last executing test programs: 5m40.897348894s ago: executing program 2 (id=347): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0x20) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv', 0x2) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socket$nl_route(0x10, 0x3, 0x0) 5m39.32318717s ago: executing program 2 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) r5 = dup(r3) inotify_rm_watch(r5, r4) 5m33.014098229s ago: executing program 2 (id=359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 5m30.454742956s ago: executing program 2 (id=365): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000600)='ubifs\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000440)={'\x00', 0x9, 0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff}) 5m28.972174746s ago: executing program 2 (id=367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) 5m25.701533077s ago: executing program 2 (id=371): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) socket(0xa, 0x3, 0x87) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="4828c2f488430776bce99e9c48c7a5797525ab7743d2f1b926117faa20483709ebb93af9620721988a0f5cfd407bd5d4930d7eb17812fab50ca5e445d38ea22fb4e42c183838eb90cf255627d8dd40e288a0aff5330853002373a936fad75a1ec9acadd8ca57c312af7d865ae506e8fd28c41d98e5a89d89e6aaa04b03d041efd1dc405d01aa"], 0x7) 5m9.509562391s ago: executing program 32 (id=371): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) socket(0xa, 0x3, 0x87) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="4828c2f488430776bce99e9c48c7a5797525ab7743d2f1b926117faa20483709ebb93af9620721988a0f5cfd407bd5d4930d7eb17812fab50ca5e445d38ea22fb4e42c183838eb90cf255627d8dd40e288a0aff5330853002373a936fad75a1ec9acadd8ca57c312af7d865ae506e8fd28c41d98e5a89d89e6aaa04b03d041efd1dc405d01aa"], 0x7) 3m31.46465528s ago: executing program 1 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001040), 0x109540, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x17}) 3m29.639142087s ago: executing program 1 (id=520): exit(0xef1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000498000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) ioctl$TCSBRKP(r2, 0x5425, 0x0) read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) 3m26.10495489s ago: executing program 1 (id=527): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000084) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x101000, 0x6a) getdents(r3, &(0x7f0000000300)=""/186, 0xba) 3m24.267394554s ago: executing program 1 (id=530): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) io_uring_setup(0x7ee1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@replay_thresh={0x8, 0xb, 0x5}]}, 0xbc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3m22.724433199s ago: executing program 4 (id=533): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000080)=0xfd8) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000000)=0x8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x1f) fanotify_init(0x200, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x103) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000080), 0x4) write$sysctl(0xffffffffffffffff, &(0x7f0000000100)='4\x00', 0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0x10001003, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m19.575869918s ago: executing program 4 (id=535): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x4, @output={0x1000, 0x1, {0xffc1, 0x500}, 0x2, 0xfd}}) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='invalid', 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001", @ANYRES32=r4], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f000000010008102000000000000", @ANYRES32=0xee00, @ANYBLOB], 0xf0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r6 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r6}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) socket$alg(0x26, 0x5, 0x0) userfaultfd(0x801) 3m16.583710223s ago: executing program 1 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001600)=[{0x8, 0x0, 0x82}, {0x8000, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0x40, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0xf9, 0x0, 0x2}, {0xc, 0x0, 0x2}, {0x9a, 0x0}, {0x5, 0x0, 0x2}, {0x4, 0x0, 0x2}, {0xfffffffffffffffd, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}, {0x42da45c8, 0x0, 0x41}, {0x100000000, 0x0, 0x82}, {0x4f6a0000000, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0xfde0, 0x0, 0x2}, {0xfffffffffffffffb, 0x0, 0x2}, {0xc45e, 0x0, 0x82}, {0xffffffffffff7fff, 0x0, 0x82}, {0xbf, 0x0, 0x82}, {0x6, 0x0, 0x2}, {0xfff, 0x0, 0x82}], 0x19, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000631988ad55f281047000000000000000003000000000100", "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"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd0800034000"], 0x168}}, 0x0) 3m14.580941566s ago: executing program 1 (id=540): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 3m14.170398742s ago: executing program 4 (id=541): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3, 0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0x207, @time={0x65757100, 0xb}, 0x0, {}, 0x67, 0x2}) 3m10.668619371s ago: executing program 4 (id=544): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = dup(r3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, 0x0, &(0x7f00000002c0)) 3m3.890221509s ago: executing program 4 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m1.264929105s ago: executing program 4 (id=550): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x4, @output={0x1000, 0x1, {0xffc1, 0x500}, 0x2, 0xfd}}) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='invalid', 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001", @ANYRES32=r4], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f0000000100081020000000000000000", @ANYRES32=0xee00, @ANYBLOB], 0xf0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r6 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r6}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) socket$alg(0x26, 0x5, 0x0) userfaultfd(0x801) 2m59.118175256s ago: executing program 33 (id=540): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) 2m45.920872254s ago: executing program 34 (id=550): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/target/core\x00', 0x1ff) r0 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x4, @output={0x1000, 0x1, {0xffc1, 0x500}, 0x2, 0xfd}}) socket(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/target/core/rd_mcp_0/dev0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0/dev0/alua/default_tg_pt_gp/alua_access_type\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='invalid', 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'syz_tun\x00', {0x1}}) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001", @ANYRES32=r4], 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f0000000100081020000000000000000", @ANYRES32=0xee00, @ANYBLOB], 0xf0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r6 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000040)={0x0, r6}) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) socket$alg(0x26, 0x5, 0x0) userfaultfd(0x801) 14.772849208s ago: executing program 3 (id=701): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e00010069703667726574617000000004000280"], 0x38}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x1000}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b08"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0x9}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b90000001600010000000000000000000a0000000480bfa56dd275f5c8e4b109a0f18a2697d96d71b23931fe47f332807823478c905f61cca9d0d0c5ae57e0f59fab0e27cb3965836acabaf7b44072d62bc60000"], 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5ef02"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x78, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6, 0xf}, {}, {0x7, 0xfff1}}}, 0xfd5c}}, 0x24004084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 10.364435434s ago: executing program 0 (id=704): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/87, 0x57}], 0x2, &(0x7f0000000300)=""/243, 0xf3}, 0x40002022) landlock_restrict_self(r5, 0xe) 8.63807432s ago: executing program 0 (id=705): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) r0 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102c2448b080d00020802000309042b110239eea0040905e5164000020410090504"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$MEMREADOOB64(r0, 0xc0184d16, &(0x7f0000000240)={0x9, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000002380)={0x0, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x10000, 0x67}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c000280bc00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100070000000c0001000000000000000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x4000040) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) mount(&(0x7f00000007c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000840)='btrfs\x00', 0x8c00, &(0x7f0000000880)='syz0\x00') mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xfc037000) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x2, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000780)=0x6) write$tun(r1, &(0x7f0000000540)={@void, @val={0x2, 0x3, 0x7f, 0x7, 0x7, 0x80}, @eth={@random="5f38dd9e348b", @random="4ea551ab7d4d", @void, {@mpls_uc={0x8847, {[{0x7}, {0x8}], @generic="ae9ed3a4c3ab1752a47dbde3c304fdfc7c2def0bbe48941522eaf3b51c75958253ba5c2c786a6ae39ec4e2bd0a1a9e0a7b88e87a939a43437f9bdfb51c636b043c532bf467630ac8a2536b956099ce9a4485248c7f9b8f80bac424274bd2e69eb23a16674a4fc2701e22d4ebe979ae0be7b87b40621e3df0d214ec11168bbd057b041a1824ec7299157f7d220b349d48522d2851c7df6b3a99e6ddc0611fabba1f559d1c3506e325bdd859eaa7e2035a7e20837369a541fde017e3184a508c3593b8e845a0f661e5803528fc11de13"}}}}}, 0xef) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xb6e109006940492c}, 0xc, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4008195}, 0x800) 8.325620399s ago: executing program 3 (id=706): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x9, 0x4, 0x7, 0x3, 'syz0\x00', 0x4}, 0x0, [0x5, 0x5, 0x1, 0x8, 0x6, 0x720, 0x4, 0x7, 0x8, 0x6, 0x4, 0x6, 0x7e, 0x3ff, 0x1, 0x7, 0xa9, 0x1000, 0x19564bd4, 0x3, 0x1, 0x80, 0x3, 0x8, 0x40, 0x2, 0x4, 0x1, 0x0, 0x9, 0x1, 0xffffffffffffff09, 0x5, 0x3, 0x8, 0x4, 0x3, 0x7, 0x7, 0x2, 0x6f, 0x800, 0x7, 0x20006, 0x100000000000f676, 0x2, 0x9, 0x8000000000000000, 0x10001, 0x4, 0xfffffffffffffff6, 0x9, 0x0, 0x2, 0x8000000000000001, 0x0, 0x7fffffffffffffff, 0x1, 0x8, 0x8, 0x8, 0x6, 0x7, 0x3, 0x81, 0x65c, 0x4, 0x2, 0xb3, 0x400, 0x0, 0x9, 0x6f, 0x0, 0x6, 0x81, 0x0, 0x4, 0x2, 0xffff, 0x1, 0x80000001, 0x7, 0xfece, 0x201d1db0, 0x8, 0x9, 0x3, 0xffff, 0x100, 0x2, 0x40, 0xb, 0x4, 0x6, 0x0, 0x5, 0x800, 0x5, 0x1, 0x2, 0x1d, 0xefffffffffff8000, 0x0, 0x1, 0x4, 0x3, 0x75c, 0x4, 0x0, 0x7, 0x3, 0x3, 0x0, 0xa, 0xfffffffffffffff8, 0x5, 0x2, 0xffffffffffff0262, 0x7ddb, 0x1, 0x7ff, 0x6, 0x10000, 0x4, 0x750d, 0x6]}) close_range(r0, 0xffffffffffffffff, 0x0) 6.897212012s ago: executing program 3 (id=707): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r0, 0x400c4d04, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.720602873s ago: executing program 3 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$inet(r4, 0x0, 0x8000) 3.215894313s ago: executing program 3 (id=709): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0xffffffffffffff98) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x800}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x1e, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f0000000280)='1', 0x1) 1.995472517s ago: executing program 0 (id=710): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)) r4 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x10b080) read$usbmon(r4, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 767.127718ms ago: executing program 3 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x1a0050, r0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x3, 0x4, 0xaa8, 0x7f}, 0x22, [0x40, 0x9, 0x6, 0x0, 0x2, 0x361, 0x2, 0x9, 0x9, 0x3, 0x6, 0x10, 0x69, 0x10, 0x6, 0x4, 0x463976fa, 0x8, 0x8, 0x3, 0x100, 0xda70, 0x3ff, 0x7fff, 0x7f, 0x7, 0xaf8, 0x40, 0x2, 0x0, 0x8, 0x1000, 0x92, 0x5, 0xff2, 0x8, 0x10, 0x7ff, 0x0, 0x8, 0x3, 0xbc, 0x0, 0xeb, 0x51, 0x8, 0x1, 0x10, 0x3, 0x10000, 0x4, 0xfffffffe, 0x5, 0x6, 0x5, 0x5ae, 0x10001, 0x0, 0x4, 0x6ad6, 0x8, 0x4, 0x3, 0xc21], [0x7ff, 0xa, 0x6, 0xffffffff, 0x3, 0xfffffffb, 0x3ff, 0x9, 0x10000, 0xc1, 0x34, 0x3, 0xc, 0x4ff2, 0xffffffff, 0x8fbe, 0x9f92, 0x3, 0x2, 0xffff, 0x8, 0x3, 0x40, 0x7fff, 0x8, 0xe, 0x800, 0x6, 0x1, 0x8001, 0xffffffb7, 0x7, 0x1, 0x7, 0xf8f, 0x5, 0x7fff, 0x8, 0x33, 0x7, 0x6, 0x6, 0x8, 0x3, 0x8000, 0x3, 0x10000000, 0x9, 0x7, 0x0, 0x6a9a, 0x7, 0x5, 0x7, 0x9, 0x10, 0x3, 0xff, 0x29e0, 0x1a346e15, 0xfffffa50, 0xa9, 0x7, 0x3], [0x2, 0x60000, 0x4, 0xe9, 0xf, 0x8037, 0x4, 0x6, 0x3, 0x6, 0x5, 0x5, 0x626, 0x8, 0x0, 0x1, 0x5, 0x9, 0x2, 0x7, 0x3, 0x7fff, 0xc, 0x8000, 0xfffffffa, 0x7, 0x1, 0x3, 0x3, 0xa, 0x3, 0x3, 0x3, 0x0, 0xfff, 0x9, 0x6ae, 0x600a, 0x400, 0x1000, 0x1, 0x954, 0x4, 0x800, 0xa8, 0x8, 0x9, 0x30000, 0x2000000, 0x18, 0xfffffffe, 0xf, 0xf77, 0xe4, 0x0, 0x3, 0x400, 0x5, 0x9, 0x10001, 0x2, 0x0, 0x1, 0x2], [0x0, 0x292, 0xc852, 0x7fff, 0x1, 0x401, 0x6, 0x26df, 0x2, 0x9, 0x4, 0x7a, 0x81, 0x6, 0x80000000, 0x8, 0x7, 0x6, 0x41, 0x400, 0x6, 0x80000000, 0x200, 0xffffffff, 0x40, 0x2, 0x1000, 0x2, 0x6, 0x8001, 0x80000000, 0x7fffffff, 0x3, 0x43, 0x3d81, 0x2, 0x5e, 0x2, 0xffff, 0x401, 0xffffffff, 0x9, 0x9, 0x1, 0x5, 0x8, 0x5, 0x519, 0x81, 0xab, 0x8, 0x1ff, 0xc, 0x0, 0x7ff, 0x6, 0x1, 0x8, 0x5, 0x7, 0x9, 0x3ee0, 0x2, 0x6]}, 0x45c) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000240)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0xfffffff8, 0x5f4, 0x81, 0x6, 0x0}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, 0x0, 0x0) readv(r5, 0x0, 0x0) setsockopt$packet_drop_memb(r5, 0x107, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) 721.21165ms ago: executing program 0 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00') read$eventfd(r3, &(0x7f0000000080), 0x51) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x28, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={r4, @empty, @dev={0xac, 0x14, 0x14, 0x37}}, 0xc) 197.782966ms ago: executing program 0 (id=713): sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)='$', 0x1}], 0x1}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=714): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340), 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 89.528927][ T5571] cgroup: Unknown subsys name 'net' [ 89.803820][ T5571] cgroup: Unknown subsys name 'cpuset' [ 89.854300][ T5571] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.809735][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.917767][ T2225] cfg80211: failed to load regulatory.db [ 94.686103][ T4900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.732354][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.747872][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.780591][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.783780][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.816820][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.816942][ T5594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.819027][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.827056][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.842021][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.850663][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.854138][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.870934][ T5596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.878061][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.899500][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.899608][ T5594] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.908251][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.910167][ T5594] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.912511][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.927968][ T5595] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.930830][ T5595] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.940894][ T5595] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.966203][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.992953][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.002571][ T5592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.094878][ T5593] Bluetooth: hci0: command tx timeout [ 97.094885][ T4900] Bluetooth: hci4: command tx timeout [ 97.174336][ T4900] Bluetooth: hci3: command tx timeout [ 97.174350][ T5592] Bluetooth: hci1: command tx timeout [ 97.177835][ T5593] Bluetooth: hci2: command tx timeout [ 97.807855][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.816127][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.816309][ T5585] bridge_slave_0: entered allmulticast mode [ 97.819590][ T5585] bridge_slave_0: entered promiscuous mode [ 97.871734][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.872147][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.873498][ T5586] bridge_slave_0: entered allmulticast mode [ 97.880620][ T5586] bridge_slave_0: entered promiscuous mode [ 97.900998][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.908288][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.908513][ T5585] bridge_slave_1: entered allmulticast mode [ 97.911496][ T5585] bridge_slave_1: entered promiscuous mode [ 97.968788][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.969110][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.969574][ T5586] bridge_slave_1: entered allmulticast mode [ 97.982560][ T5586] bridge_slave_1: entered promiscuous mode [ 98.010098][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.010539][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.011139][ T5582] bridge_slave_0: entered allmulticast mode [ 98.019436][ T5582] bridge_slave_0: entered promiscuous mode [ 98.098872][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.102216][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.102712][ T5582] bridge_slave_1: entered allmulticast mode [ 98.115830][ T5582] bridge_slave_1: entered promiscuous mode [ 98.120678][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.120953][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.121395][ T5584] bridge_slave_0: entered allmulticast mode [ 98.135510][ T5584] bridge_slave_0: entered promiscuous mode [ 98.187477][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.217102][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.217478][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.217909][ T5584] bridge_slave_1: entered allmulticast mode [ 98.226220][ T5584] bridge_slave_1: entered promiscuous mode [ 98.244504][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.245155][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.245642][ T5583] bridge_slave_0: entered allmulticast mode [ 98.266392][ T5583] bridge_slave_0: entered promiscuous mode [ 98.281612][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.296177][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.332353][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.332802][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.333283][ T5583] bridge_slave_1: entered allmulticast mode [ 98.355027][ T5583] bridge_slave_1: entered promiscuous mode [ 98.370242][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.402547][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.486634][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.497813][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.571588][ T5585] team0: Port device team_slave_0 added [ 98.580759][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.597479][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.608714][ T5586] team0: Port device team_slave_0 added [ 98.631545][ T5585] team0: Port device team_slave_1 added [ 98.654428][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.662029][ T5586] team0: Port device team_slave_1 added [ 98.670052][ T5582] team0: Port device team_slave_0 added [ 98.744551][ T5582] team0: Port device team_slave_1 added [ 98.772075][ T5584] team0: Port device team_slave_0 added [ 98.825503][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.825604][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.825669][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.850563][ T5584] team0: Port device team_slave_1 added [ 98.863754][ T5583] team0: Port device team_slave_0 added [ 98.868800][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.868849][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.868922][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.928202][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.928766][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.928850][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.980361][ T5583] team0: Port device team_slave_1 added [ 98.986631][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.986719][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.986779][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.991134][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.991174][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.991246][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.110408][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.110497][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.110563][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.157231][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.157332][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.157417][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.173897][ T4900] Bluetooth: hci4: command tx timeout [ 99.174000][ T5593] Bluetooth: hci0: command tx timeout [ 99.240954][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.241040][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.241107][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.253792][ T4900] Bluetooth: hci1: command tx timeout [ 99.253802][ T5592] Bluetooth: hci3: command tx timeout [ 99.253933][ T5593] Bluetooth: hci2: command tx timeout [ 99.735591][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.735679][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.735746][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.804234][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.804310][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.804373][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.922692][ T5585] hsr_slave_0: entered promiscuous mode [ 99.931897][ T5585] hsr_slave_1: entered promiscuous mode [ 99.949948][ T5586] hsr_slave_0: entered promiscuous mode [ 99.960766][ T5586] hsr_slave_1: entered promiscuous mode [ 99.966983][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 99.967348][ T5586] Cannot create hsr debugfs directory [ 100.017058][ T5582] hsr_slave_0: entered promiscuous mode [ 100.020943][ T5582] hsr_slave_1: entered promiscuous mode [ 100.029318][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 100.030800][ T5582] Cannot create hsr debugfs directory [ 100.094873][ T5584] hsr_slave_0: entered promiscuous mode [ 100.098339][ T5584] hsr_slave_1: entered promiscuous mode [ 100.100596][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 100.100621][ T5584] Cannot create hsr debugfs directory [ 100.168229][ T5583] hsr_slave_0: entered promiscuous mode [ 100.171731][ T5583] hsr_slave_1: entered promiscuous mode [ 100.175228][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 100.175298][ T5583] Cannot create hsr debugfs directory [ 101.191481][ T5585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.257525][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.263721][ T4900] Bluetooth: hci4: command tx timeout [ 101.264224][ T5593] Bluetooth: hci0: command tx timeout [ 101.275632][ T5585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.318922][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.330485][ T5585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.334560][ T4900] Bluetooth: hci2: command tx timeout [ 101.334656][ T4900] Bluetooth: hci1: command tx timeout [ 101.335036][ T5593] Bluetooth: hci3: command tx timeout [ 101.359856][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.383193][ T5585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.418460][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.551413][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.581782][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.598666][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.618815][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.638594][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.677266][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.706857][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.750732][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.886648][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.938941][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.955577][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.997125][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.012836][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.037185][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.067673][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.109782][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.250152][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.289017][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.306510][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.348871][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.369688][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.409065][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.444771][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.491347][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.506019][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.686031][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.729817][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.750444][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.790907][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.815179][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.828447][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.867188][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.881550][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.917283][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.970727][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.978092][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.046530][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.046979][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.087049][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.199785][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.252057][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.252606][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.303289][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.335941][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.336870][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.343922][ T5592] Bluetooth: hci4: command tx timeout [ 103.344074][ T5593] Bluetooth: hci0: command tx timeout [ 103.414443][ T5592] Bluetooth: hci1: command tx timeout [ 103.418154][ T4900] Bluetooth: hci2: command tx timeout [ 103.418281][ T5593] Bluetooth: hci3: command tx timeout [ 103.486132][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.556259][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.563146][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.585686][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.662820][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.670181][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.768338][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.806570][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.884185][ T1050] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.886491][ T1050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.934401][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.988335][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.989878][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.070215][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.070815][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.135711][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.136146][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.801815][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.189818][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.350905][ T5585] veth0_vlan: entered promiscuous mode [ 105.458564][ T5585] veth1_vlan: entered promiscuous mode [ 105.509875][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.686640][ T5582] veth0_vlan: entered promiscuous mode [ 105.769952][ T5585] veth0_macvtap: entered promiscuous mode [ 105.812581][ T5582] veth1_vlan: entered promiscuous mode [ 105.828931][ T5585] veth1_macvtap: entered promiscuous mode [ 105.867784][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.931697][ T5586] veth0_vlan: entered promiscuous mode [ 105.957459][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.972005][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.051806][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.059537][ T5586] veth1_vlan: entered promiscuous mode [ 106.136120][ T5582] veth0_macvtap: entered promiscuous mode [ 106.172073][ T5582] veth1_macvtap: entered promiscuous mode [ 106.390565][ T5584] veth0_vlan: entered promiscuous mode [ 106.459319][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.599147][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.650009][ T5584] veth1_vlan: entered promiscuous mode [ 106.669142][ T5586] veth0_macvtap: entered promiscuous mode [ 106.728345][ T5586] veth1_macvtap: entered promiscuous mode [ 106.749086][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.763196][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.990888][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.011494][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.027050][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.329979][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.389590][ T5583] veth0_vlan: entered