last executing test programs: 5m54.605698602s ago: executing program 3 (id=4): r0 = openat$md_sysfs(0xffffffffffffff9c, &(0x7f0000000140)={'/sys/block/md', @num=0x0, '/md/', @array='raid_disks\x00'}, 0x1, 0x0) write$md_sysfs(r0, &(0x7f0000000180)=@str='2', 0x1) 5m50.753844859s ago: executing program 3 (id=17): socket(0x8, 0x5, 0x5) 5m48.927844081s ago: executing program 3 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019480)=0x4000007) socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40000) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r5}) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, 0x0, 0x0, r6) 5m46.968733067s ago: executing program 3 (id=22): syz_usb_connect(0x2, 0xe4, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501", @ANYRESHEX=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x2, 0x1, {0x0}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1a2) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x8) landlock_restrict_self(r2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1001, 0x2, 0x1}) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, 0x0, 0x0) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800000, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x6, 0x4, 0x3, 0x15005, 0x9, 0x3}, 0x30, 0x3) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000440)={@dev}, &(0x7f0000000480)=0x14) chdir(&(0x7f0000000500)='./file0\x00') symlinkat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 5m30.70376422s ago: executing program 32 (id=22): syz_usb_connect(0x2, 0xe4, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501", @ANYRESHEX=0x0], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000180)={0x9, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x8, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'X\x00\b\x00'}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x10000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "68ab0498"}, 0x2, 0x1, {0x0}}) mkdirat(0xffffffffffffff9c, 0x0, 0x1a2) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x8) landlock_restrict_self(r2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1001, 0x2, 0x1}) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, 0x0, 0x0) mount(&(0x7f0000000340)=@filename='mtd0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='jffs2\x00', 0x800000, 0x0) landlock_create_ruleset(&(0x7f0000000400)={0x6, 0x4, 0x3, 0x15005, 0x9, 0x3}, 0x30, 0x3) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000440)={@dev}, &(0x7f0000000480)=0x14) chdir(&(0x7f0000000500)='./file0\x00') symlinkat(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r6, 0x6430) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 5m9.426624697s ago: executing program 2 (id=59): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, r1}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000400)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSNLIST(r3, 0x8010640b, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x8000000, 0x300, 0x0, 0x0, 0x3333333}]}) bind$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f00000004c0)=""/139, &(0x7f0000000580)=0x8) write(0xffffffffffffffff, &(0x7f0000000200)="07000000010000", 0x7) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) 5m9.138565695s ago: executing program 2 (id=60): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000040)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r2, &(0x7f0000000080)=[{0x1, 0xff80, 0x1400}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x8000000, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e1f}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}]}, 0x60}}, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m7.189531762s ago: executing program 2 (id=62): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="f32700000000ffdbdf2507000000c80002"], 0xdc}, 0x1, 0x0, 0x0, 0x6}, 0x4020) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000080000000600002000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 5m5.808499019s ago: executing program 2 (id=64): mkdirat(0xffffffffffffff9c, &(0x7f0000001980)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000019c0)='./proc\x00', &(0x7f0000001a00)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001a80)='27', 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0xc73e, [[0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x83c], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0x3], [0x2, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffdfff, 0xffffffff, 0x3]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x7, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x138a, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x2, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x661cb7fb, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4001, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000480), 0xc, 0x80182) r4 = open(&(0x7f00000004c0)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000500)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000580)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/214, 0xd6}, {0x0}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000780)={0x0, 0x2000, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="0c005a800308038004000100"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, 0x0, 0x48000) r8 = socket(0x2a, 0x1, 0x9) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) setresgid(r9, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c260000280029002dbd7000f9ffffff05000000041004"], 0x260c}, 0x1, 0x0, 0x0, 0x8c811}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)) 5m2.694107396s ago: executing program 2 (id=67): waitid(0x2, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 4m57.707130846s ago: executing program 2 (id=71): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x125d, 0x0) 4m42.182266251s ago: executing program 33 (id=71): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) recvmmsg(r1, &(0x7f00000002c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x6004, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x125d, 0x0) 3m6.088518877s ago: executing program 1 (id=184): r0 = getpid() r1 = io_uring_setup(0xc90, &(0x7f0000000000)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) 3m4.707075391s ago: executing program 1 (id=185): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x4a0a80, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f00000003c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r2, 0xa) sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x28}, 0x0) listen(r2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket(0x1d, 0x1, 0x0) 3m3.29914523s ago: executing program 1 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000009b40)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000022b40)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r5, &(0x7f0000022b80)=[{0x0}], 0x1, 0x6, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 3m1.483677887s ago: executing program 1 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000ce000000b70000000200000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c000) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000a80)=0x10000000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000ac0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f000004b6c0)={r1, 