last executing test programs: 13m11.266432126s ago: executing program 1 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x5db740) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x3630c1) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4144, &(0x7f0000000940)=""/4096) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xc0400200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="1000ffff0000000000000e0000007e48169c1dc84bd17508f532197ddbc3df9021420945772a39b7"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x40, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0x400d1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0xf}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x180001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000340)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x5422, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1\x00', 0x1) 13m7.120996909s ago: executing program 1 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x5db740) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x3630c1) r2 = getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x4144, &(0x7f0000000940)=""/4096) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r5) sendmsg$IPVS_CMD_NEW_DEST(r5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xc0400200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x40, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0x400d1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0xf}}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x180001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000340)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x5422, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r7, &(0x7f00000001c0)='1\x00', 0x1) 13m3.394729098s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, 0x0, 0x777) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e1c}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000380)="155e2c1c333f8316e6dd9e2a2ac7a02151f3cdc3f037f2c880d9a5682faa", 0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) removexattr(&(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)=@random={'user.', 'devtmpfs\x00'}) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000740)=0x0, 0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r5, 0x0, r6, 0x0) syz_open_dev$video(&(0x7f00000008c0), 0xa7, 0x0) 12m59.367727051s ago: executing program 1 (id=16): r0 = syz_ublk_setup_io_uring(0x277c, 0x0, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/10], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, &(0x7f0000000840)=""/184, 0x26, 0xb8, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r5, 0xffffffffffffff90, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/149, 0x95}}, 0x10) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, 0x0) ioctl$UI_END_FF_ERASE(r4, 0x400c55cb, &(0x7f0000000740)={0x4, 0x6b27, 0x63}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000100)='map_files\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) 12m56.044606138s ago: executing program 1 (id=21): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007f9000/0x2000)=nil) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') read$FUSE(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006118000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000150802000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa2ffae49d7000007020000f8ffffff0bff00000000000095000009210dacb0c9266eb685d90e42ae74ae0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffff0c027c000008004280040008000c0001800600060086dd"], 0x140}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_open_procfs$namespace(r1, &(0x7f00000014c0)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 12m40.413215768s ago: executing program 32 (id=21): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mremap(&(0x7f0000382000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007f9000/0x2000)=nil) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/prev\x00') read$FUSE(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006118000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000150802000200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bfa2ffae49d7000007020000f8ffffff0bff00000000000095000009210dacb0c9266eb685d90e42ae74ae0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffff0c027c000008004280040008000c0001800600060086dd"], 0x140}}, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_open_procfs$namespace(r1, &(0x7f00000014c0)='ns/cgroup\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r9}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 11m23.48043565s ago: executing program 2 (id=147): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000540)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000580)=@multiplanar_overlay={0xfffffff1, 0x1, 0x4, 0x40, 0x8, {}, {0x1, 0x8, 0xa, 0x9, 0x5, 0x16, "7dadcbcf"}, 0x7ff, 0x3, {&(0x7f0000000600)=[{0x8001, 0xffffffff, {0x4}, 0xbe}, {0x8000, 0x6f9, {0x8001}, 0xb895}]}, 0x5, 0x0, r4}) fcntl$setpipe(r5, 0x407, 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) bind$bt_hci(r6, &(0x7f0000000680)={0x1f, 0x0, 0x1}, 0x6) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r7, 0xff, 0x1, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 11m16.848730976s ago: executing program 2 (id=154): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x6, 0x8a}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r4, &(0x7f00000004c0)=""/102392, 0x18ff8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f00000194c0)) ioctl$VT_RESIZEX(r2, 0x4b52, &(0x7f0000000180)={0xfffe, 0x200, 0x21, 0x0, 0x3e0, 0x1001}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 11m14.760351416s ago: executing program 2 (id=156): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000240)="ff02040000ffffffffffffff", 0xc) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0x2, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000900)}, 0x30008b08) 11m12.428463847s ago: executing program 2 (id=157): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000540)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000580)=@multiplanar_overlay={0xfffffff1, 0x1, 0x4, 0x40, 0x8, {}, {0x1, 0x8, 0xa, 0x9, 0x5, 0x16, "7dadcbcf"}, 0x7ff, 0x3, {&(0x7f0000000600)=[{0x8001, 0xffffffff, {0x4}, 0xbe}, {0x8000, 0x6f9, {0x8001}, 0xb895}]}, 0x5, 0x0, r4}) fcntl$setpipe(r5, 0x407, 0x7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448cb, 0x0) bind$bt_hci(r6, &(0x7f0000000680)={0x1f, 0x0, 0x1}, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r7, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 11m8.173349571s ago: executing program 2 (id=162): keyctl$clear(0x7, 0x0) epoll_create(0x9) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000380)={0x0, 0x0, 0xb, 0x2, 0x4, 0x100}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000440)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000004c0), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000019540)) openat$dir(0xffffffffffffff9c, &(0x7f0000019580)='./file0\x00', 0x40, 0x16f) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000019600)='./file0\x00', &(0x7f0000019640)='jffs2\x00', 0xa0080, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r3, 0x5452, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) syz_emit_ethernet(0x1cc, &(0x7f0000019940)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x22, 0x1be, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3, [0x1]}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xc], "b70da8131ebdca0c8d332115e2f056dc216e06b21cbf8693a766e7e1cc2200622e8261ccddb9a039d786ac2e1baac8b334cd7d398d3aa0a5adcf6bb479fab4974ec831cb07302cc7d326af77966e140be1b7ba2fe203ceaee5922fccba9d859aecd2804314fba3aa1ff57ae155a7a64a3153a65e25c847701873cceb40696e8da84bafc37b724454f155"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "7836921790a0d4addaf3ab2fca09760653f6e25877f71fbf7e74af5a165550f2454b8bdede47a02b99569c2e0db7a034a492b991da98d3b383c4870ce456e1ab64ec1426a83f064177cff3a882b0a7925b797771c61cf834cb0e73776145309a59a878386fbf"}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x9, 0x2, 0x1, 0x0, 0x1, 0xfb}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x4, 0x2, 0x0, 0x3, 0x0, 0x4}, 0x2, {0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "dacadd9b0c974c59b1dc60a9b3701a54a10f2bb9f7830fabf347c892fb564c752869fac12b2d76f7295c8a057681567985a9e35264fdf0c6af80309b5123cc47dc05a012c1b6971186a6d9b2ade982f39bcf440b60a42a04420a97c3bd9cb354bfc6a27b70244ac39c3a15a846da2fcda10d"}}}}}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, '\x00', 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040b0b01c800001d2250000000000000004398cd9a7663b5123d556c5ee823c78f280058d2a3851f31b48b118c226b69f60de064d03bdb12298c9aef9a4fe7c4587d977c646568f245940e8e4877efb317b335c4c74a2118cf5032f19fa19d034b842ebb6dbdbe"], 0xe) 11m3.563386781s ago: executing program 2 (id=166): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000540)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000580)=@multiplanar_overlay={0xfffffff1, 0x1, 0x4, 0x40, 0x8, {}, {0x1, 0x8, 0xa, 0x9, 0x5, 0x16, "7dadcbcf"}, 0x7ff, 0x3, {&(0x7f0000000600)=[{0x8001, 0xffffffff, {0x4}, 0xbe}, {0x8000, 0x6f9, {0x8001}, 0xb895}]}, 0x5, 0x0, r3}) fcntl$setpipe(r4, 0x407, 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) bind$bt_hci(r5, &(0x7f0000000680)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r6, 0xff, 0x1, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 10m45.97358626s ago: executing program 33 (id=166): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f00000004c0), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000540)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000580)=@multiplanar_overlay={0xfffffff1, 0x1, 0x4, 0x40, 0x8, {}, {0x1, 0x8, 0xa, 0x9, 0x5, 0x16, "7dadcbcf"}, 0x7ff, 0x3, {&(0x7f0000000600)=[{0x8001, 0xffffffff, {0x4}, 0xbe}, {0x8000, 0x6f9, {0x8001}, 0xb895}]}, 0x5, 0x0, r3}) fcntl$setpipe(r4, 0x407, 0x7) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) bind$bt_hci(r5, &(0x7f0000000680)={0x1f, 0x0, 0x1}, 0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r6, 0xff, 0x1, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 10m2.6192659s ago: executing program 4 (id=226): mkdir(&(0x7f0000000540)='./sys\x00', 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x1) 10m1.032124683s ago: executing program 4 (id=227): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) keyctl$set_reqkey_keyring(0xe, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='byd', 0x3) semget(0x3, 0x4, 0x69c) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) 9m55.876678836s ago: executing program 4 (id=233): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) keyctl$set_reqkey_keyring(0xe, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r3, &(0x7f0000000600)='byd', 0x3) semget(0x3, 0x4, 0x69c) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) 9m54.283683903s ago: executing program 4 (id=237): chdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000240)="ff02040000ffffffffffffff", 0xc) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0x2, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000900)}, 0x30008b08) 9m50.696221043s ago: executing program 4 (id=239): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) keyctl$set_reqkey_keyring(0xe, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='byd', 0x3) semget(0x3, 0x4, 0x69c) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) 9m49.559556576s ago: executing program 4 (id=241): chdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000240)="ff02040000ffffffffffffff", 0xc) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0x2, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000900)}, 0x30008b08) 9m34.021019022s ago: executing program 34 (id=241): chdir(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000240)="ff02040000ffffffffffffff", 0xc) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x18) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000280)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r5 = socket$inet_icmp(0x2, 0x2, 0x1) close(r5) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f00000008c0)={0xa, 0x2, 0x3, @mcast2, 0x2}, 0x1c, &(0x7f0000000900)}, 0x30008b08) 7.024200216s ago: executing program 3 (id=900): socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='byd', 0x3) 3.920975001s ago: executing program 5 (id=907): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x5, 0x5db740) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x3630c1) r2 = getpid() mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x4144, &(0x7f0000000940)=""/4096) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r5) sendmsg$IPVS_CMD_NEW_DEST(r5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xc0400200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="1000ffff0000000000000e0000007e48169c1dc8"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x90) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x40, 0x480, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0x400d1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0xf}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x180001) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x5422, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)='1\x00', 0x1) 3.627739027s ago: executing program 5 (id=909): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7ff, 0x40080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x201, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x16}}}}}) sendmsg$nl_route(r0, 0x0, 0x20000) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) landlock_restrict_self(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x40) r4 = syz_open_dev$dvb_demux(&(0x7f0000000300), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000340)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) syz_emit_ethernet(0x0, 0x0, 0x0) 3.49219062s ago: executing program 3 (id=911): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) clock_nanosleep(0x8, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 2.750875699s ago: executing program 3 (id=915): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.505881408s ago: executing program 5 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@ipv4_getnexthop={0x1c, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 2.421749557s ago: executing program 6 (id=919): r0 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x227a, 0x0) 2.304425022s ago: executing program 5 (id=922): munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000720000/0x4000)=nil) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setresuid(0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r3, 0x7, 0xffffffff, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.304176478s ago: executing program 6 (id=923): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20, 0x5, 0x4e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e40], 0x0, 0x0, &(0x7f0000000e40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x7, 0x8914, 'vlan0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@random="f93deafad70a", 0xfffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x6004, 'pimreg0\x00', 'veth1_virt_wifi\x00', '\x00', 'team0\x00', @random="46aafcc3cd06", [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0xc4, "0eda5d467cde600e4b09dcbb068dfecb4c27ea8d6481ec1680a6cb53e5c4", 0xb}}}}, {0x5, 0x8, 0x4305, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', 'wlan1\x00', 'pimreg\x00', @multicast, [0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0x1a0, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xe, 'system_u:object_r:logrotate_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x3, 0x1, 0xc, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', 'veth0\x00', 'veth0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x9, 0x21, 0x16, 'pimreg1\x00', 'batadv_slave_0\x00', 'virt_wifi0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 0xffffffffffffffff}}}}]}]}, 0x560) 2.18232692s ago: executing program 6 (id=924): r0 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="01154e00010000112233445588fbca010001160cbce1e9ae0d0099d09596f8a60310", 0x22, 0x44011, &(0x7f0000000180)={0x11, 0x0, r1, 0x0, 0x0, 0x0, @multicast}, 0x14) 1.937840606s ago: executing program 6 (id=928): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x444, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.388294774s ago: executing program 0 (id=931): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000800)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000880)=[0x7fffffff], 0x1, 0x0}) 1.387849335s ago: executing program 3 (id=932): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) socket$rds(0x15, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.387556868s