promiscuous mode [ 107.400801][ T5584] veth0_macvtap: entered promiscuous mode [ 107.474957][ T5584] veth1_macvtap: entered promiscuous mode [ 107.524964][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.525043][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.549755][ T5583] veth1_vlan: entered promiscuous mode [ 107.623443][ T5585] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.797175][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.843894][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.843965][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.996682][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.344496][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.346319][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.512066][ T5583] veth0_macvtap: entered promiscuous mode [ 108.856935][ T5583] veth1_macvtap: entered promiscuous mode [ 108.960211][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.960825][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.298848][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.358613][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 109.691013][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.821678][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.821776][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.900203][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.111066][ T5788] input: syz0 as /devices/virtual/input/input5 [ 111.000576][ T1050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.001395][ T1050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.361851][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.361999][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.368104][ T1118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.489419][ T1050] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.560199][ T1050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.646628][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 111.656735][ T5808] Zero length message leads to an empty skb [ 111.892508][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880429d8000: rx timeout, send abort [ 112.404127][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.415244][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.484689][ T1050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.565102][ T1118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.605364][ T1187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.643682][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.645560][ T1125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.664904][ T66] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665011][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665055][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665096][ T66] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665180][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665310][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665417][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665505][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665606][ T66] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665700][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.665801][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.119770][ T5845] loop0: detected capacity change from 0 to 4096 [ 115.198644][ T5846] jffs2: notice: (5846) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.379166][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.509643][ T5848] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 115.540095][ T5848] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 115.540122][ T5848] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 115.559471][ T5848] loop0: [ 115.720964][ T5855] binder: 5854:5855 ioctl c0306201 200000000680 returned -14 [ 117.493328][ T5881] FAULT_INJECTION: forcing a failure. [ 117.493328][ T5881] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 117.494284][ T5881] CPU: 0 UID: 0 PID: 5881 Comm: syz.0.33 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 117.494318][ T5881] Tainted: [L]=SOFTLOCKUP [ 117.494326][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 117.494348][ T5881] Call Trace: [ 117.494358][ T5881] [ 117.494368][ T5881] dump_stack_lvl+0xe8/0x150 [ 117.494423][ T5881] should_fail_ex+0x46b/0x600 [ 117.494456][ T5881] fpu__restore_sig+0x209/0x11f0 [ 117.494502][ T5881] ? __pfx_fpu__restore_sig+0x10/0x10 [ 117.494558][ T5881] __ia32_sys_rt_sigreturn+0x756/0x8c0 [ 117.494601][ T5881] ? __lock_acquire+0x747/0x2de0 [ 117.494636][ T5881] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 117.494695][ T5881] ? __task_pid_nr_ns+0x28/0x470 [ 117.494725][ T5881] do_syscall_64+0x166/0x520 [ 117.494753][ T5881] ? trace_irq_disable+0x3b/0x140 [ 117.494783][ T5881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.494806][ T5881] ? clear_bhb_loop+0x70/0xc0 [ 117.494835][ T5881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.494857][ T5881] RIP: 0033:0x7fdc26b4e157 [ 117.494886][ T5881] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 117.494905][ T5881] RSP: 002b:00007fdc24da6028 EFLAGS: 00000246 [ 117.494930][ T5881] RAX: 0000000000000011 RBX: 00007fdc26dd5fa0 RCX: 00007fdc26b4e159 [ 117.494947][ T5881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 117.494961][ T5881] RBP: 00007fdc26be503b R08: 0000000000000000 R09: 0000000000000000 [ 117.494975][ T5881] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000 [ 117.494989][ T5881] R13: 00007fdc26dd6038 R14: 00007fdc26dd5fa0 R15: 00007ffea1ba8078 [ 117.495025][ T5881] [ 119.643571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.653576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.663597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.673579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.683555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.693580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.703568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.713560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.723570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 119.733560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.747436][ T998] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.828942][ T5689] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.078991][ T5931] FAULT_INJECTION: forcing a failure. [ 122.078991][ T5931] name failslab, interval 1, probability 0, space 0, times 1 [ 122.102074][ T5931] CPU: 0 UID: 0 PID: 5931 Comm: syz.3.48 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 122.102112][ T5931] Tainted: [L]=SOFTLOCKUP [ 122.102121][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.102136][ T5931] Call Trace: [ 122.102145][ T5931] [ 122.102156][ T5931] dump_stack_lvl+0xe8/0x150 [ 122.102199][ T5931] should_fail_ex+0x46b/0x600 [ 122.102233][ T5931] should_failslab+0xa8/0x100 [ 122.102273][ T5931] __kmalloc_node_noprof+0xfd/0x7b0 [ 122.102306][ T5931] ? blk_mq_alloc_tag_set+0x533/0x1000 [ 122.102329][ T5931] ? blk_mq_alloc_tag_set+0x533/0x1000 [ 122.102359][ T5931] blk_mq_alloc_tag_set+0x533/0x1000 [ 122.102398][ T5931] loop_add+0x436/0xb50 [ 122.102436][ T5931] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 122.102471][ T5931] ? __pfx_loop_add+0x10/0x10 [ 122.102529][ T5931] ? __pfx_smack_file_ioctl+0x10/0x10 [ 122.102560][ T5931] loop_control_ioctl+0x12b/0x5b0 [ 122.102599][ T5931] ? __fget_files+0x2a/0x420 [ 122.102624][ T5931] ? __pfx_loop_control_ioctl+0x10/0x10 [ 122.102657][ T5931] ? __fget_files+0x2a/0x420 [ 122.102684][ T5931] ? bpf_lsm_file_ioctl+0x9/0x20 [ 122.102709][ T5931] ? __pfx_loop_control_ioctl+0x10/0x10 [ 122.102747][ T5931] __se_sys_ioctl+0xff/0x170 [ 122.102781][ T5931] do_syscall_64+0x166/0x520 [ 122.102811][ T5931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.102834][ T5931] ? clear_bhb_loop+0x70/0xc0 [ 122.102861][ T5931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.102883][ T5931] RIP: 0033:0x7fbca994e159 [ 122.102904][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.102924][ T5931] RSP: 002b:00007fbca7ba6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.102950][ T5931] RAX: ffffffffffffffda RBX: 00007fbca9bd5fa0 RCX: 00007fbca994e159 [ 122.102968][ T5931] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 122.102983][ T5931] RBP: 00007fbca99e503b R08: 0000000000000000 R09: 0000000000000000 [ 122.102999][ T5931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.103013][ T5931] R13: 00007fbca9bd6038 R14: 00007fbca9bd5fa0 R15: 00007fff3089d5c8 [ 122.103049][ T5931] [ 122.123630][ T5689] usb 3-1: Using ep0 maxpacket: 32 [ 122.209116][ T5689] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 122.273082][ T998] usb 2-1: Using ep0 maxpacket: 16 [ 122.277423][ T998] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 122.416443][ T5689] usb 3-1: config index 0 descriptor too short (expected 27632, got 27) [ 122.431310][ T5689] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 122.431332][ T5689] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 122.431348][ T5689] usb 3-1: config 1 has no interface number 0 [ 122.431401][ T5689] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.431421][ T5689] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 122.431456][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.525215][ T998] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 122.554767][ T998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.554847][ T998] usb 2-1: Product: syz [ 122.554894][ T998] usb 2-1: Manufacturer: syz [ 122.554940][ T998] usb 2-1: SerialNumber: syz [ 122.580948][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.788552][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 122.814957][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.819084][ T10] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 122.839645][ T10] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 122.841894][ T10] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 122.841923][ T10] usb 1-1: config 14 has no interface number 0 [ 122.841941][ T10] usb 1-1: config 14 has no interface number 1 [ 122.842022][ T10] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 122.842051][ T10] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 122.842080][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 122.842110][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 122.842140][ T10] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 122.842169][ T10] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.842198][ T10] usb 1-1: config 14 interface 57 has no altsetting 0 [ 122.842218][ T10] usb 1-1: config 14 interface 228 has no altsetting 0 [ 123.061880][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.070215][ T10] usb 1-1: Product: syz [ 123.070231][ T10] usb 1-1: Manufacturer: syz [ 123.070242][ T10] usb 1-1: SerialNumber: syz [ 123.075584][ T998] r8152-cfgselector 2-1: Unknown version 0x0000 [ 123.075611][ T998] r8152-cfgselector 2-1: config 0 descriptor?? [ 123.666815][ T10] legousbtower 1-1:14.57: interrupt endpoints not found [ 123.724392][ T5689] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 124.091440][ T10] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 124.142341][ T10] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 124.236333][ T5689] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 124.381310][ T998] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 124.427574][ T5947] Bluetooth: ISO socket layer initialized [ 124.862229][ T5689] usb 3-1: USB disconnect, device number 2 [ 124.897345][ T5689] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 126.017627][ T9] usb 1-1: USB disconnect, device number 2 [ 126.383165][ T9] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 128.510703][ T5979] syz.4.60 (5979) used greatest stack depth: 18752 bytes left [ 128.887004][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062368800: rx timeout, send abort [ 129.389247][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062368800: abort rx timeout. Force session deactivation [ 129.398614][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062368c00: rx timeout, send abort [ 129.878509][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806236ac00: rx timeout, send abort [ 129.880727][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806236ac00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.898781][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062368c00: abort rx timeout. Force session deactivation [ 130.288496][ T6004] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 130.376657][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 130.425584][ T6011] binder_alloc: 6010: binder_alloc_buf size 1024 failed, no address space [ 130.437667][ T6011] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 131.053718][ T5689] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.215301][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 131.226591][ T5689] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice= 0.00 [ 131.236219][ T5689] usb 2-1: no configurations [ 131.236241][ T5689] usb 2-1: can't read configurations, error -22 [ 131.413826][ T5689] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.393662][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 132.396323][ T5689] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice= 0.00 [ 132.396364][ T5689] usb 2-1: no configurations [ 132.396373][ T5689] usb 2-1: can't read configurations, error -22 [ 132.426736][ T5689] usb usb2-port1: attempt power cycle [ 133.007357][ T5689] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 133.339665][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.418639][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 133.423370][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.738443][ T5689] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice= 0.00 [ 133.738632][ T5689] usb 2-1: no configurations [ 133.738688][ T5689] usb 2-1: can't read configurations, error -22 [ 135.103821][ T5689] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 135.946650][ T5689] usb 2-1: device descriptor read/8, error -71 [ 136.123363][ T5689] usb usb2-port1: unable to enumerate USB device [ 136.651996][ T5833] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 136.705994][ T6030] ceph: No mds server is up or the cluster is laggy [ 136.778701][ T5833] libceph: mon0 (2)127.0.0.1:20000 socket error on write [ 136.982004][ T6061] binder: 6060:6061 ioctl c0306201 200000000080 returned -14 [ 137.003724][ T6061] binder: 6060:6061 ioctl c0306201 2000000003c0 returned -14 [ 137.321652][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.485540][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 137.507464][ T36] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 137.526631][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.532138][ T36] usb 2-1: Product: syz [ 137.532154][ T36] usb 2-1: Manufacturer: syz [ 137.532165][ T36] usb 2-1: SerialNumber: syz [ 137.605383][ T36] usb 2-1: config 0 descriptor?? [ 137.684771][ T6064] binder: 6063:6064 unknown command 0 [ 137.685343][ T6064] binder: 6063:6064 ioctl c0306201 2000000004c0 