0xffff0000, 0xe, 0x0, &(0x7f000004b740)="ddff00001a748296f3d62a7200d7", 0x0, 0x1, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f000004b780), 0x4) 2m56.104204634s ago: executing program 1 (id=190): r0 = socket$inet(0x2, 0x5, 0xfffff529) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc1a, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./trace\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r4], 0x48) r5 = syz_io_uring_setup(0xd3a, &(0x7f00000006c0)={0x0, 0x8000002, 0x3a10, 0x3, 0x3}, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000800)=@IORING_OP_MSG_RING={0x28, 0x16, 0x0, r5, 0x0, 0x0, 0x8, 0x2, 0x1}) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000880)={0xa, 0x0, 0x4, @local, 0x80000000}, 0x20) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000008c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000940)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f0000000340)=0x6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r11, &(0x7f0000000240), 0x700, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) 2m45.993026347s ago: executing program 1 (id=193): getpgrp(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_clone(0x88000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8c0, 0x2bd6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000900"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040400030300010009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) socket$inet(0x2, 0x80004, 0x200) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m30.484818598s ago: executing program 34 (id=193): getpgrp(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_clone(0x88000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8c0, 0x2bd6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000900"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000206d0437c500000000000109022400010000980009040400030300010009210010010122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) socket$inet(0x2, 0x80004, 0x200) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2m5.633777175s ago: executing program 0 (id=216): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000bc0)='3', 0x4e) write(r0, 0x0, 0x0) 2m5.440491488s ago: executing program 0 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x2) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r3, 0x5421, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000400)={0x7f, 0x2, 0x3711}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="024476590c252200f800054fa8127e9ad1a226d18dcfb737c69d295b810037ad63dc5cafd75a275ce9dc47d4090000004a30b510f3fd075af3965f4398cb9a6fdc1e"], 0x24}}, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000500)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000540)={0x0, 0x7}, 0x8) close(r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000006c0), 0x2e9, 0x0) syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x60000) 2m4.082120059s ago: executing program 0 (id=218): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$inet(0xa, 0x801, 0x84) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40000) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) 2m3.837561001s ago: executing program 0 (id=219): openat$fuse(0xffffffffffffff9c, &(0x7f0000001980), 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x89e1, &(0x7f00000018c0)='lapb0') 2m3.751737432s ago: executing program 0 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000300)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r4, &(0x7f0000009b40)=""/102392, 0x18ff8) r5 = openat(0xffffffffffffff9c, &(0x7f0000022b40)='./debug/lru_gen\x00', 0x2, 0x0) preadv(r5, &(0x7f0000022b80)=[{&(0x7f0000022bc0)=""/4096, 0x1000}], 0x1, 0x6, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xff}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m2.128314993s ago: executing program 0 (id=221): r0 = getpid() sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r1 = io_uring_setup(0xc90, &(0x7f0000000000)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sync() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r4, @ANYRES8, @ANYRESDEC=r2], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) readv(r5, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/214, 0xd6}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000440), 0x1c) 1m46.150123835s ago: executing program 35 (id=221): r0 = getpid() sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) r1 = io_uring_setup(0xc90, &(0x7f0000000000)={0x0, 0x4f9, 0x0, 0x1}) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff}], 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sync() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRES16=r0, @ANYRES8, @ANYRES32=r4, @ANYRES8, @ANYRESDEC=r2], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) readv(r5, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/214, 0xd6}], 0x1) socket$kcm(0x2, 0xa, 0x2) syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) close(0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000440), 0x1c) 9.299269447s ago: executing program 4 (id=291): r0 = syz_usb_connect(0x3, 0x40, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="900100"/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000240)="9101000000112233445500"/64) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) 8.509972179s ago: executing program 4 (id=292): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1800000) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001e1400000009", @ANYBLOB="212efd7f8bcb57f51f688bb7257abb940140769cf8b656281402f793ae11cb258a63bc5b2c36542bf1c106530ddc12e93dce0e4979001b86f3104464d0ce5609000000a0839c344d0b8819cb920688acff4693ad55b5f6b3a853cca8f7ce716759cca2beb631ed5c114d3646d30a31cb85d0d704b13d04c1e0547c9fe3804fe21f0be75684e380e0e459dc4be3f07ef2105671eca613d415edd53222ddbe085ed4e4447a89806bf132a8a3b485164ee90454acca3e268b9db7de3795aa1caa9aa9e271c5d7e9c7845203875adb755a595210f3217c3b", @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x2e, 0xb56cea99d7d0f667]}}, 0x0, 0x34, 0x0, 0x0, 0x7}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x54) sendmmsg$unix(r4, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config\x00', &(0x7f00000009c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nullb/rnullb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nullb/rnullb0\x00', 0x200) 3.332772373s ago: executing program 4 (id=293): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x4a0a80, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x28}, 0x0) setregid(0xffffffffffffffff, 0x0) listen(r1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket(0x1d, 0x1, 0x0) 2.94833877s ago: executing program 4 (id=294): syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88b15, 0x1, 0x0, 0x8000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x0, 0xfffffffd, 0x68}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fe3, 0x1000, 0x1, 0x368}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x40006253, 0x4000, 0x0, 0x37d}}], 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003a00010026bd7000ffd9df"], 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000a80), 0x801, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f00000008c0), 0xfffffffffffffffe, 0x22200) request_key(&(0x7f0000000b80)='asymmetric\x00', &(0x7f0000000bc0)={'syz', 