ago: executing program 5 (id=933): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1a7) mount(&(0x7f0000000140)=@filename='./dev/sda1\x00', &(0x7f00000001c0)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0), &(0x7f0000000880)="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", 0x7df, 0x0) 1.24299586s ago: executing program 7 (id=934): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x7e9d}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000280)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000300)=@new_dev={0x3, 0x7a, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x6106cde7f32cd60e}}}, 0x0) 1.24273642s ago: executing program 3 (id=935): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)='g', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000280)="8b", 0x34000, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)='.', 0x1}], 0x1) 1.217675649s ago: executing program 0 (id=936): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./mydev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020}, 0x2020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.14429403s ago: executing program 5 (id=937): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000a80), 0x1, 0x802) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000ac0)={0x1, &(0x7f0000000b00)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl(r2, 0x3, &(0x7f0000000100)="eb61b7df502411196a04e7d5f3a00bd2476f55bad811bcbb1da7bf5456a41d01578e1c3d2756194f25fca7eacd2eb0f0a17bc9") pipe(0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) socket$kcm(0xa, 0x5, 0x0) 796.22991ms ago: executing program 3 (id=938): r0 = openat$kvm(0x0, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}], 0x30}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000340)=@svm={0x2, 0x1, 0x1080, {0xdddd1000, 0x619}, {"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"}}) 773.829198ms ago: executing program 0 (id=939): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x33a24}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 773.335383ms ago: executing program 7 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00032cbd7000ffdb4b6e431e78840aa78ddf2503000000080ba4c0dd140bb3a1000400000000004800028014000100fc0200000000000000000000000000000800090006000000080005009609000006000f001f03000006000b000200000008000700040000000800"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000600)={0x0, 0x10, 0x1, 0xc, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000640)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000740), 0x2, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000500)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x1f, 0x4, 0x3f, 0x2003205, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x59}, @private=0xa010104}, 0x10) 721.7735ms ago: executing program 6 (id=941): r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x4, 0x0, 0x0, r1}) 596.156744ms ago: executing program 0 (id=942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffff}, 0x1c) 595.422955ms ago: executing program 7 (id=943): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x1a, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffff15}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x336f4}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4}, 0x94) 593.412849ms ago: executing program 6 (id=944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/54) add_key(0x0, 0x0, &(0x7f00000000c0)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806", 0x50, 0xfffffffffffffffd) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 530.591769ms ago: executing program 7 (id=945): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') pread64(r0, &(0x7f00000028c0)=""/102390, 0x18ff6, 0x18ff6) 508.577597ms ago: executing program 0 (id=946): r0 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0xc0b41) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5382, 0x0) 232.706221ms ago: executing program 7 (id=947): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000027c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000002880)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x28041}, 0x0) 232.4509ms ago: executing program 0 (id=948): socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) write$dsp(0xffffffffffffffff, &(0x7f0000000100)='`', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x12, 0x81, 0x0, @empty}}}}}, 0x0) 0s ago: executing program 7 (id=949): r0 = syz_open_dev$vivid(&(0x7f0000000d00), 0x0, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000d40)={0x9192dc8, "89255c803b1d0f3206214f24384b9ff96162df2ba2aa41e2d643090008f2c8b0", 0x577d8b6d4725e04e}) kernel console output (not intermixed with test programs): entered blocking state [ 524.989630][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.991409][ T8050] bridge_slave_1: entered allmulticast mode [ 525.030899][ T8050] bridge_slave_1: entered promiscuous mode [ 526.646647][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.682209][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.898112][ T8050] team0: Port device team_slave_0 added [ 527.889310][ T8050] team0: Port device team_slave_1 added [ 532.182076][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.182095][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 532.182119][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.252741][ T35] libceph: connect (1)[c::]:6789 error -101 [ 533.252934][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 533.273054][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.273070][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.273101][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.292577][ T8281] ceph: No mds server is up or the cluster is laggy [ 536.437969][ T8050] hsr_slave_0: entered promiscuous mode [ 536.895600][ T8050] hsr_slave_1: entered promiscuous mode [ 536.927984][ T8050] debugfs: 'hsr0' already exists in 'hsr' [ 536.928011][ T8050] Cannot create hsr debugfs directory [ 539.379366][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.438469][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.250115][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.295150][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.475853][ T1019] hsr_slave_0: left promiscuous mode [ 541.500656][ T1019] hsr_slave_1: left promiscuous mode [ 541.501886][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.527723][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.964256][ T1019] hsr_slave_0: left promiscuous mode [ 542.004366][ T1019] hsr_slave_1: left promiscuous mode [ 542.005148][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.048401][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.374808][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 542.424755][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 542.870573][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 544.459621][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 544.680291][ T8364] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input51 [ 546.766889][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 546.911573][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 547.279224][ T8376] netlink: 280 bytes leftover after parsing attributes in process `syz.3.469'. [ 547.855603][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 547.898194][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 547.899339][ T5590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 547.925750][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 547.926756][ T5590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 549.999095][ T4898] Bluetooth: hci0: command tx timeout [ 551.765364][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 551.827220][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 552.064452][ T4898] Bluetooth: hci0: command tx timeout [ 552.081291][ T8021] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 552.095005][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.095141][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.095369][ T8078] bridge_slave_0: entered allmulticast mode [ 552.097979][ T8078] bridge_slave_0: entered promiscuous mode [ 552.140276][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.140402][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.140588][ T8078] bridge_slave_1: entered allmulticast mode [ 552.169965][ T8078] bridge_slave_1: entered promiscuous mode [ 552.360435][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.371066][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.598922][ T8078] team0: Port device team_slave_0 added [ 552.607119][ T8078] team0: Port device team_slave_1 added [ 553.966972][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 554.055753][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 554.075609][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 554.078514][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 554.080288][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 554.149137][ T4898] Bluetooth: hci0: command tx timeout [ 556.265024][ T5598] Bluetooth: hci0: command tx timeout [ 556.329699][ T5598] Bluetooth: hci1: command tx timeout [ 559.112343][ T5598] Bluetooth: hci1: command tx timeout [ 560.713449][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 560.741354][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 560.746573][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 560.755012][ T4898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 560.757674][ T4898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 561.198858][ T5598] Bluetooth: hci1: command tx timeout [ 562.765935][ T8377] rxe_eth0 speed is unknown, defaulting to 1000 [ 562.876949][ T5598] Bluetooth: hci4: command tx timeout [ 562.883720][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.883789][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.264198][ T5598] Bluetooth: hci1: command tx timeout [ 563.884727][ T8408] rxe_eth0 speed is unknown, defaulting to 1000 [ 564.944169][ T5598] Bluetooth: hci4: command tx timeout [ 567.024408][ T5598] Bluetooth: hci4: command tx timeout [ 567.133573][ T8449] rxe_eth0 speed is unknown, defaulting to 1000 [ 568.419539][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.419753][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.419939][ T8377] bridge_slave_0: entered allmulticast mode [ 568.428383][ T8377] bridge_slave_0: entered promiscuous mode [ 568.451800][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.451916][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.452075][ T8377] bridge_slave_1: entered allmulticast mode [ 568.456160][ T8377] bridge_slave_1: entered promiscuous mode [ 568.777431][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.946206][ T8506] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 569.778618][ T5598] Bluetooth: hci4: command tx timeout [ 569.798906][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.001263][ T8377] team0: Port device team_slave_0 added [ 573.055510][ T8377] team0: Port device team_slave_1 added [ 573.446906][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.446924][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.446948][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.453906][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.453921][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.453950][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.141184][ T8377] hsr_slave_0: entered promiscuous mode [ 574.143943][ T8377] hsr_slave_1: entered promiscuous mode [ 574.158631][ T8377] debugfs: 'hsr0' already exists in 'hsr' [ 574.158667][ T8377] Cannot create hsr debugfs directory [ 575.757318][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.757532][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.757718][ T8408] bridge_slave_0: entered allmulticast mode [ 575.763429][ T8408] bridge_slave_0: entered promiscuous mode [ 575.789842][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.790012][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.790177][ T8408] bridge_slave_1: entered allmulticast mode [ 575.792796][ T8408] bridge_slave_1: entered promiscuous mode [ 576.842720][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.892802][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.053097][ T8408] team0: Port device team_slave_0 added [ 577.053401][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.067491][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.067671][ T8449] bridge_slave_0: entered allmulticast mode [ 577.070840][ T8449] bridge_slave_0: entered promiscuous mode [ 577.117758][ T8408] team0: Port device team_slave_1 added [ 577.118038][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.118158][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.118326][ T8449] bridge_slave_1: entered allmulticast mode [ 577.121320][ T8449] bridge_slave_1: entered promiscuous mode [ 577.637482][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.637549][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.637599][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.037739][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.041091][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.041105][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.041129][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.105860][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.572373][ T8449] team0: Port device team_slave_0 added [ 581.194746][ T8449] team0: Port device team_slave_1 added [ 581.261825][ T8408] hsr_slave_0: entered promiscuous mode [ 581.276862][ T8408] hsr_slave_1: entered promiscuous mode [ 581.297950][ T8408] debugfs: 'hsr0' already exists in 'hsr' [ 581.297971][ T8408] Cannot create hsr debugfs directory [ 581.830766][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.830783][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.830807][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.921728][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.921745][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.921769][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.292409][ T8572] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 582.510014][ T8449] hsr_slave_0: entered promiscuous mode [ 582.510837][ T8449] hsr_slave_1: entered promiscuous mode [ 582.511361][ T8449] debugfs: 'hsr0' already exists in 'hsr' [ 582.511384][ T8449] Cannot create hsr debugfs directory [ 586.442631][ T8592] ceph: No mds server is up or the cluster is laggy [ 586.447284][ T10] libceph: connect (1)[c::]:6789 error -101 [ 586.447451][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 586.537512][ T1019] bridge_slave_1: left allmulticast mode [ 586.537544][ T1019] bridge_slave_1: left promiscuous mode [ 586.537795][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.843443][ T1019] bridge_slave_0: left allmulticast mode [ 586.843537][ T1019] bridge_slave_0: left promiscuous mode [ 586.844669][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.962667][ T8609] ceph: No mds server is up or the cluster is laggy [ 588.968833][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 589.013047][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 589.069121][ T8610] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input54 [ 589.290668][ T5795] libceph: connect (1)[c::]:6789 error -101 [ 589.318176][ T5795] libceph: mon0 (1)[c::]:6789 connect error [ 589.622579][ T1019] bridge_slave_1: left allmulticast mode [ 589.622652][ T1019] bridge_slave_1: left promiscuous mode [ 589.623544][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.902411][ T1019] bridge_slave_0: left allmulticast mode [ 591.902435][ T1019] bridge_slave_0: left promiscuous mode [ 591.902590][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.934500][ T8617] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 594.279952][ T1019] bridge_slave_1: left allmulticast mode [ 594.279990][ T1019] bridge_slave_1: left promiscuous mode [ 594.280762][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.723878][ T1019] bridge_slave_0: left allmulticast mode [ 595.723916][ T1019] bridge_slave_0: left promiscuous mode [ 595.724369][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.874809][ T1019] bridge_slave_1: left allmulticast mode [ 597.874843][ T1019] bridge_slave_1: left promiscuous mode [ 597.875076][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.038794][ T1019] bridge_slave_0: left allmulticast mode [ 598.038819][ T1019] bridge_slave_0: left promiscuous mode [ 598.038971][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.063719][ T8642] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 598.650208][ T1019] bridge_slave_1: left allmulticast