last executing test programs: 1m31.397740384s ago: executing program 3 (id=37): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1m27.341491801s ago: executing program 3 (id=46): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80, 0x10000, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0x7, 0x9, 0x10, 0x5, 0x9, 0x1, 0x7, 0xb, 0x6, 0x5, 0x6, 0xa, 0x2, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0xfff, 0xe403, 0x5e4b, 0xfff], [0x7, 0x2, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x4, 0x6, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 1m21.81844162s ago: executing program 3 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./pipe\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./pipe\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./pipe/gssd/clntXX/gssd\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0xffff) epoll_create1(0x80000) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000400)='environ\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x20040040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) read(r0, &(0x7f0000000340)=""/10, 0xa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newlink={0x24, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 1m20.343434999s ago: executing program 3 (id=57): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(0x0, 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa82, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000001800)='./file0\x00', 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) 1m20.24227376s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000000e2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_setup(0xfffffffa, &(0x7f00000002c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x1) write$sndseq(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="000000000000000002004e24640101000000000000000000000000000038c2e3a50000000000000000000000000000000000000000000000740e21350000000000000000000000000000000000000000000093b8e200000000000000000000000000000000000000000000000000000000000000000000000000000001000080000000000000000000000008000000142fc4f6d4d9b7e03f2aec960300000000c383be3d2bc9808da4d60c88dfd708db4df378aaed329978dab459c414024becb79b1f4549e739950244b5328b77f4a208fd39dcda95ccb66938bd45c5b3b817843d12b199b98ea1e122c75a67a8f61baa5d2438"], 0xfef5) 1m16.604586412s ago: executing program 3 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a3100000000050001000700dd89baea3e"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) recvmsg(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) 1m16.526150009s ago: executing program 4 (id=62): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x3) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}]}}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f00000002c0)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x0, 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000340)={0x18, r1}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000380)={0x8, r1}) close(r0) 1m16.178784997s ago: executing program 4 (id=63): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000007c0)={0x2, 0x4e23, @multicast2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./mysys\x00', &(0x7f0000001a40)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001a80)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000) 1m15.31812127s ago: executing program 3 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4044040) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r3, &(0x7f00000002c0)='1', 0x1) 1m14.078720512s ago: executing program 4 (id=67): socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) pipe(0x0) syz_ublk_setup_io_uring(0x3, &(0x7f0000000640)={0x0, 0x4}, &(0x7f00000006c0)=0x0, 0x0, 0x0) syz_io_uring_modify_offsets$flags(r0, 0x0, 0x68, 0x1) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000a80)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe, 0x0, 0x0, 0x10}}}, &(0x7f0000000ac0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000b00)={0x0, 0xc1, 0x10, 0xfffffffd, 0x7f}, &(0x7f0000000b80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x42, 0x3, 0x204}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf0b, 0x2, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 1m10.550879077s ago: executing program 4 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019b40)=0x7) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) timerfd_create(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000019bc0)) 1m8.551727466s ago: executing program 4 (id=73): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r3, &(0x7f0000001000)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a000)=0x7) clock_nanosleep(0x9, 0x0, &(0x7f000001a040)={0x0, 0x3938700}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000810) 58.786755137s ago: executing program 32 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x4044040) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r3, &(0x7f00000002c0)='1', 0x1) 52.348734315s ago: executing program 33 (id=73): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r3, &(0x7f0000001000)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f000001a000)=0x7) clock_nanosleep(0x9, 0x0, &(0x7f000001a040)={0x0, 0x3938700}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000810) 40.629347169s ago: executing program 5 (id=101): r0 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$md_new_array(r0, &(0x7f0000000180)={'md', @num=0x0}, 0x3) gettid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x45facfd65bcc5987) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x8, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000003c0)={'/sys/block/md', @num=0x0, '/md/', @array='level\x00'}, 0x1, 0x0) r2 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f00000000c0)={'/sys/block/md', @num=0x0, '/md/', @array='serialize_policy\x00'}, 0x1, 0x0) write$md_sysfs(r2, &(0x7f0000000580)=@dev={'1:', 0x0}, 0x16) write$md_sysfs(r2, 0x0, 0x0) openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000003a00)={'/sys/block/md', @num=0x0, '/md/', @rdev={@ram={'dev-ram', 0x0}, 'slot\x00'}}, 0x1, 0x0) write$md_sysfs(0xffffffffffffffff, &(0x7f0000003ac0)=@str='active', 0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0x980900, 0x3, @value=0x2}) 28.578279344s ago: executing program 5 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) write(r2, &(0x7f0000000300), 0x0) sendto$inet(r2, &(0x7f0000000640)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb29", 0x26, 0x10000485, 0x0, 0x0) 26.019156796s ago: executing program 5 (id=116): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x8, "b546baa5cc590d30d4d8b40d29968173b959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"b93b0500000000000000c1fb10628c8ebb0ddd5f497e5600", r7}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x100000000, 0x1) 22.713964074s ago: executing program 2 (id=122): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x578410eb) prlimit64(0x0, 0xe, &(0x7f0000001a00)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a40)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000001a80)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001ac0), 0x0, 0x0) read$msr(r2, &(0x7f0000001b00)=""/102392, 0x18ff8) fcntl$getown(r0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x123a02, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000080)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0xffffffffffffab3e, 0x2, 0x9}}) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) open(&(0x7f00000003c0)='./file1\x00', 0x4827e, 0x20) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file2\x00', 0x22) mkdir(&(0x7f0000000440)='./bus\x00', 0x0) 21.274631867s ago: executing program 2 (id=124): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x1df) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x58) openat(0xffffffffffffff9c, &(0x7f0000000580)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x83) mount(0x0, &(0x7f0000000600)='./config\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r0, &(0x7f00000007c0)='0\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000008c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x36, 0x0, 0x1}, 0x28) 19.935341494s ago: executing program 2 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000002c0)={0x2, 0x4e23, @local}, 0x10) write(r2, &(0x7f0000000300), 0x0) sendto$inet(r2, &(0x7f0000000640)="4a2a55b38b1bd0e10f421c55c595de03a2e1eb5b4bde024863e2c2401a81caa7143ff3fccb29", 0x26, 0x10000485, 0x0, 0x0) 18.62051325s ago: executing program 5 (id=127): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) close(0x3) mkdir(&(0x7f0000001040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./config\x00', &(0x7f00000010c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001100)='./config/cluster/ocfs2\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001140)='./config/cluster/ocfs2/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001180)='./config/cluster/ocfs2/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f00000011c0)='127.0.0.1', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./config/cluster/ocfs2/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000001240)='7', 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000001280)={{0x1, 0x1, 0x18, r1}, './config/cluster/ocfs2/node/node0/ipv4_port\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/cluster/ocfs2/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000001340)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./config/cluster/ocfs2/node/node0/local\x00', 0x1, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001400)) write(r3, &(0x7f0000001480)='1', 0x1) 17.699188854s ago: executing program 2 (id=128): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="664af8a44e8dc10265424a01df55acafec8f7815034086b7102dc004348569f5ce1f225799f48895c416553ff2a29b9035c6c7cb1de8f53375ea15b58b61d6887d0dd73a4d53af2d4b68579b11b29fb62fae2fdd3e909c298ffc4ff07305eb80fce8c048c396e62b4e08f16ab771388449cc46f1ba068bc2e58f66acc43caa7edeeb694442ef9a734e3db9b7d94ccefa984d8f1346cdb93a94", @ANYRES8=r0, @ANYRES16=r0, @ANYBLOB, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), 0xa7e, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000840)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) write(r0, &(0x7f0000000280)='tcp', 0x3) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='4420', 