0x2}, &(0x7f0000000c00)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="d400000028000103a5bd7002fadbd725"], 0xd4}}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r5) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="25010200000000"], 0x14}}, 0x2000000) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB='?6h\x00\x004', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf250100000008000200020000000800010001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0285629, &(0x7f0000000640)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000740)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 1.810790857s ago: executing program 4 (id=295): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000580)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000600), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000019640)=0x40003) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000196c0)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x2004809c) gettid() io_uring_setup(0x31e1, &(0x7f0000019800)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') pread64(r4, &(0x7f0000000040)=""/154, 0x9a, 0x4) 0s ago: executing program 4 (id=296): sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) kernel console output (not intermixed with test programs): new IBSS network, BSSID 50:50:50:50:50:50 [ 113.849443][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.849468][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.773433][ T5856] Zero length message leads to an empty skb [ 116.188560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.188584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.494189][ T1179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.422118][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.422137][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.626588][ T147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.627381][ T147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.627720][ T147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.667709][ T147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.669619][ T1180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.669834][ T1180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.704040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.704063][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.847214][ T1180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.895512][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.895536][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.895801][ T1180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.904741][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.911418][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.958165][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.962976][ T1170] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.963174][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.963340][ T1170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.004267][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.013108][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.086963][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.087176][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.087938][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.664346][ T5893] syz.2.13 (5893) used greatest stack depth: 19224 bytes left [ 126.805697][ T5735] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 128.141442][ T5735] usb 5-1: device not accepting address 2, error -71 [ 132.332019][ T5923] can: request_module (can-proto-0) failed. [ 133.097824][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.097965][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.175050][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 138.410168][ T35] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.635138][ T5748] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.669244][ T5974] can: request_module (can-proto-0) failed. [ 142.987107][ T5589] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 143.141371][ T5589] usb 4-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 143.177825][ T5589] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 143.177849][ T5589] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 143.177869][ T5589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.177883][ T5589] usb 4-1: config 0 has no interface number 0 [ 143.177919][ T5589] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 143.177936][ T5589] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12408, setting to 64 [ 143.177956][ T5589] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 143.177988][ T5589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.387126][ T5589] usb 4-1: config 0 descriptor?? [ 145.249548][ T5999] rxe_eth0 speed is unknown, defaulting to 1000 [ 146.696247][ T5589] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 146.726573][ T1129] usb 4-1: Failed to submit usb control message: -71 [ 146.726611][ T1129] usb 4-1: unable to send the bmi data to the device: -71 [ 146.726625][ T1129] usb 4-1: unable to get target info from device [ 146.726648][ T1129] usb 4-1: could not get target info (-71) [ 146.726825][ T1129] usb 4-1: could not probe fw (-71) [ 146.891901][ T5589] usb 4-1: USB disconnect, device number 2 [ 147.957937][ T5612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.977219][ T5612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.003451][ T5612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 148.019014][ T5612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 148.024440][ T5612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.222142][ T6019] ======================================================= [ 149.222142][ T6019] WARNING: The mand mount option has been deprecated and [ 149.222142][ T6019] and is ignored by this kernel. Remove the mand [ 149.222142][ T6019] option from the mount to silence this warning. [ 149.222142][ T6019] ======================================================= [ 151.813595][ T5617] Bluetooth: hci5: command tx timeout [ 152.489928][ T5748] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.794263][ T5748] usb 3-1: New USB device found: idVendor=0a12, idProduct=0002, bcdDevice=10.00 [ 152.935706][ T5748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.935729][ T5748] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 152.935757][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.469782][ T5748] usb 3-1: USB disconnect, device number 3 [ 153.885433][ T5612] Bluetooth: hci5: command tx timeout [ 154.940528][ T6007] rxe_eth0 speed is unknown, defaulting to 1000 [ 155.342340][ T6042] FAULT_INJECTION: forcing a failure. [ 155.342340][ T6042] name failslab, interval 1, probability 0, space 0, times 1 [ 155.342383][ T6042] CPU: 0 UID: 0 PID: 6042 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.342402][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.342419][ T6042] Call Trace: [ 155.342428][ T6042] [ 155.342436][ T6042] dump_stack_lvl+0xe8/0x150 [ 155.342476][ T6042] should_fail_ex+0x447/0x5e0 [ 155.342503][ T6042] should_failslab+0xa8/0x100 [ 155.342524][ T6042] __kmalloc_noprof+0xf6/0x790 [ 155.342552][ T6042] ? fib6_info_alloc+0x30/0xf0 [ 155.342575][ T6042] ? fib6_info_alloc+0x30/0xf0 [ 155.342607][ T6042] fib6_info_alloc+0x30/0xf0 [ 155.342632][ T6042] ip6_route_info_create+0x149/0x890 [ 155.342664][ T6042] addrconf_f6i_alloc+0x38b/0x630 [ 155.342683][ T6042] ? addrconf_f6i_alloc+0xfd/0x630 [ 155.342699][ T6042] ? __pfx_addrconf_f6i_alloc+0x10/0x10 [ 155.342713][ T6042] ? rwbase_write_lock+0x5b8/0x7f0 [ 155.342762][ T6042] ? __ipv6_dev_ac_inc+0x36/0xbf0 [ 155.342785][ T6042] __ipv6_dev_ac_inc+0x37b/0xbf0 [ 155.342809][ T6042] ? ipv6_chk_prefix+0x2b/0x510 [ 155.342834][ T6042] ipv6_sock_ac_join+0x665/0x820 [ 155.342893][ T6042] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 155.342932][ T6042] ? _copy_from_user+0x94/0xb0 [ 155.342959][ T6042] do_ipv6_setsockopt+0x1f56/0x2960 [ 155.342982][ T6042] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 155.343004][ T6042] ? futex_wait+0x2a2/0x390 [ 155.343035][ T6042] ? __lock_acquire+0x747/0x2de0 [ 155.343065][ T6042] ? security_file_alloc+0x34/0x310 [ 155.343104][ T6042] ? do_futex+0x3e7/0x4e0 [ 155.343124][ T6042] ? __asan_memcpy+0x40/0x70 [ 155.343153][ T6042] ? lock_acquire+0x115/0x350 [ 155.343186][ T6042] ? __fget_files+0x2a/0x420 [ 155.343215][ T6042] ipv6_setsockopt+0x59/0x170 [ 155.343233][ T6042] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.343259][ T6042] do_sock_setsockopt+0x17c/0x1b0 [ 155.343279][ T6042] __x64_sys_setsockopt+0x143/0x1b0 [ 155.343300][ T6042] do_syscall_64+0x166/0x520 [ 155.343318][ T6042] ? trace_irq_disable+0x3b/0x140 [ 155.343335][ T6042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.343364][ T6042] ? clear_bhb_loop+0x70/0xc0 [ 155.343388][ T6042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.343405][ T6042] RIP: 0033:0x7f9a1729f559 [ 155.343429][ T6042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.343444][ T6042] RSP: 002b:00007f9a154f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.343465][ T6042] RAX: ffffffffffffffda RBX: 00007f9a17525fa0 RCX: 00007f9a1729f559 [ 155.343478][ T6042] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 155.343488][ T6042] RBP: 00007f9a17336b20 R08: 0000000000000020 R09: 0000000000000000 [ 155.343498][ T6042] R10: 0000200000001500 R11: 0000000000000246 R12: 0000000000000000 [ 155.343508][ T6042] R13: 00007f9a17526038 R14: 00007f9a17525fa0 R15: 00007ffefb73b2b8 [ 155.343534][ T6042] [ 155.967150][ T5612] Bluetooth: hci5: command tx timeout [ 156.351138][ T5858] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.859139][ T5858] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.048259][ T5612] Bluetooth: hci5: command tx timeout [ 158.084979][ T5589] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 159.537754][ T5589] usb 5-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 159.769767][ T5589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 159.769790][ T5589] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 159.769808][ T5589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 159.769824][ T5589] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 159.769853][ T5589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.852444][ T5589] usb 5-1: config 0 descriptor?? [ 162.409666][ T5589] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 162.409695][ T5589] hdpvr 5-1:0.0: device init failed [ 162.409762][ T5589] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 162.584628][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 162.584653][ T6071] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.54'. [ 162.584790][ T5589] usb 5-1: USB disconnect, device number 4 [ 165.888261][ T5858] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.889614][ T5858] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.944655][ T6082] comedi comedi4: bad chanlist[0]=0x03333333 chan=13107 range length=2 [ 168.781492][ T6088] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 170.322936][ T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.441104][ T30] usb 5-1: unable to get BOS descriptor or descriptor too short [ 171.441175][ T30] usb 5-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 171.477564][ T30] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.477618][ T30] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 171.530714][ T5858] bridge_slave_1: left allmulticast mode [ 171.530869][ T5858] bridge_slave_1: left promiscuous mode [ 171.576766][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.626280][ T30] usb 5-1: string descriptor 0 read error: -22 [ 171.626429][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.808077][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.65'. [ 171.870812][ T5858] bridge_slave_0: left allmulticast mode [ 171.870850][ T5858] bridge_slave_0: left promiscuous mode [ 171.871093][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.461408][ T6117] nbd1: detected capacity change from 0 to 63 [ 172.535599][ T6118] block nbd1: NBD_DISCONNECT [ 172.559106][ T6118] block nbd1: Disconnected due to user request. [ 172.559133][ T6118] block nbd1: shutting down sockets [ 172.722025][ T6111] FAULT_INJECTION: forcing a failure. [ 172.722025][ T6111] name failslab, interval 1, probability 0, space 0, times 0 [ 172.722054][ T6111] CPU: 1 UID: 0 PID: 6111 Comm: syz.2.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.722073][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 172.722084][ T6111] Call Trace: [ 172.722090][ T6111] [ 172.722097][ T6111] dump_stack_lvl+0xe8/0x150 [ 172.722131][ T6111] should_fail_ex+0x447/0x5e0 [ 172.722158][ T6111] should_failslab+0xa8/0x100 [ 172.722180][ T6111] __kmalloc_cache_noprof+0x9c/0x670 [ 172.722197][ T6111] ? dummy_hrtimer_create+0x53/0x140 [ 172.722224][ T6111] ? dummy_hrtimer_create+0x53/0x140 [ 172.722263][ T6111] dummy_hrtimer_create+0x53/0x140 [ 172.722292][ T6111] dummy_pcm_open+0xba/0x4e0 [ 172.722320][ T6111] snd_pcm_open_substream+0xff1/0x24f0 [ 172.722355][ T6111] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 172.722380][ T6111] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.722399][ T6111] ? mutex_lock_nested+0x14d/0x1d0 [ 172.722422][ T6111] ? snd_pcm_open+0x180/0x620 [ 172.722446][ T6111] snd_pcm_open+0x1e2/0x620 [ 172.722473][ T6111] ? __pfx_snd_pcm_open+0x10/0x10 [ 172.722494][ T6111] ? __pfx_default_wake_function+0x10/0x10 [ 172.722520][ T6111] ? snd_lookup_minor_data+0x11e/0x150 [ 172.722553][ T6111] snd_pcm_capture_open+0x62/0xc0 [ 172.722609][ T6111] chrdev_open+0x4dc/0x600 [ 172.722640][ T6111] ? __pfx_chrdev_open+0x10/0x10 [ 172.722665][ T6111] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 172.722702][ T6111] ? __pfx_chrdev_open+0x10/0x10 [ 172.722728][ T6111] do_dentry_open+0x841/0x1410 [ 172.722773][ T6111] vfs_open_consume+0x4a/0x360 [ 172.722793][ T6111] ? path_openat+0x16e6/0x2100 [ 172.722811][ T6111] path_openat+0x1701/0x2100 [ 172.722841][ T6111] do_file_open+0x23e/0x4a0 [ 172.722855][ T6111] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.722878][ T6111] ? __pfx_do_file_open+0x10/0x10 [ 172.722911][ T6111] ? alloc_fd+0x6b2/0x760 [ 172.722942][ T6111] do_sys_openat2+0x115/0x200 [ 172.722964][ T6111] ? __pfx_do_sys_openat2+0x10/0x10 [ 172.722990][ T6111] ? do_user_addr_fault+0xd3f/0x1480 [ 172.723015][ T6111] __x64_sys_openat+0x138/0x170 [ 172.723040][ T6111] do_syscall_64+0x166/0x520 [ 172.723058][ T6111] ? trace_irq_disable+0x3b/0x140 [ 172.723075][ T6111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.723092][ T6111] ? clear_bhb_loop+0x70/0xc0 [ 172.723112][ T6111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.723128][ T6111] RIP: 0033:0x7fc0324dfd8e [ 172.723145][ T6111] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.723158][ T6111] RSP: 002b:00007fc030775b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.723176][ T6111] RAX: ffffffffffffffda RBX: 00007fc0307766c0 RCX: 00007fc0324dfd8e [ 172.723188][ T6111] RDX: 0000000000000002 RSI: 00007fc030775c00 RDI: ffffffffffffff9c [ 172.723199][ T6111] RBP: 00007fc030775c00 R08: 0000000000000000 R09: 0000000000000000 [ 172.723209][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 172.723219][ T6111] R13: 00007fc0327a6038 R14: 00007fc0327a5fa0 R15: 00007ffeed0d6358 [ 172.723250][ T6111] [ 173.751212][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.751285][ T5854] Buffer I/O error on dev nbd1, logical block 0, async page read [ 173.751337][ T5854] Buffer I/O error on dev nbd1, logical block 1, async page read [ 173.751350][ T5854] Buffer I/O error on dev nbd1, logical block 2, async page read [ 173.751363][ T5854] Buffer I/O error on dev nbd1, logical block 3, async page read [ 173.800339][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.800446][ T5854] Buffer I/O error on dev nbd1, logical block 0, async page read [ 173.800511][ T5854] Buffer I/O error on dev nbd1, logical block 1, async page read [ 173.800556][ T5854] Buffer I/O error on dev nbd1, logical block 2, async page read [ 173.800601][ T5854] Buffer I/O error on dev nbd1, logical block 3, async page read [ 173.801101][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.801165][ T5854] Buffer I/O error on dev nbd1, logical block 0, async page read [ 173.801217][ T5854] Buffer I/O error on dev nbd1, logical block 1, async page read [ 173.802986][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.803204][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.805099][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.808774][ T5854] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.815287][ T31] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.815428][ T6075] ldm_validate_partition_table(): Disk read failed. [ 173.815580][ T31] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.815791][ T31] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 173.816242][ T6075] Dev nbd1: unable to read RDB block 0 [ 173.900030][ T6075] nbd1: unable to read partition table [ 174.148927][ T6075] ldm_validate_partition_table(): Disk read failed. [ 174.150514][ T30] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 174.160867][ T6075] Dev nbd1: unable to read RDB block 0 [ 174.224155][ T6120] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 174.224174][ T6120] netlink: 5620 bytes leftover after parsing attributes in process `syz.2.64'. [ 174.292576][ T6075] nbd1: unable to read partition table [ 175.702384][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.832856][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.856186][ T5858] bond0 (unregistering): Released all slaves [ 175.946787][ T30] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 175.954637][ T30] usb 5-1: can't set first interface for hiFace device. [ 175.954681][ T30] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 175.974727][ T6113] bond0: (slave bond_slave_0): Releasing backup interface [ 176.021557][ T30] usb 5-1: can't set first interface for hiFace device. [ 176.021602][ T30] snd-usb-hiface 5-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 176.064796][ T30] usb 5-1: can't set first interface for hiFace device. [ 176.067273][ T30] snd-usb-hiface 5-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 176.095803][ T30] usb 5-1: USB disconnect, device number 5 [ 176.148561][ T6143] comedi comedi4: bad chanlist[0]=0x03333333 chan=13107 range length=2 [ 176.195918][ T6113] bond_slave_0: entered promiscuous mode [ 176.195946][ T6113] bond_slave_0: entered allmulticast mode [ 176.219396][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.219491][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.219636][ T6007] bridge_slave_0: entered allmulticast mode [ 176.225716][ T6007] bridge_slave_0: entered promiscuous mode [ 176.309043][ T6116] ªªªªª»: renamed from vlan0 (while UP) [ 179.176488][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.176651][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.176857][ T6007] bridge_slave_1: entered allmulticast mode [ 179.227746][ T6007] bridge_slave_1: entered promiscuous mode [ 179.520804][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 179.804698][ T6007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.840537][ T6007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.471004][ T6007] team0: Port device team_slave_0 added [ 181.593558][ T6007] team0: Port device team_slave_1 added [ 187.963394][ T6188] tipc: Started in network mode [ 187.963426][ T6188] tipc: Node identity ac1414aa, cluster identity 4711 [ 187.964485][ T6188] tipc: New replicast peer: 172.20.20.187 [ 187.966467][ T6188] tipc: Enabled bearer , priority 10 [ 189.573162][ T6192] can: request_module (can-proto-0) failed. [ 189.660225][ T10] tipc: Node number set to 2886997162 [ 189.802489][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.802510][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.802536][ T6007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.863563][ T6007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.863618][ T6007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.863693][ T6007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.543193][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543257][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.737828][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 196.355679][ T6216] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 196.428250][ T6007] hsr_slave_0: entered promiscuous mode [ 196.459187][ T6007] hsr_slave_1: entered promiscuous mode [ 196.459871][ T6007] debugfs: 'hsr0' already exists in 'hsr' [ 196.459890][ T6007] Cannot create hsr debugfs directory [ 196.638915][ T6232] comedi comedi4: bad chanlist[0]=0x03333333 chan=13107 range length=2 [ 197.101255][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 197.126298][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 197.150656][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 197.179806][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 197.198296][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.295119][ T6236] netlink: 14 bytes leftover after parsing attributes in process `syz.1.86'. [ 197.931430][ T6246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.278894][ T5617] Bluetooth: hci3: command tx timeout [ 200.164629][ T6254] can: request_module (can-proto-0) failed. [ 201.631433][ T5617] Bluetooth: hci3: command tx timeout [ 202.097430][ T6249] tipc: Enabling of bearer rejected, already enabled [ 203.524688][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 203.967946][ T5617] Bluetooth: hci3: command tx timeout [ 204.922025][ T6273] bridge1: entered promiscuous mode [ 204.922100][ T6273] bridge1: entered allmulticast mode [ 205.680262][ T6286] comedi