last executing test programs: 2m33.651488031s ago: executing program 2 (id=277): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 2m33.449223075s ago: executing program 2 (id=279): unshare(0x22020400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x4b6, 0x0, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r1], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001300)=ANY=[@ANYBLOB="10"], 0x4000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x1, 0x4, 0x500, 0xffffffffffffffff, 0x1bc93f6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0ca"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r6, 0x7b3, &(0x7f0000000240)) 2m32.76133812s ago: executing program 3 (id=282): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m32.46588119s ago: executing program 2 (id=283): mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2m32.285736381s ago: executing program 3 (id=284): r0 = syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0"], 0x0}, 0x0) 2m32.039366402s ago: executing program 2 (id=285): r0 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000080)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m31.619116053s ago: executing program 3 (id=292): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m31.555721384s ago: executing program 3 (id=293): mkdir(&(0x7f0000000000)='./cfg\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 2m31.198045684s ago: executing program 3 (id=295): syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000001c0)=""/137) 2m28.761817795s ago: executing program 3 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2', 0x5) 2m28.750085937s ago: executing program 2 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mydomain / 64\n', 0xe) 2m28.622052039s ago: executing program 2 (id=308): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="10"], 0x40c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m13.353901964s ago: executing program 32 (id=305): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='udp 2', 0x5) 2m13.185065662s ago: executing program 33 (id=308): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="10"], 0x40c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.864154905s ago: executing program 0 (id=701): unshare(0x22020400) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x4b6, 0x0, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="10"], 0x4000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x1, 0x4, 0x500, 0xffffffffffffffff, 0x1bc93f6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0ca"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r6, 0x7b3, &(0x7f0000000240)) 6.152306793s ago: executing program 0 (id=704): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 5.984320562s ago: executing program 4 (id=706): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) socket(0x1e, 0x4, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 5.69723951s ago: executing program 1 (id=707): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x81000) signalfd(r0, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000400)={"a0453822", 0x80, 0x6, 0x1, 0xc0, 0x8, "3377f877c734c40400", "0000d61d", 'vd\b\x00', "04ffffbf", ["c3fffdffe663ec0100", "0080000000000100001000", "000000000000000000c40800", "00010000000000000400"]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x100000000]}, 0x8) 5.246455616s ago: executing program 0 (id=709): r0 = syz_open_dev$sndpcmc(&(0x7f0000002900), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000680)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x5, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r1, 0x0}]) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) 5.075484015s ago: executing program 4 (id=710): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r2) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 5.072297795s ago: executing program 0 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4008080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000003c0)='retrans\x00', &(0x7f0000000400)='10\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr', 0x1b) write(r4, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr', 0x1b) write(0xffffffffffffffff, &(0x7f00000002c0)='1', 0x1) 4.863468151s ago: executing program 4 (id=712): unshare(0x22020400) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x4b6, 0x0, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="10"], 0x4000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x1, 0x4, 0x500, 0xffffffffffffffff, 0x1bc93f6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0ca"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r6, 0x7b3, &(0x7f0000000240)) 4.694851119s ago: executing program 1 (id=713): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.693512649s ago: executing program 5 (id=714): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00f8403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000"], 0x9, 0x250, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)) 3.814618857s ago: executing program 5 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 3.812342128s ago: executing program 0 (id=716): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x672, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1002, 0x2, 0x97, 0x10, 0x0, 0x3, 0x2, 0x1, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.719183383s ago: executing program 4 (id=717): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 3.632147868s ago: executing program 1 (id=718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000950000000000000000dbefe005177d77893fd7efffe0946197045dc11afa229fe77de06ed83ff9fcf9063de20d"], &(0x7f0000000040)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) socket$netlink(0x10, 0x3, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 3.463389256s ago: executing program 5 (id=719): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) socket(0x1e, 0x4, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r2, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$L2TP_CMD_SESSION_GET(r3, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 2.661257532s ago: executing program 4 (id=720): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, r3, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) close(r2) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.343501185s ago: executing program 5 (id=721): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x81000) signalfd(r0, &(0x7f00000002c0)={[0x7]}, 0x8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000400)={"a0453822", 0x80, 0x6, 0x1, 0xc0, 0x8, "3377f877c734c40400", "0000d61d", 'vd\b\x00', "04ffffbf", ["c3fffdffe663ec0100", "0080000000000100001000", "000000000000000000c40800", "00010000000000000400"]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={[0x100000000]}, 0x8) 2.211102708s ago: executing program 4 (id=722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x84, 0x0, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8de, 0x40, 0x8, 0xc1}) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) 2.103524366s ago: executing program 0 (id=723): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f06b5c01000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.771142872s ago: executing program 1 (id=724): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00f8403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000"], 0x9, 0x250, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) 1.163006884s ago: executing program 1 (id=725): unshare(0x22020400) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x4b6, 0x0, &(0x7f00000001c0), &(0x7f0000000000)=0x0, &(0x7f0000000000)) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000001300)=ANY=[@ANYBLOB="10"], 0x4000) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x11, 0x4, 0x1, 0x4, 0x500, 0xffffffffffffffff, 0x1bc93f6}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002abd8b00fedbdf210900020073797a3500000000080041007369770014003300626f6e64300000000000000000000000bbcf5c95a3c4564b63f8f91b58626f5c99203922eab33a4227032a1cfe4fa32c8aec084039497ea44df8711ec2b4c13fc4afbcacab1ba91078836c77c34c5ce296e5e86508e94aa3c00f27d88a680d55cdea2f3c779611605b96d97d0e162d9873b41b0c6200e0a6feafe2730ded340c08b42300e0ca"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x82001, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r6, 0x7b3, &(0x7f0000000240)) 1.162784545s ago: executing program 5 (id=726): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) socket$inet_udp(0x2, 0x2, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x10, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 67.087029ms ago: executing program 5 (id=727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe372, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe03, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x91ce, 0x4f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x3], 0x1, 0x400}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=728): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, 0x0) capget(0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. syzkaller login: [ 63.778568][ T5765] cgroup: Unknown subsys name 'net' [ 63.910245][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.292393][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.704938][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.713925][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.721546][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.733470][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.744019][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.751378][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.770118][ T5089] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.780546][ T5089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.789770][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.819251][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.835224][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.843142][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.845845][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.850866][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.858429][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.866183][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.872906][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.880612][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.886010][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.900210][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.901076][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.915588][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.924030][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.930696][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.231659][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 