returned -22 [ 137.699079][ T37] audit: type=1800 audit(1788908772.413:2): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.91" name=8006 dev="sda1" ino=2048 res=0 errno=0 [ 137.852231][ T36] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 138.858550][ T36] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 138.936723][ T36] usb 2-1: USB disconnect, device number 7 [ 139.430690][ T6099] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 140.376385][ T6117] mmap: syz.1.113 (6117) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.706211][ T6137] FAULT_INJECTION: forcing a failure. [ 143.706211][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 143.754004][ T6137] CPU: 0 UID: 0 PID: 6137 Comm: syz.0.112 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 143.754045][ T6137] Tainted: [L]=SOFTLOCKUP [ 143.754055][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 143.754069][ T6137] Call Trace: [ 143.754079][ T6137] [ 143.754090][ T6137] dump_stack_lvl+0xe8/0x150 [ 143.754134][ T6137] should_fail_ex+0x46b/0x600 [ 143.754170][ T6137] should_failslab+0xa8/0x100 [ 143.754210][ T6137] __kmalloc_cache_noprof+0xa1/0x680 [ 143.754244][ T6137] ? snd_timer_instance_new+0x51/0x260 [ 143.754281][ T6137] ? snd_timer_instance_new+0x51/0x260 [ 143.754326][ T6137] snd_timer_instance_new+0x51/0x260 [ 143.754368][ T6137] snd_seq_timer_open+0x23e/0x620 [ 143.754411][ T6137] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 143.754454][ T6137] ? rt_spin_unlock+0x159/0x200 [ 143.754483][ T6137] ? rt_spin_unlock+0x165/0x200 [ 143.754509][ T6137] snd_seq_queue_alloc+0x3c6/0x730 [ 143.754546][ T6137] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 143.754591][ T6137] snd_seq_oss_open+0x657/0xf40 [ 143.754622][ T6137] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 143.754657][ T6137] ? __lock_acquire+0x747/0x2de0 [ 143.754716][ T6137] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.754782][ T6137] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 143.754807][ T6137] ? __pfx_free_devinfo+0x10/0x10 [ 143.754832][ T6137] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 143.754861][ T6137] ? mutex_lock_nested+0x152/0x1d0 [ 143.754904][ T6137] ? odev_open+0x5c/0xa0 [ 143.754929][ T6137] odev_open+0x67/0xa0 [ 143.754952][ T6137] chrdev_open+0x4dc/0x600 [ 143.754990][ T6137] ? __pfx_chrdev_open+0x10/0x10 [ 143.755025][ T6137] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 143.755065][ T6137] ? __pfx_chrdev_open+0x10/0x10 [ 143.755098][ T6137] do_dentry_open+0x849/0x1420 [ 143.755146][ T6137] vfs_open+0x3b/0x350 [ 143.755179][ T6137] ? path_openat+0x142d/0x1d60 [ 143.755212][ T6137] path_openat+0x1448/0x1d60 [ 143.755265][ T6137] do_file_open+0x23e/0x4a0 [ 143.755303][ T6137] ? __pfx_do_file_open+0x10/0x10 [ 143.755360][ T6137] ? alloc_fd+0x654/0x6d0 [ 143.755395][ T6137] do_sys_openat2+0x115/0x200 [ 143.755432][ T6137] ? __se_sys_futex+0x3a8/0x450 [ 143.755469][ T6137] ? __pfx_do_sys_openat2+0x10/0x10 [ 143.755510][ T6137] ? rcu_is_watching+0x16/0xb0 [ 143.755551][ T6137] __x64_sys_openat+0x138/0x170 [ 143.755593][ T6137] do_syscall_64+0x166/0x520 [ 143.755621][ T6137] ? trace_irq_disable+0x3b/0x140 [ 143.755650][ T6137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.755674][ T6137] ? clear_bhb_loop+0x70/0xc0 [ 143.755702][ T6137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.755726][ T6137] RIP: 0033:0x7fdc26b4e159 [ 143.755748][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.755786][ T6137] RSP: 002b:00007fdc24da6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 143.755813][ T6137] RAX: ffffffffffffffda RBX: 00007fdc26dd5fa0 RCX: 00007fdc26b4e159 [ 143.755831][ T6137] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 143.755846][ T6137] RBP: 00007fdc26be503b R08: 0000000000000000 R09: 0000000000000000 [ 143.755861][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.755876][ T6137] R13: 00007fdc26dd6038 R14: 00007fdc26dd5fa0 R15: 00007ffea1ba8078 [ 143.755920][ T6137] [ 144.079306][ T6141] ======================================================= [ 144.079306][ T6141] WARNING: The mand mount option has been deprecated and [ 144.079306][ T6141] and is ignored by this kernel. Remove the mand [ 144.079306][ T6141] option from the mount to silence this warning. [ 144.079306][ T6141] ======================================================= [ 145.617877][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 145.619876][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 146.434107][ T6168] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 146.703950][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.609923][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 148.610017][ T10] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 148.610066][ T10] usb 2-1: no configurations [ 148.610080][ T10] usb 2-1: can't read configurations, error -22 [ 150.486699][ T6185] binder: 6184:6185 ioctl c0306201 2000000001c0 returned -14 [ 150.495864][ T6185] binder: 6184:6185 ioctl c0306201 200000000180 returned -14 [ 151.533268][ T6192] syz.1.126 (6192) used greatest stack depth: 17832 bytes left [ 153.462376][ T6228] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 155.594171][ T37] audit: type=1326 audit(1788908790.423:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6241 comm="syz.0.142" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc26b4e159 code=0x0 [ 157.733888][ T5689] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.135535][ T6277] syz.0.150 uses obsolete (PF_INET,SOCK_PACKET) [ 160.574761][ T5689] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.575162][ T5689] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 160.596758][ T5689] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 160.597330][ T5689] usb 2-1: can't read configurations, error -71 [ 160.946815][ T6285] block nbd2: shutting down sockets [ 161.053614][ T5689] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 161.225570][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 161.234084][ T5689] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 161.254894][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.255176][ T5689] usb 2-1: Product: syz [ 161.255196][ T5689] usb 2-1: Manufacturer: syz [ 161.255213][ T5689] usb 2-1: SerialNumber: syz [ 161.362151][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.535506][ T36] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 161.558422][ T36] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.559148][ T36] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 161.559176][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 161.559232][ T36] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.670586][ T36] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 161.670666][ T36] usb 1-1: Product: syz [ 161.670684][ T36] usb 1-1: Manufacturer: syz [ 162.054422][ T5689] usb 2-1: config 0 descriptor?? [ 162.428487][ T5689] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 162.445848][ T5689] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 162.487253][ T36] cdc_wdm 1-1:1.0: skipping garbage [ 162.487512][ T36] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 164.388378][ T5829] usb 1-1: USB disconnect, device number 3 [ 164.598922][ T6314] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 164.635241][ T10] usb 2-1: USB disconnect, device number 11 [ 164.683345][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 164.825312][ T6314] bond0: (slave bond_slave_0): Releasing backup interface [ 164.918151][ T6314] team0: Port device bond_slave_0 added [ 165.976574][ T6329] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 166.263439][ T6324] hub 1-0:1.0: USB hub found [ 166.280681][ T6324] hub 1-0:1.0: 1 port detected [ 172.353811][ T6389] IPVS: length: 104 != 24 [ 177.400682][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 178.453925][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 178.518930][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 178.534431][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.534514][ T10] usb 4-1: config 0 has no interface number 0 [ 178.534626][ T10] usb 4-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 178.534707][ T10] usb 4-1: config 0 interface 1 has no altsetting 0 [ 179.322420][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.322762][ T10] usb 4-1: Product: syz [ 181.111887][ T10] usb 4-1: config 0 descriptor?? [ 181.264097][ T10] usb 4-1: can't set config #0, error -71 [ 181.347471][ T10] usb 4-1: USB disconnect, device number 2 [ 181.563617][ T5829] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 181.723188][ T5829] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 181.736003][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.746292][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 181.746329][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 181.746359][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 181.746384][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 181.809181][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 181.810992][ T5829] usb 5-1: Product: syz [ 181.811011][ T5829] usb 5-1: Manufacturer: syz [ 181.811028][ T5829] usb 5-1: SerialNumber: syz [ 181.895822][ T5829] usb 5-1: config 0 descriptor?? [ 182.402842][ T5829] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 182.410491][ T5829] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 182.606382][ T5829] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 182.614115][ T5829] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 182.614144][ T5829] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 182.827215][ T5829] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 184.178983][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.301301][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.526408][ T5829] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 184.534001][ T5829] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 184.644076][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.652048][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.719289][ T998] usb 5-1: USB disconnect, device number 2 [ 184.913002][ T6485] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.943639][ T5717] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 186.174433][ T5717] usb 3-1: New USB device found, idVendor=03e8, idProduct=0004, bcdDevice= 0.00 [ 186.181886][ T5717] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 4096, setting to 1024 [ 186.181980][ T5717] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 186.182091][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.331187][ T5717] gspca_main: se401-2.14.0 probing 03e8:0004 [ 187.579820][ T5717] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 187.579991][ T5717] se401 3-1:1.0: probe with driver se401 failed with error -110 [ 188.673858][ T5829] usb 3-1: USB disconnect, device number 3 [ 189.003846][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 190.147813][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 190.159120][ T10] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 190.169555][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 190.172494][ T10] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 190.172529][ T10] usb 4-1: Product: syz [ 190.172540][ T10] usb 4-1: Manufacturer: syz [ 190.172551][ T10] usb 4-1: SerialNumber: syz [ 190.489340][ T10] usb 4-1: Invalid connection information received from device [ 192.020328][ T6522] usb 4-1: USB disconnect, device number 3 [ 194.316022][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317052][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.501093][ T6571] netlink: 'syz.4.233': attribute type 9 has an invalid length. [ 197.501237][ T6571] netlink: 'syz.4.233': attribute type 7 has an invalid length. [ 197.501253][ T6571] netlink: 'syz.4.233': attribute type 8 has an invalid length. [ 197.520636][ T6569] NILFS (loop4): device size too small [ 203.953844][ T6598] futex_wake_op: syz.3.243 tries to shift op by 144; fix this program [ 204.562312][ T6606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.245'. [ 205.472521][ T6621] syzkaller0: entered promiscuous mode [ 205.483237][ T6621] syzkaller0: entered allmulticast mode [ 211.182939][ T6660] loop5: detected capacity change from 0 to 7 [ 211.275317][ T6660] Dev loop5: unable to read RDB block 7 [ 211.281092][ T6660] loop5: AHDI p1 p3 p4 [ 211.281127][ T6660] loop5: partition table partially beyond EOD, truncated [ 211.281408][ T6660] loop5: p1 size 100663296 extends beyond EOD, truncated [ 211.518986][ T6660] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 211.885173][ T6661] Dev loop5: unable to read RDB block 7 [ 211.890974][ T6661] loop5: AHDI p1 p3 p4 [ 211.891046][ T6661] loop5: partition table partially beyond EOD, truncated [ 212.378830][ T37] audit: type=1326 audit(1788908846.933:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6681 comm="syz.1.267" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0f26ee159 code=0x0 [ 212.568815][ T6661] loop5: p1 size 100663296 extends beyond EOD, truncated [ 212.612382][ T6661] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 213.380907][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 213.403930][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 213.579134][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 213.591060][ T5964] udevd[5964]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 214.522084][ T6706] fuse: Bad value for 'fd' [ 217.863748][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 217.966759][ T6724] binder: 6721:6724 ioctl c018620c 200000000180 returned -22 [ 218.952812][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.281'. [ 219.055052][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.4.281'. [ 219.057569][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 219.057638][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 219.853691][ T5696] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 220.198079][ T5696] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 220.223895][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.223980][ T5696] usb 2-1: Product: syz [ 220.223997][ T5696] usb 2-1: Manufacturer: syz [ 220.224013][ T5696] usb 2-1: SerialNumber: syz [ 220.443878][ T5696] usb 2-1: config 0 descriptor?? [ 220.529487][ T5696] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 012 [ 221.987018][ T5592] Bluetooth: hci4: command 0x0406 tx timeout [ 222.072333][ T5588] Bluetooth: hci2: command 0x0406 tx timeout [ 222.072366][ T5588] Bluetooth: hci1: command 0x0406 tx timeout [ 222.072387][ T5588] Bluetooth: hci0: command 0x0406 tx timeout [ 222.078488][ T5593] Bluetooth: hci3: command 0x0406 tx timeout [ 222.529786][ T5696] (null): failure reading functionality [ 225.956606][ T6777] warning: `syz.2.292' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 227.049476][ T5696] i2c i2c-1: connected i2c-tiny-usb device [ 227.123680][ T5696] usb 2-1: USB disconnect, device number 12 [ 227.516317][ T6795] syz.0.294 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 234.146098][ T6841] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 234.807446][ T6841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.892598][ T6847] bond1: (slave geneve2): making interface the new active one [ 234.921855][ T6847] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 236.752846][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 236.753552][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.254898][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.774068][ T6882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.393638][ T6887] netlink: 84 bytes leftover after parsing attributes in process `syz.2.318'. [ 242.456403][ T6880] netlink: 'syz.2.318': attribute type 1 has an invalid length. [ 250.463227][ T6948] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 250.473332][ T6948] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 255.039435][ T6979] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 255.748866][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.755402][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.068885][ T7042] binder_alloc: 7040: pid 7040 spamming oneway? 