comedi4: bad chanlist[0]=0x03333333 chan=13107 range length=2 [ 205.912159][ T6233] rxe_eth0 speed is unknown, defaulting to 1000 [ 206.045742][ T5617] Bluetooth: hci3: command tx timeout [ 207.235717][ T5858] hsr_slave_0: left promiscuous mode [ 207.293218][ T5858] hsr_slave_1: left promiscuous mode [ 207.372848][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.372932][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.457796][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.457829][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.927744][ T6301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.375973][ T5858] veth1_macvtap: left promiscuous mode [ 209.376275][ T5858] veth0_macvtap: left promiscuous mode [ 209.376553][ T5858] veth1_vlan: left promiscuous mode [ 209.376874][ T5858] veth0_vlan: left promiscuous mode [ 209.715733][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.770191][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.783696][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.796424][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.797623][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.978401][ T5612] Bluetooth: hci4: command tx timeout [ 212.431782][ T6318] ubi0: attaching mtd0 [ 212.436608][ T6318] ubi0: scanning is finished [ 212.436630][ T6318] ubi0: empty MTD device detected [ 213.537912][ T6318] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 214.048068][ T5612] Bluetooth: hci4: command tx timeout [ 216.125292][ T5604] Bluetooth: hci4: command tx timeout [ 216.239160][ T6333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.375647][ T5858] team0 (unregistering): Port device team_slave_1 removed [ 216.466923][ T5858] team0 (unregistering): Port device team_slave_0 removed [ 216.982124][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 217.077680][ T6326] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 217.085225][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 217.085375][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 217.085517][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 218.243098][ T4916] Bluetooth: hci4: command tx timeout [ 219.824394][ T6335] bridge1: entered promiscuous mode [ 219.824417][ T6335] bridge1: entered allmulticast mode [ 223.346172][ T6369] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 223.346342][ T6369] overlayfs: overlapping lowerdir path [ 223.761358][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.761773][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.762074][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.762442][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.763685][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.764047][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.764698][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.765208][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.765575][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 223.766005][ T6374] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 224.154836][ T6380] ubi0: attaching mtd0 [ 224.157583][ T6380] ubi0: scanning is finished [ 225.206749][ T6304] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.266716][ T6380] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 225.369738][ T6392] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 225.369780][ T6392] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 225.822429][ T6395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.781417][ T6233] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.825063][ T6233] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.825266][ T6233] bridge_slave_0: entered allmulticast mode [ 228.899617][ T6233] bridge_slave_0: entered promiscuous mode [ 228.973965][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.974052][ T6233] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.974201][ T6233] bridge_slave_1: entered allmulticast mode [ 229.002922][ T6233] bridge_slave_1: entered promiscuous mode [ 229.227024][ T6425] comedi comedi4: bad chanlist[0]=0x03333333 chan=13107 range length=2 [ 230.423054][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.766802][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 230.766828][ T6439] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.122'. [ 232.729301][ T6233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.797887][ T6233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.946302][ T5757] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 232.998528][ T6233] team0: Port device team_slave_0 added [ 233.014612][ T6233] team0: Port device team_slave_1 added [ 233.094103][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.094121][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.094149][ T6233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.151847][ T5757] usb 2-1: unable to get BOS descriptor or descriptor too short [ 233.151908][ T5757] usb 2-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 233.186967][ T5757] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.187013][ T5757] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 233.307041][ T6451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.182778][ T6233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.182799][ T6233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.182831][ T6233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.415265][ T5757] usb 2-1: string descriptor 0 read error: -71 [ 234.415402][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.515723][ T5757] usb 2-1: can't set config #1, error -71 [ 234.539605][ T5757] usb 2-1: USB disconnect, device number 2 [ 236.098322][ T6455] nbd1: detected capacity change from 0 to 63 [ 236.292660][ T4916] block nbd1: Receive control failed (result -104) [ 236.313154][ T867] block nbd1: Dead connection, failed to find a fallback [ 236.313233][ T867] block nbd1: shutting down sockets [ 236.316610][ T867] blk_print_req_error: 64 callbacks suppressed [ 236.316630][ T867] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.316661][ T867] buffer_io_error: 138 callbacks suppressed [ 236.316674][ T867] Buffer I/O error on dev nbd1, logical block 1, async page read [ 236.370026][ T867] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.370125][ T867] Buffer I/O error on dev nbd1, logical block 2, async page read [ 236.407089][ T867] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.407134][ T867] Buffer I/O error on dev nbd1, logical block 3, async page read [ 237.937360][ T6233] hsr_slave_0: entered promiscuous mode [ 237.947008][ T6233] hsr_slave_1: entered promiscuous mode [ 237.955577][ T6233] debugfs: 'hsr0' already exists in 'hsr' [ 237.955610][ T6233] Cannot create hsr debugfs directory [ 237.984124][ T6469] can: request_module (can-proto-0) failed. [ 238.704920][ T835] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 238.855815][ T835] usb 5-1: New USB device found: idVendor=057e, idProduct=200e, bcdDevice=0.00 [ 238.858661][ T835] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.858697][ T835] usb 5-1: config 0 interface 0 has no altsetting 0 [ 238.858733][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.941416][ T835] usb 5-1: config 0 descriptor?? [ 239.076058][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.112143][ T10] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 241.113655][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.113722][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 241.113752][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 241.113796][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.591447][ T835] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 241.591493][ T835] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 241.591524][ T835] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 241.591554][ T835] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 241.591584][ T835] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 241.591613][ T835] nintendo 0003:057E:200E.0001: unknown main item tag 0x0 [ 241.696736][ T835] nintendo 0003:057E:200E.0001: hidraw0: USB HID v90.01 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 241.702487][ T835] nintendo 0003:057E:200E.0001: Failed charging grip handshake [ 241.702511][ T835] nintendo 0003:057E:200E.0001: Failed to initialize controller; ret=-110 [ 241.770008][ T10] cxacru 2-1:1.0: send of cm 0x90 failed (-71) [ 241.801818][ T6493] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 241.881196][ T835] nintendo 0003:057E:200E.0001: probe - fail = -110 [ 241.900075][ T835] nintendo 0003:057E:200E.0001: probe with driver nintendo failed with error -110 [ 242.015525][ T835] usb 5-1: USB disconnect, device number 6 [ 242.113208][ T10] usb 2-1: USB disconnect, device number 3 [ 244.107689][ T6495] fido_id[6495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 244.765048][ T835] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.818584][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.818717][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.818914][ T6304] bridge_slave_0: entered allmulticast mode [ 244.848500][ T6304] bridge_slave_0: entered promiscuous mode [ 244.928019][ T835] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.928079][ T835] usb 5-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 244.930048][ T835] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.930092][ T835] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 244.976674][ T835] usb 5-1: string descriptor 0 read error: -22 [ 244.976823][ T835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.101951][ T835] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 245.441986][ T835] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.476630][ T835] snd-usb-hiface 5-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 245.607771][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.608092][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.608306][ T6304] bridge_slave_1: entered allmulticast mode [ 245.652929][ T6304] bridge_slave_1: entered promiscuous mode [ 245.667484][ T835] usb 5-1: can't set first interface for hiFace device. [ 245.667527][ T835] snd-usb-hiface 5-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 245.698423][ T835] usb 5-1: can't set first interface for hiFace device. [ 245.698464][ T835] snd-usb-hiface 5-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 245.701437][ T835] usb 5-1: USB disconnect, device number 7 [ 247.626601][ T6304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.742330][ T6304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.924531][ T6304] team0: Port device team_slave_0 added [ 247.941628][ T6304] team0: Port device team_slave_1 added [ 247.944253][ T6233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.104690][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.215263][ T36] audit: type=1326 audit(1793351961.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.4.138" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb88a82f559 code=0x0 [ 248.840871][ T6528] netlink: 'syz.1.136': attribute type 2 has an invalid length. [ 248.840901][ T6528] netlink: 'syz.1.136': attribute type 2 has an invalid length. [ 249.098016][ T6528] Bluetooth: MGMT ver 1.23 [ 250.644528][ T6533] can: request_module (can-proto-0) failed. [ 250.987796][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.089921][ T6233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.141440][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.238183][ T6233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.280198][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.282254][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.282269][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.282298][ T6304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.342140][ T6233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.369765][ T6233] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.371583][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.371598][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.371628][ T6304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.232739][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.544933][ T835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 253.703385][ T835] usb 1-1: unable to get BOS descriptor or descriptor too short [ 253.703447][ T835] usb 1-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 253.804517][ T6572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.257791][ T835] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.258066][ T835] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 254.706394][ T835] usb 1-1: string descriptor 0 read error: -22 [ 254.706541][ T835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.799111][ T835] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 255.166626][ T835] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 255.184423][ T835] usb 1-1: can't set first interface for hiFace device. [ 255.184465][ T835] snd-usb-hiface 1-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 255.232809][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.282128][ T835] usb 1-1: can't set first interface for hiFace device. [ 255.282171][ T835] snd-usb-hiface 1-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 255.342376][ T835] usb 1-1: can't set first interface for hiFace device. [ 255.342420][ T835] snd-usb-hiface 1-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 255.410374][ T835] usb 1-1: USB disconnect, device number 3 [ 255.494929][ T5721] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 255.656141][ T5721] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 255.659824][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.659886][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.717516][ T5721] usb 2-1: config 0 descriptor?? [ 255.732969][ T6584] netlink: 'syz.4.148': attribute type 2 has an invalid length. [ 255.732992][ T6584] netlink: 'syz.4.148': attribute type 2 has an invalid length. [ 255.734343][ T6304] hsr_slave_0: entered promiscuous mode [ 255.759812][ T6304] hsr_slave_1: entered promiscuous mode [ 255.760799][ T6304] debugfs: 'hsr0' already exists in 'hsr' [ 255.760824][ T6304] Cannot create hsr debugfs directory [ 255.769776][ T5721] pwc: Askey VC010 type 2 USB webcam detected. [ 256.141481][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.141649][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.197540][ T5721] pwc: recv_control_msg error -32 req 02 val 2b00 [ 