0x4) symlinkat(&(0x7f0000000440)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 16.85157026s ago: executing program 1 (id=130): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) bind$inet6(r1, &(0x7f0000000700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x800) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x4000090) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 15.934117748s ago: executing program 0 (id=131): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000680)={'veth0\x00', 0x600}) 15.667594488s ago: executing program 5 (id=132): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000003cc0)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(r2, 0x8, &(0x7f000001cd00)=0x4000007) r4 = fsopen(&(0x7f000001cd40)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup(r5, 0x0, 0x200002, 0x0) 14.712350745s ago: executing program 0 (id=133): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000019680)='./file0\x00', 0x40, 0x16f) execve(&(0x7f00000196c0)='./file0\x00', 0x0, &(0x7f0000019700)) r3 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0xc0841) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000140)=0xd0) mount(&(0x7f0000019780)=@filename='mtd0\x00', &(0x7f00000197c0)='./file0\x00', &(0x7f0000019800)='9p\x00', 0x800000, 0x0) 14.530723271s ago: executing program 1 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000c80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000cc0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000d40), 0x2, 0x141102) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0) syz_open_procfs(0x0, &(0x7f00000010c0)='net/packet\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) write$FUSE_DIRENTPLUS(r1, 0x0, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x36) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000001380)={'pcl816\x00', [0x140, 0x2, 0x3, 0x5, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0xf4, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0xfffffff8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]}) 13.169096178s ago: executing program 0 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) tee(r2, r1, 0x1, 0x4) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0x9000000d}) close_range(r3, 0xffffffffffffffff, 0x0) 10.717322957s ago: executing program 5 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x8) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) unshare(0x8040480) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(r2, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x82) getsockopt(r4, 0xff, 0x20, 0x0, 0x0) stat(0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000240)) 7.591275142s ago: executing program 0 (id=137): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f000000d000)=""/102368, 0x18fe0) getpid() openat(0xffffffffffffff9c, 0x0, 0x8000, 0x5a) r3 = socket$nl_route(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000500)={0xf, {"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", 0x1000}}, 0x1006) 7.169790092s ago: executing program 1 (id=138): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000003c0)={0x2, 0x0, 0x3, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7000002, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1800403, &(0x7f00000001c0)={[{@norecovery}, {@dioread_lock}, {@errors_continue}, {@dioread_lock}, {@i_version}]}, 0x2, 0x5ea, &(0x7f00000005c0)="$eJzs3c9vVNUeAPDvnU4Lpe+99pGXp7gwjYZAorS0gMEfC9gTgj92bqy0EGT4EVqjRRNLghsT48YFiSsXon+FEt26Mrpw4caVIUFjSAzG6DV35k4ZOjPttMz0YufzSYY595yZOefCfDnnnnvu3AD61nj2RyliV0RcTCJGG8rKkReO1153+9e3T2aPJNL0xV+SSPK8+uuT/Hkkf/OfoxHffJnEzoHmeucXL5+dqVTmLuXbkwvnLk7OL17ed+bczOm503Pnp5+aPnzo4KHDU/vva/+ShvSxq6+9Mfre8Zc/+eiPZOrTH44ncSR+PlUra9yPbhmP8biTpu80t2mo21UVZmD5e3JXsjKDB1a5FuExGBEPxWgMNPxrjsa7zxfaOKCn0iQiBfpUIv6hT9XHAfVj+86Og0s9HpUAm+HW0age/TfHf7k2Nxhj1bmB3Sve12JKb0OyOr7+6vjV7BFt5+G2d6k2oNHSlW15amX8J9XYHMtjb8ft0j3zvNkI4ET+nOW/sMH6x1ds92IeHmht6UpEPNxq/L92/L/SEP+vbrB+8Q8AAAAAAADdc+NoRDzZ6vxfKT83tz0eq57/S2rn/767e4XgkS7Uv/b5v9LNLlQDtHDraMRzLdf/Lq/xHRvIt/5dWw2YnDpTmdsfEf+JiL0xuC3bnlqljn3v77zWrqxx/V/2yOqvrwXM23GzvO3e98zOLMzczz4DNbeuRDxSbr/+J+v/k8b+P5f9f3Cxwzp27r5+okX2Z5U8sXr8A72Sfhyxp2X/f/eXM5LVf59jsjoemKyPCpo9+tYHn7erf+3+H+iVrP/fsXr8jyWNv9czv77PH4qIA4vltF35Rsf/Q8lLA/XPz7w5s7BwaSpiKDnWnD+9vjbDVlWPh3q8ZPG/9/HV5/+Wx/8NcTgcEUsd1vn/v0Z+bFc2HpHmH6v/h02Wxf9si/5/uG3/v/7E9PWxL9rV31n/f7Dap+/Nc8z/weo6DdCi2wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/0SliPhXJKWJ5XSpNDERMRIR/4sdpcqF+YUnTl14/fxsVla9/3+pfqff0dp2Ur///1jD9vSK7QMR8d+I+HBguLo9cfJCZbbonQcAAAAAAAAAAAAAAAAAAIAHxEib6/8zPw0U3Tqg58r5s3iH/lMuugFAYcQ/9C/xD/1L/EP/6iD+72xGO4DNt8H+3+kC2AKM/6FfDXb2su29bgdQBP0/AAAAAABsKTeeffpaEhFLzwxXH5mhvGz5xOBwUa0DeqlUdAOAwljDC/3L0h/oXx0u/gW2sGQ59Xvaqrz96v+kNw0CAAAAAAAAAAAAAJrs2XXj+zWv/we2pFLEkaLbABTD9f/Qv1z/D/2rzTG+YwLoI2tdxb+h6//dMhAAAAAAAAAAAAAAump+8fLZmfpNwGcqlblL1RyJLZr49rc0Xde70rS478ZgRBT+N1ZIYqgxPDej0ohYasoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCH8HAAD//6dCH+Y=") timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, r3) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x2004c030) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0xc000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fremovexattr(r1, &(0x7f0000000400)=@random={'user.', '\xc5\x99\xa5\xb6`\xd4\xb2\xc7\x11sx\xf2\"\xb0\x93]n\x98a\xdc\x92\xdeO\xb1x(\xbc-zS\xf4\xbb^\x9d\xbc\\q\xc9\xbd\xf2t-v-\xe3\xfc\x1a;\x8a\x80\xac\xc0\x82\x17\x00\x00\x00\x00\x00\x00\x00\x00V\xb8\xa3\xa4\xee\x88\x03uf\xb1\xef\'\x0e\xe0\xa3$\rJ\xd0\xf3\xe0Gx\xd9\x13D\x1a\x8b&\x8d\xa4\x99mHl;\xf8\xdc\t0)?ts\xb8\xc6P\x19\xbc\x97@\xd3W\x9aw\xe9}\xf2$\xcd\x0f\xfd6\x86\xafC\'\x0fB\xef\x86Ac\xbdb\xb16\xbe\xa7,lF\xc0-}\xcaJ\x13(\xce\xc1\xef\x15\xff\x86t\x13?\x97\xc8B\x89\x90R\x87Fd\xe5W\x8e}w\x88\xaa\xdf\xe1\xe0\fc\x92\xba28k\xb8{Ax5\xbdXM\xdb\xe5r\xc1_\xa7\xc6\xc7\x84\x95\xbba\x97\xb2VC\xd8\x8f}I\"Gr\xa9\xc65O\xb6\x94\x80k9\xc4\xb2\xecw\xdf\xf4\x04Ud2\xa8=\xc2|\x87\xcd\xb0\xbaR\xc8\x9e/\x0e\x940\xbf\xba\xae9H>T\xbc\x8c\xca\xb8)\xdb\x84\xc3\xc6Y\xfd \xdf\x81\xe0~\x95{\x11\xb7\x16\xde\x9e\xa0\xc9\x8b\xc1/\xfb\xd2a\x9a$xb\'\xfa(\xa3\x05\x17\xa6\xb87\x84\xf8\xca\xd4\xf0\x95uJ\xb7u\xd2\xde+\xb8J\xd0\x8e\xf4\xec\x81L1\x1bx+b\xb6<\xfa\x9c\xa7\x88\"\x87\xb0uus\x15(d\x99\xf6\xde\x95t\xcc\xeaL\t\":\x93\t\xc5?+8\xeaghW\xd3u\xf0\x8e\a\x1c\xc7\x7fN\xe7\x0ew\xc5\xd2\xf0\xff\xb0\xca\b\xde\xf0\x1f\x19\x18\xf4A\x7f\x16\xda\x02Z\xe4\x1aRX`\xd7R\xdc{\xe6\x03>\xd7\xfc\nQ\xba'}) 5.040044034s ago: executing program 0 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000740)='./mysys\x00', &(0x7f0000001a40)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) 4.309359814s ago: executing program 1 (id=140): syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYRES16, @ANYRES64=0x0], 0x1, 0x2aa, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000001c0)={0x23, 0x3, 0x1c, 0x1, 0x0, 0x4, 0x0}) add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.914920925s ago: executing program 1 (id=141): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000780)={r6, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7}) 2.787258478s ago: executing program 2 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x202001, 0x0) mkdir(&(0x7f0000000bc0)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc\x00', 0x0, 0x0) read(r0, &(0x7f0000000c80), 0xfa0) syz_clone3(&(0x7f0000000cc0)={0x4284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000d40), 0x0, {r0}}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000d80)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000dc0)='./config\x00', &(0x7f0000000e00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x87) write(r1, &(0x7f0000000f00)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='myproc\x00', 0x0, 0x4) write(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001040)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001080)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001140)='dummy_udc.0\n', 0xc) 1.526311163s ago: executing program 1 (id=143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8000) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x82, 0x1, 0x6, 0xfffffffffffffffe}) socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000001640)="8b", 0x11) 207.439646ms ago: executing program 0 (id=144): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000009bc0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) 0s ago: executing program 2 (id=145): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000440)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000480)=0x6f) write$dsp(r0, &(0x7f0000001880)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 85.160913][ T5615] cgroup: Unknown subsys name 'net' [ 85.237126][ T5615] cgroup: Unknown subsys name 'cpuset' [ 85.246497][ T5615] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.844818][ T5615] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.574158][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.574944][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.576536][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.579126][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.579802][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.580168][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.605317][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.612888][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.620458][ T5640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.629463][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.634410][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.635537][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.635921][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.646715][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.648948][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.650664][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.656542][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.659521][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.661625][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.680047][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.681228][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.682197][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.682590][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.685342][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.685569][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.686293][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.693650][ T5646] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.694923][ T5646] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.704444][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.709064][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.072695][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.073780][ T5627] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 91.079901][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.086266][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.107656][ T5628] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 91.133255][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 91.189542][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 91.297097][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 91.399626][ T30] cfg80211: failed to load regulatory.db [ 91.509666][ T5626] infiniband rxe0: set active [ 91.510551][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.511164][ T5626] infiniband rxe0: added rxe_eth0 [ 91.530349][ T5626] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 91.530405][ T5626] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 91.530481][ T5626] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 91.590567][ T5626] RDS/IB: rxe0: added [ 91.590868][ T5626] smc: adding ib device rxe0 with port count 1 [ 91.590959][ T5626] smc: ib device rxe0 port 1 has no pnetid [ 91.634590][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.669664][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.713074][ T5646] Bluetooth: hci3: command tx timeout [ 91.727239][ T5646] Bluetooth: hci2: command tx timeout [ 91.727361][ T5646] Bluetooth: hci1: command tx timeout [ 91.791992][ T5638] Bluetooth: hci0: command tx timeout [ 91.792237][ T5646] Bluetooth: hci5: command tx timeout [ 91.792407][ T53] Bluetooth: hci4: command tx timeout [ 91.987542][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.514773][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.783595][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.783914][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.784076][ T5628] bridge_slave_0: entered allmulticast mode [ 92.785645][ T5628] bridge_slave_0: entered promiscuous mode [ 92.789388][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.789502][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.789643][ T5628] bridge_slave_1: entered allmulticast mode [ 92.791489][ T5628] bridge_slave_1: entered promiscuous mode [ 92.824239][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.824353][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.824792][ T5635] bridge_slave_0: entered allmulticast mode [ 92.826730][ T5635] bridge_slave_0: entered promiscuous mode [ 92.873402][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.874362][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.874475][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.874933][ T5627] bridge_slave_0: entered allmulticast mode [ 92.876645][ T5627] bridge_slave_0: entered promiscuous mode [ 92.933365][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.935853][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.935965][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.936111][ T5635] bridge_slave_1: entered allmulticast mode [ 92.938778][ T5635] bridge_slave_1: entered promiscuous mode [ 92.940586][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.940726][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.941595][ T5634] bridge_slave_0: entered allmulticast mode [ 92.946563][ T5634] bridge_slave_0: entered promiscuous mode [ 92.950557][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.950671][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.950813][ T5627] bridge_slave_1: entered allmulticast mode [ 92.955464][ T5627] bridge_slave_1: entered promiscuous mode [ 93.058639][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.088952][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.089091][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.089242][ T5634] bridge_slave_1: entered allmulticast mode [ 93.091140][ T5634] bridge_slave_1: entered promiscuous mode [ 93.135084][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.135280][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.135391][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.135819][ T5633] bridge_slave_0: entered allmulticast mode [ 93.138825][ T5633] bridge_slave_0: entered promiscuous mode [ 93.144443][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.146066][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.146214][ T5633] bridge_slave_1: entered allmulticast mode [ 93.149683][ T5633] bridge_slave_1: entered promiscuous mode [ 93.215720][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.237697][ T5628] team0: Port device team_slave_0 added [ 93.244282][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.253857][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.298341][ T5628] team0: Port device team_slave_1 added [ 93.323725][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.327041][ T5635] team0: Port device team_slave_0 added [ 93.331272][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.372815][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.417350][ T5635] team0: Port device team_slave_1 added [ 93.420445][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.424043][ T5627] team0: Port device team_slave_0 added [ 93.428345][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.429519][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.429539][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.429581][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.481279][ T5627] team0: Port device team_slave_1 added [ 93.518368][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.518389][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.518433][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.538911][ T5634] team0: Port device team_slave_0 added [ 93.579724][ T5633] team0: Port device team_slave_0 added [ 93.598231][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.598251][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.599987][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.607705][ T5634] team0: Port device team_slave_1 added [ 93.641551][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.641572][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.641614][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.656006][ T5633] team0: Port device team_slave_1 added [ 93.719019][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.719042][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.719086][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.740729][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.740750][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.740792][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.798236][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.798257][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.798299][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.800657][ T53] Bluetooth: hci1: command tx timeout [ 93.800694][ T53] Bluetooth: hci2: command tx timeout [ 93.800725][ T53] Bluetooth: hci3: command tx timeout [ 93.871838][ T5646] Bluetooth: hci4: command tx timeout [ 93.871875][ T5646] Bluetooth: hci5: command tx timeout [ 93.871907][ T5646] Bluetooth: hci0: command tx timeout [ 93.874983][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.875003][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.875045][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.880864][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.880884][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.880927][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.901086][ T5628] hsr_slave_0: entered promiscuous mode [ 93.903122][ T5628] hsr_slave_1: entered promiscuous mode [ 93.908365][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.908385][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.908428][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.090164][ T5635] hsr_slave_0: entered promiscuous mode [ 94.091099][ T5635] hsr_slave_1: entered promiscuous mode [ 94.092726][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 94.092749][ T5635] Cannot create hsr debugfs directory [ 94.127951][ T5627] hsr_slave_0: entered promiscuous mode [ 94.128786][ T5627] hsr_slave_1: entered promiscuous mode [ 94.129522][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 94.129545][ T5627] Cannot create hsr debugfs directory [ 94.170388][ T5633] hsr_slave_0: entered promiscuous mode [ 94.171431][ T5633] hsr_slave_1: entered promiscuous mode [ 94.177930][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 94.177954][ T5633] Cannot create hsr debugfs directory [ 94.200834][ T5626] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.313808][ T5634] hsr_slave_0: entered promiscuous mode [ 94.314960][ T5634] hsr_slave_1: entered promiscuous mode [ 94.315760][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 94.315783][ T5634] Cannot create hsr debugfs directory [ 94.966597][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.973360][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.976292][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.987228][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.007442][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.011708][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.012794][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.023345][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.147615][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.157521][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.171123][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.183514][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.189328][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.196638][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.197774][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.205881][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.376626][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.376744][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.376887][ T5626] bridge_slave_0: entered allmulticast mode [ 95.380885][ T5626] bridge_slave_0: entered promiscuous mode [ 95.387098][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.400359][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.401488][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.413521][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.420121][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.420311][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.420455][ T5626] bridge_slave_1: entered allmulticast mode [ 95.423973][ T5626] bridge_slave_1: entered promiscuous mode [ 95.448877][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.456800][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.484190][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.484285][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.488323][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.518798][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.589674][ T5626] team0: Port device team_slave_0 added [ 95.612224][ T5626] team0: Port device team_slave_1 added [ 95.663201][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.666735][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.667711][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.671278][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.677871][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.677892][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.677935][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.692934][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.708376][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.709541][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.746603][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.747860][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.747881][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.747924][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.767351][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.872288][ T5646] Bluetooth: hci3: command tx timeout [ 95.872329][ T5646] Bluetooth: hci2: command tx timeout [ 95.872359][ T5646] Bluetooth: hci1: command tx timeout [ 95.883094][ T5626] hsr_slave_0: entered promiscuous mode [ 95.884332][ T5626] hsr_slave_1: entered promiscuous mode [ 95.886563][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 95.886587][ T5626] Cannot create hsr debugfs directory [ 95.952835][ T5646] Bluetooth: hci0: command tx timeout [ 95.952871][ T53] Bluetooth: hci5: command tx timeout [ 95.952903][ T53] Bluetooth: hci4: command tx timeout [ 95.990599][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.023173][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.026650][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.027848][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.031605][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.070639][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.077872][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.107305][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.107423][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.115415][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.126081][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.147167][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.194192][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.194335][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.313148][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.371708][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.371864][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.418347][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.418443][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.453340][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.506536][ T5626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.510749][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.538596][ T5626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.547275][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.550538][ T5626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.560699][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.579114][ T5626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.584583][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.620239][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.658678][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.717513][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.717640][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.778005][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.778133][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.798915][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.818384][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.885040][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.885163][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.917182][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.917310][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.954766][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.030491][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.030616][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.094558][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.094650][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.425765][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.484347][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.533415][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.533609][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.589930][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.590058][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.954078][ T5638] Bluetooth: hci3: command tx timeout [ 97.954125][ T5638] Bluetooth: hci1: command tx timeout [ 97.954187][ T5646] Bluetooth: hci2: command tx timeout [ 98.034416][ T53] Bluetooth: hci0: command tx timeout [ 98.034462][ T53] Bluetooth: hci5: command tx timeout [ 98.034482][ T5646] Bluetooth: hci4: command tx timeout [ 98.389516][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.405521][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.697447][ T5635] veth0_vlan: entered promiscuous mode [ 98.736686][ T5635] veth1_vlan: entered promiscuous mode [ 98.934918][ T5635] veth0_macvtap: entered promiscuous mode [ 98.988554][ T5635] veth1_macvtap: entered promiscuous mode [ 99.060787][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.131082][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.179944][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.266258][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.379100][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.403647][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.461416][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.480403][ T5627] veth0_vlan: entered promiscuous mode [ 99.482703][ T139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.492051][ T139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.497822][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.619751][ T5627] veth1_vlan: entered promiscuous mode [ 99.643733][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.643761][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.646906][ T5628] veth0_vlan: entered promiscuous mode [ 99.747020][ T5628] veth1_vlan: entered promiscuous mode [ 99.783123][ T5633] veth0_vlan: entered promiscuous mode [ 99.790790][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.790822][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.885575][ T5633] veth1_vlan: entered promiscuous mode [ 99.914093][ T5634] veth0_vlan: entered promiscuous mode [ 99.941040][ T5627] veth0_macvtap: entered promiscuous mode [ 99.971647][ T5634] veth1_vlan: entered promiscuous mode [ 99.993887][ T5627] veth1_macvtap: entered promiscuous mode [ 100.050552][ T5628] veth0_macvtap: entered promiscuous mode [ 100.094743][ T5628] veth1_macvtap: entered promiscuous mode [ 100.117416][ T5635] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.127275][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.133308][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.160961][ T5633] veth0_macvtap: entered promiscuous mode [ 100.171856][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.172884][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.172947][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.173007][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.229670][ T5633] veth1_macvtap: entered promiscuous mode [ 100.242223][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.279858][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.305659][ T5634] veth0_macvtap: entered promiscuous mode [ 100.371708][ T5634] veth1_macvtap: entered promiscuous mode [ 100.397399][ T5626] veth0_vlan: entered promiscuous mode [ 100.412678][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.486093][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.487894][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.487921][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.524657][ T5626] veth1_vlan: entered promiscuous mode [ 100.663804][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.677838][ T267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.678026][ T267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.678234][ T267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.270355][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.270572][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.527996][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.821963][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.493745][ T62] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.493956][ T62] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.494228][ T62] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.503264][ T139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.503349][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.800059][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.945722][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.945833][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.945895][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.945955][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.947605][ T5878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.947631][ T5878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.164581][ T5626] veth0_macvtap: entered promiscuous mode [ 104.222486][ T5878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.222514][ T5878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.277837][ T5626] veth1_macvtap: entered promiscuous mode [ 104.305849][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.305876][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.528158][ T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.528188][ T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.529201][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.637649][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.676218][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.676247][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.101032][ T5878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.121611][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.166609][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.264036][ T267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.757194][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.757225][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.049435][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.049466][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.289010][ T5878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.289035][ T5878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.942141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.874396][ T14] IPVS: starting estimator thread 0... [ 112.961851][ T5956] IPVS: using max 22 ests per chain, 52800 per kthread [ 118.501986][ T5978] loop5: detected capacity change from 0 to 512 [ 118.618880][ T5978] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 118.649360][ T5978] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 118.649516][ T5978] loop5: lost filesystem error report for type 5 error -12 [ 118.651921][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 118.651954][ C1] EXT4-fs (loop5): initial error at time 1794039623: ext4_process_orphan:346 [ 118.651991][ C1] EXT4-fs (loop5): last error at time 1794039623: ext4_process_orphan:346 [ 118.720631][ T5978] EXT4-fs (loop5): 1 truncate cleaned up [ 118.764240][ T5987] loop3: detected capacity change from 0 to 512 [ 118.778430][ T5978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.787162][ T5987] ======================================================= [ 118.787162][ T5987] WARNING: The mand mount option has been deprecated and [ 118.787162][ T5987] and is ignored by this kernel. Remove the mand [ 118.787162][ T5987] option from the mount to silence this warning. [ 118.787162][ T5987] ======================================================= [ 121.892823][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.205971][ T6016] loop3: detected capacity change from 0 to 4096 [ 123.261441][ T6017] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.032819][ T6053] warning: `syz.3.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.422560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.832373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 130.982773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.451369][ T6072] Zero length message leads to an empty skb [ 131.490558][ T6070] netlink: 'syz.3.46': attribute type 1 has an invalid length. [ 131.539130][ T6070] netlink: 84 bytes leftover after parsing attributes in process `syz.3.46'. [ 132.576123][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.576194][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.608508][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 133.542137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 133.951777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 139.072201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 139.481865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 141.342423][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.518246][ T25] usb 3-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00 [ 142.396902][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.396974][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.397040][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.941792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 144.672044][ T25] rtsx_usb 3-1:1.0: probe with driver rtsx_usb failed with error -110 [ 145.464272][ T25] usb 3-1: USB disconnect, device number 2 [ 145.594753][ T6154] syzkaller0: entered promiscuous mode [ 145.594786][ T6154] syzkaller0: entered allmulticast mode [ 146.045037][ T6159] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 146.045086][ T6159] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 146.048541][ T6159] vhci_hcd vhci_hcd.0: Device attached [ 148.065231][ T25] usb 36-1: SetAddress Request (2) to port 0 [ 148.065322][ T25] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 148.199072][ T6160] vhci_hcd: connection reset by peer [ 148.210477][ T14] vhci_hcd vhci_hcd.1: stop threads [ 148.210767][ T14] vhci_hcd vhci_hcd.1: release socket [ 148.227782][ T14] vhci_hcd vhci_hcd.1: disconnect device [ 148.405522][ T6169] loop2: detected capacity change from 0 to 4096 [ 148.770240][ T6174] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.793001][ T6173] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 153.418946][ T25] usb 36-1: device descriptor read/8, error -110 [ 153.532208][ T6191] loop1: detected capacity change from 0 to 512 [ 153.586003][ T6191] EXT4-fs (loop1): 1 truncate cleaned up [ 153.589823][ T6191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.616069][ T25] usb usb36-port1: attempt power cycle [ 154.918805][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.132358][ T6201] Bluetooth: MGMT ver 1.23 [ 155.293126][ T25] usb usb36-port1: unable to enumerate USB device [ 157.844615][ T6212] process 'syz.1.84' launched '/dev/fd/4' with NULL argv: empty string added [ 158.241586][ T6217] loop0: detected capacity change from 0 to 32768 [ 158.243051][ T6217] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 159.794778][ T6217] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.87 (6217) [ 160.412271][ T6217] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 160.412329][ T6217] BTRFS info (device loop0): using crc32c checksum algorithm [ 160.544839][ T6217] BTRFS info (device loop0): rebuilding free space tree [ 160.586788][ T6217] BTRFS info (device loop0): disabling free space tree [ 160.586897][ T6217] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 160.586936][ T6217] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 160.621073][ T6217] BTRFS info (device loop0): enabling ssd optimizations [ 160.621111][ T6217] BTRFS info (device loop0): turning on async discard [ 160.621139][ T6217] BTRFS info (device loop0): force clearing of disk cache [ 160.621167][ T6217] BTRFS info (device loop0): use zstd compression, level 3 [ 162.772804][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 162.776312][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 162.778561][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 162.781847][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 162.805925][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 163.270999][ T5635] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 165.907705][ T5646] Bluetooth: hci6: command tx timeout [ 167.952688][ T5646] Bluetooth: hci6: command tx timeout [ 167.963386][ T6260] jffs2: notice: (6260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.317867][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.334813][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.338313][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.339412][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.340115][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.847006][ T6272] FAULT_INJECTION: forcing a failure. [ 168.847006][ T6272] name failslab, interval 1, probability 0, space 0, times 1 [ 168.847053][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(full) [ 168.847097][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.847119][ T6272] Call Trace: [ 168.847131][ T6272] [ 168.847145][ T6272] dump_stack_lvl+0x100/0x190 [ 168.847209][ T6272] should_fail_ex.cold+0x5/0xa [ 168.847264][ T6272] should_failslab+0xc2/0x120 [ 168.847331][ T6272] kmem_cache_alloc_noprof+0x92/0x6a0 [ 168.847379][ T6272] ? __pfx_map_id_range_down+0x10/0x10 [ 168.847437][ T6272] ? security_inode_alloc+0x3b/0x2c0 [ 168.847496][ T6272] security_inode_alloc+0x3b/0x2c0 [ 168.847547][ T6272] inode_init_always_gfp+0xc75/0xfb0 [ 168.847594][ T6272] alloc_inode+0x8e/0x250 [ 168.847646][ T6272] iget_locked+0x1d4/0x6c0 [ 168.847699][ T6272] ? __pfx_iget_locked+0x10/0x10 [ 168.847748][ T6272] ? kernfs_root+0xee/0x2a0 [ 168.847797][ T6272] ? kernfs_root+0xee/0x2a0 [ 168.847843][ T6272] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.847903][ T6272] kernfs_get_inode+0x46/0x470 [ 168.847954][ T6272] kernfs_iop_lookup+0x1a7/0x2d0 [ 168.848011][ T6272] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 168.848066][ T6272] lookup_open+0xb29/0x19e0 [ 168.848116][ T6272] ? __d_lookup+0x221/0x4a0 [ 168.848188][ T6272] path_openat+0xe75/0x23f0 [ 168.848234][ T6272] ? __pfx_path_openat+0x10/0x10 [ 168.848285][ T6272] do_file_open+0x20e/0x430 [ 168.848332][ T6272] ? __pfx_do_file_open+0x10/0x10 [ 168.848408][ T6272] ? _raw_spin_unlock+0x28/0x50 [ 168.848454][ T6272] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.848499][ T6272] ? alloc_fd+0x471/0x7a0 [ 168.848552][ T6272] do_sys_openat2+0x163/0x1d0 [ 168.848594][ T6272] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.848649][ T6272] __x64_sys_openat+0x12d/0x210 [ 168.848689][ T6272] ? __pfx___x64_sys_openat+0x10/0x10 [ 168.848739][ T6272] ? srso_alias_return_thunk+0x5/0xfbef5 [ 168.848788][ T6272] do_syscall_64+0x123/0x790 [ 168.848844][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.848878][ T6272] RIP: 0033:0x7fe5ffd9fb19 [ 168.848906][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.848938][ T6272] RSP: 002b:00007fe600d4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 168.848972][ T6272] RAX: ffffffffffffffda RBX: 00007fe600025fa0 RCX: 00007fe5ffd9fb19 [ 168.848995][ T6272] RDX: 