1 buffers allocated for a total size of 4096 [ 264.899701][ T7044] binder_alloc: 7040: pid 7040 spamming oneway? 2 buffers allocated for a total size of 5120 [ 264.948176][ T7048] FAULT_INJECTION: forcing a failure. [ 264.948176][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 264.990318][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.4.360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 264.990358][ T7048] Tainted: [L]=SOFTLOCKUP [ 264.990367][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.990401][ T7048] Call Trace: [ 264.990410][ T7048] [ 264.990421][ T7048] dump_stack_lvl+0xe8/0x150 [ 264.990465][ T7048] should_fail_ex+0x46b/0x600 [ 264.990500][ T7048] should_failslab+0xa8/0x100 [ 264.990549][ T7048] __kvmalloc_node_noprof+0x176/0x890 [ 264.990587][ T7048] ? kmem_cache_alloc_noprof+0x3c6/0x690 [ 264.990618][ T7048] ? ceph_msg_new2+0x166/0x4d0 [ 264.990649][ T7048] ? ceph_msg_new2+0x166/0x4d0 [ 264.990690][ T7048] ceph_msg_new2+0x166/0x4d0 [ 264.990728][ T7048] ceph_monc_init+0x691/0xb10 [ 264.990764][ T7048] ceph_create_client+0x225/0x310 [ 264.990794][ T7048] ceph_get_tree+0x1ca/0x1a40 [ 264.990822][ T7048] ? cap_capable+0x123/0x460 [ 264.990849][ T7048] ? safesetid_security_capable+0xa9/0x1a0 [ 264.990882][ T7048] vfs_get_tree+0x92/0x2a0 [ 264.990915][ T7048] vfs_cmd_create+0xa2/0x200 [ 264.990951][ T7048] __se_sys_fsconfig+0x6bf/0x810 [ 264.990994][ T7048] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 264.991032][ T7048] ? rcu_is_watching+0x16/0xb0 [ 264.991074][ T7048] ? __x64_sys_fsconfig+0x20/0xc0 [ 264.991112][ T7048] do_syscall_64+0x166/0x520 [ 264.991142][ T7048] ? trace_irq_disable+0x3b/0x140 [ 264.991172][ T7048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.991197][ T7048] ? clear_bhb_loop+0x70/0xc0 [ 264.991226][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.991255][ T7048] RIP: 0033:0x7fd1bfb4e159 [ 264.991278][ T7048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.991298][ T7048] RSP: 002b:00007fd1bdda6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 264.991325][ T7048] RAX: ffffffffffffffda RBX: 00007fd1bfdd5fa0 RCX: 00007fd1bfb4e159 [ 264.991343][ T7048] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 264.991357][ T7048] RBP: 00007fd1bfbe503b R08: 0000000000000000 R09: 0000000000000000 [ 264.991371][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.991386][ T7048] R13: 00007fd1bfdd6038 R14: 00007fd1bfdd5fa0 R15: 00007ffd57195578 [ 264.991423][ T7048] [ 265.587066][ T7058] FAULT_INJECTION: forcing a failure. [ 265.587066][ T7058] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 265.659171][ T7058] CPU: 1 UID: 0 PID: 7058 Comm: syz.2.365 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 265.659211][ T7058] Tainted: [L]=SOFTLOCKUP [ 265.659221][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.659235][ T7058] Call Trace: [ 265.659246][ T7058] [ 265.659257][ T7058] dump_stack_lvl+0xe8/0x150 [ 265.659301][ T7058] should_fail_ex+0x46b/0x600 [ 265.659337][ T7058] prepare_alloc_pages+0x223/0x650 [ 265.659381][ T7058] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 265.659423][ T7058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 265.659465][ T7058] ? __pfx_policy_nodemask+0x10/0x10 [ 265.659508][ T7058] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 265.659539][ T7058] alloc_pages_mpol+0xd4/0x280 [ 265.659583][ T7058] alloc_pages_noprof+0xd2/0x2f0 [ 265.659612][ T7058] get_free_pages_noprof+0xf/0x80 [ 265.659649][ T7058] __kasan_populate_vmalloc+0x38/0x1c0 [ 265.659683][ T7058] ? rt_spin_unlock+0x165/0x200 [ 265.659709][ T7058] alloc_vmap_area+0xd1a/0x1420 [ 265.659756][ T7058] ? __pfx_alloc_vmap_area+0x10/0x10 [ 265.659782][ T7058] ? __kmalloc_cache_node_noprof+0x461/0x670 [ 265.659818][ T7058] ? __get_vm_area_node+0x155/0x2f0 [ 265.659852][ T7058] __get_vm_area_node+0x200/0x2f0 [ 265.659889][ T7058] ? relay_open_buf+0x3b0/0xda0 [ 265.659913][ T7058] vmap+0x158/0x300 [ 265.659941][ T7058] ? relay_open_buf+0x3b0/0xda0 [ 265.659970][ T7058] relay_open_buf+0x3b0/0xda0 [ 265.660003][ T7058] ? relay_open+0x3a4/0x900 [ 265.660031][ T7058] relay_open+0x413/0x900 [ 265.660075][ T7058] blk_trace_setup_prepare+0x425/0x5a0 [ 265.660119][ T7058] blk_trace_setup+0x2f5/0x520 [ 265.660162][ T7058] ? __pfx_blk_trace_setup+0x10/0x10 [ 265.660219][ T7058] ? snprintf+0xe8/0x140 [ 265.660267][ T7058] blk_trace_ioctl+0x37f/0x910 [ 265.660310][ T7058] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 265.660350][ T7058] ? kasan_quarantine_put+0xbb/0x1f0 [ 265.660391][ T7058] ? tomoyo_path_number_perm+0x219/0x5f0 [ 265.660420][ T7058] ? tomoyo_path_number_perm+0x219/0x5f0 [ 265.660449][ T7058] ? do_vfs_ioctl+0x1184/0x1550 [ 265.660485][ T7058] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 265.660515][ T7058] ? __pfx_smack_log+0x10/0x10 [ 265.660561][ T7058] ? smk_tskacc+0x2fb/0x370 [ 265.660602][ T7058] ? smack_file_ioctl+0x2c4/0x370 [ 265.660629][ T7058] ? __pfx_smack_file_ioctl+0x10/0x10 [ 265.660661][ T7058] blkdev_ioctl+0x4c4/0x750 [ 265.660688][ T7058] ? __pfx_blkdev_ioctl+0x10/0x10 [ 265.660708][ T7058] ? __fget_files+0x2a/0x420 [ 265.660737][ T7058] ? bpf_lsm_file_ioctl+0x9/0x20 [ 265.660764][ T7058] ? __pfx_blkdev_ioctl+0x10/0x10 [ 265.660787][ T7058] __se_sys_ioctl+0xff/0x170 [ 265.660824][ T7058] do_syscall_64+0x166/0x520 [ 265.660854][ T7058] ? trace_irq_disable+0x3b/0x140 [ 265.660884][ T7058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.660909][ T7058] ? clear_bhb_loop+0x70/0xc0 [ 265.660940][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.660965][ T7058] RIP: 0033:0x7f189ae3e159 [ 265.660987][ T7058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.661007][ T7058] RSP: 002b:00007f1899075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.661033][ T7058] RAX: ffffffffffffffda RBX: 00007f189b0c6090 RCX: 00007f189ae3e159 [ 265.661059][ T7058] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000004 [ 265.661075][ T7058] RBP: 00007f189aed503b R08: 0000000000000000 R09: 0000000000000000 [ 265.661090][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.661105][ T7058] R13: 00007f189b0c6128 R14: 00007f189b0c6090 R15: 00007fff8f98f018 [ 265.661144][ T7058] [ 265.692588][ T7060] netlink: 72 bytes leftover after parsing attributes in process `syz.3.362'. [ 266.903717][ T2225] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 270.093653][ T2225] usb 1-1: Using ep0 maxpacket: 16 [ 270.276268][ T2225] usb 1-1: device descriptor read/all, error -71 [ 282.516084][ T7144] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 7 (only 8 groups) [ 286.867868][ T4900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 286.912408][ T4900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.925912][ T4900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.936317][ T4900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.946270][ T4900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.600147][ T7168] loop9: detected capacity change from 0 to 7 [ 287.724626][ T7169] lo: entered promiscuous mode [ 287.949570][ T7175] overlayfs: overlapping lowerdir path [ 289.011155][ T7169] tunl0: entered promiscuous mode [ 289.051150][ T7168] Dev loop9: unable to read RDB block 7 [ 289.057042][ T7168] loop9: unable to read partition table [ 289.057288][ T7168] loop9: partition table beyond EOD, truncated [ 289.057326][ T7168] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 289.094549][ T4900] Bluetooth: hci5: command tx timeout [ 289.630538][ T7185] usb usb8: usbfs: process 7185 (syz.1.394) did not claim interface 0 before use [ 290.411288][ T7169] gre0: entered promiscuous mode [ 290.777498][ T7192] ./file0: Can't lookup blockdev [ 291.173621][ T4900] Bluetooth: hci5: command tx timeout [ 291.993374][ T7169] gretap0: entered promiscuous mode [ 293.263607][ T4900] Bluetooth: hci5: command tx timeout [ 293.812812][ T7169] erspan0: entered promiscuous mode [ 293.858641][ T7169] ip_vti0: entered promiscuous mode [ 293.885336][ T7169] ip6_vti0: entered promiscuous mode [ 293.936608][ T7169] sit0: entered promiscuous mode [ 295.697808][ T7169] ip6tnl0: entered promiscuous mode [ 295.732635][ T7169] ip6gre0: entered promiscuous mode [ 296.339818][ T4900] Bluetooth: hci5: command tx timeout [ 296.457675][ T7169] syz_tun: entered promiscuous mode [ 296.555535][ T7169] ip6gretap0: entered promiscuous mode [ 296.640472][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.693926][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.741886][ T7169] bridge0: entered promiscuous mode [ 303.334883][ T4900] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 303.394445][ T4900] Bluetooth: hci0: Injecting HCI hardware error event [ 303.438568][ T4900] Bluetooth: hci0: hardware error 0x00 [ 304.206711][ T7260] jffs2: notice: (7260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 304.430349][ T7269] Need at least one configuration in g1. [ 304.430963][ T7269] udc dummy_udc.0: failed to start g1: -22 [ 304.430995][ T7269] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 304.437593][ T7269] UDC core: g1: couldn't find an available UDC or it's busy [ 305.589978][ T1050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.101851][ T4900] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 307.703089][ T7287] CacheFiles: No cache directory specified [ 310.345951][ T7307] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 311.862939][ T7325] usb3503 0-0008: unknown mode is requested [ 311.862984][ T7325] usb3503 0-0008: usb3503_probe: probed in standby mode [ 311.866726][ T7325] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 312.768700][ T7310] capability: warning: `syz.3.427' uses deprecated v2 capabilities in a way that may be insecure [ 314.722157][ T1050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.719570][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.726091][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.588966][ T1050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.966421][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 324.995640][ T7378] Invalid logical block size (8192) [ 330.893992][ T1050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.010398][ T7404] netlink: 'syz.0.447': attribute type 1 has an invalid length. [ 331.016846][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 339.310820][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.318227][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.318452][ T7164] bridge_slave_0: entered allmulticast mode [ 339.347406][ T7164] bridge_slave_0: entered promiscuous mode [ 339.774128][ T5717] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 340.407368][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.415348][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.415575][ T7164] bridge_slave_1: entered allmulticast mode [ 340.418513][ T7164] bridge_slave_1: entered promiscuous mode [ 340.452424][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 340.462029][ T5717] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 340.492027][ T5717] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.502299][ T5717] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.520437][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.528604][ T5717] usb 5-1: Product: syz [ 340.528627][ T5717] usb 5-1: Manufacturer: syz [ 340.528644][ T5717] usb 5-1: SerialNumber: syz [ 340.726562][ T5717] usb 5-1: 0:2 : does not exist [ 341.474151][ T7475] dns_resolver: Unsupported content type (6) [ 342.037110][ T5717] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 342.088284][ T7164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.259206][ T7164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.360782][ T5717] usb 5-1: USB disconnect, device number 3 [ 346.813347][ T1050] bridge_slave_1: left allmulticast mode [ 346.846702][ T7490] process 'syz.4.469' launched './file0' with NULL argv: empty string added [ 346.891329][ T1050] bridge_slave_1: left promiscuous mode [ 346.939690][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.401654][ T1050] bridge_slave_0: left allmulticast mode [ 348.401749][ T1050] bridge_slave_0: left promiscuous mode [ 348.402359][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.497380][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.661034][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.675454][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.713645][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.722448][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.748736][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.883803][ T4900] Bluetooth: hci4: command tx timeout [ 352.793889][ T7523] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.582652][ T37] audit: type=1800 audit(1788908988.323:5): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.476" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 353.893634][ T4900] Bluetooth: hci4: command tx timeout [ 354.102400][ T7530] ima: policy update failed [ 354.102987][ T37] audit: type=1807 audit(1788908988.923:6): UNKNOWN=mea res=0 [ 354.103147][ T37] audit: type=1802 audit(1788908988.923:7): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=update_policy cause=invalid-policy comm="syz.3.477" res=0 errno=0 [ 354.103253][ T37] audit: type=1802 audit(1788908988.923:8): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.477" res=0 errno=0 [ 356.020252][ T4900] Bluetooth: hci4: command tx timeout [ 358.113189][ T4900] Bluetooth: hci4: command tx timeout [ 359.187355][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.247878][ T7543] CIFS: Attempting to mount //::1/share [ 359.305917][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.346088][ T1050] bond0 (unregistering): Released all slaves [ 359.454071][ T7543] CIFS: VFS: cifs_mount failed w/return code = -512 [ 359.910883][ T7551] Bluetooth: MGMT ver 1.23 [ 360.352424][ T7559] NILFS (loop0): device size too small [ 365.949711][ T37] audit: type=1800 audit(1788909000.773:9): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.488" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 366.785289][ T7604] netlink: 'syz.0.491': attribute type 16 has