67.372725][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.381517][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.389333][ T5776] bridge_slave_0: entered allmulticast mode [ 67.396627][ T5776] bridge_slave_0: entered promiscuous mode [ 67.409717][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.417027][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.424275][ T5776] bridge_slave_1: entered allmulticast mode [ 67.431023][ T5776] bridge_slave_1: entered promiscuous mode [ 67.464100][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.473721][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 67.516379][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.526951][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 67.631854][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.639149][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.646361][ T5780] bridge_slave_0: entered allmulticast mode [ 67.653042][ T5780] bridge_slave_0: entered promiscuous mode [ 67.663615][ T5776] team0: Port device team_slave_0 added [ 67.669710][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 67.685671][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.693020][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.700260][ T5780] bridge_slave_1: entered allmulticast mode [ 67.706973][ T5780] bridge_slave_1: entered promiscuous mode [ 67.725265][ T5776] team0: Port device team_slave_1 added [ 67.796011][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.819411][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.827551][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.834916][ T5779] bridge_slave_0: entered allmulticast mode [ 67.841573][ T5779] bridge_slave_0: entered promiscuous mode [ 67.851480][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.869975][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.877115][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.903461][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.921635][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.931265][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.959794][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.979249][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.986432][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.993732][ T5779] bridge_slave_1: entered allmulticast mode [ 68.000397][ T5779] bridge_slave_1: entered promiscuous mode [ 68.024822][ T5780] team0: Port device team_slave_0 added [ 68.034287][ T5780] team0: Port device team_slave_1 added [ 68.104696][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.111673][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.140257][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.153778][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.163044][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.170496][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.178043][ T5781] bridge_slave_0: entered allmulticast mode [ 68.185087][ T5781] bridge_slave_0: entered promiscuous mode [ 68.201926][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.209191][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.235150][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.254606][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.274640][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.281774][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.289103][ T5781] bridge_slave_1: entered allmulticast mode [ 68.296174][ T5781] bridge_slave_1: entered promiscuous mode [ 68.307867][ T5776] hsr_slave_0: entered promiscuous mode [ 68.314925][ T5776] hsr_slave_1: entered promiscuous mode [ 68.380353][ T5779] team0: Port device team_slave_0 added [ 68.390247][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.402245][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.423141][ T5780] hsr_slave_0: entered promiscuous mode [ 68.430210][ T5780] hsr_slave_1: entered promiscuous mode [ 68.437345][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.445605][ T5780] Cannot create hsr debugfs directory [ 68.452601][ T5779] team0: Port device team_slave_1 added [ 68.479765][ T5781] team0: Port device team_slave_0 added [ 68.510718][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.517860][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.543812][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.559086][ T5781] team0: Port device team_slave_1 added [ 68.596275][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.604676][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.631873][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.653643][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.660595][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.688567][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.723106][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.730204][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.758674][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.839625][ T5779] hsr_slave_0: entered promiscuous mode [ 68.846242][ T5778] Bluetooth: hci0: command tx timeout [ 68.852773][ T5779] hsr_slave_1: entered promiscuous mode [ 68.858899][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.866860][ T5779] Cannot create hsr debugfs directory [ 68.967835][ T5781] hsr_slave_0: entered promiscuous mode [ 68.974748][ T5781] hsr_slave_1: entered promiscuous mode [ 68.981132][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.988847][ T5781] Cannot create hsr debugfs directory [ 69.003914][ T5778] Bluetooth: hci1: command tx timeout [ 69.003931][ T5089] Bluetooth: hci3: command tx timeout [ 69.004069][ T5089] Bluetooth: hci2: command tx timeout [ 69.211379][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.229263][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.240218][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.276832][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.326600][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.347827][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.359753][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.376936][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.465717][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.475951][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.487847][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.500003][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.575115][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.585660][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.605288][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.616937][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.629920][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.682111][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.714731][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.721965][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.739975][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.747163][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.828117][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.859287][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.896200][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.917120][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.924244][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.956622][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.963897][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.993982][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.005978][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.036522][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.043710][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.089713][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.096942][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.130672][ T5776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.160319][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.197647][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.204846][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.225324][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.232797][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.276469][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.289673][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.385557][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.525291][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.545550][ T5780] veth0_vlan: entered promiscuous mode [ 70.573155][ T5780] veth1_vlan: entered promiscuous mode [ 70.655007][ T5776] veth0_vlan: entered promiscuous mode [ 70.669775][ T5780] veth0_macvtap: entered promiscuous mode [ 70.682821][ T5780] veth1_macvtap: entered promiscuous mode [ 70.720429][ T5776] veth1_vlan: entered promiscuous mode [ 70.761221][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.774158][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.798642][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.827819][ T5776] veth0_macvtap: entered promiscuous mode [ 70.841305][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.851736][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.860636][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.869733][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.906664][ T5776] veth1_macvtap: entered promiscuous mode [ 70.923907][ T5089] Bluetooth: hci0: command tx timeout [ 70.939914][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.008148][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.023046][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.034657][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.046836][ T5779] veth0_vlan: entered promiscuous mode [ 71.084241][ T5089] Bluetooth: hci1: command tx timeout [ 71.084426][ T51] Bluetooth: hci3: command tx timeout [ 71.089662][ T5089] Bluetooth: hci2: command tx timeout [ 71.117516][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.128627][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.141362][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.152448][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.161963][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.171151][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.181011][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201242][ T5781] veth0_vlan: entered promiscuous mode [ 71.207586][ T5779] veth1_vlan: entered promiscuous mode [ 71.240996][ T5781] veth1_vlan: entered promiscuous mode [ 71.256795][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.278824][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.338220][ T5779] veth0_macvtap: entered promiscuous mode [ 71.352554][ T2973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.368393][ T2973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.386936][ T5779] veth1_macvtap: entered promiscuous mode [ 71.421925][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.453557][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.495464][ T5781] veth0_macvtap: entered promiscuous mode [ 71.515445][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.529435][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.539436][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.552357][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.570757][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.575018][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.577568][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.588124][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.606071][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.617946][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.628468][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.639507][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.654516][ T5781] veth1_macvtap: entered promiscuous mode [ 71.674217][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.682082][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.699415][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.708803][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.720055][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.733558][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.754422][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.770017][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.780709][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.797381][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.808270][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.819164][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.830624][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.857968][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.872326][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.882544][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.894073][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.906046][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.916642][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.928640][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.940687][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.949974][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.966030][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.975349][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.149611][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.177417][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.200996][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.216754][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.259472][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.269426][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.321310][ T3439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.331928][ T3439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.437638][ T5844] syz.0.1[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.464236][ T5838] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.477195][ T5846] loop3: detected capacity change from 0 to 512 [ 72.507238][ T5844] loop0: detected capacity change from 0 to 2048 [ 72.536753][ T5844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.560110][ T5844] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 72.564963][ T5846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.645499][ T5846] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.656863][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 72.868240][ T5838] usb 2-1: unable to get BOS descriptor or descriptor too short [ 72.880703][ T5838] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 72.891147][ T5838] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 72.900035][ T5838] usb 2-1: config 14 has no interface number 0 [ 72.907431][ T5838] usb 2-1: config 14 has no interface number 1 [ 72.914558][ T5838] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 72.926215][ T5838] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 73.159624][ T5855] fuse: Bad value for 'fd' [ 73.167444][ T51] Bluetooth: hci2: command tx timeout [ 73.173918][ T51] Bluetooth: hci3: command tx timeout [ 73.179411][ T51] Bluetooth: hci1: command tx timeout [ 74.632126][ T5856] sched: RT throttling activated [ 74.632807][ T5089] Bluetooth: hci0: command tx timeout [ 74.664049][ T5838] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 75.301062][ T5089] Bluetooth: hci2: command tx timeout [ 75.320722][ T5838] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.439839][ T5838] usb 2-1: config 14 interface 57 has no altsetting 0 [ 75.533060][ T5838] usb 2-1: config 14 interface 228 has no altsetting 0 [ 75.670753][ T5838] usb 2-1: string descriptor 0 read error: -71 [ 75.691770][ T5838] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 75.719980][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.734090][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.801153][ T5838] usb 2-1: can't set config #14, error -71 [ 75.851016][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.864009][ T5838] usb 2-1: USB disconnect, device number 2 [ 75.968777][ T5868] loop3: detected capacity change from 0 to 1024 [ 76.016234][ T5868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.293105][ T5874] loop0: detected capacity change from 0 to 512 [ 76.544133][ T5874] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.9: corrupted in-inode xattr: invalid ea_ino [ 76.743404][ T5089] Bluetooth: hci0: command tx timeout [ 76.749046][ T5089] Bluetooth: hci1: command tx timeout [ 76.758345][ T5089] Bluetooth: hci3: command tx timeout [ 76.919640][ T5874] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.9: couldn't read orphan inode 15 (err -117) [ 76.984349][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.992845][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.655948][ T5863] loop2: detected capacity change from 0 to 32768 [ 77.707388][ T5863] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.10 (5863) [ 77.903760][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.942517][ T5863] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.017277][ T5863] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 78.038078][ T5863] BTRFS info (device loop2): disabling tree log [ 78.046154][ T5863] BTRFS info (device loop2): using free space tree [ 78.195167][ T5863] BTRFS info (device loop2): enabling ssd optimizations [ 78.202185][ T5863] BTRFS info (device loop2): auto enabling async discard [ 78.459529][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.467998][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.714323][ T5834] usb 1-1: Using ep0 maxpacket: 16 [ 78.795918][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 78.819591][ T5834] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.843395][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 78.874493][ T5834] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 78.891680][ T5838] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 1024 [ 78.937924][ T5834] usb 1-1: config 0 interface 0 has no altsetting 0 [ 78.969368][ T5838] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 78.985966][ T5834] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 79.009662][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.019629][ T5780] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 79.725722][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.764620][ T5838] usb 4-1: Product: syz [ 79.791640][ T5838] usb 4-1: Manufacturer: syz [ 79.821952][ T5838] usb 4-1: SerialNumber: syz [ 79.839038][ T5834] usb 1-1: config 0 descriptor?? [ 80.424852][ T5838] usb 4-1: USB disconnect, device number 2 [ 80.567746][ T5834] logitech-djreceiver 0003:046D:C53A.0001: unknown main item tag 0x0 [ 80.596853][ T5834] logitech-djreceiver 0003:046D:C53A.0001: unbalanced collection at end of report description [ 80.635455][ T5834] logitech-djreceiver 0003:046D:C53A.0001: logi_dj_probe: parse failed [ 80.670084][ T5834] logitech-djreceiver: probe of 0003:046D:C53A.0001 failed with error -22 [ 80.719077][ T5834] usb 1-1: USB disconnect, device number 2 [ 80.754360][ T5917] syz.1.17 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.611983][ T5922] loop3: detected capacity change from 0 to 2048 [ 81.694133][ T5926] loop1: detected capacity change from 0 to 164 [ 81.869754][ T5922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.903197][ T5922] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.143813][ T5834] logitech-hidpp-device 0005:046D:B012.0002: item fetching failed at offset 3/4 [ 82.339509][ T5834] logitech-hidpp-device 0005:046D:B012.0002: hidpp_probe:parse failed [ 82.540296][ T5834] logitech-hidpp-device: probe of 0005:046D:B012.0002 failed with error -22 [ 82.777841][ T5934] loop1: detected capacity change from 0 to 512 [ 82.857324][ T5934] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.21: corrupted in-inode xattr: invalid ea_ino [ 83.013245][ T5941] fuse: Bad value for 'fd' [ 83.046342][ T5934] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.21: couldn't read orphan inode 15 (err -117) [ 83.220312][ T5940] loop2: detected capacity change from 0 to 512 [ 83.258445][ T5934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.406843][ T5940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.257472][ T5940] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.295889][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.480603][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.520739][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.710114][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.619402][ T5974] loop2: detected capacity change from 0 to 512 [ 85.700578][ T5974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.723970][ T5974] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.368169][ T5981] loop1: detected capacity change from 0 to 2048 [ 86.462845][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.476668][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.517876][ T5981] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.549879][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.031664][ T5998] fuse: Bad value for 'fd' [ 88.074759][ T9] cfg80211: failed to load regulatory.db [ 88.842463][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 88.881807][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.182344][ T6010] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.45'. [ 90.541830][ T6022] loop1: detected capacity change from 0 to 2048 [ 90.574372][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.623833][ T6022] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.655272][ C0] vkms_vblank_simulate: vblank timer overrun [ 91.084134][ T6037] fuse: Bad value for 'fd' [ 93.005821][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.191545][ T6050] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.54'. [ 94.215595][ T6070] fuse: Bad value for 'fd' [ 94.823653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.233298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.980201][ T6081] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.67'. [ 96.431353][ T6094] loop1: detected capacity change from 0 to 2048 [ 96.911930][ T6094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.072027][ T6094] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.627542][ T6107] loop3: detected capacity change from 0 to 164 [ 97.673714][ T6110] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.78'. [ 98.753412][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 98.958368][ T27] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 98.983829][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.022162][ T27] usb 1-1: Product: syz [ 99.033692][ T27] usb 1-1: Manufacturer: syz [ 99.048683][ T27] usb 1-1: SerialNumber: syz [ 99.113406][ T6131] loop2: detected capacity change from 0 to 512 [ 99.162401][ T6131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.185792][ T5814] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 99.237375][ T6131] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.357241][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.378770][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.415441][ T5814] usb 4-1: unable to get BOS descriptor or descriptor too short [ 99.437743][ T5814] usb 4-1: not running at top speed; connect to a high speed hub [ 99.455243][ T5814] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 99.469234][ T6135] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.88'. [ 99.480743][ T5814] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 99.491531][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 99.509466][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.517944][ T5814] usb 4-1: Product: syz [ 99.522372][ T5814] usb 4-1: Manufacturer: syz [ 99.529785][ T5814] usb 4-1: SerialNumber: syz [ 99.851380][ T5814] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 100.033894][ T5814] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 100.042681][ T5814] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 100.234564][ T5814] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 100.489816][ T5814] usb 4-1: USB disconnect, device number 3 [ 100.987176][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 101.021859][ T6153] loop2: detected capacity change from 0 to 2048 [ 101.161417][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 101.386858][ T6153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.413729][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 101.465923][ T6153] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.513477][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 101.599202][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 101.690266][ T6161] loop1: detected capacity change from 0 to 512 [ 101.697270][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 101.944269][ T6162] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.97'. [ 102.490683][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 102.592241][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 102.665181][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 102.683930][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 102.763772][ T27] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 102.776061][ T27] lan78xx: probe of 1-1:1.0 failed with error -71 [ 102.788592][ T27] usb 1-1: USB disconnect, device number 3 [ 102.835762][ T6161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.910621][ T6161] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.684435][ T6170] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.746685][ T6170] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 103.948670][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.997712][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.146835][ T6183] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.262394][ T6199] loop1: detected capacity change from 0 to 2048 [ 105.315112][ T6203] loop3: detected capacity change from 0 to 512 [ 105.318733][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.387179][ T6199] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.430535][ T6203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.465542][ T6203] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.500510][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.535498][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.818684][ T6248] loop2: detected capacity change from 0 to 512 [ 108.992360][ T6254] fuse: Bad value for 'fd' [ 110.669324][ T6248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.683104][ T6248] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.127999][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.847356][ T5814] IPVS: starting estimator thread 0... [ 113.013442][ T6285] IPVS: using max 23 ests per chain, 55200 per kthread [ 113.023556][ T5814] IPVS: starting estimator thread 0... [ 113.079744][ T6291] process 'syz.0.137' launched './sys' with NULL argv: empty string added [ 113.113422][ T6287] IPVS: using max 21 ests per chain, 50400 per kthread [ 114.875974][ T27] IPVS: starting estimator thread 0... [ 115.016689][ T6301] IPVS: using max 18 ests per chain, 43200 per kthread [ 116.543047][ T6320] loop2: detected capacity change from 0 to 512 [ 116.718837][ T6320] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.144: corrupted in-inode xattr: invalid ea_ino [ 116.738769][ T6320] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.144: couldn't read orphan inode 15 (err -117) [ 116.752282][ T6320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.655153][ T6332] loop1: detected capacity change from 0 to 512 [ 117.736684][ T6332] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.146: corrupted in-inode xattr: invalid ea_ino [ 117.796011][ T6332] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.146: couldn't read orphan inode 15 (err -117) [ 118.004714][ T6332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.358716][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.152474][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.568010][ T6349] siw: device registration error -23 [ 122.079639][ T6374] tipc: Started in network mode [ 122.084961][ T6374] tipc: Node identity 0295f70f97be, cluster identity 4711 [ 122.092907][ T6374] tipc: Enabled bearer , priority 0 [ 122.100840][ T6374] syzkaller0: entered promiscuous mode [ 122.106472][ T6374] syzkaller0: entered allmulticast mode [ 122.141079][ T6374] tipc: Resetting bearer [ 122.150855][ T6372] tipc: Resetting bearer [ 122.153644][ T788] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 122.191508][ T6372] tipc: Disabling bearer [ 122.298106][ T6376] loop1: detected capacity change from 0 to 512 [ 122.328321][ T6376] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.156: corrupted in-inode xattr: invalid ea_ino [ 122.357489][ T6376] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.156: couldn't read orphan inode 15 (err -117) [ 122.382440][ T788] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 122.388028][ T6376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.400968][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.414694][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.414720][ T788] usb 3-1: SerialNumber: syz [ 122.653796][ T8] usb 3-1: USB disconnect, device number 2 [ 123.467066][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.081557][ T5814] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 126.151013][ T6412] loop2: detected capacity change from 0 to 512 [ 126.180174][ T6413] loop3: detected capacity change from 0 to 512 [ 126.204936][ T6412] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.171: corrupted in-inode xattr: invalid ea_ino [ 126.224850][ T6413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 126.244979][ T6412] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.171: couldn't read orphan inode 15 (err -117) [ 126.248028][ T6413] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.279961][ T6412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.310680][ T5814] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.320252][ T5814] usb 2-1: not running at top speed; connect to a high speed hub [ 126.334815][ T5814] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 126.356095][ T5814] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 126.377464][ T5814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.390387][ T5814] usb 2-1: Product: syz [ 126.397097][ T5814] usb 2-1: Manufacturer: syz [ 126.401976][ T5814] usb 2-1: SerialNumber: syz [ 127.137821][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.512791][ T5814] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.838501][ T6430] nftables ruleset with unbound set [ 127.992007][ T5814] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 128.041568][ T5814] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 128.279943][ T5814] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 130.441290][ T5814] usb 2-1: USB disconnect, device number 3 [ 130.618983][ T6446] siw: device registration error -23 [ 131.010390][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.243906][ T6462] loop3: detected capacity change from 0 to 512 [ 132.496536][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.677615][ T6462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.432513][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.448779][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.486870][ T6471] siw: device registration error -23 [ 137.651650][ T6520] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.203'. [ 137.808774][ T5159] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.044502][ T5159] usb 3-1: Using ep0 maxpacket: 16 [ 138.075385][ T5159] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.107402][ T5159] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 138.146024][ T5159] usb 3-1: config 0 interface 0 has no altsetting 0 [ 138.205539][ T5159] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 138.275515][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.409632][ T5159] usb 3-1: config 0 descriptor?? [ 139.525084][ T5159] usbhid 3-1:0.0: can't add hid device: -71 [ 139.532259][ T5159] usbhid: probe of 3-1:0.0 failed with error -71 [ 139.550408][ T5159] usb 3-1: USB disconnect, device number 3 [ 140.481134][ T6546] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.212'. [ 144.247173][ T6581] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.223'. [ 144.653992][ T5814] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 144.943869][ T5814] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 145.029661][ T5814] usb 3-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 145.274882][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.284681][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.293105][ T5814] usb 3-1: SerialNumber: syz [ 145.315162][ T5814] cdc_ether 3-1:26.0: skipping garbage [ 145.320693][ T5814] usb 3-1: bad CDC descriptors [ 146.325168][ T5159] usb 3-1: USB disconnect, device number 4 [ 146.754300][ T6613] siw: device registration error -23 [ 147.130337][ T6615] tipc: Started in network mode [ 147.172049][ T6615] tipc: Node identity b2839805eb7d, cluster identity 4711 [ 147.232709][ T6615] tipc: Enabled bearer , priority 0 [ 147.409276][ T6616] syzkaller0: entered promiscuous mode [ 147.586928][ T6616] syzkaller0: entered allmulticast mode [ 147.652799][ T6615] tipc: Resetting bearer [ 147.684302][ T6621] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.235'. [ 147.710337][ T6614] tipc: Resetting bearer [ 147.741412][ T6627] netlink: 884 bytes leftover after parsing attributes in process `syz.3.238'. [ 147.772561][ T6614] tipc: Disabling bearer [ 148.813345][ T5159] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 149.036331][ T5159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.049566][ T5159] usb 3-1: not running at top speed; connect to a high speed hub [ 149.065585][ T5159] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 149.108739][ T5159] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 149.136077][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.158373][ T6645] siw: device registration error -23 [ 149.183027][ T5159] usb 3-1: Product: syz [ 149.220327][ T5159] usb 3-1: Manufacturer: syz [ 149.255847][ T5159] usb 3-1: SerialNumber: syz [ 149.675769][ T5159] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 150.023419][ T5159] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 150.032022][ T5159] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 150.164587][ T6651] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.248'. [ 150.266373][ T6654] netlink: 884 bytes leftover after parsing attributes in process `syz.1.249'. [ 150.416806][ T5159] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 150.478303][ T5159] usb 3-1: USB disconnect, device number 5 [ 150.702754][ T6589] udevd[6589]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.457901][ T5838] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 151.931877][ T6674] siw: device registration error -23 [ 151.974638][ T5838] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 152.007839][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.051990][ T5838] usb 2-1: Product: syz [ 152.091429][ T5838] usb 2-1: Manufacturer: syz [ 152.130370][ T5838] usb 2-1: SerialNumber: syz [ 152.195956][ T5838] usb 2-1: config 0 descriptor?? [ 152.710487][ T5838] usb 2-1: USB disconnect, device number 4 [ 152.770756][ T6680] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.257'. [ 153.233954][ T5159] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 154.368632][ T5159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.533271][ T5159] usb 3-1: not running at top speed; connect to a high speed hub [ 154.553419][ T5159] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 154.624536][ T5159] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 154.640768][ T6705] siw: device registration error -23 [ 154.714575][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.799109][ T5159] usb 3-1: Product: syz [ 154.844598][ T5159] usb 3-1: Manufacturer: syz [ 154.892217][ T5159] usb 3-1: SerialNumber: syz [ 155.424842][ T5159] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 155.574128][ T5159] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 155.606846][ T5159] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 155.975634][ T5159] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 156.023134][ T5159] usb 3-1: USB disconnect, device number 6 [ 156.132835][ T6589] udevd[6589]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.773272][ T788] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 156.892223][ T6736] siw: device registration error -23 [ 157.010472][ T788] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 157.070703][ T788] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 157.132976][ T788] usb 2-1: Product: syz [ 157.163821][ T788] usb 2-1: Manufacturer: syz [ 157.199996][ T788] usb 2-1: SerialNumber: syz [ 157.320383][ T788] usb 2-1: config 0 descriptor?? [ 157.733065][ T788] usb 2-1: USB disconnect, device number 5 [ 157.795120][ T6607] udevd[6607]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.849540][ T6740] tipc: Enabled bearer , priority 0 [ 157.857228][ T6740] syzkaller0: entered promiscuous mode [ 157.862743][ T6740] syzkaller0: entered allmulticast mode [ 157.878782][ T6740] tipc: Resetting bearer [ 158.189458][ T6739] tipc: Resetting bearer [ 158.226287][ T6739] tipc: Disabling bearer [ 158.513489][ T5159] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 158.736451][ T5159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.823880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 159.473319][ T5159] usb 3-1: not running at top speed; connect to a high speed hub [ 159.484992][ T5159] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 159.500308][ T5159] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 159.516268][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.524437][ T5159] usb 3-1: Product: syz [ 159.528615][ T5159] usb 3-1: Manufacturer: syz [ 159.534090][ T5159] usb 3-1: SerialNumber: syz [ 159.758316][ T5159] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 159.763406][ T788] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 159.971834][ T788] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 159.987739][ T788] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 159.998561][ T788] usb 4-1: Product: syz [ 160.002885][ T788] usb 4-1: Manufacturer: syz [ 160.018092][ T788] usb 4-1: SerialNumber: syz [ 160.030790][ T788] usb 4-1: config 0 descriptor?? [ 160.124169][ T5159] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 160.133312][ T5159] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 160.262045][ T788] usb 4-1: USB disconnect, device number 4 [ 160.419696][ T5159] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 160.522616][ T5159] usb 3-1: USB disconnect, device number 7 [ 160.624207][ T6589] udevd[6589]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.887112][ T8] logitech-hidpp-device 0005:046D:B012.0003: item fetching failed at offset 3/4 [ 161.097214][ T8] logitech-hidpp-device 0005:046D:B012.0003: hidpp_probe:parse failed [ 161.275596][ T8] logitech-hidpp-device: probe of 0005:046D:B012.0003 failed with error -22 [ 163.314189][ T788] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 163.609167][ T788] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 163.674353][ T788] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 163.720068][ T788] usb 2-1: Product: syz [ 163.748266][ T788] usb 2-1: Manufacturer: syz [ 163.771017][ T788] usb 2-1: SerialNumber: syz [ 163.817665][ T788] usb 2-1: config 0 descriptor?? [ 164.035870][ T8] usb 2-1: USB disconnect, device number 6 [ 165.087154][ T6837] tipc: Enabled bearer , priority 0 [ 165.099083][ T6837] tipc: Resetting bearer [ 165.112694][ T6836] tipc: Disabling bearer [ 167.343324][ T5159] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.433490][ T8] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 167.523328][ T5159] usb 2-1: Using ep0 maxpacket: 16 [ 167.532097][ T5159] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.543406][ T5159] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 167.556771][ T5159] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.563506][ T5159] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 167.572561][ T5159] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.585186][ T5159] usb 2-1: config 0 descriptor?? [ 167.617310][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 167.626747][ T8] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 167.635862][ T8] usb 1-1: Product: syz [ 167.640056][ T8] usb 1-1: Manufacturer: syz [ 167.644990][ T8] usb 1-1: SerialNumber: syz [ 167.651233][ T8] usb 1-1: config 0 descriptor?? [ 167.866582][ T5838] usb 1-1: USB disconnect, device number 4 [ 167.999809][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 168.011203][ T5159] usbhid 2-1:0.0: can't add hid device: -71 [ 168.017370][ T5159] usbhid: probe of 2-1:0.0 failed with error -71 [ 168.029515][ T5159] usb 2-1: USB disconnect, device number 7 [ 171.180258][ T6890] Zero length message leads to an empty skb [ 171.206730][ T8] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 171.397456][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 171.406704][ T8] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 171.414870][ T8] usb 2-1: Product: syz [ 171.419872][ T8] usb 2-1: Manufacturer: syz [ 171.424586][ T8] usb 2-1: SerialNumber: syz [ 171.431178][ T8] usb 2-1: config 0 descriptor?? [ 171.644989][ T5814] usb 2-1: USB disconnect, device number 8 [ 171.995213][ T6892] tipc: Enabled bearer , priority 0 [ 172.011767][ T6892] tipc: Resetting bearer [ 172.030227][ T6891] tipc: Disabling bearer [ 173.842675][ T6917] binfmt_misc: register: failed to install interpreter file ./file2 [ 177.420996][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.430287][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.444523][ T5089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.452802][ T5089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.464157][ T5089] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 177.472487][ T5089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 177.538772][ T5089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.548203][ T5089] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.559637][ T5089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.573796][ T5089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.581568][ T5089] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 177.591255][ T5089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.610565][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 178.692744][ T6961] chnl_net:caif_netlink_parms(): no params data found [ 178.960875][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.972509][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.998100][ T6959] bridge_slave_0: entered allmulticast mode [ 179.108819][ T6959] bridge_slave_0: entered promiscuous mode [ 179.519441][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.590129][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.603406][ T5089] Bluetooth: hci4: command tx timeout [ 179.625226][ T6959] bridge_slave_1: entered allmulticast mode [ 179.643713][ T5089] Bluetooth: hci5: command tx timeout [ 179.654068][ T6959] bridge_slave_1: entered promiscuous mode [ 179.689943][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.712573][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.785303][ T6961] bridge_slave_0: entered allmulticast mode [ 179.792827][ T6961] bridge_slave_0: entered promiscuous mode [ 179.802806][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.817022][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.832246][ T6961] bridge_slave_1: entered allmulticast mode [ 179.852931][ T6961] bridge_slave_1: entered promiscuous mode [ 179.927982][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.940569][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.952965][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.977042][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.022156][ T6959] team0: Port device team_slave_0 added [ 180.050131][ T6959] team0: Port device team_slave_1 added [ 180.062909][ T6961] team0: Port device team_slave_0 added [ 180.128121][ T6961] team0: Port device team_slave_1 added [ 180.141562][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.150068][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.185998][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.212297][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.219949][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.250456][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.282871][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.291590][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.320936][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.372605][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.382199][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.410006][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.445828][ T6959] hsr_slave_0: entered promiscuous mode [ 180.465179][ T6959] hsr_slave_1: entered promiscuous mode [ 180.479180][ T6959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.490418][ T6959] Cannot create hsr debugfs directory [ 180.598325][ T6961] hsr_slave_0: entered promiscuous mode [ 180.605718][ T6961] hsr_slave_1: entered promiscuous mode [ 180.612259][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.651111][ T6961] Cannot create hsr debugfs directory [ 181.078598][ T6959] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.108979][ T6959] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.128573][ T6959] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.147516][ T6959] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.297289][ T6961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 181.345719][ T6961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 181.366319][ T6961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 181.385730][ T6961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 181.439846][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.494911][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.532279][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.539938][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.580898][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.590996][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.643984][ T5089] Bluetooth: hci4: command tx timeout [ 181.723677][ T5089] Bluetooth: hci5: command tx timeout [ 181.785750][ T6959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.863009][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.954834][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.982379][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.989612][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.006180][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.013785][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.698287][ T6961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.068831][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.724647][ T5089] Bluetooth: hci4: command tx timeout [ 183.803819][ T5089] Bluetooth: hci5: command tx timeout [ 183.959122][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.480443][ T6959] veth0_vlan: entered promiscuous mode [ 184.508160][ T6959] veth1_vlan: entered promiscuous mode [ 184.577737][ T6959] veth0_macvtap: entered promiscuous mode [ 184.611940][ T6959] veth1_macvtap: entered promiscuous mode [ 184.657184][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.668433][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.679565][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.700584][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.723725][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.743367][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.779823][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.800840][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.822564][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.867210][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.894935][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.913331][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.929981][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.940958][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.953027][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.964960][ T6959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.977221][ T6959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.039730][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.097321][ T6959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.118752][ T6959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.139743][ T6959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.156095][ T6959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.195873][ T6961] veth0_vlan: entered promiscuous mode [ 185.258250][ T6961] veth1_vlan: entered promiscuous mode [ 185.341641][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.377742][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.409228][ T6961] veth0_macvtap: entered promiscuous mode [ 185.511279][ T6961] veth1_macvtap: entered promiscuous mode [ 185.541493][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.580908][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.596090][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.612482][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.622558][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.657845][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.668272][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.698103][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.772585][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.803722][ T5089] Bluetooth: hci4: command tx timeout [ 185.867794][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.898002][ T5089] Bluetooth: hci5: command tx timeout [ 186.130645][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.143801][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.156833][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.196890][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.209952][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.678475][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.710235][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.753518][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.779553][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.796160][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.807716][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.818412][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.829244][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.846142][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.872504][ T6961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.906231][ T6961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.915114][ T6961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.924903][ T6961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.564689][ T3553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.612549][ T3553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.853596][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.862741][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.839763][ T7089] binfmt_misc: register: failed to install interpreter file ./file2 [ 191.504249][ T7110] syzkaller0: entered promiscuous mode [ 191.533277][ T7110] syzkaller0: entered allmulticast mode [ 192.755534][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 192.761702][ T5089] Bluetooth: hci2: command 0x0406 tx timeout [ 193.665344][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 193.671560][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 194.022597][ T5778] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 194.465728][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472137][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.917299][ T7139] binfmt_misc: register: failed to install interpreter file ./file2 [ 198.746308][ T7159] syzkaller0: entered promiscuous mode [ 198.772502][ T7159] syzkaller0: entered allmulticast mode [ 201.703909][ T7183] overlayfs: failed to resolve './bus': -2 [ 203.393884][ T5778] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 203.642277][ T7204] binfmt_misc: register: failed to install interpreter file ./file2 [ 203.953385][ T788] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 204.153788][ T788] usb 6-1: Using ep0 maxpacket: 16 [ 204.165807][ T7216] overlayfs: failed to resolve './bus': -2 [ 204.181819][ T788] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.213336][ T788] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.249761][ T788] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.266181][ T788] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 204.280837][ T788] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.381382][ T788] usb 6-1: config 0 descriptor?? [ 205.272869][ T788] usbhid 6-1:0.0: can't add hid device: -71 [ 205.314491][ T788] usbhid: probe of 6-1:0.0 failed with error -71 [ 205.403595][ T788] usb 6-1: USB disconnect, device number 2 [ 208.933611][ T5778] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 209.212574][ T7245] binfmt_misc: register: failed to install interpreter file ./file2 [ 209.913408][ T5833] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 210.184389][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 210.253203][ T5833] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.364809][ T5833] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 210.395632][ T5833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 210.437239][ T5833] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 210.464233][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.525938][ T5833] usb 5-1: config 0 descriptor?? [ 213.755971][ T5833] usbhid 5-1:0.0: can't add hid device: -71 [ 213.762009][ T5833] usbhid: probe of 5-1:0.0 failed with error -71 [ 213.974875][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 214.749400][ T5833] usb 5-1: USB disconnect, device number 2 [ 215.541817][ T7306] binfmt_misc: register: failed to install interpreter file ./file2 [ 215.564293][ T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.853710][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 215.907388][ T788] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.080358][ T788] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 216.140482][ T788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 216.166102][ T788] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 216.206570][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.295778][ T788] usb 2-1: config 0 descriptor?? [ 216.363881][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 216.409052][ T7319] tipc: Started in network mode [ 216.419083][ T7319] tipc: Node identity 365a973c0da7, cluster identity 4711 [ 216.429785][ T7319] tipc: Enabled bearer , priority 0 [ 216.459878][ T7316] tipc: Disabling bearer [ 216.712466][ T788] usbhid 2-1:0.0: can't add hid device: -71 [ 216.724352][ T788] usbhid: probe of 2-1:0.0 failed with error -71 [ 216.743560][ T788] usb 2-1: USB disconnect, device number 9 [ 220.153325][ T5778] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 222.637277][ T7376] binfmt_misc: register: failed to install interpreter file ./file2 [ 223.883540][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 225.907589][ T7425] binfmt_misc: register: failed to install interpreter file ./file2 [ 226.857257][ T5778] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 227.209910][ T7440] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6959] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7440] [ 229.016145][ T7457] siw: device registration error -23 [ 230.234171][ T7458] binfmt_misc: register: failed to install interpreter file ./file2 [ 231.844857][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 234.732796][ T7490] binfmt_misc: register: failed to install interpreter file ./file2 [ 236.431286][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 237.856170][ T7527] binfmt_misc: register: failed to install interpreter file ./file2 [ 241.147865][ T7568] binfmt_misc: register: failed to install interpreter file ./file2 [ 242.572013][ T7581] siw: device registration error -23 [ 243.663750][ T7593] binfmt_misc: register: failed to install interpreter file ./file2 [ 243.783538][ T5814] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.983708][ T5814] usb 2-1: Using ep0 maxpacket: 16 [ 244.052545][ T5814] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.282145][ T5814] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 244.295647][ T5814] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.302409][ T5814] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 244.312145][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.010955][ T5814] usb 2-1: config 0 descriptor?? [ 246.011093][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.084692][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.093120][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.102923][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.113020][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.121805][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.130454][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.139523][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.151060][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.211804][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.220261][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.228725][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.237202][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.245914][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unknown main item tag 0x0 [ 246.282346][ T5814] logitech-djreceiver 0003:046D:C53A.0004: unbalanced collection at end of report description [ 246.330170][ T5814] logitech-djreceiver 0003:046D:C53A.0004: logi_dj_probe: parse failed [ 246.393634][ T5814] logitech-djreceiver: probe of 0003:046D:C53A.0004 failed with error -22 [ 246.447079][ T5814] usb 2-1: USB disconnect, device number 10 [ 247.528648][ T7634] binfmt_misc: register: failed to install interpreter file ./file2 [ 248.435391][ T7650] siw: device registration error -23 [ 249.318923][ T7664] binfmt_misc: register: failed to install interpreter file ./file2 [ 251.930926][ T7686] siw: device registration error -23 [ 253.953299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 254.877616][ T7708] binfmt_misc: register: failed to install interpreter file ./file2 [ 255.887811][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.903212][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.073322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 259.298347][ T7722] siw: device registration error -23 [ 260.081724][ T7743] binfmt_misc: register: failed to install interpreter file ./file2 [ 266.947410][ T7786] binfmt_misc: register: failed to install interpreter file ./file2 [ 268.027347][ T7794] siw: device registration error -23 [ 271.045382][ T7820] binfmt_misc: register: failed to install interpreter file ./file2 [ 273.356215][ T7855] siw: device registration error -23 [ 276.557624][ T7868] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 276.666609][ T7868] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 279.143659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 279.553308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 280.803428][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 280.887984][ T7911] bridge_slave_0: left allmulticast mode [ 280.912615][ T7911] bridge_slave_0: left promiscuous mode [ 280.929504][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.005358][ T5909] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 281.023228][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.068714][ T5909] usb 1-1: config 0 descriptor?? [ 282.084654][ T7924] siw: device registration error -23 [ 282.592319][ T5909] usb 1-1: Cannot set autoneg [ 282.610353][ T5909] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 282.858377][ T5909] usb 1-1: USB disconnect, device number 5 [ 283.708196][ T5909] logitech-hidpp-device 0005:046D:B012.0005: item fetching failed at offset 3/4 [ 283.925809][ T5909] logitech-hidpp-device 0005:046D:B012.0005: hidpp_probe:parse failed [ 283.934508][ T5909] logitech-hidpp-device: probe of 0005:046D:B012.0005 failed with error -22 [ 284.001396][ T5778] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 284.218949][ T7945] overlayfs: missing 'lowerdir' [ 285.642258][ T7959] siw: device registration error -23 [ 286.545658][ T5833] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 286.733227][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 286.746794][ T5833] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 286.757943][ T5833] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0x6B, skipping [ 286.776209][ T5833] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 286.815872][ T5833] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 286.840022][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.871886][ T5833] usb 2-1: Product: syz [ 286.880757][ T5833] usb 2-1: Manufacturer: syz [ 286.886648][ T5833] usb 2-1: SerialNumber: syz [ 286.904582][ T7965] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 286.917439][ T5833] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 286.929316][ T5833] imon 2-1:155.0: unable to initialize intf0, err -19 [ 286.940353][ T5833] imon:imon_probe: failed to initialize context! [ 286.947027][ T5833] imon 2-1:155.0: unable to register, err -19 [ 287.148670][ T5833] usb 2-1: USB disconnect, device number 11 [ 287.308944][ T7882] Set syz1 is full, maxelem 65536 reached [ 287.407716][ T7977] overlayfs: missing 'lowerdir' [ 287.500871][ T7980] siw: device registration error -23 [ 288.728933][ T7995] siw: device registration error -23 [ 289.782430][ T8008] overlayfs: missing 'lowerdir' [ 290.963658][ T8026] siw: device registration error -23 [ 294.004022][ T5813] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 294.205900][ T5813] usb 2-1: not running at top speed; connect to a high speed hub [ 294.224661][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 294.251157][ T5813] usb 2-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 294.273251][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.302573][ T5813] usb 2-1: Product: syz [ 294.308077][ T5813] usb 2-1: Manufacturer: syz [ 294.323591][ T5813] usb 2-1: SerialNumber: syz [ 294.332451][ T8039] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 294.365615][ T5813] oti6858 2-1:1.0: oti6858 converter detected [ 294.391417][ T5813] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 294.553324][ T8052] overlayfs: missing 'lowerdir' [ 294.572813][ T5813] usb 2-1: USB disconnect, device number 12 [ 294.590071][ T5813] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 294.626296][ T5813] oti6858 2-1:1.0: device disconnected [ 295.792485][ T8061] siw: device registration error -23 [ 297.367153][ T8088] overlayfs: missing 'workdir' [ 298.047552][ T8100] siw: device registration error -23 [ 304.071537][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 304.071552][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 304.224297][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.705'. [ 305.973416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 306.165363][ T8181] siw: device registration error -23 [ 308.524511][ T5814] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 308.733398][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 309.004739][ T5814] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 309.023198][ T5814] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 309.043250][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.083558][ T5814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 309.102799][ T5814] usb 1-1: config 1 has no interface number 0 [ 309.114232][ T5814] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 309.131335][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.194899][ T8224] siw: device registration error -23 [ 309.270034][ T5814] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 310.173052][ T5814] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 310.210081][ T5814] snd_usb_pod 1-1:1.1: invalid control EP [ 310.225981][ T5814] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 310.244361][ T5814] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 310.252096][ T5814] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 310.283477][ T29] INFO: task syz-executor:5780 blocked for more than 143 seconds. [ 310.291693][ T29] Not tainted syzkaller #0 [ 310.301810][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.326078][ T29] task:syz-executor state:D stack:21672 pid:5780 ppid:1 flags:0x00004006 [ 310.340933][ T29] Call Trace: [ 310.348874][ T29] [ 310.354353][ T29] __schedule+0x15ae/0x4660 [ 310.364265][ T29] ? asan.module_dtor+0x20/0x20 [ 310.390672][ T29] ? __mutex_lock+0x66e/0xc80 [ 310.406026][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 310.423170][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 310.449554][ T29] schedule+0xbd/0x170 [ 310.459432][ T5814] usb 1-1: USB disconnect, device number 6 [ 310.469408][ T29] schedule_preempt_disabled+0x13/0x20 [ 310.502403][ T29] __mutex_lock+0x673/0xc80 [ 310.512804][ T29] ? __mutex_lock+0x4d2/0xc80 [ 310.518196][ T29] ? nfsd_shutdown_threads+0x53/0x1a0 [ 310.524000][ T29] ? mutex_lock_nested+0x20/0x20 [ 310.529087][ T29] ? net_generic+0x1e/0x240 [ 310.534329][ T29] ? net_generic+0x1e/0x240 [ 310.538936][ T29] nfsd_shutdown_threads+0x53/0x1a0 [ 310.553334][ T29] nfsd_umount+0x42/0xc0 [ 310.557818][ T29] deactivate_locked_super+0x97/0x100 [ 310.565582][ T29] cleanup_mnt+0x3d7/0x460 [ 310.573567][ T29] task_work_run+0x1d4/0x260 [ 310.584887][ T29] ? task_work_cancel+0x220/0x220 [ 310.597942][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 310.613346][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 310.624523][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 310.636781][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 310.652634][ T29] do_syscall_64+0x61/0xb0 [ 310.658667][ T29] ? clear_bhb_loop+0x40/0x90 [ 310.671381][ T29] ? clear_bhb_loop+0x40/0x90 [ 310.684031][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.715812][ T29] RIP: 0033:0x7f82d6b9f397 [ 310.729383][ T29] RSP: 002b:00007fff6953d5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 310.752872][ T29] RAX: 0000000000000000 RBX: 00007f82d6c344bb RCX: 00007f82d6b9f397 [ 310.781915][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff6953d670 [ 310.811665][ T29] RBP: 00007fff6953d670 R08: 00007fff6953e670 R09: 00000000ffffffff [ 310.825428][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff6953e700 [ 310.845752][ T29] R13: 00007f82d6c344bb R14: 0000000000027715 R15: 00007fff6953e740 [ 310.871589][ T29] [ 310.874918][ T29] [ 310.874918][ T29] Showing all locks held in the system: [ 310.892960][ T29] 1 lock held by khungtaskd/29: [ 310.898156][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 310.918409][ T29] 2 locks held by kworker/u4:9/3475: [ 310.925224][ T29] 4 locks held by kworker/u4:11/3512: [ 310.935326][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 310.952732][ T29] #1: ffff8880b8e28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 310.971855][ T29] #2: ffff8880b8e295d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 310.992153][ T29] #3: ffffffff974e6d50 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x500 [ 311.023189][ T29] 2 locks held by getty/5535: [ 311.043260][ T29] #0: ffff8880317d20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.076908][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 311.107963][ T29] 2 locks held by syz-executor/5780: [ 311.118073][ T29] #0: ffff888029c3a0e0 (&type->s_umount_key#63){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 311.148710][ T29] #1: ffffffff8d3e1c88 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x53/0x1a0 [ 311.180038][ T29] 3 locks held by syz.3.305/6802: [ 311.188614][ T29] #0: ffff88802b9c2848 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2a3/0x330 [ 311.220531][ T29] #1: ffff88807b0ae418 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 311.240007][ T29] #2: ffffffff8d3e1c88 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xb7/0xfa0 [ 311.263180][ T29] 1 lock held by syz.4.722/8216: [ 311.268253][ T29] 1 lock held by syz.1.728/8228: [ 311.278384][ T29] [ 311.280749][ T29] ============================================= [ 311.280749][ T29] [ 311.312797][ T29] NMI backtrace for cpu 1 [ 311.317185][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 311.324401][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.334455][ T29] Call Trace: [ 311.337735][ T29] [ 311.340671][ T29] dump_stack_lvl+0x18c/0x250 [ 311.345351][ T29] ? __wake_up_klogd+0xd9/0x100 [ 311.350224][ T29] ? show_regs_print_info+0x20/0x20 [ 311.355448][ T29] ? load_image+0x420/0x420 [ 311.359961][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 311.364903][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 311.371062][ T29] ? load_image+0x420/0x420 [ 311.375561][ T29] ? wq_watchdog_touch+0xef/0x170 [ 311.380585][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 311.386661][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 311.392639][ T29] watchdog+0xf59/0xfa0 [ 311.396799][ T29] ? watchdog+0x1e1/0xfa0 [ 311.401132][ T29] kthread+0x2fa/0x390 [ 311.405207][ T29] ? hungtask_pm_notify+0x50/0x50 [ 311.410253][ T29] ? kthread_blkcg+0xd0/0xd0 [ 311.414846][ T29] ret_from_fork+0x48/0x80 [ 311.419282][ T29] ? kthread_blkcg+0xd0/0xd0 [ 311.423867][ T29] ret_from_fork_asm+0x11/0x20 [ 311.428662][ T29] [ 311.432815][ T29] Sending NMI from CPU 1 to CPUs 0: [ 311.438258][ C0] NMI backtrace for cpu 0 [ 311.438267][ C0] CPU: 0 PID: 48 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 311.438282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.438290][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 311.438313][ C0] RIP: 0010:__build_skb_around+0x155/0x3c0 [ 311.438333][ C0] Code: 0f 85 a5 01 00 00 41 81 c6 c0 fe ff ff c7 83 c8 00 00 00 00 00 00 00 48 8d 93 cc 00 00 00 49 89 d4 49 c1 ec 03 43 0f b6 04 2c <84> c0 0f 85 93 01 00 00 44 89 b3 cc 00 00 00 48 8d bb ba 00 00 00 [ 311.438344][ C0] RSP: 0018:ffffc90000b8fa80 EFLAGS: 00000a07 [ 311.438356][ C0] RAX: 0000000000000000 RBX: ffff88802568cc80 RCX: ffffffff887d65f5 [ 311.438366][ C0] RDX: ffff88802568cd4c RSI: 0000000000000004 RDI: ffff88802568cd48 [ 311.438376][ C0] RBP: 1ffff11004ad19aa R08: ffff88802568cd67 R09: 1ffff11004ad19ac [ 311.438386][ C0] R10: dffffc0000000000 R11: ffffed1004ad19ad R12: 1ffff11004ad19a9 [ 311.438396][ C0] R13: dffffc0000000000 R14: 0000000000000ec0 R15: ffff88802568cd64 [ 311.438407][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 311.438419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.438429][ C0] CR2: 0000001b2df1aff8 CR3: 000000001d3b6000 CR4: 00000000003506f0 [ 311.438441][ C0] Call Trace: [ 311.438446][ C0] [ 311.438454][ C0] __alloc_skb+0x16f/0x2c0 [ 311.438473][ C0] nsim_dev_trap_report_work+0x253/0xa90 [ 311.438495][ C0] ? process_scheduled_works+0x975/0x1600 [ 311.438515][ C0] process_scheduled_works+0xa60/0x1600 [ 311.438546][ C0] ? worker_attach_to_pool+0x370/0x370 [ 311.438567][ C0] ? assign_work+0x3cc/0x5d0 [ 311.438586][ C0] worker_thread+0xa5e/0xfe0 [ 311.438616][ C0] kthread+0x2fa/0x390 [ 311.438629][ C0] ? pr_cont_work+0x550/0x550 [ 311.438646][ C0] ? kthread_blkcg+0xd0/0xd0 [ 311.438660][ C0] ret_from_fork+0x48/0x80 [ 311.438677][ C0] ? kthread_blkcg+0xd0/0xd0 [ 311.438691][ C0] ret_from_fork_asm+0x11/0x20 [ 311.438716][ C0] [ 311.623216][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 311.623231][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 311.623249][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.623259][ T29] Call Trace: [ 311.623265][ T29] [ 311.623272][ T29] dump_stack_lvl+0x18c/0x250 [ 311.623301][ T29] ? show_regs_print_info+0x20/0x20 [ 311.623322][ T29] ? load_image+0x420/0x420 [ 311.623350][ T29] panic+0x2ca/0x720 [ 311.623372][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 311.623389][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 311.623409][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 311.623432][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 311.623460][ T29] watchdog+0xf98/0xfa0 [ 311.623482][ T29] ? watchdog+0x1e1/0xfa0 [ 311.623507][ T29] kthread+0x2fa/0x390 [ 311.623523][ T29] ? hungtask_pm_notify+0x50/0x50 [ 311.623544][ T29] ? kthread_blkcg+0xd0/0xd0 [ 311.623560][ T29] ret_from_fork+0x48/0x80 [ 311.623579][ T29] ? kthread_blkcg+0xd0/0xd0 [ 311.623596][ T29] ret_from_fork_asm+0x11/0x20 [ 311.623627][ T29] [ 311.625154][ T29] Kernel Offset: disabled [ 311.755612][ T29] Rebooting in 86400 seconds..