mode [ 598.650232][ T1019] bridge_slave_1: left promiscuous mode [ 598.650455][ T1019] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.889882][ T8650] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input55 [ 598.937723][ T1019] bridge_slave_0: left allmulticast mode [ 598.937755][ T1019] bridge_slave_0: left promiscuous mode [ 598.938052][ T1019] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.477750][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.806662][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.818094][ T1019] bond0 (unregistering): Released all slaves [ 602.254749][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.510030][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.216744][ T1019] bond0 (unregistering): Released all slaves [ 608.056109][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.244178][ T4898] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 608.352647][ T9] libceph: connect (1)[c::]:6789 error -101 [ 608.352912][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 608.368106][ T9] libceph: connect (1)[c::]:6789 error -101 [ 608.368311][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 608.713247][ T4898] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 608.729474][ T8708] ceph: No mds server is up or the cluster is laggy [ 608.736488][ T4898] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 608.738775][ T4898] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 608.743816][ T4898] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 608.844029][ T9] libceph: connect (1)[c::]:6789 error -101 [ 608.875261][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 609.176207][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.312765][ T1019] bond0 (unregistering): Released all slaves [ 609.515562][ T5589] libceph: connect (1)[c::]:6789 error -101 [ 609.515931][ T5589] libceph: mon0 (1)[c::]:6789 connect error [ 609.529412][ T8719] ceph: No mds server is up or the cluster is laggy [ 609.764844][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.876570][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.936610][ T1019] bond0 (unregistering): Released all slaves [ 610.456083][ T1019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.291232][ T4898] Bluetooth: hci5: command tx timeout [ 611.315786][ T1019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.465504][ T1019] bond0 (unregistering): Released all slaves [ 611.487727][ T8730] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 611.675812][ T10] libceph: connect (1)[c::]:6789 error -101 [ 611.676009][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 611.733933][ T8733] ceph: No mds server is up or the cluster is laggy [ 613.344900][ T4898] Bluetooth: hci5: command tx timeout [ 614.048019][ T8704] rxe_eth0 speed is unknown, defaulting to 1000 [ 614.821896][ T5598] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 614.844882][ T5598] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 614.851507][ T5598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 614.853689][ T5598] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 614.859570][ T5598] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 615.574377][ T5598] Bluetooth: hci5: command tx timeout [ 615.723145][ T8767] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 617.026383][ T5598] Bluetooth: hci6: command tx timeout [ 617.593321][ T5598] Bluetooth: hci5: command tx timeout [ 619.218457][ T5598] Bluetooth: hci6: command tx timeout [ 620.770775][ T8752] rxe_eth0 speed is unknown, defaulting to 1000 [ 622.012109][ T5598] Bluetooth: hci6: command tx timeout [ 622.644035][ T4898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 622.681578][ T4898] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 622.686888][ T4898] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 622.708150][ T4898] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 622.708969][ T4898] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 624.076638][ T4898] Bluetooth: hci6: command tx timeout [ 624.587063][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.587130][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.759325][ T4898] Bluetooth: hci1: command tx timeout [ 627.824305][ T4898] Bluetooth: hci1: command tx timeout [ 628.547329][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.547496][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.547664][ T8704] bridge_slave_0: entered allmulticast mode [ 628.551956][ T8704] bridge_slave_0: entered promiscuous mode [ 628.583587][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.583722][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.583895][ T8704] bridge_slave_1: entered allmulticast mode [ 628.606798][ T8704] bridge_slave_1: entered promiscuous mode [ 629.914226][ T4898] Bluetooth: hci1: command tx timeout [ 630.211414][ T8802] rxe_eth0 speed is unknown, defaulting to 1000 [ 630.246386][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.289705][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.574765][ T8704] team0: Port device team_slave_0 added [ 631.414675][ T8704] team0: Port device team_slave_1 added [ 631.984196][ T4898] Bluetooth: hci1: command tx timeout [ 632.429633][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.429650][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.429674][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.522497][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.522514][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.522538][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.804488][ T1019] hsr_slave_0: left promiscuous mode [ 632.844209][ T1019] hsr_slave_1: left promiscuous mode [ 632.845509][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.904826][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.724090][ T1019] hsr_slave_0: left promiscuous mode [ 634.137224][ T1019] hsr_slave_1: left promiscuous mode [ 634.140057][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.186294][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.235032][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.573161][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.023100][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.171282][ T1019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.584863][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 638.475064][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 640.424726][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 640.612446][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 642.019693][ T8922] trusted_key: encrypted_key: key user:syz not found [ 643.124943][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 643.205034][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 643.884987][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 643.945862][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 644.694836][ T1019] team0 (unregistering): Port device team_slave_1 removed [ 644.764772][ T1019] team0 (unregistering): Port device team_slave_0 removed [ 646.017053][ T8704] hsr_slave_0: entered promiscuous mode [ 646.026309][ T8704] hsr_slave_1: entered promiscuous mode [ 646.529124][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.529306][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.529449][ T8752] bridge_slave_0: entered allmulticast mode [ 646.531960][ T8752] bridge_slave_0: entered promiscuous mode [ 646.602276][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.603270][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.603437][ T8752] bridge_slave_1: entered allmulticast mode [ 646.616959][ T8752] bridge_slave_1: entered promiscuous mode [ 646.887991][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.918407][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.010656][ T8949] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input58 [ 647.329762][ T8752] team0: Port device team_slave_0 added [ 647.370182][ T8752] team0: Port device team_slave_1 added [ 647.478956][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.478973][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.478996][ T8752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.576418][ T8752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.576434][ T8752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.576454][ T8752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.807185][ T8960] ceph: No mds server is up or the cluster is laggy [ 649.810450][ T8099] libceph: connect (1)[c::]:6789 error -101 [ 649.810769][ T8099] libceph: mon0 (1)[c::]:6789 connect error [ 650.021254][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.023158][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.023322][ T8802] bridge_slave_0: entered allmulticast mode [ 650.027713][ T8802] bridge_slave_0: entered promiscuous mode [ 650.050718][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.050907][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.051166][ T8802] bridge_slave_1: entered allmulticast mode [ 650.053635][ T8802] bridge_slave_1: entered promiscuous mode [ 650.856433][ T35] libceph: connect (1)[c::]:6789 error -101 [ 650.856629][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 650.998837][ T8752] hsr_slave_0: entered promiscuous mode [ 651.001944][ T8752] hsr_slave_1: entered promiscuous mode [ 651.018288][ T8752] debugfs: 'hsr0' already exists in 'hsr' [ 651.018314][ T8752] Cannot create hsr debugfs directory [ 651.909523][ T8981] netlink: 280 bytes leftover after parsing attributes in process `syz.0.579'. [ 653.309834][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.642707][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.572190][ T35] libceph: connect (1)[c::]:6789 error -101 [ 655.572385][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 655.590197][ T35] libceph: connect (1)[c::]:6789 error -101 [ 655.590395][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 655.607731][ T8995] ceph: No mds server is up or the cluster is laggy [ 655.844721][ T35] libceph: connect (1)[c::]:6789 error -101 [ 655.844948][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 656.356503][ T35] libceph: connect (1)[c::]:6789 error -101 [ 656.356698][ T35] libceph: mon0 (1)[c::]:6789 connect error [ 656.965790][ T9005] trusted_key: encrypted_key: key user:syz not found [ 657.837208][ T8802] team0: Port device team_slave_0 added [ 657.891743][ T8802] team0: Port device team_slave_1 added [ 657.913940][ T9007] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 658.074170][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.074187][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.074210][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.553972][ T9016] netlink: 280 bytes leftover after parsing attributes in process `syz.3.586'. [ 659.893935][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.893952][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.893973][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.944115][ T8802] hsr_slave_0: entered promiscuous mode [ 661.945492][ T8802] hsr_slave_1: entered promiscuous mode [ 661.947995][ T8802] debugfs: 'hsr0' already exists in 'hsr' [ 661.948019][ T8802] Cannot create hsr debugfs directory [ 663.740368][ T9038] netlink: 280 bytes leftover after parsing attributes in process `syz.3.592'. [ 666.159844][ T9045] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 666.252095][ T9049] netlink: 280 bytes leftover after parsing attributes in process `syz.0.595'. [ 671.226509][ T9070] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input60 [ 671.899612][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 671.919768][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 671.922360][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 671.925646][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 671.929180][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 674.079503][ T4898] Bluetooth: hci0: command tx timeout [ 674.759797][ T9072] rxe_eth0 speed is unknown, defaulting to 1000 [ 675.888925][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 675.916591][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 675.918676][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 675.920014][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 675.922922][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.154424][ T5598] Bluetooth: hci0: command tx timeout [ 676.712038][ T9111] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 677.197570][ T9119] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input61 [ 677.496106][ T9104] rxe_eth0 speed is unknown, defaulting to 1000 [ 677.890900][ T9072] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.892604][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.892783][ T9072] bridge_slave_0: entered allmulticast mode [ 677.899625][ T9072] bridge_slave_0: entered promiscuous mode [ 677.914374][ T9072] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.914498][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.914734][ T9072] bridge_slave_1: entered allmulticast mode [ 677.918429][ T9072] bridge_slave_1: entered promiscuous mode [ 678.020616][ T5598] Bluetooth: hci4: command tx timeout [ 678.471049][ T5598] Bluetooth: hci0: command tx timeout [ 678.921124][ T9072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.956492][ T9072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.433669][ T9072] team0: Port device team_slave_0 added [ 680.129873][ T5598] Bluetooth: hci4: command tx timeout [ 680.279164][ T9072] team0: Port device team_slave_1 added [ 680.490182][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.490200][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.490224][ T9072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.558699][ T9072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.558716][ T9072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.558740][ T9072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.634273][ T5598] Bluetooth: hci0: command tx timeout [ 681.365026][ T10] libceph: connect (1)[c::]:6789 error -101 [ 681.365226][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 681.559097][ T9149] ceph: No mds server is up or the cluster is laggy [ 681.632364][ T10] libceph: connect (1)[c::]:6789 error -101 [ 681.632567][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 681.914800][ T10] libceph: connect (1)[c::]:6789 error -101 [ 681.914995][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 681.971877][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.022379][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.031688][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.047166][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.071083][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.145541][ T5590] Bluetooth: hci4: command tx timeout [ 682.425837][ T9] libceph: connect (1)[c::]:6789 error -101 [ 682.426047][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 683.443124][ T793] bridge_slave_1: left allmulticast mode [ 683.443149][ T793] bridge_slave_1: left promiscuous mode [ 683.443320][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.765719][ T793] bridge_slave_0: left allmulticast mode [ 683.765754][ T793] bridge_slave_0: left promiscuous mode [ 683.766059][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.767457][ T9163] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input63 [ 684.064429][ T793] bridge_slave_1: left allmulticast mode [ 684.064467][ T793] bridge_slave_1: left promiscuous mode [ 684.064722][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.206094][ T793] bridge_slave_0: left allmulticast mode [ 684.206130][ T793] bridge_slave_0: left promiscuous mode [ 684.206548][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.228886][ T4898] Bluetooth: hci4: command tx timeout [ 684.234198][ T4898] Bluetooth: hci5: command tx timeout [ 684.504337][ T793] bridge_slave_1: left allmulticast mode [ 684.504376][ T793] bridge_slave_1: left promiscuous mode [ 684.504690][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.627297][ T793] bridge_slave_0: left allmulticast mode [ 684.627334][ T793] bridge_slave_0: left promiscuous mode [ 684.627579][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.679550][ T9169] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input64 [ 685.970985][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.971098][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.189952][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.241154][ T4898] Bluetooth: hci5: command tx timeout [ 687.902322][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.982430][ T793] bond0 (unregistering): Released all slaves [ 688.031438][ T9185] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 688.272968][ T9187] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 688.596410][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.264291][ T4898] Bluetooth: hci5: command tx timeout [ 690.782566][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.859614][ T793] bond0 (unregistering): Released all slaves [ 691.284973][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.317781][ T9199] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input66 [ 691.344234][ T4898] Bluetooth: hci5: command tx timeout [ 691.415585][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.496284][ T793] bond0 (unregistering): Released all slaves [ 691.989538][ T9072] hsr_slave_0: entered promiscuous mode [ 691.990328][ T9072] hsr_slave_1: entered promiscuous mode [ 691.990861][ T9072] debugfs: 'hsr0' already exists in 'hsr' [ 691.990884][ T9072] Cannot create hsr debugfs directory [ 694.657573][ T9] libceph: connect (1)[c::]:6789 error -101 [ 694.658171][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 694.658684][ T9220] ceph: No mds server is up or the cluster is laggy [ 694.660655][ T9] libceph: connect (1)[c::]:6789 error -101 [ 694.663124][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 694.915820][ T9] libceph: connect (1)[c::]:6789 error -101 [ 694.916534][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 697.198222][ T9240] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input68 [ 697.386172][ T9155] rxe_eth0 speed is unknown, defaulting to 1000 [ 697.644939][ T9245] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input69 [ 701.422084][ T9269] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input70 [ 703.144462][ T9277] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input71 [ 704.419536][ T9286] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input72 [ 706.681885][ T3369] kworker/u8:10 (3369) used greatest stack depth: 19432 bytes left [ 708.818877][ T9300] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 708.916032][ T793] hsr_slave_0: left promiscuous mode [ 708.967284][ T793] hsr_slave_1: left promiscuous mode [ 708.968151][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.996470][ T9304] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 709.020879][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.244712][ T793] hsr_slave_0: left promiscuous mode [ 710.284352][ T793] hsr_slave_1: left promiscuous mode [ 710.285699][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.335222][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.565231][ T793] hsr_slave_0: left promiscuous mode [ 710.604522][ T793] hsr_slave_1: left promiscuous mode [ 710.607336][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.656721][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.833294][ T9312] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input74 [ 712.317959][ T9322] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input75 [ 713.597739][ T9326] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 713.634792][ T793] team0 (unregistering): Port device team_slave_1 removed [ 713.697165][ T793] team0 (unregistering): Port device team_slave_0 removed [ 714.018901][ T9333] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input76 [ 714.266304][ T793] team0 (unregistering): Port device team_slave_1 removed [ 714.324701][ T793] team0 (unregistering): Port device team_slave_0 removed [ 714.855909][ T793] team0 (unregistering): Port device team_slave_1 removed [ 714.894726][ T793] team0 (unregistering): Port device team_slave_0 removed [ 715.163519][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.163589][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.163719][ T9104] bridge_slave_0: entered allmulticast mode [ 715.167564][ T9104] bridge_slave_0: entered promiscuous mode [ 715.179972][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.180087][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.189722][ T9104] bridge_slave_1: entered allmulticast mode [ 715.198856][ T9104] bridge_slave_1: entered promiscuous mode [ 715.483625][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.519462][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.970913][ T9352] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input77 [ 716.982918][ T9104] team0: Port device team_slave_0 added [ 717.007948][ T9104] team0: Port device team_slave_1 added [ 717.487398][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.487428][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.487453][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.505950][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.505968][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.505993][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.827146][ T9104] hsr_slave_0: entered promiscuous mode [ 717.827964][ T9104] hsr_slave_1: entered promiscuous mode [ 717.828485][ T9104] debugfs: 'hsr0' already exists in 'hsr' [ 717.828499][ T9104] Cannot create hsr debugfs directory [ 717.929313][ T9366] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 718.567728][ T9155] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.567975][ T9155] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.568148][ T9155] bridge_slave_0: entered allmulticast mode [ 718.635532][ T9155] bridge_slave_0: entered promiscuous mode [ 718.731817][ T9155] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.731946][ T9155] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.732147][ T9155] bridge_slave_1: entered allmulticast mode [ 718.738450][ T9155] bridge_slave_1: entered promiscuous mode [ 718.990579][ T9155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.021231][ T9155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.094070][ T9155] team0: Port device team_slave_0 added [ 719.097552][ T9155] team0: Port device team_slave_1 added [ 719.157354][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.157372][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.157397][ T9155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.160183][ T9155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.160197][ T9155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.160216][ T9155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.324204][ T9155] hsr_slave_0: entered promiscuous mode [ 719.325711][ T9155] hsr_slave_1: entered promiscuous mode [ 719.326748][ T9155] debugfs: 'hsr0' already exists in 'hsr' [ 719.326771][ T9155] Cannot create hsr debugfs directory [ 723.140332][ T9388] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input79 [ 724.347821][ T9395] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input80 [ 724.358407][ T9104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 724.447890][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.708334][ T9398] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input81 [ 724.740471][ T793] bridge_slave_1: left allmulticast mode [ 724.740508][ T793] bridge_slave_1: left promiscuous mode [ 724.740834][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.945592][ T793] bridge_slave_0: left allmulticast mode [ 725.945632][ T793] bridge_slave_0: left promiscuous mode [ 725.945882][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.077430][ T9410] netlink: 280 bytes leftover after parsing attributes in process `syz.3.674'. [ 728.999480][ T9422] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input82 [ 730.686287][ T793] bridge_slave_1: left allmulticast mode [ 730.686324][ T793] bridge_slave_1: left promiscuous mode [ 730.686571][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.865745][ T793] bridge_slave_0: left allmulticast mode [ 730.865781][ T793] bridge_slave_0: left promiscuous mode [ 730.866031][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.941241][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 731.015691][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 731.018790][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 731.020202][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 731.025041][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 731.135526][ T9436] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input83 [ 731.224518][ T793] bridge_slave_1: left allmulticast mode [ 731.224553][ T793] bridge_slave_1: left promiscuous mode [ 731.224869][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.407562][ T793] bridge_slave_0: left allmulticast mode [ 731.407601][ T793] bridge_slave_0: left promiscuous mode [ 731.407877][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.585806][ T9444] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input84 [ 732.075369][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.196593][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.496974][ T793] bond0 (unregistering): Released all slaves [ 733.402204][ T4898] Bluetooth: hci1: command tx timeout [ 733.927287][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.059059][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.115632][ T793] bond0 (unregistering): Released all slaves [ 734.775077][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.835027][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.931868][ T793] bond0 (unregistering): Released all slaves [ 735.013308][ T9104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.095668][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.122300][ T9104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 735.204595][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.365334][ T9104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 735.425848][ T5598] Bluetooth: hci1: command tx timeout [ 735.451966][ T9104] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.496846][ T9435] rxe_eth0 speed is unknown, defaulting to 1000 [ 737.514097][ T5598] Bluetooth: hci1: command tx timeout [ 737.911616][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.940425][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.942857][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.950059][ T9481] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input85 [ 737.965028][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.979546][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 739.909557][ T4898] Bluetooth: hci1: command tx timeout [ 740.785501][ T9155] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 740.918630][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.960548][ T9155] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 741.032953][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 741.058260][ T9508] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input86 [ 741.058790][ T9155] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 741.156260][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 741.314192][ T793] hsr_slave_0: left promiscuous mode [ 741.354246][ T793] hsr_slave_1: left promiscuous mode [ 741.356946][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.404909][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.624217][ T793] hsr_slave_0: left promiscuous mode [ 741.666545][ T793] hsr_slave_1: left promiscuous mode [ 741.667784][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.545902][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.714408][ T793] hsr_slave_0: left promiscuous mode [ 742.755626][ T793] hsr_slave_1: left promiscuous mode [ 742.757433][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.775043][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.144950][ T793] team0 (unregistering): Port device team_slave_1 removed [ 743.164594][ T793] team0 (unregistering): Port device team_slave_0 removed [ 743.366484][ T36] audit: type=1326 audit(1792319576.772:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9521 comm="syz.0.700" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff846e4e559 code=0xffff0000 [ 743.831832][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 743.868089][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 743.871565][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 743.873067][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 743.873832][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 744.365687][ T793] team0 (unregistering): Port device team_slave_1 removed [ 744.434959][ T793] team0 (unregistering): Port device team_slave_0 removed [ 746.065016][ T4898] Bluetooth: hci4: command tx timeout [ 748.133844][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.133919][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.253220][ T4898] Bluetooth: hci4: command tx timeout [ 748.286226][ T793] team0 (unregistering): Port device team_slave_1 removed [ 748.326413][ T793] team0 (unregistering): Port device team_slave_0 removed [ 749.551315][ T9155] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.304185][ T4898] Bluetooth: hci4: command tx timeout [ 750.830051][ T9155] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 751.817877][ T9483] rxe_eth0 speed is unknown, defaulting to 1000 [ 753.075649][ T4898] Bluetooth: hci4: command tx timeout [ 753.857793][ T9435] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.857996][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.858166][ T9435] bridge_slave_0: entered allmulticast mode [ 753.860847][ T9435] bridge_slave_0: entered promiscuous mode [ 753.905928][ T9435] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.906088][ T9435] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.906249][ T9435] bridge_slave_1: entered allmulticast mode [ 753.909008][ T9435] bridge_slave_1: entered promiscuous mode [ 754.051400][ T9435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.083811][ T9435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.422170][ T9583] tmpfs: Bad value for 'mpol' [ 754.658172][ T9435] team0: Port device team_slave_0 added [ 754.677318][ T9435] team0: Port device team_slave_1 added [ 754.677768][ T9526] rxe_eth0 speed is unknown, defaulting to 1000 [ 755.045032][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.045051][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.045075][ T9435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.082534][ T8099] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 755.125305][ T9435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.125324][ T9435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.125350][ T9435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.390390][ T9435] hsr_slave_0: entered promiscuous mode [ 755.391765][ T9435] hsr_slave_1: entered promiscuous mode [ 756.589399][ T8099] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 756.642802][ T8099] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 756.642840][ T8099] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 756.642859][ T8099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.642876][ T8099] usb 4-1: config 0 has no interface number 0 [ 756.643013][ T8099] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 756.643036][ T8099] usb 4-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x22, changing to 0x2 [ 756.643058][ T8099] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x2 has invalid maxpacket 70, setting to 64 [ 756.643107][ T8099] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 756.643180][ T8099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.800794][ T8099] usb 4-1: config 0 descriptor?? [ 757.950551][ T8099] usb 4-1: can't set config #0, error -71 [ 758.438698][ T8099] usb 4-1: USB disconnect, device number 2 [ 760.115328][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.115538][ T9483] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.115724][ T9483] bridge_slave_0: entered allmulticast mode [ 760.118753][ T9483] bridge_slave_0: entered promiscuous mode [ 760.149685][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.149808][ T9483] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.149988][ T9483] bridge_slave_1: entered allmulticast mode [ 760.153001][ T9483] bridge_slave_1: entered promiscuous mode [ 761.273603][ T9483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.285157][ T9483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.721278][ T9624] hpfs: hpfs_map_sector(): read error [ 761.765536][ T9483] team0: Port device team_slave_0 added [ 761.872669][ T9483] team0: Port device team_slave_1 added [ 761.988441][ T9629] capability: warning: `syz.0.724' uses deprecated v2 capabilities in a way that may be insecure [ 762.123796][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.123814][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.123839][ T9483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.165328][ T9483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.165345][ T9483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 762.165369][ T9483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.329930][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.330144][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.330309][ T9526] bridge_slave_0: entered allmulticast mode [ 762.332033][ T9526] bridge_slave_0: entered promiscuous mode [ 762.371895][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.372104][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.372244][ T9526] bridge_slave_1: entered allmulticast mode [ 762.373757][ T9526] bridge_slave_1: entered promiscuous mode [ 762.498218][ T9483] hsr_slave_0: entered promiscuous mode [ 762.499449][ T9483] hsr_slave_1: entered promiscuous mode [ 762.500450][ T9483] debugfs: 'hsr0' already exists in 'hsr' [ 762.500474][ T9483] Cannot create hsr debugfs directory [ 763.413328][ T9642] 9pnet_fd: p9_fd_create_tcp (9642): problem connecting socket to 127.0.0.1 [ 763.601577][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.755140][ T9650] FAULT_INJECTION: forcing a failure. [ 763.755140][ T9650] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 763.755174][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.3.729 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 763.755189][ T9650] Tainted: [L]=SOFTLOCKUP [ 763.755193][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.755205][ T9650] Call Trace: [ 763.755210][ T9650] [ 763.755216][ T9650] dump_stack_lvl+0xe8/0x150 [ 763.755237][ T9650] should_fail_ex+0x46b/0x600 [ 763.755257][ T9650] prepare_alloc_pages+0x223/0x650 [ 763.755271][ T9650] __alloc_frozen_pages_noprof+0x1a1/0x5c0 [ 763.755284][ T9650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 763.755296][ T9650] ? __pfx_policy_nodemask+0x10/0x10 [ 763.755308][ T9650] ? __lock_acquire+0x747/0x2de0 [ 763.755325][ T9650] alloc_pages_mpol+0xd4/0x280 [ 763.755339][ T9650] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 763.755351][ T9650] vma_alloc_folio_noprof+0xe1/0x1e0 [ 763.755364][ T9650] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 763.755374][ T9650] ? lock_acquire+0x115/0x350 [ 763.755395][ T9650] do_pte_missing+0x835/0x28f0 [ 763.755410][ T9650] ? handle_mm_fault+0xeb/0x28c0 [ 763.755425][ T9650] handle_mm_fault+0xf64/0x28c0 [ 763.755441][ T9650] ? handle_mm_fault+0xeb/0x28c0 [ 763.755459][ T9650] ? __pfx_handle_mm_fault+0x10/0x10 [ 763.755471][ T9650] ? lock_vma_under_rcu+0x45a/0x500 [ 763.755486][ T9650] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 763.755516][ T9650] do_user_addr_fault+0xa4f/0x1340 [ 763.755533][ T9650] ? trace_page_fault_user+0x84/0x1e0 [ 763.755545][ T9650] exc_page_fault+0x6a/0xc0 [ 763.755559][ T9650] asm_exc_page_fault+0x26/0x30 [ 763.755572][ T9650] RIP: 0033:0x7f494098fb01 [ 763.755586][ T9650] Code: 8d 3d ba 55 1d 00 e8 ae 3b ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 57 41 56 41 55 41 54 55 53 48 81 ec 78 10 00 00 <48> 89 7c 24 18 48 89 74 24 10 48 89 54 24 08 4c 8b 7c 24 18 4c 8b [ 763.755595][ T9650] RSP: 002b:00007f493ece2f70 EFLAGS: 00010202 [ 763.755606][ T9650] RAX: 00007f494098faf0 RBX: 00007f4940d56180 RCX: 0000000000000000 [ 763.755613][ T9650] RDX: 0000000000000036 RSI: 0000200000000300 RDI: 00002000000002c0 [ 763.755619][ T9650] RBP: 00007f493ece4090 R08: 0000000000000000 R09: 0000000000000000 [ 763.755626][ T9650] R10: 00002000000002c0 R11: 0000000000000036 R12: 0000000000000001 [ 763.755632][ T9650] R13: 00007f4940d56218 R14: 00007f4940d56180 R15: 00007ffc2d64d068 [ 763.755648][ T9650] [ 763.755784][ T9650] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 763.762903][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.829003][ T9650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.944432][ T9643] gretap0: entered promiscuous mode [ 763.951316][ T9643] vlan2: entered promiscuous mode [ 764.050510][ T9651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.162121][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.474332][ T1000] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 764.669934][ T9526] team0: Port device team_slave_0 added [ 764.688324][ T1000] usb 1-1: Using ep0 maxpacket: 32 [ 764.688935][ T1000] usb 1-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 764.691307][ T1000] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 7 [ 764.693634][ T1000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.693652][ T1000] usb 1-1: Product: syz [ 764.693659][ T1000] usb 1-1: Manufacturer: syz [ 764.693667][ T1000] usb 1-1: SerialNumber: syz [ 764.705897][ T9526] team0: Port device team_slave_1 added [ 764.885060][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.885072][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.885085][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.148284][ T9657] FAULT_INJECTION: forcing a failure. [ 765.148284][ T9657] name failslab, interval 1, probability 0, space 0, times 1 [ 765.148326][ T9657] CPU: 1 UID: 0 PID: 9657 Comm: syz.3.731 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 765.148351][ T9657] Tainted: [L]=SOFTLOCKUP [ 765.148357][ T9657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 765.148370][ T9657] Call Trace: [ 765.148379][ T9657] [ 765.148385][ T9657] dump_stack_lvl+0xe8/0x150 [ 765.148417][ T9657] should_fail_ex+0x46b/0x600 [ 765.148448][ T9657] ? __d_alloc+0x37/0x6f0 [ 765.148473][ T9657] should_failslab+0xa8/0x100 [ 765.148493][ T9657] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 765.148520][ T9657] ? __d_alloc+0x37/0x6f0 [ 765.148548][ T9657] __d_alloc+0x37/0x6f0 [ 765.148577][ T9657] d_alloc_pseudo+0x21/0xc0 [ 765.148602][ T9657] alloc_path_pseudo+0x107/0x220 [ 765.148625][ T9657] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 765.148654][ T9657] alloc_file_pseudo+0xa8/0x1e0 [ 765.148677][ T9657] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 765.148707][ T9657] anon_inode_getfd+0xc8/0x200 [ 765.148731][ T9657] map_create+0x7f8/0x1e20 [ 765.148768][ T9657] ? __pfx_map_create+0x10/0x10 [ 765.148804][ T9657] ? bpf_lsm_bpf+0x9/0x20 [ 765.148826][ T9657] ? security_bpf+0x7e/0x2d0 [ 765.148847][ T9657] __sys_bpf+0xaea/0xd90 [ 765.148881][ T9657] ? __pfx___sys_bpf+0x10/0x10 [ 765.148911][ T9657] ? do_futex+0x458/0x4e0 [ 765.148956][ T9657] ? rcu_is_watching+0x16/0xb0 [ 765.148979][ T9657] __x64_sys_bpf+0xba/0xd0 [ 765.149006][ T9657] do_syscall_64+0x166/0x520 [ 765.149029][ T9657] ? trace_irq_disable+0x3b/0x140 [ 765.149054][ T9657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.149072][ T9657] ? clear_bhb_loop+0x70/0xc0 [ 765.149094][ T9657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.149113][ T9657] RIP: 0033:0x7f4940ace559 [ 765.149129][ T9657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.149146][ T9657] RSP: 002b:00007f493ed26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 765.149176][ T9657] RAX: ffffffffffffffda RBX: 00007f4940d55fa0 RCX: 00007f4940ace559 [ 765.149191][ T9657] RDX: 0000000000000048 RSI: 00002000000006c0 RDI: 0000000000000000 [ 765.149204][ T9657] RBP: 00007f4940b65ab8 R08: 0000000000000000 R09: 0000000000000000 [ 765.149216][ T9657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.149228][ T9657] R13: 00007f4940d56038 R14: 00007f4940d55fa0 R15: 00007ffc2d64d068 [ 765.149261][ T9657] [ 765.502075][ T9664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.503103][ T9664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.645015][ T6348] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 765.667893][ T6631] af_packet: tpacket_rcv: packet too big, clamped from 66 to 4294967286. macoff=82 [ 765.736838][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.736902][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.736926][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.042121][ T6348] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice= 0.00 [ 766.049538][ T6348] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.049593][ T6348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.652860][ T6348] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 766.653054][ T6348] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 766.793398][ T6348] usb 4-1: USB disconnect, device number 3 [ 767.591941][ T9526] hsr_slave_0: entered promiscuous mode [ 767.593275][ T9526] hsr_slave_1: entered promiscuous mode [ 767.608877][ T9526] debugfs: 'hsr0' already exists in 'hsr' [ 767.608905][ T9526] Cannot create hsr debugfs directory [ 767.640630][ T9678] Invalid source name [ 767.702858][ T9435] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 767.735508][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 767.760597][ T9435] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 767.800405][ T1000] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 767.888090][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 767.909059][ T6631] IPVS: starting estimator thread 0... [ 767.974772][ T9435] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 768.023868][ T9680] IPVS: using max 8 ests per chain, 19200 per kthread [ 768.078976][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 768.488088][ T1000] usb 1-1: USB disconnect, device number 2 [ 769.446679][ T9689] syz.3.735 (9689) used greatest stack depth: 19200 bytes left [ 770.610960][ T9435] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 770.720733][ T9435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 773.994460][ T5795] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 774.522739][ T5795] usb 1-1: Using ep0 maxpacket: 32 [ 774.543594][ T5795] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 774.645666][ T5795] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.645954][ T5795] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.726316][ T5795] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 774.726346][ T5795] usb 1-1: Product: syz [ 774.726359][ T5795] usb 1-1: Manufacturer: syz [ 774.916389][ T5795] hub 1-1:4.0: USB hub found [ 775.072336][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 775.072355][ T5795] hub 1-1:4.0: 2 ports detected [ 775.281594][ T9739] trusted_key: encrypted_key: insufficient parameters specified [ 775.584974][ T9760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.693867][ T9760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 775.748741][ T9760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 775.770658][ T9760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.185019][ T5243] 8021q: adding VLAN 0 to HW filter on device eth14 [ 776.325674][ T5795] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 776.450595][ T9435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.523882][ T9435] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.538380][ T1418] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.538596][ T1418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.556285][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.562097][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.834937][ T6348] usb 1-1: USB disconnect, device number 3 [ 776.855210][ T793] bridge_slave_1: left allmulticast mode [ 776.855236][ T793] bridge_slave_1: left promiscuous mode [ 776.855406][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.018266][ T793] bridge_slave_0: left allmulticast mode [ 777.018303][ T793] bridge_slave_0: left promiscuous mode [ 777.018561][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.022377][ T9784] Bluetooth: MGMT ver 1.23 [ 777.451249][ T9786] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input87 [ 778.464251][ T793] bridge_slave_1: left allmulticast mode [ 778.464276][ T793] bridge_slave_1: left promiscuous mode [ 778.464439][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.625167][ T793] bridge_slave_0: left allmulticast mode [ 778.625192][ T793] bridge_slave_0: left promiscuous mode [ 778.625366][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.744296][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 778.864579][ T793] bridge_slave_1: left allmulticast mode [ 778.864607][ T793] bridge_slave_1: left promiscuous mode [ 778.864844][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.905313][ T9] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 778.906782][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.906823][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.960049][ T9] idmouse 1-1:1.0: Unable to find bulk-in endpoint. [ 779.115477][ T793] bridge_slave_0: left allmulticast mode [ 779.115501][ T793] bridge_slave_0: left promiscuous mode [ 779.120370][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.939622][ T1000] usb 1-1: USB disconnect, device number 4 [ 782.565902][ T1000] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 782.583839][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.700673][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.715324][ T1000] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 782.716454][ T1000] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.716485][ T1000] usb 1-1: config 0 has no interfaces? [ 782.718743][ T1000] usb 1-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 782.718766][ T1000] usb 1-1: Product: syz [ 782.718780][ T1000] usb 1-1: Manufacturer: syz [ 782.718794][ T1000] usb 1-1: SerialNumber: syz [ 782.774955][ T1000] usb 1-1: config 0 descriptor?? [ 782.826489][ T793] bond0 (unregistering): Released all slaves [ 783.001936][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.002522][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.210452][ T9809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.212939][ T9809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.246030][ T35] usb 1-1: USB disconnect, device number 5 [ 783.335274][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.415041][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.475730][ T793] bond0 (unregistering): Released all slaves [ 783.704754][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.804981][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.553139][ T9832] netlink: 280 bytes leftover after parsing attributes in process `syz.3.763'. [ 784.907980][ T793] bond0 (unregistering): Released all slaves [ 784.993521][ T5243] 8021q: adding VLAN 0 to HW filter on device eth15 [ 786.968067][ T9862] FAULT_INJECTION: forcing a failure. [ 786.968067][ T9862] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 786.968103][ T9862] CPU: 0 UID: 0 PID: 9862 Comm: syz.3.767 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 786.968128][ T9862] Tainted: [L]=SOFTLOCKUP [ 786.968135][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.968145][ T9862] Call Trace: [ 786.968160][ T9862] [ 786.968168][ T9862] dump_stack_lvl+0xe8/0x150 [ 786.968199][ T9862] should_fail_ex+0x46b/0x600 [ 786.968233][ T9862] _copy_from_user+0x2d/0xb0 [ 786.968254][ T9862] __sys_bind+0x1cc/0x410 [ 786.968278][ T9862] ? __pfx___sys_bind+0x10/0x10 [ 786.968311][ T9862] ? __pfx_ksys_write+0x10/0x10 [ 786.968343][ T9862] __x64_sys_bind+0x7a/0x90 [ 786.968365][ T9862] do_syscall_64+0x166/0x520 [ 786.968389][ T9862] ? trace_irq_disable+0x3b/0x140 [ 786.968412][ T9862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.968429][ T9862] ? clear_bhb_loop+0x70/0xc0 [ 786.968451][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.968469][ T9862] RIP: 0033:0x7f4940ace559 [ 786.968487][ T9862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.968503][ T9862] RSP: 002b:00007f493ed26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 786.968522][ T9862] RAX: ffffffffffffffda RBX: 00007f4940d55fa0 RCX: 00007f4940ace559 [ 786.968536][ T9862] RDX: 0000000000000006 RSI: 0000200000000680 RDI: 0000000000000004 [ 786.968548][ T9862] RBP: 00007f493ed26090 R08: 0000000000000000 R09: 0000000000000000 [ 786.968559][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.968571][ T9862] R13: 00007f4940d56038 R14: 00007f4940d55fa0 R15: 00007ffc2d64d068 [ 786.968602][ T9862] [ 788.726807][ T793] hsr_slave_0: left promiscuous mode [ 788.766516][ T793] hsr_slave_1: left promiscuous mode [ 788.767754][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.807823][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 788.837564][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.964966][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 788.978657][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 788.981414][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 788.981445][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.999015][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.999042][ T9] usb 1-1: Product: syz [ 788.999055][ T9] usb 1-1: Manufacturer: syz [ 788.999068][ T9] usb 1-1: SerialNumber: syz [ 789.164235][ T9] usb 1-1: config 0 descriptor?? [ 789.218790][ T9] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 789.218826][ T9] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 789.255848][ T793] hsr_slave_0: left promiscuous mode [ 789.316951][ T793] hsr_slave_1: left promiscuous mode [ 789.320726][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.379802][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.684346][ T793] hsr_slave_0: left promiscuous mode [ 789.724180][ T793] hsr_slave_1: left promiscuous mode [ 789.726268][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.846088][ T9] em28xx 1-1:0.0: chip ID is em2870 [ 790.094902][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.714869][ T793] team0 (unregistering): Port device team_slave_1 removed [ 790.787988][ T793] team0 (unregistering): Port device team_slave_0 removed [ 791.370188][ T10] usb 1-1: USB disconnect, device number 6 [ 791.393398][ T10] em28xx 1-1:0.0: Disconnecting em28xx [ 791.479043][ T10] em28xx: Freeing device [ 791.527466][ T793] team0 (unregistering): Port device team_slave_1 removed [ 791.604873][ T793] team0 (unregistering): Port device team_slave_0 removed [ 791.743084][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 791.780848][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 791.782403][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 791.801832][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 791.802686][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 793.217564][ T793] team0 (unregistering): Port device team_slave_1 removed [ 793.286237][ T793] team0 (unregistering): Port device team_slave_0 removed [ 793.984374][ T5598] Bluetooth: hci5: command tx timeout [ 795.116602][ T9960] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 795.151727][ T9961] netlink: 'syz.0.780': attribute type 4 has an invalid length. [ 795.330836][ T9483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 795.380771][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 796.074222][ T5598] Bluetooth: hci5: command tx timeout [ 796.102874][ T9483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 796.151558][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.212708][ T9483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 796.332474][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.612391][ T9483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 796.687201][ T9483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.702059][ T9922] rxe_eth0 speed is unknown, defaulting to 1000 [ 797.131193][ T9526] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 797.179359][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 797.180328][ T9526] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 797.246052][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 797.251054][ T9526] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 797.317022][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 797.584336][ T9526] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 797.675586][ T9526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 797.927667][ T4898] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.956254][ T4898] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.962050][ T4898] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.963246][ T4898] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.967595][ T4898] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.144218][ T4898] Bluetooth: hci5: command tx timeout [ 799.573749][T10016] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input89 [ 799.708603][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.064873][ T4898] Bluetooth: hci0: command tx timeout [ 800.229631][ T4898] Bluetooth: hci5: command tx timeout [ 800.989342][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.057935][T10035] vlan2: entered promiscuous mode [ 801.057960][T10035] bridge0: entered promiscuous mode [ 801.063078][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.063279][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.063433][ T9922] bridge_slave_0: entered allmulticast mode [ 801.113425][ T9922] bridge_slave_0: entered promiscuous mode [ 801.163820][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.163967][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.178362][ T9922] bridge_slave_1: entered allmulticast mode [ 801.181904][ T9922] bridge_slave_1: entered promiscuous mode [ 801.199240][T10037] gretap0: entered promiscuous mode [ 801.199482][T10037] vlan3: entered promiscuous mode [ 801.318530][ T9996] rxe_eth0 speed is unknown, defaulting to 1000 [ 801.703946][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.704516][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.786067][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.815688][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.867009][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.867090][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.904713][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 801.913667][T10051] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input90 [ 802.097065][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 802.098281][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 802.098306][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 802.098341][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.144138][ T4898] Bluetooth: hci0: command tx timeout [ 802.317954][ T9922] team0: Port device team_slave_0 added [ 802.371451][ T9922] team0: Port device team_slave_1 added [ 802.539926][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.539939][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.539963][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.792575][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.792588][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.792603][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.665928][ T9] gud 4-1:1.0: Failed to get connectors (error=-71) [ 803.665974][ T9] gud 4-1:1.0: probe with driver gud failed with error -71 [ 803.747677][ T9] usb 4-1: USB disconnect, device number 4 [ 803.909723][ T9922] hsr_slave_0: entered promiscuous mode [ 803.910948][ T9922] hsr_slave_1: entered promiscuous mode [ 803.911806][ T9922] debugfs: 'hsr0' already exists in 'hsr' [ 803.911828][ T9922] Cannot create hsr debugfs directory [ 804.224128][ T4898] Bluetooth: hci0: command tx timeout [ 804.807852][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 804.818338][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 804.824552][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 804.826714][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 804.828350][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 804.932390][T10076] nvme_fabrics: missing parameter 'transport=%s' [ 804.932409][T10076] nvme_fabrics: missing parameter 'nqn=%s' [ 805.947312][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.947436][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.947600][ T9996] bridge_slave_0: entered allmulticast mode [ 805.984879][ T9996] bridge_slave_0: entered promiscuous mode [ 806.560659][T10094] netlink: 'syz.0.801': attribute type 9 has an invalid length. [ 806.560706][T10094] netlink: 'syz.0.801': attribute type 6 has an invalid length. [ 807.441487][ T4898] Bluetooth: hci1: command tx timeout [ 807.441874][ T4898] Bluetooth: hci0: command tx timeout [ 807.877261][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.877456][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.877643][ T9996] bridge_slave_1: entered allmulticast mode [ 807.881228][ T9996] bridge_slave_1: entered promiscuous mode [ 808.188113][ T9996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.219053][ T9996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.558282][T10075] rxe_eth0 speed is unknown, defaulting to 1000 [ 808.578389][ T9996] team0: Port device team_slave_0 added [ 808.586577][ T9996] team0: Port device team_slave_1 added [ 808.627654][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.627731][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.957298][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 809.085590][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.085607][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.085678][ T9996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.091896][ T9996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.091912][ T9996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.091936][ T9996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.197324][ T9996] hsr_slave_0: entered promiscuous mode [ 809.198064][ T9996] hsr_slave_1: entered promiscuous mode [ 809.200587][ T9996] debugfs: 'hsr0' already exists in 'hsr' [ 809.200612][ T9996] Cannot create hsr debugfs directory [ 809.509412][ T5598] Bluetooth: hci1: command tx timeout [ 809.916182][ T5243] 8021q: adding VLAN 0 to HW filter on device eth14 [ 810.114322][ T793] bridge_slave_1: left allmulticast mode [ 810.114351][ T793] bridge_slave_1: left promiscuous mode [ 810.114544][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.215737][ T793] bridge_slave_0: left allmulticast mode [ 810.215763][ T793] bridge_slave_0: left promiscuous mode [ 810.215941][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.415104][ T793] bridge_slave_1: left allmulticast mode [ 810.415141][ T793] bridge_slave_1: left promiscuous mode [ 810.415377][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.526288][ T793] bridge_slave_0: left allmulticast mode [ 810.526312][ T793] bridge_slave_0: left promiscuous mode [ 810.526466][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.976124][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.055162][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.115527][ T793] bond0 (unregistering): Released all slaves [ 811.584477][ T5598] Bluetooth: hci1: command tx timeout [ 811.585965][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.666658][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.686206][ T793] bond0 (unregistering): Released all slaves [ 812.120275][T10075] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.120457][T10075] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.120613][T10075] bridge_slave_0: entered allmulticast mode [ 812.123403][T10075] bridge_slave_0: entered promiscuous mode [ 812.369220][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.369349][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.369546][T10075] bridge_slave_1: entered allmulticast mode [ 812.372201][T10075] bridge_slave_1: entered promiscuous mode [ 812.526741][T10075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.546867][T10075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.889723][T10075] team0: Port device team_slave_0 added [ 812.892849][ T5243] 8021q: adding VLAN 0 to HW filter on device eth15 [ 812.908685][T10075] team0: Port device team_slave_1 added [ 813.247498][T10075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.247516][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.247556][T10075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.405625][ T793] hsr_slave_0: left promiscuous mode [ 813.424145][ T793] hsr_slave_1: left promiscuous mode [ 813.424940][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.465008][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.604297][ T793] hsr_slave_0: left promiscuous mode [ 813.625846][ T793] hsr_slave_1: left promiscuous mode [ 813.626662][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.664145][ T5598] Bluetooth: hci1: command tx timeout [ 813.665165][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.084647][ T793] team0 (unregistering): Port device team_slave_1 removed [ 814.135994][ T793] team0 (unregistering): Port device team_slave_0 removed [ 814.554605][ T793] team0 (unregistering): Port device team_slave_1 removed [ 814.595182][ T793] team0 (unregistering): Port device team_slave_0 removed [ 814.755717][T10075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.755748][T10075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.755775][T10075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.896172][T10075] hsr_slave_0: entered promiscuous mode [ 814.897400][T10075] hsr_slave_1: entered promiscuous mode [ 817.222192][ T9922] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 817.259011][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.266835][ T9922] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 817.313749][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.322653][ T9922] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 817.366289][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 817.674874][ T9922] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 817.707666][ T9922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.481770][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.543456][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.578831][ T1019] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.579048][ T1019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.610357][ T6052] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.612746][ T6052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.254374][ T793] bridge_slave_1: left allmulticast mode [ 819.254408][ T793] bridge_slave_1: left promiscuous mode [ 819.254680][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.395935][ T793] bridge_slave_0: left allmulticast mode [ 819.395968][ T793] bridge_slave_0: left promiscuous mode [ 819.396149][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.154939][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.235628][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.256076][ T793] bond0 (unregistering): Released all slaves [ 820.837556][ T9996] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 820.886961][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 820.890546][ T9996] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 820.949195][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 820.953784][ T9996] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 821.016824][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.065555][ T9996] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 821.098094][ T9996] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.214252][ T793] hsr_slave_0: left promiscuous mode [ 821.254313][ T793] hsr_slave_1: left promiscuous mode [ 821.255328][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.296273][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.724956][ T793] team0 (unregistering): Port device team_slave_1 removed [ 821.766350][ T793] team0 (unregistering): Port device team_slave_0 removed [ 821.932546][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.147840][T10075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 822.169750][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 822.171345][T10075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 822.226622][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 822.243505][T10075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 822.313273][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 822.326484][T10075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 822.375379][T10075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 822.560887][ T9922] veth0_vlan: entered promiscuous mode [ 822.629391][ T9996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.630225][ T9922] veth1_vlan: entered promiscuous mode [ 822.672116][ T9996] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.692987][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.693252][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.729416][ T1019] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.729618][ T1019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.823254][ T9922] veth0_macvtap: entered promiscuous mode [ 822.839674][T10075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.895614][ T9922] veth1_macvtap: entered promiscuous mode [ 822.941729][T10075] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.962727][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.986774][ T3370] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.986875][ T3370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.009581][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.032896][ T3370] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.033153][ T3370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.710442][ T793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.830459][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.840908][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.840933][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.841348][ T6055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.907277][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.017592][ T6631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.017613][ T6631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.299545][ T9996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.662437][T10075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.793036][ T9996] veth0_vlan: entered promiscuous mode [ 824.829215][ T9996] veth1_vlan: entered promiscuous mode [ 824.871513][ T9996] veth0_macvtap: entered promiscuous mode [ 824.890334][ T9996] veth1_macvtap: entered promiscuous mode [ 824.940067][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.966856][ T9996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.109158][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.603817][ T6631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.603841][ T6631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.655329][T10075] veth0_vlan: entered promiscuous mode [ 825.798810][T10075] veth1_vlan: entered promiscuous mode [ 825.819366][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.819387][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.932331][T10075] veth0_macvtap: entered promiscuous mode [ 825.950339][T10075] veth1_macvtap: entered promiscuous mode [ 825.992632][T10075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.011014][T10075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 826.126331][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.126731][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.127125][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.127716][ T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.543559][ T6055] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.550051][ T1166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.550270][ T1166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.709616][ T6055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.709640][ T6055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.820457][ T6055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.820478][ T6055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.669872][ T5584] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 832.687088][ T5584] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 833.017131][ T5584] libceph: mon0 (1)0.0.0.0:6789 socket closed (con state V1_BANNER) [ 833.567609][T10276] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 833.744151][T10314] ceph: No mds server is up or the cluster is laggy [ 850.883901][T10334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.171254][T10334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.427706][T10334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 853.325347][T10358] netlink: 8628 bytes leftover after parsing attributes in process `syz.6.813'. [ 854.037059][T10367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.070089][T10376] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 854.104221][T10372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.158887][T10367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.246947][T10406] capability: warning: `syz.7.827' uses 32-bit capabilities (legacy support in use) [ 857.519826][T10416] FAULT_INJECTION: forcing a failure. [ 857.519826][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 857.519866][T10416] CPU: 0 UID: 0 PID: 10416 Comm: syz.7.828 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 857.519895][T10416] Tainted: [L]=SOFTLOCKUP [ 857.519902][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.519914][T10416] Call Trace: [ 857.519923][T10416] [ 857.519932][T10416] dump_stack_lvl+0xe8/0x150 [ 857.519966][T10416] should_fail_ex+0x46b/0x600 [ 857.520013][T10416] should_failslab+0xa8/0x100 [ 857.520035][T10416] ? security_inode_alloc+0x39/0x310 [ 857.520061][T10416] kmem_cache_alloc_noprof+0x9e/0x690 [ 857.520090][T10416] ? security_inode_alloc+0x39/0x310 [ 857.520120][T10416] security_inode_alloc+0x39/0x310 [ 857.520146][T10416] inode_init_always_gfp+0x983/0xd40 [ 857.520174][T10416] ? __pfx_proc_alloc_inode+0x10/0x10 [ 857.520200][T10416] alloc_inode+0x82/0x1b0 [ 857.520224][T10416] new_inode+0x1f/0x170 [ 857.520243][T10416] ? proc_pid_make_inode+0x19/0x130 [ 857.520267][T10416] proc_pid_make_inode+0x21/0x130 [ 857.520291][T10416] proc_pident_instantiate+0x6d/0x2a0 [ 857.520318][T10416] proc_pident_lookup+0x1b7/0x270 [ 857.520346][T10416] __lookup_slow+0x1fb/0x2f0 [ 857.520374][T10416] lookup_slow+0x53/0x70 [ 857.520398][T10416] link_path_walk+0xd2a/0x1910 [ 857.520440][T10416] path_openat+0x1c0/0x20a0 [ 857.520484][T10416] do_file_open+0x23e/0x4a0 [ 857.520521][T10416] ? __pfx_do_file_open+0x10/0x10 [ 857.520558][T10416] ? __pfx_kfree_link+0x10/0x10 [ 857.520593][T10416] ? alloc_fd+0x654/0x6d0 [ 857.520625][T10416] do_sys_openat2+0x115/0x200 [ 857.520647][T10416] ? __se_sys_futex+0x3a8/0x450 [ 857.520668][T10416] ? __pfx_do_sys_openat2+0x10/0x10 [ 857.520695][T10416] ? rcu_is_watching+0x16/0xb0 [ 857.520721][T10416] __x64_sys_openat+0x138/0x170 [ 857.520747][T10416] do_syscall_64+0x166/0x520 [ 857.520774][T10416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.520794][T10416] ? clear_bhb_loop+0x70/0xc0 [ 857.520818][T10416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.520838][T10416] RIP: 0033:0x7faf8f00ed8e [ 857.520857][T10416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 857.520874][T10416] RSP: 002b:00007faf8d2a5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 857.520896][T10416] RAX: ffffffffffffffda RBX: 00007faf8d2a66c0 RCX: 00007faf8f00ed8e [ 857.520911][T10416] RDX: 0000000000000002 RSI: 00007faf8d2a5f90 RDI: ffffffffffffff9c [ 857.520925][T10416] RBP: 00007faf8f0e5ab8 R08: 0000000000000000 R09: 0000000000000000 [ 857.520938][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.520950][T10416] R13: 00007faf8f2d6038 R14: 00007faf8f2d5fa0 R15: 00007ffcafb2f528 [ 857.520992][T10416] [ 857.642245][T10418] netlink: 32 bytes leftover after parsing attributes in process `syz.7.828'. [ 857.649314][T10414] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 859.165902][T10432] FAULT_INJECTION: forcing a failure. [ 859.165902][T10432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.167129][T10432] CPU: 0 UID: 0 PID: 10432 Comm: syz.6.834 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 859.167154][T10432] Tainted: [L]=SOFTLOCKUP [ 859.167159][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.167167][T10432] Call Trace: [ 859.167173][T10432] [ 859.167180][T10432] dump_stack_lvl+0xe8/0x150 [ 859.167207][T10432] should_fail_ex+0x46b/0x600 [ 859.167234][T10432] _copy_to_user+0x31/0xb0 [ 859.167253][T10432] copy_siginfo_to_user+0x22/0xc0 [ 859.167275][T10432] x64_setup_rt_frame+0x765/0xc50 [ 859.167296][T10432] ? rt_spin_unlock+0x159/0x200 [ 859.167332][T10432] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 859.167367][T10432] arch_do_signal_or_restart+0x45b/0x860 [ 859.167388][T10432] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 859.167413][T10432] ? ksys_write+0x248/0x270 [ 859.167438][T10432] exit_to_user_mode_loop+0x10e/0x770 [ 859.167457][T10432] ? rcu_is_watching+0x16/0xb0 [ 859.167476][T10432] do_syscall_64+0x328/0x520 [ 859.167494][T10432] ? trace_irq_disable+0x3b/0x140 [ 859.167513][T10432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.167528][T10432] ? clear_bhb_loop+0x70/0xc0 [ 859.167545][T10432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.167559][T10432] RIP: 0033:0x7f879400ed8e [ 859.167575][T10432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.167587][T10432] RSP: 002b:00007f8792284fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 859.167604][T10432] RAX: 0000000000000001 RBX: 00007f87922856c0 RCX: 00007f879400ed8e [ 859.167615][T10432] RDX: 0000000000000001 RSI: 00007f8792285090 RDI: 0000000000000009 [ 859.167624][T10432] RBP: 00007f8792285090 R08: 0000000000000000 R09: 0000000000000000 [ 859.167634][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 859.167643][T10432] R13: 00007f87942d6128 R14: 00007f87942d6090 R15: 00007ffe2fd7b0f8 [ 859.167669][T10432] [ 859.506188][ T35] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 859.609547][T10439] comedi comedi3: No hardware detected at I/O base 0x3c8 [ 859.654903][ T35] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.658025][ T35] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0 [ 859.658052][ T35] usb 1-1: config 0 interface 0 has no altsetting 0 [ 859.700765][ T35] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 859.700796][ T35] usb 1-1: Product: syz [ 859.700810][ T35] usb 1-1: Manufacturer: syz [ 859.700823][ T35] usb 1-1: SerialNumber: syz [ 859.829354][T10439] overlayfs: conflicting options: userxattr,redirect_dir=on [ 859.842214][ T35] usb 1-1: config 0 descriptor?? [ 859.921022][ T35] usb 1-1: selecting invalid altsetting 0 [ 860.629187][ T35] usb 1-1: USB disconnect, device number 7 [ 860.665291][T10461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 861.116375][T10466] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 861.435934][ T5598] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 862.254883][T10481] sg_write: data in/out 417804/136 bytes for SCSI command 0x0-- guessing data in; [ 862.254883][T10481] program syz.5.848 not setting count and/or reply_len properly [ 862.547731][T10484] FAULT_INJECTION: forcing a failure. [ 862.547731][T10484] name failslab, interval 1, probability 0, space 0, times 0 [ 862.547754][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.0.849 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 862.547769][T10484] Tainted: [L]=SOFTLOCKUP [ 862.547772][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 862.547779][T10484] Call Trace: [ 862.547783][T10484] [ 862.547788][T10484] dump_stack_lvl+0xe8/0x150 [ 862.547808][T10484] should_fail_ex+0x46b/0x600 [ 862.547827][T10484] should_failslab+0xa8/0x100 [ 862.547839][T10484] __kmalloc_cache_noprof+0xa1/0x680 [ 862.547854][T10484] ? ceph_create_client+0x6f/0x310 [ 862.547866][T10484] ? ceph_create_client+0x6f/0x310 [ 862.547882][T10484] ceph_create_client+0x6f/0x310 [ 862.547895][T10484] ceph_get_tree+0x1ca/0x1a40 [ 862.547910][T10484] ? cap_capable+0x123/0x460 [ 862.547925][T10484] ? safesetid_security_capable+0xa9/0x1a0 [ 862.547943][T10484] vfs_get_tree+0x92/0x2a0 [ 862.547958][T10484] vfs_cmd_create+0xa2/0x200 [ 862.547970][T10484] __se_sys_fsconfig+0x6bf/0x810 [ 862.547983][T10484] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 862.547991][T10484] ? ksys_write+0x248/0x270 [ 862.548005][T10484] ? __pfx_ksys_write+0x10/0x10 [ 862.548021][T10484] ? __x64_sys_fsconfig+0x20/0xc0 [ 862.548032][T10484] do_syscall_64+0x166/0x520 [ 862.548045][T10484] ? trace_irq_disable+0x3b/0x140 [ 862.548058][T10484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.548068][T10484] ? clear_bhb_loop+0x70/0xc0 [ 862.548080][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.548090][T10484] RIP: 0033:0x7ff846e4e559 [ 862.548100][T10484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.548109][T10484] RSP: 002b:00007ff8450a6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 862.548124][T10484] RAX: ffffffffffffffda RBX: 00007ff8470d5fa0 RCX: 00007ff846e4e559 [ 862.548134][T10484] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 862.548140][T10484] RBP: 00007ff8450a6090 R08: 0000000000000000 R09: 0000000000000000 [ 862.548146][T10484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.548152][T10484] R13: 00007ff8470d6038 R14: 00007ff8470d5fa0 R15: 00007ffe9aec6ab8 [ 862.548168][T10484] [ 863.870601][T10501] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 864.109356][T10495] netlink: 'syz.5.852': attribute type 12 has an invalid length. [ 864.109380][T10495] netlink: 'syz.5.852': attribute type 29 has an invalid length. [ 864.109393][T10495] netlink: 148 bytes leftover after parsing attributes in process `syz.5.852'. [ 864.109418][T10495] netlink: 59 bytes leftover after parsing attributes in process `syz.5.852'. [ 866.359986][T10516] 9pnet_fd: Insufficient options for proto=fd [ 866.396225][T10531] FAULT_INJECTION: forcing a failure. [ 866.396225][T10531] name failslab, interval 1, probability 0, space 0, times 0 [ 866.396258][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.5.862 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 866.396279][T10531] Tainted: [L]=SOFTLOCKUP [ 866.396284][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.396294][T10531] Call Trace: [ 866.396299][T10531] [ 866.396306][T10531] dump_stack_lvl+0xe8/0x150 [ 866.396344][T10531] should_fail_ex+0x46b/0x600 [ 866.396370][T10531] should_failslab+0xa8/0x100 [ 866.396387][T10531] kmem_cache_alloc_node_noprof+0xac/0x660 [ 866.396408][T10531] ? alloc_vmap_area+0x21c/0x1420 [ 866.396425][T10531] ? alloc_vmap_area+0x21c/0x1420 [ 866.396445][T10531] alloc_vmap_area+0x21c/0x1420 [ 866.396472][T10531] ? __pfx_alloc_vmap_area+0x10/0x10 [ 866.396491][T10531] ? __get_vm_area_node+0x155/0x2f0 [ 866.396511][T10531] __get_vm_area_node+0x200/0x2f0 [ 866.396534][T10531] __vmalloc_node_range_noprof+0x343/0x1540 [ 866.396553][T10531] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 866.396588][T10531] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 866.396608][T10531] ? kernel_text_address+0xa5/0xe0 [ 866.396631][T10531] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 866.396645][T10531] __vmalloc_noprof+0xd2/0x120 [ 866.396663][T10531] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 866.396678][T10531] bpf_prog_alloc_no_stats+0x47/0x560 [ 866.396690][T10531] ? bpf_prog_alloc+0x2a/0x1a0 [ 866.396704][T10531] bpf_prog_alloc+0x3c/0x1a0 [ 866.396718][T10531] bpf_prog_load+0x7f8/0x1c20 [ 866.396740][T10531] ? __pfx_bpf_prog_load+0x10/0x10 [ 866.396772][T10531] __sys_bpf+0xd0d/0xd90 [ 866.396797][T10531] ? __pfx___sys_bpf+0x10/0x10 [ 866.396818][T10531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 866.396843][T10531] ? rt_mutex_slowunlock+0x219/0x460 [ 866.396874][T10531] ? ksys_write+0x248/0x270 [ 866.396895][T10531] ? __pfx_ksys_write+0x10/0x10 [ 866.396917][T10531] __x64_sys_bpf+0xba/0xd0 [ 866.396938][T10531] do_syscall_64+0x166/0x520 [ 866.396957][T10531] ? trace_irq_disable+0x3b/0x140 [ 866.396978][T10531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.396992][T10531] ? clear_bhb_loop+0x70/0xc0 [ 866.397008][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.397021][T10531] RIP: 0033:0x7f0a8b9fe559 [ 866.397035][T10531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.397047][T10531] RSP: 002b:00007f0a89c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.397063][T10531] RAX: ffffffffffffffda RBX: 00007f0a8bc85fa0 RCX: 00007f0a8b9fe559 [ 866.397073][T10531] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 866.397081][T10531] RBP: 00007f0a89c56090 R08: 0000000000000000 R09: 0000000000000000 [ 866.397090][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.397097][T10531] R13: 00007f0a8bc86038 R14: 00007f0a8bc85fa0 R15: 00007ffdb16716e8 [ 866.397120][T10531] [ 866.397937][T10531] syz.5.862: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 866.398259][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.5.862 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 866.398287][T10531] Tainted: [L]=SOFTLOCKUP [ 866.398293][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 866.398304][T10531] Call Trace: [ 866.398310][T10531] [ 866.398326][T10531] dump_stack_lvl+0xe8/0x150 [ 866.398355][T10531] warn_alloc+0x24d/0x270 [ 866.398382][T10531] ? lockdep_hardirqs_on+0x7b/0x110 [ 866.398410][T10531] ? __pfx_warn_alloc+0x10/0x10 [ 866.398434][T10531] ? kfree+0x1c5/0x6d0 [ 866.398463][T10531] ? __get_vm_area_node+0x219/0x2f0 [ 866.398494][T10531] __vmalloc_node_range_noprof+0x36b/0x1540 [ 866.398547][T10531] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 866.398572][T10531] ? kernel_text_address+0xa5/0xe0 [ 866.398600][T10531] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 866.398617][T10531] __vmalloc_noprof+0xd2/0x120 [ 866.398640][T10531] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 866.398660][T10531] bpf_prog_alloc_no_stats+0x47/0x560 [ 866.398677][T10531] ? bpf_prog_alloc+0x2a/0x1a0 [ 866.398696][T10531] bpf_prog_alloc+0x3c/0x1a0 [ 866.398716][T10531] bpf_prog_load+0x7f8/0x1c20 [ 866.398746][T10531] ? __pfx_bpf_prog_load+0x10/0x10 [ 866.398789][T10531] __sys_bpf+0xd0d/0xd90 [ 866.398820][T10531] ? __pfx___sys_bpf+0x10/0x10 [ 866.398848][T10531] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 866.398876][T10531] ? rt_mutex_slowunlock+0x219/0x460 [ 866.398914][T10531] ? ksys_write+0x248/0x270 [ 866.398938][T10531] ? __pfx_ksys_write+0x10/0x10 [ 866.398964][T10531] __x64_sys_bpf+0xba/0xd0 [ 