an invalid length. [ 366.928334][ T7606] Unable to extract alua_access_type [ 368.298718][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 378.712743][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.712907][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.600478][ T7667] tipc: Started in network mode [ 379.605603][ T7667] tipc: Node identity 4, cluster identity 4711 [ 379.605622][ T7667] tipc: Node number set to 4 [ 380.164631][ T7686] Unable to extract alua_access_type [ 380.384236][ T1050] hsr_slave_0: left promiscuous mode [ 380.448312][ T1050] hsr_slave_1: left promiscuous mode [ 380.491788][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.500565][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.548555][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.568153][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.853763][ T7696] fuse: root generation should be zero [ 382.162060][ T1050] veth1_macvtap: left promiscuous mode [ 382.170814][ T1050] veth0_macvtap: left promiscuous mode [ 382.171523][ T1050] veth1_vlan: left promiscuous mode [ 382.172332][ T1050] veth0_vlan: left promiscuous mode [ 385.220063][ T7734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 386.298339][ T7738] kvm [7737]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 386.360956][ T37] audit: type=1326 audit(1788909021.183:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7741 comm="syz.1.520" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0f26ee159 code=0x0 [ 386.417155][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 387.618008][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 388.069148][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.072956][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.077839][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.078888][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.079738][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.091128][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.109286][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.131975][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.460111][ T7755] kvm [7753]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 388.992012][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.524657][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 396.407472][ T7504] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.413817][ T7504] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.414395][ T7504] bridge_slave_0: entered allmulticast mode [ 397.666693][ T7504] bridge_slave_0: entered promiscuous mode [ 397.729944][ T7504] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.734613][ T7504] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.735138][ T7504] bridge_slave_1: entered allmulticast mode [ 397.774076][ T7504] bridge_slave_1: entered promiscuous mode [ 398.041278][ T7827] Unable to extract alua_access_type [ 400.064470][ T7846] netlink: 180 bytes leftover after parsing attributes in process `syz.1.539'. [ 400.086202][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.539'. [ 401.567075][ T7504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.637420][ T7504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.865010][ T7504] team0: Port device team_slave_0 added [ 401.890575][ T7504] team0: Port device team_slave_1 added [ 401.989187][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.998753][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.998788][ T7504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.001415][ T7504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.001431][ T7504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.001459][ T7504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.202624][ T7504] hsr_slave_0: entered promiscuous mode [ 402.210948][ T7504] hsr_slave_1: entered promiscuous mode [ 402.211895][ T7504] debugfs: 'hsr0' already exists in 'hsr' [ 402.211921][ T7504] Cannot create hsr debugfs directory [ 402.436534][ T1050] bridge_slave_1: left allmulticast mode [ 402.444624][ T1050] bridge_slave_1: left promiscuous mode [ 402.487262][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.801666][ T1050] bridge_slave_0: left allmulticast mode [ 402.801770][ T1050] bridge_slave_0: left promiscuous mode [ 402.802543][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.699730][ T2225] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 409.181727][ T2225] usb 4-1: device descriptor read/all, error -71 [ 409.671982][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.357612][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.490557][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.528781][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.571686][ T1050] bond0 (unregistering): Released all slaves [ 411.611164][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.628060][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.638762][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.938569][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 414.290142][ T4900] Bluetooth: hci5: command tx timeout [ 416.373796][ T4900] Bluetooth: hci5: command tx timeout [ 417.250078][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.065550][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.085710][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.103487][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.119859][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 420.160301][ T59] Bluetooth: hci5: command tx timeout [ 420.213742][ T4900] Bluetooth: hci6: command tx timeout [ 422.286895][ T4900] Bluetooth: hci5: command tx timeout [ 422.595951][ T5599] Bluetooth: hci6: command tx timeout [ 424.555675][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 424.613685][ T5599] Bluetooth: hci6: command tx timeout [ 426.903626][ T5599] Bluetooth: hci6: command tx timeout [ 427.711944][ T7964] Unable to extract alua_access_type [ 427.964567][ T1050] bridge_slave_1: left allmulticast mode [ 427.964675][ T1050] bridge_slave_1: left promiscuous mode [ 427.965680][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.227797][ T1050] bridge_slave_0: left allmulticast mode [ 428.237290][ T1050] bridge_slave_0: left promiscuous mode [ 428.239185][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.423569][ T5717] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 428.573662][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 428.580211][ T5717] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 428.601958][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.605164][ T5717] usb 4-1: Product: syz [ 428.605185][ T5717] usb 4-1: Manufacturer: syz [ 428.605201][ T5717] usb 4-1: SerialNumber: syz [ 428.639859][ T5717] usb 4-1: config 0 descriptor?? [ 428.659086][ T5717] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 428.899837][ T5717] pwc: Warning: more than 1 configuration available. [ 428.901889][ T5717] pwc: Failed to set LED on/off time (-71) [ 428.903208][ T5717] pwc: send_video_command error -71 [ 428.903224][ T5717] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 428.903354][ T5717] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 428.918865][ T5717] usb 4-1: USB disconnect, device number 6 [ 429.955779][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.132519][ T4900] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 430.177249][ T4900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 430.195021][ T4900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 430.212397][ T4900] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 430.220096][ T4900] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.276098][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.266038][ T1050] bond0 (unregistering): Released all slaves [ 431.875813][ T7995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.159688][ T4900] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 432.713575][ T4900] Bluetooth: hci0: command tx timeout [ 433.600084][ T1050] hsr_slave_0: left promiscuous mode [ 433.640894][ T1050] hsr_slave_1: left promiscuous mode [ 433.650866][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.734869][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.667608][ T4900] Bluetooth: hci0: command tx timeout [ 437.364574][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 437.934229][ T4900] Bluetooth: hci0: command tx timeout [ 438.226668][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 441.488731][ T4900] Bluetooth: hci0: command tx timeout [ 441.506386][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.512898][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.070143][ T8035] kvm_pr_unimpl_wrmsr: 24 callbacks suppressed [ 442.070247][ T8035] kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf901000000f9 [ 442.076399][ T8035] kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf901000000f9 [ 442.081649][ T8035] kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf901000000f9 [ 442.086798][ T8035] kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf901000000f9 [ 442.092062][ T8035] kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf901000000f9 [ 442.097405][ T8035] kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xf901000000f9 [ 442.099516][ T8035] kvm_intel: kvm [8034]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x790000000079 [ 443.586910][ T8047] openvswitch: netlink: IP tunnel dst address not specified [ 449.673782][ T5689] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 449.824747][ T5689] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 449.851800][ T5689] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 449.862578][ T5689] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 449.862609][ T5689] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 449.862659][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.918162][ T8082] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 450.375682][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.376181][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.422867][ T7884] bridge_slave_0: entered allmulticast mode [ 450.472335][ T7884] bridge_slave_0: entered promiscuous mode [ 450.621876][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.649167][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.650342][ T7884] bridge_slave_1: entered allmulticast mode [ 450.701484][ T5717] usb 1-1: USB disconnect, device number 6 [ 450.744048][ T4900] Bluetooth: hci1: Reading Intel version command failed (-71) [ 450.808179][ T7884] bridge_slave_1: entered promiscuous mode [ 452.420034][ T1050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.610145][ T7884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.232435][ T7884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.403500][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 453.564575][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 453.575544][ T10] usb 1-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 453.575583][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 453.575620][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.614163][ T10] usb 1-1: config 0 descriptor?? [ 453.692515][ T8106] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 454.437543][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458528][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458566][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458595][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458625][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458653][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458682][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458710][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458738][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.458765][ T10] koneplus 0003:1E7D:2D51.0001: unknown main item tag 0x0 [ 454.650786][ T10] koneplus 0003:1E7D:2D51.0001: hidraw0: USB HID v0.c1 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 454.742813][ T10] usb 1-1: USB disconnect, device number 7 [ 454.897836][ T7884] team0: Port device team_slave_0 added [ 455.197646][ T8129] fido_id[8129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 456.260792][ T1050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.489084][ T8137] netlink: 'syz.0.589': attribute type 12 has an invalid length. [ 456.749639][ T7884] team0: Port device team_slave_1 added [ 457.373958][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.374950][ T7921] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.375172][ T7921] bridge_slave_0: entered allmulticast mode [ 457.393759][ T7921] bridge_slave_0: entered promiscuous mode [ 457.547265][ T7921] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.547667][ T7921] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.548192][ T7921] bridge_slave_1: entered allmulticast mode [ 457.562202][ T7921] bridge_slave_1: entered promiscuous mode [ 458.008008][ T1050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.136924][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.145944][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.146054][ T7884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.244650][ T7884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.244734][ T7884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.244795][ T7884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.292964][ T7921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.380257][ T7921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.681145][ T1050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.135093][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.145270][ T7981] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.157732][ T7981] bridge_slave_0: entered allmulticast mode [ 459.197542][ T7981] bridge_slave_0: entered promiscuous mode [ 459.608679][ T7981] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.616050][ T7981] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.616289][ T7981] bridge_slave_1: entered allmulticast mode [ 459.619329][ T7981] bridge_slave_1: entered promiscuous mode [ 459.836749][ T7921] team0: Port device team_slave_0 added [ 459.966649][ T7921] team0: Port device team_slave_1 added [ 460.001504][ T7884] hsr_slave_0: entered promiscuous mode [ 461.732495][ T7884] hsr_slave_1: entered promiscuous mode [ 461.733467][ T7884] debugfs: 'hsr0' already exists in 'hsr' [ 461.733494][ T7884] Cannot create hsr debugfs directory [ 462.409929][ T7981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.443592][ T5717] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 462.575402][ T7981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.590666][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.592288][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.592313][ T7921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.625161][ T5717] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 462.647325][ T5717] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.657584][ T5717] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 462.657635][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.727757][ T5717] usb 4-1: config 0 descriptor?? [ 462.773617][ T2225] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 462.848075][ T7921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.848156][ T7921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.848230][ T7921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.944321][ T5717] usb 4-1: USB disconnect, device number 7 [ 464.388748][ T7981] team0: Port device team_slave_0 added [ 464.452913][ T7981] team0: Port device team_slave_1 added [ 464.572067][ T2225] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 464.583856][ T2225] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 464.591600][ T2225] usb 1-1: can't read configurations, error -71 [ 465.162993][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.173848][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.173885][ T7981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.661586][ T7921] hsr_slave_0: entered promiscuous mode [ 465.671711][ T7921] hsr_slave_1: entered promiscuous mode [ 465.679629][ T7921] debugfs: 'hsr0' already exists in 'hsr' [ 465.685497][ T7921] Cannot create hsr debugfs directory [ 465.689613][ T7981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.689630][ T7981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.689656][ T7981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.340056][ T8221] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.900620][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.978211][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.987197][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.996635][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.003527][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.213687][ T4900] Bluetooth: hci1: command tx timeout [ 476.232148][ T7981] hsr_slave_0: entered promiscuous mode [ 476.251084][ T7981] hsr_slave_1: entered promiscuous mode [ 476.265515][ T7981] debugfs: 'hsr0' already exists in 'hsr' [ 476.286103][ T7981] Cannot create hsr debugfs directory [ 476.393988][ T1050] bridge_slave_1: left allmulticast mode [ 476.394084][ T1050] bridge_slave_1: left promiscuous mode [ 476.394910][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.564728][ T1050] bridge_slave_0: left allmulticast mode [ 476.599618][ T1050] bridge_slave_0: left promiscuous mode [ 476.600397][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.044628][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.080293][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.081869][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.085860][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.086829][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.456465][ T8254] evm: overlay not supported [ 479.894168][ T5599] Bluetooth: hci1: command tx timeout [ 481.124314][ T1050] bond1 (unregistering): (slave geneve2): Releasing active interface [ 482.579254][ T4900] Bluetooth: hci1: command tx timeout [ 482.579535][ T4900] Bluetooth: hci4: command tx timeout [ 483.434229][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.286077][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.340784][ T1050] bond0 (unregistering): Released all slaves [ 484.395230][ T1050] bond1 (unregistering): Released all slaves [ 484.666029][ T59] Bluetooth: hci4: command tx timeout [ 484.670769][ T59] Bluetooth: hci1: command tx timeout [ 487.077022][ T4900] Bluetooth: hci4: command tx timeout [ 489.102847][ T4900] Bluetooth: hci4: command tx timeout [ 493.474193][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.520897][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.529809][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.555866][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.589107][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.667745][ T4900] Bluetooth: hci5: command tx timeout [ 497.872292][ T4900] Bluetooth: hci5: command tx timeout [ 499.776108][ T8377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.014603][ T4900] Bluetooth: hci5: command tx timeout [ 500.849026][ T1050] hsr_slave_0: left promiscuous mode [ 500.884999][ T1050] hsr_slave_1: left promiscuous mode [ 500.891364][ T1050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.891404][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.168048][ T1050] veth1_macvtap: left promiscuous mode [ 501.196021][ T1050] veth0_macvtap: left promiscuous mode [ 501.196353][ T1050] veth1_vlan: left promiscuous mode [ 501.196491][ T1050] veth0_vlan: left promiscuous mode [ 501.402332][ T8405] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 501.442559][ T8405] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 501.496016][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.502526][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.417398][ T4900] Bluetooth: hci5: command tx timeout [ 509.847831][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 509.906139][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 510.279742][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 512.071649][ T8450] MTRR 2 not used [ 517.167447][ T8474] fuse: fd is not a fuse device [ 519.581607][ T8494] netlink: 'syz.0.645': attribute type 2 has an invalid length. [ 520.589335][ T8501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.106719][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.108160][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.108384][ T8250] bridge_slave_0: entered allmulticast mode [ 521.116493][ T8250] bridge_slave_0: entered promiscuous mode [ 521.275404][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.282809][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.291144][ T8250] bridge_slave_1: entered allmulticast mode [ 521.307934][ T8250] bridge_slave_1: entered promiscuous mode [ 521.320980][ T8357] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.321122][ T8357] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.321316][ T8357] bridge_slave_0: entered allmulticast mode [ 521.382233][ T8357] bridge_slave_0: entered promiscuous mode [ 522.210310][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.217776][ T8227] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.218002][ T8227] bridge_slave_0: entered allmulticast mode [ 522.240761][ T8227] bridge_slave_0: entered promiscuous mode [ 522.358912][ T8357] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.366296][ T8357] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.366926][ T8357] bridge_slave_1: entered allmulticast mode [ 522.387458][ T8357] bridge_slave_1: entered promiscuous mode [ 522.400299][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.400442][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.400633][ T8227] bridge_slave_1: entered allmulticast mode [ 522.443533][ T8227] bridge_slave_1: entered promiscuous mode [ 522.558525][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.633683][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.656036][ T8357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.702766][ T8227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.746945][ T8357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.760303][ T8227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.854566][ T8250] team0: Port device team_slave_0 added [ 522.927333][ T8250] team0: Port device team_slave_1 added [ 522.939745][ T8357] team0: Port device team_slave_0 added [ 522.970798][ T8227] team0: Port device team_slave_0 added [ 523.029377][ T8357] team0: Port device team_slave_1 added [ 523.045493][ T8227] team0: Port device team_slave_1 added [ 523.543593][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.550962][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.550998][ T8250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.393488][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.400612][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.400645][ T8357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.445951][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.453059][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.453095][ T8250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.499448][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 526.513692][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.520778][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.520803][ T8227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.522204][ T8357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.522219][ T8357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.522246][ T8357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.725245][ T8227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.725323][ T8227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.725352][ T8227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.843783][ T1050] bridge_slave_1: left allmulticast mode [ 526.843889][ T1050] bridge_slave_1: left promiscuous mode [ 526.849391][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.245351][ T1050] bridge_slave_0: left allmulticast mode [ 528.245412][ T1050] bridge_slave_0: left promiscuous mode [ 528.245684][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.533220][ T1050] bridge_slave_1: left allmulticast mode [ 529.533273][ T1050] bridge_slave_1: left promiscuous mode [ 529.533602][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.585326][ T1050] bridge_slave_0: left allmulticast mode [ 530.585376][ T1050] bridge_slave_0: left promiscuous mode [ 530.585637][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.754438][ T1050] bridge_slave_1: left allmulticast mode [ 530.754489][ T1050] bridge_slave_1: left promiscuous mode [ 530.754790][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.845132][ T1050] bridge_slave_0: left allmulticast mode [ 530.845179][ T1050] bridge_slave_0: left promiscuous mode [ 530.845394][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.214063][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.294384][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.379779][ T1050] bond0 (unregistering): Released all slaves [ 531.488992][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 531.562734][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 531.570630][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 531.592472][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 531.605800][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.844308][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.904310][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.945940][ T1050] bond0 (unregistering): Released all slaves [ 532.204279][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.434192][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.421494][ T1050] bond0 (unregistering): Released all slaves [ 533.717200][ T59] Bluetooth: hci0: command tx timeout [ 534.045061][ T8250] hsr_slave_0: entered promiscuous mode [ 534.097640][ T8250] hsr_slave_1: entered promiscuous mode [ 534.104244][ T8250] debugfs: 'hsr0' already exists in 'hsr' [ 534.104342][ T8250] Cannot create hsr debugfs directory [ 534.122394][ T8357] hsr_slave_0: entered promiscuous mode [ 534.131397][ T8357] hsr_slave_1: entered promiscuous mode [ 534.140066][ T8357] debugfs: 'hsr0' already exists in 'hsr' [ 534.140161][ T8357] Cannot create hsr debugfs directory [ 536.527178][ T59] Bluetooth: hci0: command tx timeout [ 537.431754][ T1050] hsr_slave_0: left promiscuous mode [ 537.539564][ T1050] hsr_slave_1: left promiscuous mode [ 537.556001][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.627492][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.642735][ T4900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.985832][ T4900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 538.549895][ T4900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 538.559124][ T4900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 538.561399][ T4900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 538.887261][ T59] Bluetooth: hci0: command tx timeout [ 538.999760][ T1050] hsr_slave_0: left promiscuous mode [ 539.033644][ T1050] hsr_slave_1: left promiscuous mode [ 539.039922][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.051887][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.373710][ T1050] hsr_slave_0: left promiscuous mode [ 540.423988][ T1050] hsr_slave_1: left promiscuous mode [ 540.431716][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.652382][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.857133][ T59] Bluetooth: hci1: command tx timeout [ 543.716502][ T59] Bluetooth: hci0: command tx timeout [ 545.599862][ T59] Bluetooth: hci1: command tx timeout [ 546.494208][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 547.653498][ T59] Bluetooth: hci1: command tx timeout [ 547.988676][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 548.724306][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 548.816613][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 550.420583][ T59] Bluetooth: hci1: command tx timeout [ 553.023819][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 553.874691][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 554.010877][ T4900] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 554.060193][ T4900] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 554.075397][ T4900] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 554.077088][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 554.089751][ T4900] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 554.091349][ T4900] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 554.660796][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 556.591784][ T59] Bluetooth: hci4: command tx timeout [ 558.721518][ T8719] netlink: 596 bytes leftover after parsing attributes in process `syz.3.683'. [ 559.851568][ T59] Bluetooth: hci4: command tx timeout [ 561.965016][ T59] Bluetooth: hci4: command tx timeout [ 562.324951][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8 [ 563.579008][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.579169][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.056011][ T59] Bluetooth: hci4: command tx timeout [ 566.872703][ T8753] LUN: removable file: (no medium) [ 572.334535][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.334954][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.335551][ T8576] bridge_slave_0: entered allmulticast mode [ 572.349911][ T8576] bridge_slave_0: entered promiscuous mode [ 572.422853][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.423289][ T8576] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.424331][ T8576] bridge_slave_1: entered allmulticast mode [ 572.450385][ T8576] bridge_slave_1: entered promiscuous mode [ 574.250723][ T8576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.406263][ T8576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.836828][ T8576] team0: Port device team_slave_0 added [ 574.967927][ T8576] team0: Port device team_slave_1 added [ 575.355313][ T1050] bridge_slave_1: left allmulticast mode [ 575.355436][ T1050] bridge_slave_1: left promiscuous mode [ 575.356144][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.538123][ T1050] bridge_slave_0: left allmulticast mode [ 575.538238][ T1050] bridge_slave_0: left promiscuous mode [ 575.539014][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.524547][ T1050] bridge_slave_1: left allmulticast mode [ 577.524636][ T1050] bridge_slave_1: left promiscuous mode [ 577.525319][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.019295][ T1050] bridge_slave_0: left allmulticast mode [ 581.028040][ T1050] bridge_slave_0: left promiscuous mode [ 581.028234][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.914652][ T1050] bridge_slave_1: left allmulticast mode [ 582.541627][ T1050] bridge_slave_1: left promiscuous mode [ 582.547598][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.824882][ T1050] bridge_slave_0: left allmulticast mode [ 582.832267][ T1050] bridge_slave_0: left promiscuous mode [ 582.876357][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.437128][ T1165] IPVS: starting estimator thread 0... [ 583.973605][ T8848] IPVS: using max 11 ests per chain, 26400 per kthread [ 584.384127][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.455588][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.515921][ T1050] bond0 (unregistering): Released all slaves [ 584.804485][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.864208][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.905420][ T1050] bond0 (unregistering): Released all slaves [ 585.208476][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.274295][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.325618][ T1050] bond0 (unregistering): Released all slaves [ 587.152844][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.152862][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.152893][ T8576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.342028][ T8576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.342048][ T8576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.342078][ T8576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.836001][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.843464][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.843664][ T8630] bridge_slave_0: entered allmulticast mode [ 587.862518][ T8630] bridge_slave_0: entered promiscuous mode [ 588.121469][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.181584][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.305768][ T8630] bridge_slave_1: entered allmulticast mode [ 588.437089][ T8630] bridge_slave_1: entered promiscuous mode [ 589.076201][ T8576] hsr_slave_0: entered promiscuous mode [ 589.084261][ T8576] hsr_slave_1: entered promiscuous mode [ 589.091090][ T8576] debugfs: 'hsr0' already exists in 'hsr' [ 589.091121][ T8576] Cannot create hsr debugfs directory [ 589.178453][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.234786][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.244565][ T8683] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.244815][ T8683] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.245022][ T8683] bridge_slave_0: entered allmulticast mode [ 589.247955][ T8683] bridge_slave_0: entered promiscuous mode [ 589.383626][ T8683] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.383817][ T8683] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.383991][ T8683] bridge_slave_1: entered allmulticast mode [ 589.389389][ T8683] bridge_slave_1: entered promiscuous mode [ 589.626798][ T8630] team0: Port device team_slave_0 added [ 589.704456][ T8630] team0: Port device team_slave_1 added [ 589.947921][ T8683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.798341][ T8683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.863013][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.863129][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.863159][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.551473][ T4900] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.734174][ T4900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.747223][ T4900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.781329][ T4900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.793086][ T4900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 595.027596][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.029373][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.029456][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.364773][ T1050] hsr_slave_0: left promiscuous mode [ 595.408078][ T1050] hsr_slave_1: left promiscuous mode [ 595.412393][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.476169][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.628838][ T1050] hsr_slave_0: left promiscuous mode [ 595.663724][ T1050] hsr_slave_1: left promiscuous mode [ 595.672270][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.705911][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.744981][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.787901][ T1050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.891206][ T8921] [ 595.893603][ T8921] ====================================================== [ 595.900648][ T8921] WARNING: possible circular locking dependency detected [ 595.907722][ T8921] syzkaller #0 Tainted: G L [ 595.913730][ T8921] ------------------------------------------------------ [ 595.920774][ T8921] syz.0.714/8921 is trying to acquire lock: [ 595.926698][ T8921] ffffffff8ef8b620 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 595.937991][ T8921] [ 595.937991][ T8921] but task is already holding lock: [ 595.945386][ T8921] ffff88806352dd60 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 595.955902][ T8921] [ 595.955902][ T8921] which lock already depends on the new lock. [ 595.955902][ T8921] [ 595.966323][ T8921] [ 595.966323][ T8921] the existing dependency chain (in reverse order) is: [ 595.975348][ T8921] [ 595.975348][ T8921] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{4:4}: [ 595.984061][ T8921] down_write+0x3a/0x50 [ 595.988762][ T8921] configfs_depend_item_unlocked+0x153/0x420 [ 595.995376][ T8921] usbg_make_tpg+0x1e0/0x550 [ 596.000499][ T8921] target_fabric_make_tpg+0xa8/0x6d0 [ 596.006321][ T8921] configfs_mkdir+0x4f6/0x9e0 [ 596.011536][ T8921] vfs_mkdir+0x408/0x620 [ 596.016322][ T8921] filename_mkdirat+0x289/0x520 [ 596.021713][ T8921] __se_sys_mkdir+0x34/0x150 [ 596.026845][ T8921] do_syscall_64+0x166/0x520 [ 596.031973][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.038411][ T8921] [ 596.038411][ T8921] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 596.046354][ T8921] mutex_lock_nested+0x5a/0x1d0 [ 596.051763][ T8921] tcm_alloc_inst+0x65/0x1a0 [ 596.056897][ T8921] usb_get_function_instance+0xe3/0x2f0 [ 596.062987][ T8921] function_make+0x127/0x360 [ 596.068152][ T8921] configfs_mkdir+0x4f6/0x9e0 [ 596.073374][ T8921] vfs_mkdir+0x408/0x620 [ 596.078165][ T8921] filename_mkdirat+0x289/0x520 [ 596.083554][ T8921] __se_sys_mkdir+0x34/0x150 [ 596.088684][ T8921] do_syscall_64+0x166/0x520 [ 596.093820][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.100248][ T8921] [ 596.100248][ T8921] -> #1 (func_lock){+.+.}-{4:4}: [ 596.107388][ T8921] mutex_lock_nested+0x5a/0x1d0 [ 596.112796][ T8921] usb_get_function_instance+0x2e/0x2f0 [ 596.118879][ T8921] function_make+0x127/0x360 [ 596.124005][ T8921] configfs_mkdir+0x4f6/0x9e0 [ 596.129246][ T8921] vfs_mkdir+0x408/0x620 [ 596.134036][ T8921] filename_mkdirat+0x289/0x520 [ 596.139460][ T8921] __se_sys_mkdirat+0x35/0x150 [ 596.144765][ T8921] do_syscall_64+0x166/0x520 [ 596.149892][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.156317][ T8921] [ 596.156317][ T8921] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 596.164590][ T8921] __lock_acquire+0x164c/0x2de0 [ 596.169983][ T8921] lock_acquire+0x115/0x350 [ 596.175059][ T8921] mutex_lock_nested+0x5a/0x1d0 [ 596.180549][ T8921] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 596.187245][ T8921] configfs_symlink+0x74e/0x11d0 [ 596.192732][ T8921] vfs_symlink+0x18b/0x330 [ 596.197690][ T8921] filename_symlinkat+0x1cd/0x420 [ 596.203260][ T8921] __se_sys_symlinkat+0x4e/0x2b0 [ 596.208741][ T8921] do_syscall_64+0x166/0x520 [ 596.213868][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.220298][ T8921] [ 596.220298][ T8921] other info that might help us debug this: [ 596.220298][ T8921] [ 596.230536][ T8921] Chain exists of: [ 596.230536][ T8921] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#27 [ 596.230536][ T8921] [ 596.245504][ T8921] Possible unsafe locking scenario: [ 596.245504][ T8921] [ 596.252961][ T8921] CPU0 CPU1 [ 596.258338][ T8921] ---- ---- [ 596.263715][ T8921] lock(&sb->s_type->i_mutex_key#27); [ 596.269201][ T8921] lock(tpg_instances_lock); [ 596.276416][ T8921] lock(&sb->s_type->i_mutex_key#27); [ 596.284434][ T8921] lock(gadget_subsys.su_mutex); [ 596.289476][ T8921] [ 596.289476][ T8921] *** DEADLOCK *** [ 596.289476][ T8921] [ 596.297629][ T8921] locks held by syz.0.714/8921: 2, last CPU#0: [ 596.303800][ T8921] #0: ffff88801b7a0510 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 596.313064][ T8921] #1: ffff88806352dd60 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 596.323986][ T8921] [ 596.323986][ T8921] stack backtrace: [ 596.329906][ T8921] CPU: 0 UID: 0 PID: 8921 Comm: syz.0.714 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.341256][ T8921] Tainted: [L]=SOFTLOCKUP [ 596.345596][ T8921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.355682][ T8921] Call Trace: [ 596.358979][ T8921] [ 596.362015][ T8921] dump_stack_lvl+0xe8/0x150 [ 596.366636][ T8921] print_circular_bug+0x2e2/0x300 [ 596.371686][ T8921] check_noncircular+0x12f/0x150 [ 596.376656][ T8921] __lock_acquire+0x164c/0x2de0 [ 596.381531][ T8921] ? smack_log+0xf5/0x3f0 [ 596.385881][ T8921] ? __pfx_smack_log+0x10/0x10 [ 596.390671][ T8921] lock_acquire+0x115/0x350 [ 596.395200][ T8921] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 596.401556][ T8921] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 596.407911][ T8921] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 596.414262][ T8921] mutex_lock_nested+0x5a/0x1d0 [ 596.419137][ T8921] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 596.425489][ T8921] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 596.431669][ T8921] configfs_symlink+0x74e/0x11d0 [ 596.436635][ T8921] ? generic_permission+0x2bf/0x670 [ 596.441850][ T8921] ? __pfx_configfs_symlink+0x10/0x10 [ 596.447244][ T8921] ? bpf_lsm_inode_symlink+0x9/0x20 [ 596.452472][ T8921] vfs_symlink+0x18b/0x330 [ 596.456911][ T8921] ? security_path_symlink+0xfd/0x360 [ 596.462310][ T8921] filename_symlinkat+0x1cd/0x420 [ 596.467359][ T8921] ? __pfx_filename_symlinkat+0x10/0x10 [ 596.472927][ T8921] ? do_getname+0x151/0x250 [ 596.477454][ T8921] __se_sys_symlinkat+0x4e/0x2b0 [ 596.482416][ T8921] do_syscall_64+0x166/0x520 [ 596.487024][ T8921] ? trace_irq_disable+0x3b/0x140 [ 596.492069][ T8921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.498156][ T8921] ? clear_bhb_loop+0x70/0xc0 [ 596.502852][ T8921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.508772][ T8921] RIP: 0033:0x7fdc26b4e159 [ 596.513204][ T8921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.532827][ T8921] RSP: 002b:00007fdc24da6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 596.541254][ T8921] RAX: ffffffffffffffda RBX: 00007fdc26dd5fa0 RCX: 00007fdc26b4e159 [ 596.549237][ T8921] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 596.557224][ T8921] RBP: 00007fdc26be503b R08: 0000000000000000 R09: 0000000000000000 [ 596.565214][ T8921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.573193][ T8921] R13: 00007fdc26dd6038 R14: 00007fdc26dd5fa0 R15: 00007ffea1ba8078 [ 596.581194][ T8921] [ 596.943456][ T4900] Bluetooth: hci5: command tx timeout [ 597.176930][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 597.227601][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 597.523814][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 597.553880][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 597.673855][ T1050] team0 (unregistering): Port device team_slave_1 removed [ 597.725578][ T1050] team0 (unregistering): Port device team_slave_0 removed [ 597.822579][ T8683] team0: Port device team_slave_0 added [ 601.035180][ T1050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.234859][ T1050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.444607][ T1050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.654823][ T1050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.075304][ T1050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.180390][ T5246] 8021q: adding VLAN 0 to HW filter on device eth9 [ 602.334542][ T1050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.594927][ T1050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.642547][ T5246] 8021q: adding VLAN 0 to HW filter on device eth11 [ 602.874836][ T1050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.945211][ T5246] 8021q: adding VLAN 0 to HW filter on device eth10 [ 603.313577][ T1050] bridge_slave_1: left allmulticast mode [ 603.313666][ T1050] bridge_slave_1: left promiscuous mode [ 603.314188][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.433974][ T1050] bridge_slave_0: left allmulticast mode [ 603.434055][ T1050] bridge_slave_0: left promiscuous mode [ 603.434604][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.653597][ T1050] bridge_slave_1: left allmulticast mode [ 603.653685][ T1050] bridge_slave_1: left promiscuous mode [ 603.654181][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.754137][ T1050] bridge_slave_0: left allmulticast mode [ 603.754212][ T1050] bridge_slave_0: left promiscuous mode [ 603.754743][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.977695][ T1050] bridge_slave_1: left allmulticast mode [ 603.977791][ T1050] bridge_slave_1: left promiscuous mode [ 603.978271][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.074034][ T1050] bridge_slave_0: left allmulticast mode [ 604.074125][ T1050] bridge_slave_0: left promiscuous mode [ 604.074632][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.333667][ T1050] bridge_slave_1: left allmulticast mode [ 604.333749][ T1050] bridge_slave_1: left promiscuous mode [ 604.334240][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.434139][ T1050] bridge_slave_0: left allmulticast mode [ 604.434214][ T1050] bridge_slave_0: left promiscuous mode [ 604.434696][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.653639][ T1050] bridge_slave_1: left allmulticast mode [ 604.653716][ T1050] bridge_slave_1: left promiscuous mode [ 604.654264][ T1050] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.754058][ T1050] bridge_slave_0: left allmulticast mode [ 604.754152][ T1050] bridge_slave_0: left promiscuous mode [ 604.754672][ T1050] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.233980][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.334981][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.394270][ T1050] bond0 (unregistering): Released all slaves [ 605.564031][ T1050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.664641][ T1050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.724541][ T1050] bond0 (unregistering): Released all slaves