0000000000101a02 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 168.849018][ T6272] RBP: 00007fe5ffe37b70 R08: 0000000000000000 R09: 0000000000000000 [ 168.849038][ T6272] R10: 000000000000001a R11: 0000000000000246 R12: 0000000000000000 [ 168.849059][ T6272] R13: 00007fe600026038 R14: 00007fe600025fa0 R15: 00007ffdcbfe68e8 [ 168.849104][ T6272] [ 168.900280][ T14] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.107373][ T5646] Bluetooth: hci4: command tx timeout [ 171.108073][ T53] Bluetooth: hci6: command tx timeout [ 171.830189][ T14] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.248122][ T14] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.388932][ T14] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.067247][ T6240] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.151925][ T53] Bluetooth: hci6: command tx timeout [ 173.151967][ T53] Bluetooth: hci4: command tx timeout [ 173.197990][ T6284] loop0: detected capacity change from 0 to 1024 [ 173.198664][ T6284] EXT4-fs: Ignoring removed bh option [ 173.199687][ T6284] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 173.199726][ T6284] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 173.199808][ T6284] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 173.729309][ T14] bridge_slave_1: left allmulticast mode [ 173.729359][ T14] bridge_slave_1: left promiscuous mode [ 173.730342][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.738310][ T6284] EXT4-fs (loop0): failed to open journal device unknown-block(0,5) -ENXIO [ 173.868599][ T14] bridge_slave_0: left allmulticast mode [ 173.868637][ T14] bridge_slave_0: left promiscuous mode [ 173.868834][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.819983][ T5646] Bluetooth: hci4: command tx timeout [ 177.871960][ T5646] Bluetooth: hci4: command tx timeout [ 178.231296][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.260345][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.263247][ T14] bond0 (unregistering): Released all slaves [ 178.319438][ T6265] rxe_eth0 speed is unknown, defaulting to 1000 [ 178.365242][ T6305] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.381547][ T6305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 179.628467][ T6305] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 179.694739][ T6305] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 179.694857][ T6305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.747347][ T6305] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 179.777535][ T6305] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.789767][ T6305] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.040885][ T6305] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 180.245791][ T31] audit: type=1326 audit(1794039685.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6316 comm="syz.0.104" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5ffd9fb19 code=0x0 [ 180.923109][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.959575][ T6305] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 180.959684][ T6305] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 181.003616][ T6305] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 181.029244][ T6305] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 181.029364][ T6305] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 181.073770][ T6305] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 181.106068][ T6305] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 181.107254][ T6305] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 181.133261][ T6305] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.062103][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.062134][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.062174][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 183.062179][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.084669][ T5646] Bluetooth: hci6: command 0x0c1a tx timeout [ 183.463051][ T5646] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.655140][ T6338] overlayfs: missing 'workdir' [ 184.208026][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 184.279940][ T6346] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 185.166886][ T4943] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.166946][ T4943] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.166986][ T4943] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.167023][ T4943] Bluetooth: hci6: command 0x0c1a tx timeout [ 185.167232][ T5646] Bluetooth: hci5: command 0x0c1a tx timeout [ 185.472216][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 186.855295][ T6357] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.195023][ T6374] syz.2.111 uses obsolete (PF_INET,SOCK_PACKET) [ 187.231974][ T53] Bluetooth: hci5: command 0x0c1a tx timeout [ 187.232022][ T53] Bluetooth: hci6: command 0x0c1a tx timeout [ 187.232059][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.232095][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.447806][ T6374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 187.554365][ T6357] md: serialize_policy is only effective for raid1 [ 187.554537][ T5646] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.710458][ T14] hsr_slave_0: left promiscuous mode [ 187.726706][ T14] hsr_slave_1: left promiscuous mode [ 187.727876][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.727932][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.766361][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.766393][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.818351][ T14] veth1_macvtap: left promiscuous mode [ 187.818420][ T14] veth0_macvtap: left promiscuous mode [ 187.818625][ T14] veth1_vlan: left promiscuous mode [ 187.818728][ T14] veth0_vlan: left promiscuous mode [ 192.382038][ T14] team0 (unregistering): Port device team_slave_1 removed [ 192.435561][ T14] team0 (unregistering): Port device team_slave_0 removed [ 193.748749][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 193.793881][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.793954][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.136553][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.136741][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.136882][ T6240] bridge_slave_0: entered allmulticast mode [ 194.139442][ T6240] bridge_slave_0: entered promiscuous mode [ 194.172247][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.172356][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.172479][ T6240] bridge_slave_1: entered allmulticast mode [ 194.174493][ T6240] bridge_slave_1: entered promiscuous mode [ 194.199430][ T6434] netlink: 76 bytes leftover after parsing attributes in process `syz.1.121'. [ 194.336552][ T6431] jffs2: notice: (6431) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.396782][ T6434] loop1: detected capacity change from 0 to 512 [ 194.404889][ T6434] vfat: Unknown parameter 'ÿÿÿÿÿ01777777777777777777777' [ 194.520511][ T6240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.625754][ T6433] loop1: detected capacity change from 0 to 8 [ 194.656075][ T6433] SQUASHFS error: lzo decompression failed, data probably corrupt [ 194.656114][ T6433] SQUASHFS error: Failed to read block 0x91: -5 [ 194.656143][ T6433] SQUASHFS error: Unable to read metadata cache entry [8f] [ 194.656162][ T6433] SQUASHFS error: Unable to read inode 0x11f [ 194.825529][ T6240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.454613][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.460784][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.460954][ T6265] bridge_slave_0: entered allmulticast mode [ 195.471375][ T6265] bridge_slave_0: entered promiscuous mode [ 195.536779][ T6240] team0: Port device team_slave_0 added [ 196.461381][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.556286][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.556513][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.556713][ T6265] bridge_slave_1: entered allmulticast mode [ 196.561927][ T6265] bridge_slave_1: entered promiscuous mode [ 196.640007][ T6240] team0: Port device team_slave_1 added [ 196.907652][ T6466] loop1: detected capacity change from 0 to 512 [ 198.035235][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.035376][ T6466] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.153434][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.195543][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.744828][ T6477] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 199.970070][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.477919][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.591211][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.591237][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.591283][ T6240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.648503][ T6240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.648528][ T6240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.648573][ T6240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.791806][ T6265] team0: Port device team_slave_0 added [ 200.871711][ T6265] team0: Port device team_slave_1 added [ 201.840012][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.291528][ T6501] 9pnet_virtio: no channels available for device mtd0 [ 205.850729][ T6240] hsr_slave_0: entered promiscuous mode [ 205.857244][ T6240] hsr_slave_1: entered promiscuous mode [ 205.859721][ T6240] debugfs: 'hsr0' already exists in 'hsr' [ 205.859746][ T6240] Cannot create hsr debugfs directory [ 205.864782][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.864804][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.864846][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.348927][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.430298][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.430323][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.430367][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.477678][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 211.722947][ T6265] hsr_slave_0: entered promiscuous mode [ 211.735413][ T6265] hsr_slave_1: entered promiscuous mode [ 211.736287][ T6265] debugfs: 'hsr0' already exists in 'hsr' [ 211.736311][ T6265] Cannot create hsr debugfs directory [ 212.375780][ T6528] loop1: detected capacity change from 0 to 