866.398991][T10531] do_syscall_64+0x166/0x520 [ 866.399012][T10531] ? trace_irq_disable+0x3b/0x140 [ 866.399033][T10531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.399051][T10531] ? clear_bhb_loop+0x70/0xc0 [ 866.399073][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.399090][T10531] RIP: 0033:0x7f0a8b9fe559 [ 866.399106][T10531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.399120][T10531] RSP: 002b:00007f0a89c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 866.399137][T10531] RAX: ffffffffffffffda RBX: 00007f0a8bc85fa0 RCX: 00007f0a8b9fe559 [ 866.399149][T10531] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 866.399160][T10531] RBP: 00007f0a89c56090 R08: 0000000000000000 R09: 0000000000000000 [ 866.399172][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.399182][T10531] R13: 00007f0a8bc86038 R14: 00007f0a8bc85fa0 R15: 00007ffdb16716e8 [ 866.399211][T10531] [ 866.399371][T10531] Mem-Info: [ 866.399384][T10531] active_anon:3049 inactive_anon:6825 isolated_anon:0 [ 866.399384][T10531] active_file:21637 inactive_file:38512 isolated_file:0 [ 866.399384][T10531] unevictable:0 dirty:414 writeback:0 [ 866.399384][T10531] slab_reclaimable:12545 slab_unreclaimable:111499 [ 866.399384][T10531] mapped:30227 shmem:3423 pagetables:1777 [ 866.399384][T10531] sec_pagetables:0 bounce:0 [ 866.399384][T10531] kernel_misc_reclaimable:0 [ 866.399384][T10531] free:1279149 free_pcp:2826 free_cma:0 [ 866.399439][T10531] Node 0 active_anon:12196kB inactive_anon:27300kB active_file:86340kB inactive_file:154048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120908kB dirty:1652kB writeback:0kB shmem:13692kB kernel_stack:13788kB pagetables:6956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 866.399487][T10531] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 866.399531][T10531] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 866.399582][T10531] lowmem_reserve[]: 0 2480 2482 2482 2482 [ 866.399615][T10531] Node 0 DMA32 free:1170228kB boost:0kB min:3900kB low:6412kB high:8924kB reserved_highatomic:0kB free_highatomic:0kB active_anon:12196kB inactive_anon:27300kB active_file:86340kB inactive_file:154048kB unevictable:0kB writepending:1652kB zspages:0kB present:3129332kB managed:2540288kB mlocked:0kB bounce:0kB free_pcp:11296kB local_pcp:688kB free_cma:0kB [ 866.399672][T10531] lowmem_reserve[]: 0 0 1 1 1 [ 866.399703][T10531] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1804kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 866.399756][T10531] lowmem_reserve[]: 0 0 0 0 0 [ 866.399786][T10531] Node 1 Normal free:3931008kB boost:0kB min:6380kB low:10488kB high:14596kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 866.399839][T10531] lowmem_reserve[]: 0 0 0 0 0 [ 866.399874][T10531] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 866.399986][T10531] Node 0 DMA32: 1530*4kB (UME) 1428*8kB (UME) 734*16kB (UME) 1723*32kB (UME) 477*64kB (UM) 278*128kB (UME) 143*256kB (UME) 42*512kB (UME) 21*1024kB (ME) 3*2048kB (M) 228*4096kB (UM) = 1170184kB [ 866.400137][T10531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 866.400230][T10531] Node 1 Normal: 2*4kB (M) 1*8kB (M) 7*16kB (UM) 6*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3931008kB [ 866.400495][T10531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 866.400511][T10531] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 866.400526][T10531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 866.400542][T10531] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 866.400557][T10531] 63518 total pagecache pages [ 866.400569][T10531] 0 pages in swap cache [ 866.400576][T10531] Free swap = 124996kB [ 866.400583][T10531] Total swap = 124996kB [ 866.400591][T10531] 2097051 pages RAM [ 866.400597][T10531] 0 pages HighMem/MovableOnly [ 866.400604][T10531] 429912 pages reserved [ 866.400610][T10531] 0 pages cma reserved [ 866.401236][T10525] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input91 [ 867.472514][T10538] FAULT_INJECTION: forcing a failure. [ 867.472514][T10538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.472559][T10538] CPU: 0 UID: 0 PID: 10538 Comm: syz.5.865 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 867.472591][T10538] Tainted: [L]=SOFTLOCKUP [ 867.472598][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 867.472608][T10538] Call Trace: [ 867.472615][T10538] [ 867.472622][T10538] dump_stack_lvl+0xe8/0x150 [ 867.472654][T10538] should_fail_ex+0x46b/0x600 [ 867.472697][T10538] _copy_from_user+0x2d/0xb0 [ 867.472719][T10538] map_update_elem+0x57c/0xa80 [ 867.472747][T10538] __sys_bpf+0xb06/0xd90 [ 867.472781][T10538] ? __pfx___sys_bpf+0x10/0x10 [ 867.472808][T10538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 867.472861][T10538] ? rt_mutex_slowunlock+0x219/0x460 [ 867.472901][T10538] ? ksys_write+0x248/0x270 [ 867.472928][T10538] ? __pfx_ksys_write+0x10/0x10 [ 867.472957][T10538] __x64_sys_bpf+0xba/0xd0 [ 867.472990][T10538] do_syscall_64+0x166/0x520 [ 867.473014][T10538] ? trace_irq_disable+0x3b/0x140 [ 867.473037][T10538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.473055][T10538] ? clear_bhb_loop+0x70/0xc0 [ 867.473077][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.473095][T10538] RIP: 0033:0x7f0a8b9fe559 [ 867.473113][T10538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.473128][T10538] RSP: 002b:00007f0a89c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 867.473148][T10538] RAX: ffffffffffffffda RBX: 00007f0a8bc85fa0 RCX: 00007f0a8b9fe559 [ 867.473162][T10538] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000002 [ 867.473175][T10538] RBP: 00007f0a89c56090 R08: 0000000000000000 R09: 0000000000000000 [ 867.473186][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.473197][T10538] R13: 00007f0a8bc86038 R14: 00007f0a8bc85fa0 R15: 00007ffdb16716e8 [ 867.473228][T10538] [ 868.232387][T10542] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 870.942418][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.942491][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.162229][T10573] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.599380][T10585] binder: BINDER_SET_CONTEXT_MGR already set [ 871.599459][T10585] binder: 10575:10585 ioctl 4018620d 200000001000 returned -16 [ 872.211291][T10579] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 874.154139][ T8099] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 874.314177][ T8099] usb 6-1: Using ep0 maxpacket: 16 [ 874.315145][ T8099] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 874.316854][ T8099] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 874.316878][ T8099] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 874.316897][ T8099] usb 6-1: config 8 has no interface number 0 [ 874.316941][ T8099] usb 6-1: config 8 interface 223 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 874.316964][ T8099] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 874.320008][ T8099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.320031][ T8099] usb 6-1: Product: syz [ 874.320045][ T8099] usb 6-1: Manufacturer: syz [ 874.320059][ T8099] usb 6-1: SerialNumber: syz [ 874.456652][T10601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 874.658384][T10614] 9pnet_fd: Insufficient options for proto=fd [ 875.397654][T10609] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input92 [ 875.769985][ T8099] usb 6-1: USB disconnect, device number 2 [ 876.451921][T10635] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 878.651350][T10639] openvswitch: netlink: Key type 9220 is out of range max 32 [ 878.764123][ T5584] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 879.474179][ T5584] usb 8-1: Using ep0 maxpacket: 32 [ 879.475538][ T5584] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 879.477958][ T5584] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.477987][ T5584] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.482916][ T5584] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 879.482941][ T5584] usb 8-1: Product: syz [ 879.482955][ T5584] usb 8-1: Manufacturer: syz [ 879.623932][ T5584] hub 8-1:4.0: USB hub found [ 879.868554][ T5584] hub 8-1:4.0: 2 ports detected [ 880.082650][T10646] trusted_key: encrypted_key: insufficient parameters specified [ 881.117134][ T5584] hub 8-1:4.0: config failed, can't get hub status (err -32) [ 881.753033][T10678] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 881.887602][T10679] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input93 [ 882.088332][ T1000] usb 8-1: USB disconnect, device number 2 [ 883.589427][T10727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.926'. [ 883.886772][ T30] kernel write not supported for file 89/net/vlan/vlan1 (pid: 30 comm: kworker/1:0) [ 884.181384][T10739] comedi comedi4: bad chanlist[0]=0x7fffffff chan=65535 range length=2 [ 884.611085][T10744] syz.3.935 (10744) used greatest stack depth: 17440 bytes left [ 884.801499][T10756] pimreg3: entered allmulticast mode [ 884.844137][ T5589] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 885.028783][ T5589] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 885.031120][ T5589] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.031174][ T5589] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.180755][ T5589] as10x_usb: device has been detected [ 885.181967][ T5589] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 885.363840][T10775] vlan2: entered promiscuous mode [ 885.363863][T10775] bridge0: entered promiscuous mode [ 885.376174][T10776] bridge0: port 3(syz_tun) entered blocking state [ 885.376302][T10776] bridge0: port 3(syz_tun) entered disabled state [ 885.376484][T10776] syz_tun: entered allmulticast mode [ 885.385776][T10776] syz_tun: entered promiscuous mode [ 885.392021][T10776] bridge0: port 3(syz_tun) entered blocking state [ 885.392201][T10776] bridge0: port 3(syz_tun) entered forwarding state [ 885.507011][ T5589] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 885.698305][T10780] INFO: trying to register non-static key. [ 885.704153][T10780] The code is fine but needs lockdep annotation, or maybe [ 885.711271][T10780] you didn't initialize this object before use? [ 885.717494][T10780] turning off the locking correctness validator. [ 885.723810][T10780] CPU: 1 UID: 0 PID: 10780 Comm: syz.5.937 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 885.735169][T10780] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 885.739487][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.749550][T10780] Call Trace: [ 885.752825][T10780] [ 885.755754][T10780] dump_stack_lvl+0xe8/0x150 [ 885.760386][T10780] assign_lock_key+0x133/0x150 [ 885.765157][T10780] register_lock_class+0xcc/0x2e0 [ 885.770188][T10780] ? __lock_acquire+0x747/0x2de0 [ 885.775132][T10780] __lock_acquire+0x10c/0x2de0 [ 885.780069][T10780] ? __lock_acquire+0x747/0x2de0 [ 885.785011][T10780] ? __lock_acquire+0x747/0x2de0 [ 885.789957][T10780] lock_acquire+0x115/0x350 [ 885.794470][T10780] ? as102_stream_ctrl+0x27/0xc0 [ 885.799435][T10780] ? as102_stream_ctrl+0x27/0xc0 [ 885.804414][T10780] ? as102_stream_ctrl+0x27/0xc0 [ 885.809360][T10780] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 885.815433][T10780] ? as102_stream_ctrl+0x27/0xc0 [ 885.820377][T10780] as102_stream_ctrl+0x27/0xc0 [ 885.825145][T10780] __dvb_frontend_open+0x2ef/0xc40 [ 885.830259][T10780] ? mutex_lock_nested+0x152/0x1d0 [ 885.835368][T10780] ? __pfx_dvb_frontend_open+0x10/0x10 [ 885.840826][T10780] dvb_device_open+0x258/0x350 [ 885.845598][T10780] chrdev_open+0x4dc/0x600 [ 885.850106][T10780] ? __pfx_chrdev_open+0x10/0x10 [ 885.855037][T10780] ? __pfx_chrdev_open+0x10/0x10 [ 885.859960][T10780] do_dentry_open+0x849/0x1420 [ 885.864716][T10780] vfs_open+0x3b/0x350 [ 885.868772][T10780] ? path_openat+0x16a9/0x20a0 [ 885.873525][T10780] path_openat+0x16c4/0x20a0 [ 885.878119][T10780] do_file_open+0x23e/0x4a0 [ 885.882615][T10780] ? __pfx_do_file_open+0x10/0x10 [ 885.887636][T10780] ? alloc_fd+0x654/0x6d0 [ 885.891956][T10780] do_sys_openat2+0x115/0x200 [ 885.896619][T10780] ? __se_sys_futex+0x3a8/0x450 [ 885.901506][T10780] ? __pfx_do_sys_openat2+0x10/0x10 [ 885.906701][T10780] ? rcu_is_watching+0x16/0xb0 [ 885.911451][T10780] __x64_sys_openat+0x138/0x170 [ 885.916293][T10780] do_syscall_64+0x166/0x520 [ 885.920876][T10780] ? trace_irq_disable+0x3b/0x140 [ 885.925894][T10780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.931946][T10780] ? clear_bhb_loop+0x70/0xc0 [ 885.936609][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.942490][T10780] RIP: 0033:0x7f0a8b9bed8e [ 885.946897][T10780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 885.966500][T10780] RSP: 002b:00007f0a89c34b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 885.974906][T10780] RAX: ffffffffffffffda RBX: 00007f0a89c356c0 RCX: 00007f0a8b9bed8e [ 885.982863][T10780] RDX: 0000000000000802 RSI: 00007f0a89c34c00 RDI: ffffffffffffff9c [ 885.990818][T10780] RBP: 00007f0a89c34c00 R08: 0000000000000000 R09: 0000000000000000 [ 885.998776][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 886.006731][T10780] R13: 00007f0a8bc86128 R14: 00007f0a8bc86090 R15: 00007ffdb16716e8 [ 886.014700][T10780] [ 886.033623][ T5589] as10x_usb: error during firmware upload part1 [ 886.040505][ T5589] Registered device Abilis Systems DVB-Titan [ 886.285816][ T1000] usb 6-1: USB disconnect, device number 3 [ 886.307911][ T1000] Unregistered device Abilis Systems DVB-Titan [ 886.312835][ T1000] as10x_usb: device has been disconnected [ 887.316262][ T5582] bridge0: port 3(syz_tun) entered disabled state [ 887.395439][ T5582] syz_tun (unregistering): left allmulticast mode [ 887.395460][ T5582] syz_tun (unregistering): left promiscuous mode [ 887.395505][ T5582] bridge0: port 3(syz_tun) entered disabled state [ 887.935078][ T793] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.195047][ T793] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.435081][ T793] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.655000][ T793] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.015848][ T793] bridge_slave_1: left allmulticast mode [ 889.015877][ T793] bridge_slave_1: left promiscuous mode [ 889.016832][ T793] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.184857][ T793] bridge_slave_0: left allmulticast mode [ 889.184885][ T793] bridge_slave_0: left promiscuous mode [ 889.185067][ T793] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.315645][ T793] pimreg3: left allmulticast mode [ 889.784619][ T793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.864949][ T793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.885177][ T793] bond0 (unregistering): Released all slaves [ 889.925282][ T5243] 8021q: adding VLAN 0 to HW filter on device eth14 [ 890.153011][ T5243] 8021q: adding VLAN 0 to HW filter on device eth13 [ 890.755885][ T5243] 8021q: adding VLAN 0 to HW filter on device eth15 [ 891.094175][ T793] hsr_slave_0: left promiscuous mode [ 891.135065][ T793] hsr_slave_1: left promiscuous mode [ 891.135909][ T793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.135922][ T793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.185900][ T793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.185923][ T793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.254591][ T793] veth1_macvtap: left promiscuous mode [ 891.254657][ T793] veth0_macvtap: left promiscuous mode [ 891.254746][ T793] veth1_vlan: left promiscuous mode [ 891.254797][ T793] veth0_vlan: left promiscuous mode [ 891.754674][ T793] team0 (unregistering): Port device team_slave_1 removed [ 891.794505][ T793] team0 (unregistering): Port device team_slave_0 removed [ 891.885489][ T5243] 8021q: adding VLAN 0 to HW filter on device eth16 [ 892.986028][ T793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.216542][ T793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.426311][ T793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.645286][ T793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.072495][ T793] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.115164][ T5243] 8021q: adding VLAN 0 to HW filter on device eth17 [ 894.336820][ T793] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.385312][ T5243] 8021q: adding VLAN 0 to HW filter on device eth18 [ 894.625360][ T793] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.675262][ T5243] 8021q: adding VLAN 0 to HW filter on device eth19 [ 894.915187][ T793] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.965647][ T5243] 8021q: adding VLAN 0 to HW filter on device eth20 [ 895.366573][ T793] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.405471][ T5243] 8021q: adding VLAN 0 to HW filter on device eth21 [ 895.645067][ T793] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0