU#0: [ 1277.030431][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.030482][ T38] #1: ffffc900045a7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.030548][ T38] #2: ffff88802fe46310 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 1277.030607][ T38] #3: ffff88806038f120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 1277.030659][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.030706][ T38] locks held by kworker/u8:30/13243: 5, last CPU#1: [ 1277.030721][ T38] #0: ffff888034667138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.030772][ T38] #1: ffffc900044c7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.030824][ T38] #2: ffffffff8f059580 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1277.030875][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1277.030926][ T38] #4: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.030981][ T38] locks held by syz-executor/13857: 2, on CPU#1: [ 1277.030995][ T38] #0: ffffffff905c8080 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1277.031049][ T38] #1: ffffffff905d68b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 1277.031102][ T38] locks held by kworker/1:7/13887: 2, on CPU#1: [ 1277.031116][ T38] #0: ffff88813ff2b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.031168][ T38] #1: ffffc90005f47c40 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1277.031220][ T38] locks held by syz.7.1546/13964: 4, last CPU#1: [ 1277.031235][ T38] #0: ffff88803e342ab8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1277.031288][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1277.031337][ T38] #2: ffff888034d68f58 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1277.031393][ T38] #3: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.031439][ T38] locks held by modprobe/13979: 2, last CPU#1: [ 1277.031453][ T38] #0: ffff888060d937b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1277.031504][ T38] #1: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1277.031553][ T38] locks held by modprobe/13980: 3, last CPU#1: [ 1277.031568][ T38] #0: ffff8880382e83b8 (&mm->mmap_lock){++++}-{4:4}, at: tomoyo_path_perm+0x251/0x560 [ 1277.058381][ T38] #1: ffffffff8f311970 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1277.058439][ T38] #2: ffffffff8f1c3d00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1277.058491][ T38] locks held by dhcpcd/13984: 1, last CPU#1: [ 1277.058505][ T38] #0: ffff88813ff551b8 (&mm->mmap_lock){++++}-{4:4}, at: __vm_munmap+0x163/0x3e0 [ 1277.058556][ T38] [ 1277.058562][ T38] ============================================= [ 1277.058562][ T38] [ 1277.058572][ T38] NMI backtrace for cpu 1 [ 1277.058589][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1277.058615][ T38] Tainted: [L]=SOFTLOCKUP [ 1277.058623][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1277.058634][ T38] Call Trace: [ 1277.058643][ T38] [ 1277.058652][ T38] dump_stack_lvl+0xe8/0x150 [ 1277.058682][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1277.058792][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1277.058816][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1277.058841][ T38] sys_info+0x135/0x170 [ 1277.058859][ T38] watchdog+0xfd7/0x1030 [ 1277.058893][ T38] ? watchdog+0x1c7/0x1030 [ 1277.058925][ T38] kthread+0x38b/0x470 [ 1277.058946][ T38] ? __pfx_watchdog+0x10/0x10 [ 1277.058968][ T38] ? __pfx_kthread+0x10/0x10 [ 1277.058990][ T38] ret_from_fork+0x514/0xb70 [ 1277.059021][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.059041][ T38] ? __switch_to+0xc89/0x1420 [ 1277.059070][ T38] ? __pfx_kthread+0x10/0x10 [ 1277.059092][ T38] ret_from_fork_asm+0x1a/0x30 [ 1277.059127][ T38] [ 1277.059151][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1277.059185][ C0] NMI backtrace for cpu 0 [ 1277.059202][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1277.059226][ C0] Tainted: [L]=SOFTLOCKUP [ 1277.059233][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1277.059244][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1277.059309][ C0] Code: e8 0e 8b 63 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 50 d0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1277.059325][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 1277.059341][ C0] RAX: 1ffffffff35d6300 RBX: 00000000000003fd RCX: 0000000000000000 [ 1277.059354][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1277.059366][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1277.059378][ C0] R10: dffffc0000000000 R11: ffffffff85634df0 R12: dffffc0000000000 [ 1277.059391][ C0] R13: 0000000000000000 R14: ffffffff9aeb1f80 R15: 0000000000000000 [ 1277.059403][ C0] FS: 0000000000000000(0000) GS:ffff8881249bb000(0000) knlGS:0000000000000000 [ 1277.059419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1277.059432][ C0] CR2: 0000558f5838f450 CR3: 000000006c4e2000 CR4: 00000000003526f0 [ 1277.059448][ C0] Call Trace: [ 1277.059456][ C0] [ 1277.059465][ C0] wait_for_lsr+0x190/0x300 [ 1277.059531][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 1277.059558][ C0] serial8250_console_write+0xaa2/0x1220 [ 1277.059591][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1277.059632][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1277.059666][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1277.059695][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1277.059733][ C0] nbcon_kthread_func+0x679/0x880 [ 1277.059761][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1277.059785][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1277.059813][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1277.059840][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1277.059869][ C0] kthread+0x38b/0x470 [ 1277.059886][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1277.059910][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.059929][ C0] ret_from_fork+0x514/0xb70 [ 1277.059948][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1277.059966][ C0] ? __switch_to+0xc89/0x1420 [ 1277.059993][ C0] ? __pfx_kthread+0x10/0x10 [ 1277.060011][ C0] ret_from_fork_asm+0x1a/0x30 [ 1277.060037][ C0] [ 1277.075702][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1278.618562][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1278.629753][ T38] Tainted: [L]=SOFTLOCKUP [ 1278.634085][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1278.644125][ T38] Call Trace: [ 1278.647401][ T38] [ 1278.650320][ T38] vpanic+0x56d/0xa60 [ 1278.654296][ T38] ? __pfx___schedule+0x10/0x10 [ 1278.659139][ T38] ? __pfx_vpanic+0x10/0x10 [ 1278.663642][ T38] panic+0xc5/0xd0 [ 1278.667359][ T38] ? __pfx_panic+0x10/0x10 [ 1278.671767][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1278.677217][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1278.682581][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1278.688729][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1278.694880][ T38] watchdog+0x1030/0x1030 [ 1278.699218][ T38] ? watchdog+0x1c7/0x1030 [ 1278.703634][ T38] kthread+0x38b/0x470 [ 1278.707695][ T38] ? __pfx_watchdog+0x10/0x10 [ 1278.712365][ T38] ? __pfx_kthread+0x10/0x10 [ 1278.716950][ T38] ret_from_fork+0x514/0xb70 [ 1278.721540][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1278.726640][ T38] ? __switch_to+0xc89/0x1420 [ 1278.731324][ T38] ? __pfx_kthread+0x10/0x10 [ 1278.735908][ T38] ret_from_fork_asm+0x1a/0x30 [ 1278.740700][ T38] [ 1278.743986][ T38] Kernel Offset: disabled [ 1278.748300][ T38] Rebooting in 86400 seconds..