128 [ 212.382529][ T6528] vfat: Unknown parameter 'ÿÿ' [ 213.717102][ T14] bridge_slave_1: left allmulticast mode [ 213.717139][ T14] bridge_slave_1: left promiscuous mode [ 213.717399][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.745125][ T14] bridge_slave_0: left allmulticast mode [ 213.745159][ T14] bridge_slave_0: left promiscuous mode [ 213.747508][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.168936][ T6549] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 216.586679][ T5751] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 217.009579][ T5751] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 217.010465][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.010500][ T5751] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 217.010556][ T5751] usb 1-1: Dual-Role OTG device on HNP port [ 218.401997][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.418671][ C0] ------------[ cut here ]------------ [ 218.418687][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 218.418712][ C0] WARNING: drivers/usb/gadget/udc/core.c:124 at usb_ep_enable+0x3e6/0x490, CPU#0: kworker/0:4/5751 [ 218.483489][ C0] Modules linked in: [ 218.487408][ C0] CPU: 0 UID: 0 PID: 5751 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.498376][ C0] Tainted: [L]=SOFTLOCKUP [ 218.502700][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 218.512759][ C0] Workqueue: usb_hub_wq hub_event [ 218.517835][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 218.523237][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da 46 85 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 be fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 b1 fb 8c [ 218.542858][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010046 [ 218.548940][ C0] RAX: dffffc0000000000 RBX: ffff888028c9c0e0 RCX: ffffffff8cfbf580 [ 218.556915][ C0] RDX: 0000000000000081 RSI: ffffffff8cfbbe80 RDI: ffffffff92786ec0 [ 218.564913][ C0] RBP: 0000000000000081 R08: ffffffff8cfbb160 R09: 0000000000000000 [ 218.572887][ C0] R10: ffffffff926ae85f R11: 0000000000000001 R12: ffffffff8cfbb160 [ 218.580865][ C0] R13: 0000000000000000 R14: ffff888028c9c0e0 R15: ffff88802d498a20 [ 218.588870][ C0] FS: 0000000000000000(0000) GS:ffff888122472000(0000) knlGS:0000000000000000 [ 218.597810][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.604400][ C0] CR2: 0000001b34612ff8 CR3: 000000002ec65000 CR4: 0000000000350ef0 [ 218.612375][ C0] Call Trace: [ 218.615651][ C0] [ 218.618497][ C0] hidg_set_alt+0x190/0xa10 [ 218.623022][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.628254][ C0] ? rcu_is_watching+0x13/0xc0 [ 218.633024][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.638683][ C0] composite_setup+0x2ccf/0x9290 [ 218.643641][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.649292][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 218.654273][ C0] ? __pfx_composite_setup+0x10/0x10 [ 218.659574][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.664977][ C0] ? do_raw_spin_lock+0x128/0x260 [ 218.670033][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.675441][ C0] ? configfs_composite_setup+0xfb/0x130 [ 218.681099][ C0] configfs_composite_setup+0xfb/0x130 [ 218.686590][ C0] dummy_timer+0x20a0/0x3840 [ 218.691208][ C0] ? do_raw_spin_lock+0x128/0x260 [ 218.696263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.701914][ C0] ? find_held_lock+0x2b/0x80 [ 218.706602][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 218.712250][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 218.717910][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 218.723740][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.729389][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 218.735039][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 218.741043][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 218.746003][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.751657][ C0] ? mark_held_locks+0x40/0x70 [ 218.756442][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 218.762277][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 218.767232][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 218.772463][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 218.777596][ C0] handle_softirqs+0x216/0xa20 [ 218.782381][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 218.787679][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.793329][ C0] ? _raw_spin_unlock+0x28/0x50 [ 218.798202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.803849][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 218.809509][ C0] __irq_exit_rcu+0x178/0x220 [ 218.814199][ C0] irq_exit_rcu+0x9/0x30 [ 218.818454][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 218.824111][ C0] [ 218.827037][ C0] [ 218.829964][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.835960][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 218.842405][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 c9 f7 f5 48 89 df e8 4e 20 f8 f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 e8 e6 f5 65 48 83 3d 84 62 c9 09 00 74 16 5b [ 218.862108][ C0] RSP: 0018:ffffc90004e3eec8 EFLAGS: 00000246 [ 218.868180][ C0] RAX: 0000000000000006 RBX: ffff8880b80266c0 RCX: 0000000000000040 [ 218.876150][ C0] RDX: 0000000000000001 RSI: ffffffff8e627b68 RDI: ffffffff8c836180 [ 218.884122][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 218.892092][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b80266c0 [ 218.900063][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880b8026708 [ 218.908061][ C0] __mod_timer+0x409/0xca0 [ 218.912512][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 218.918158][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.923831][ C0] ? __pfx___mod_timer+0x10/0x10 [ 218.928810][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.934458][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.940106][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 218.945509][ C0] add_timer+0x62/0x90 [ 218.949604][ C0] schedule_timeout+0x122/0x280 [ 218.954494][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 218.959883][ C0] ? __pfx_process_timeout+0x10/0x10 [ 218.965200][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.970847][ C0] ? mark_held_locks+0x40/0x70 [ 218.975668][ C0] __wait_for_common+0x2e6/0x500 [ 218.980631][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 218.986025][ C0] ? __pfx___wait_for_common+0x10/0x10 [ 218.991519][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.997176][ C0] usb_start_wait_urb+0x2ae/0x580 [ 219.002242][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 219.007808][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.013471][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.019117][ C0] ? __asan_memset+0x23/0x50 [ 219.023723][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.029381][ C0] usb_control_msg+0x328/0x4b0 [ 219.034170][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 219.039484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.045140][ C0] usb_control_msg_send+0xca/0x130 [ 219.050286][ C0] usb_set_configuration+0xb8f/0x1dc0 [ 219.055720][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 219.061809][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 219.067219][ C0] usb_probe_device+0xef/0x400 [ 219.072013][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 219.077418][ C0] really_probe+0x241/0xa60 [ 219.081954][ C0] __driver_probe_device+0x210/0x460 [ 219.087271][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.092927][ C0] driver_probe_device+0x4a/0x140 [ 219.097986][ C0] __device_attach_driver+0x1df/0x320 [ 219.103393][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 219.109316][ C0] bus_for_each_drv+0x159/0x1e0 [ 219.114188][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 219.119581][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.125229][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 219.130454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.136101][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 219.141936][ C0] __device_attach+0x1e4/0x4c0 [ 219.146733][ C0] ? __pfx___device_attach+0x10/0x10 [ 219.152049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.157698][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 219.162927][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.168590][ C0] device_initial_probe+0xaf/0xf0 [ 219.173650][ C0] __bus_probe_device+0x60/0x160 [ 219.178611][ C0] device_add+0x121d/0x1970 [ 219.183155][ C0] ? __pfx_device_add+0x10/0x10 [ 219.188017][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 219.193767][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.199426][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 219.204818][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 219.210637][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.216290][ C0] ? mark_held_locks+0x40/0x70 [ 219.221073][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.226729][ C0] hub_event.cold+0x1e3/0xe90 [ 219.231460][ C0] ? __pfx_hub_event+0x10/0x10 [ 219.236260][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.241912][ C0] ? check_prev_add+0x370/0xe60 [ 219.246792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.252470][ C0] ? lock_acquire+0x1d1/0x380 [ 219.257171][ C0] ? process_one_work+0xa2c/0x1b10 [ 219.262312][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.267967][ C0] ? process_one_work+0x906/0x1b10 [ 219.273122][ C0] ? process_one_work+0x906/0x1b10 [ 219.278243][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.283900][ C0] process_one_work+0xac7/0x1b10 [ 219.288867][ C0] ? __pfx_process_one_work+0x10/0x10 [ 219.294252][ C0] ? lock_acquire+0x1d1/0x380 [ 219.298960][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.304619][ C0] worker_thread+0x5ef/0xe50 [ 219.309234][ C0] ? __pfx_worker_thread+0x10/0x10 [ 219.314356][ C0] ? kthread+0x13a/0x450 [ 219.318628][ C0] ? __pfx_worker_thread+0x10/0x10 [ 219.323748][ C0] kthread+0x373/0x450 [ 219.327844][ C0] ? __pfx_kthread+0x10/0x10 [ 219.332467][ C0] ret_from_fork+0x730/0xd60 [ 219.337072][ C0] ? save_fpregs_to_fpstate+0x19c/0x270 [ 219.342645][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 219.347773][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.353422][ C0] ? rcu_is_watching+0x13/0xc0 [ 219.358202][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.363887][ C0] ? __switch_to+0x800/0x10e0 [ 219.368591][ C0] ? __switch_to_asm+0x39/0x70 [ 219.373371][ C0] ? __pfx_kthread+0x10/0x10 [ 219.378089][ C0] ret_from_fork_asm+0x1a/0x30 [ 219.382892][ C0] [ 219.385908][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 219.393193][ C0] CPU: 0 UID: 0 PID: 5751 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.404154][ C0] Tainted: [L]=SOFTLOCKUP [ 219.408471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 219.418542][ C0] Workqueue: usb_hub_wq hub_event [ 219.423602][ C0] Call Trace: [ 219.426873][ C0] [ 219.429712][ C0] dump_stack_lvl+0x100/0x190 [ 219.434417][ C0] vpanic+0x2dc/0x6f8 [ 219.438410][ C0] panic+0xd1/0xe0 [ 219.442140][ C0] ? __pfx_panic+0x10/0x10 [ 219.446583][ C0] check_panic_on_warn.cold+0x19/0x34 [ 219.451968][ C0] ? usb_ep_enable+0x3e6/0x490 [ 219.456744][ C0] __warn.cold+0x191/0x321 [ 219.461174][ C0] __report_bug+0x30f/0x440 [ 219.465728][ C0] ? usb_ep_enable+0x3e6/0x490 [ 219.470506][ C0] ? __pfx___report_bug+0x10/0x10 [ 219.475558][ C0] ? process_one_work+0xac7/0x1b10 [ 219.480681][ C0] ? worker_thread+0x5ef/0xe50 [ 219.485455][ C0] ? kthread+0x373/0x450 [ 219.489748][ C0] report_bug_entry+0xe2/0x290 [ 219.494541][ C0] ? usb_ep_enable+0x3f8/0x490 [ 219.499317][ C0] handle_bug+0x1cd/0x2a0 [ 219.503662][ C0] exc_invalid_op+0x17/0x50 [ 219.508177][ C0] asm_exc_invalid_op+0x1a/0x20 [ 219.513036][ C0] RIP: 0010:usb_ep_enable+0x3f8/0x490 [ 219.518418][ C0] Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8d 3d da 46 85 0a 48 8b 4b 08 40 0f b6 d5 4d 89 e0 48 c7 c6 80 be fb 8c <67> 48 0f b9 3a bd ea ff ff ff e9 8e fd ff ff 49 c7 c4 20 b1 fb 8c [ 219.538032][ C0] RSP: 0018:ffffc90000007a10 EFLAGS: 00010046 [ 219.544131][ C0] RAX: dffffc0000000000 RBX: ffff888028c9c0e0 RCX: ffffffff8cfbf580 [ 219.552107][ C0] RDX: 0000000000000081 RSI: ffffffff8cfbbe80 RDI: ffffffff92786ec0 [ 219.560085][ C0] RBP: 0000000000000081 R08: ffffffff8cfbb160 R09: 0000000000000000 [ 219.568060][ C0] R10: ffffffff926ae85f R11: 0000000000000001 R12: ffffffff8cfbb160 [ 219.576032][ C0] R13: 0000000000000000 R14: ffff888028c9c0e0 R15: ffff88802d498a20 [ 219.584032][ C0] hidg_set_alt+0x190/0xa10 [ 219.588555][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 219.593784][ C0] ? rcu_is_watching+0x13/0xc0 [ 219.598563][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.604224][ C0] composite_setup+0x2ccf/0x9290 [ 219.609176][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.614825][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 219.619808][ C0] ? __pfx_composite_setup+0x10/0x10 [ 219.625110][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.630511][ C0] ? do_raw_spin_lock+0x128/0x260 [ 219.635563][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.640971][ C0] ? configfs_composite_setup+0xfb/0x130 [ 219.646629][ C0] configfs_composite_setup+0xfb/0x130 [ 219.652120][ C0] dummy_timer+0x20a0/0x3840 [ 219.656737][ C0] ? do_raw_spin_lock+0x128/0x260 [ 219.661792][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.667442][ C0] ? find_held_lock+0x2b/0x80 [ 219.672125][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 219.677801][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 219.683459][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 219.689289][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.695033][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 219.700684][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 219.706687][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 219.711647][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.717294][ C0] ? mark_held_locks+0x40/0x70 [ 219.722079][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 219.727914][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 219.732868][ C0] __hrtimer_run_queues+0x448/0x9a0 [ 219.738101][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 219.743233][ C0] handle_softirqs+0x216/0xa20 [ 219.748019][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 219.753316][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.758970][ C0] ? _raw_spin_unlock+0x28/0x50 [ 219.763841][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.769494][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 219.775153][ C0] __irq_exit_rcu+0x178/0x220 [ 219.779844][ C0] irq_exit_rcu+0x9/0x30 [ 219.784099][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 219.789757][ C0] [ 219.792685][ C0] [ 219.795612][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 219.801606][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 219.808044][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 c6 c9 f7 f5 48 89 df e8 4e 20 f8 f5 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 e8 e6 f5 65 48 83 3d 84 62 c9 09 00 74 16 5b [ 219.827659][ C0] RSP: 0018:ffffc90004e3eec8 EFLAGS: 00000246 [ 219.833732][ C0] RAX: 0000000000000006 RBX: ffff8880b80266c0 RCX: 0000000000000040 [ 219.841729][ C0] RDX: 0000000000000001 RSI: ffffffff8e627b68 RDI: ffffffff8c836180 [ 219.849727][ C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 219.857698][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b80266c0 [ 219.865672][ C0] R13: 0000000000000000 R14: 00000000ffffffff R15: ffff8880b8026708 [ 219.873675][ C0] __mod_timer+0x409/0xca0 [ 219.878125][ C0] ? __pfx___debug_object_init+0x10/0x10 [ 219.883771][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.889421][ C0] ? __pfx___mod_timer+0x10/0x10 [ 219.894400][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.900049][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.905694][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 219.911110][ C0] add_timer+0x62/0x90 [ 219.915205][ C0] schedule_timeout+0x122/0x280 [ 219.920071][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 219.925459][ C0] ? __pfx_process_timeout+0x10/0x10 [ 219.930774][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.936419][ C0] ? mark_held_locks+0x40/0x70 [ 219.941209][ C0] __wait_for_common+0x2e6/0x500 [ 219.946169][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 219.951561][ C0] ? __pfx___wait_for_common+0x10/0x10 [ 219.957053][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.962710][ C0] usb_start_wait_urb+0x2ae/0x580 [ 219.967761][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 219.973331][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.979000][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.984647][ C0] ? __asan_memset+0x23/0x50 [ 219.989253][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 219.994905][ C0] usb_control_msg+0x328/0x4b0 [ 219.999697][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 220.005006][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.010663][ C0] usb_control_msg_send+0xca/0x130 [ 220.015803][ C0] usb_set_configuration+0xb8f/0x1dc0 [ 220.021234][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 220.027320][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 220.032719][ C0] usb_probe_device+0xef/0x400 [ 220.037513][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 220.042918][ C0] really_probe+0x241/0xa60 [ 220.047459][ C0] __driver_probe_device+0x210/0x460 [ 220.052772][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.058428][ C0] driver_probe_device+0x4a/0x140 [ 220.063482][ C0] __device_attach_driver+0x1df/0x320 [ 220.068917][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 220.074868][ C0] bus_for_each_drv+0x159/0x1e0 [ 220.079745][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 220.085313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.090966][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 220.096191][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.101841][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 220.107678][ C0] __device_attach+0x1e4/0x4c0 [ 220.112476][ C0] ? __pfx___device_attach+0x10/0x10 [ 220.117795][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.123445][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 220.128673][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.134353][ C0] device_initial_probe+0xaf/0xf0 [ 220.139419][ C0] __bus_probe_device+0x60/0x160 [ 220.144386][ C0] device_add+0x121d/0x1970 [ 220.148995][ C0] ? __pfx_device_add+0x10/0x10 [ 220.153851][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 220.159605][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.165268][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 220.170662][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 220.176480][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.182156][ C0] ? mark_held_locks+0x40/0x70 [ 220.186940][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.192619][ C0] hub_event.cold+0x1e3/0xe90 [ 220.197367][ C0] ? __pfx_hub_event+0x10/0x10 [ 220.202163][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.207850][ C0] ? check_prev_add+0x370/0xe60 [ 220.212728][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.218395][ C0] ? lock_acquire+0x1d1/0x380 [ 220.223091][ C0] ? process_one_work+0xa2c/0x1b10 [ 220.228212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.233865][ C0] ? process_one_work+0x906/0x1b10 [ 220.238990][ C0] ? process_one_work+0x906/0x1b10 [ 220.244110][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.249766][ C0] process_one_work+0xac7/0x1b10 [ 220.254732][ C0] ? __pfx_process_one_work+0x10/0x10 [ 220.260115][ C0] ? lock_acquire+0x1d1/0x380 [ 220.264824][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.270493][ C0] worker_thread+0x5ef/0xe50 [ 220.275105][ C0] ? __pfx_worker_thread+0x10/0x10 [ 220.280233][ C0] ? kthread+0x13a/0x450 [ 220.284507][ C0] ? __pfx_worker_thread+0x10/0x10 [ 220.289627][ C0] kthread+0x373/0x450 [ 220.293725][ C0] ? __pfx_kthread+0x10/0x10 [ 220.298383][ C0] ret_from_fork+0x730/0xd60 [ 220.302994][ C0] ? save_fpregs_to_fpstate+0x19c/0x270 [ 220.308567][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 220.313696][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.319344][ C0] ? rcu_is_watching+0x13/0xc0 [ 220.324120][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 220.329768][ C0] ? __switch_to+0x800/0x10e0 [ 220.334504][ C0] ? __switch_to_asm+0x39/0x70 [ 220.339281][ C0] ? __pfx_kthread+0x10/0x10 [ 220.343904][ C0] ret_from_fork_asm+0x1a/0x30 [ 220.348706][ C0] [ 220.351964][ C0] Kernel Offset: disabled [ 220.356287][ C0] Rebooting in 86400 seconds..