256.201090][ T5721] pwc: recv_control_msg error -32 req 02 val 2700 [ 256.206509][ T5721] pwc: recv_control_msg error -32 req 02 val 2c00 [ 256.260123][ T5721] pwc: recv_control_msg error -32 req 04 val 1000 [ 256.262898][ T5721] pwc: recv_control_msg error -32 req 04 val 1300 [ 256.263789][ T5721] pwc: recv_control_msg error -32 req 04 val 1400 [ 256.267593][ T5721] pwc: recv_control_msg error -32 req 02 val 2000 [ 256.376993][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.473234][ T5721] pwc: recv_control_msg error -71 req 04 val 1500 [ 256.476060][ T5721] pwc: recv_control_msg error -71 req 02 val 2500 [ 256.477739][ T5721] pwc: recv_control_msg error -71 req 02 val 2400 [ 256.492949][ T5721] pwc: recv_control_msg error -71 req 02 val 2600 [ 256.495957][ T5721] pwc: recv_control_msg error -71 req 02 val 2900 [ 256.502245][ T5721] pwc: recv_control_msg error -71 req 02 val 2800 [ 256.508361][ T5721] pwc: recv_control_msg error -71 req 04 val 1100 [ 256.511996][ T5721] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.938765][ T5721] pwc: Registered as video103. [ 258.055496][ T5721] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 258.333109][ T6597] can: request_module (can-proto-0) failed. [ 258.555931][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 258.596663][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 258.599396][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 258.602656][ T5721] usb 2-1: USB disconnect, device number 4 [ 258.604381][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 258.624081][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.844981][ T5617] Bluetooth: hci5: command tx timeout [ 260.886573][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 260.904981][ T5748] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 261.056042][ T5748] usb 5-1: New USB device found: idVendor=057e, idProduct=200e, bcdDevice=0.00 [ 261.059126][ T5748] usb 5-1: config 0 interface 0 altsetting 24 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.059157][ T5748] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.059187][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.153485][ T5748] usb 5-1: config 0 descriptor?? [ 262.935024][ T5617] Bluetooth: hci5: command tx timeout [ 263.546142][ T5748] usbhid 5-1:0.0: can't add hid device: -71 [ 263.546271][ T5748] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 263.607396][ T5748] usb 5-1: USB disconnect, device number 8 [ 264.063701][ T6638] netlink: 'syz.4.160': attribute type 2 has an invalid length. [ 264.063727][ T6638] netlink: 'syz.4.160': attribute type 2 has an invalid length. [ 264.110215][ T5721] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 265.382085][ T5617] Bluetooth: hci5: command tx timeout [ 265.475310][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 265.475374][ T5721] usb 2-1: New USB device found: idVendor=04b4, idProduct=931f, bcdDevice=0.40 [ 265.637527][ T5721] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.637577][ T5721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 7 [ 265.686311][ T5721] usb 2-1: string descriptor 0 read error: -22 [ 265.686461][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.047679][ T5721] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 266.241314][ T6647] nbd0: detected capacity change from 0 to 63 [ 266.274570][ T5617] block nbd0: Receive control failed (result -32) [ 266.480090][ T867] block nbd0: Dead connection, failed to find a fallback [ 266.480118][ T867] block nbd0: shutting down sockets [ 266.480134][ T867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 266.480162][ T867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 266.480184][ T867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 266.480203][ T867] Buffer I/O error on dev nbd0, logical block 2, async page read [ 266.480339][ T867] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.480366][ T867] Buffer I/O error on dev nbd0, logical block 3, async page read [ 266.482308][ T867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 266.482342][ T867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 266.482363][ T867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 266.482382][ T867] Buffer I/O error on dev nbd0, logical block 2, async page read [ 266.482401][ T867] Buffer I/O error on dev nbd0, logical block 3, async page read [ 266.482585][ T867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 266.482613][ T867] Buffer I/O error on dev nbd0, logical block 0, async page read [ 266.482632][ T867] Buffer I/O error on dev nbd0, logical block 1, async page read [ 266.482830][ T867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 266.482991][ T867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.483113][ T867] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.483236][ T867] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.483369][ T867] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.483537][ T867] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.484961][ T6517] ldm_validate_partition_table(): Disk read failed. [ 266.495395][ T6517] Dev nbd0: unable to read RDB block 0 [ 266.499863][ T6517] nbd0: unable to read partition table [ 266.562929][ T6517] ldm_validate_partition_table(): Disk read failed. [ 266.587879][ T6517] Dev nbd0: unable to read RDB block 0 [ 266.621873][ T6517] nbd0: unable to read partition table [ 266.895782][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 30 seconds [ 267.137055][ T6655] can: request_module (can-proto-0) failed. [ 267.322235][ T5721] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 267.332848][ T5721] usb 2-1: can't set first interface for hiFace device. [ 267.332915][ T5721] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 267.407485][ T5617] Bluetooth: hci5: command tx timeout [ 267.443717][ T5721] usb 2-1: can't set first interface for hiFace device. [ 267.448774][ T5721] snd-usb-hiface 2-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 267.502338][ T5721] usb 2-1: can't set first interface for hiFace device. [ 267.502382][ T5721] snd-usb-hiface 2-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 267.544306][ T5721] usb 2-1: USB disconnect, device number 5 [ 270.377128][ T6674] overlayfs: overlapping lowerdir path [ 270.847555][ T6675] sd 0:0:1:0: PR command failed: 1026 [ 270.847874][ T6675] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 270.848242][ T6675] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 270.988068][ T5858] bridge_slave_1: left allmulticast mode [ 270.988225][ T5858] bridge_slave_1: left promiscuous mode [ 271.057446][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.133010][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.172530][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.192908][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.204768][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.209669][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.329530][ T5858] bridge_slave_0: left allmulticast mode [ 275.329570][ T5858] bridge_slave_0: left promiscuous mode [ 275.330300][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.324967][ T5617] Bluetooth: hci3: command tx timeout [ 277.576482][ T5858] bridge_slave_1: left allmulticast mode [ 277.576522][ T5858] bridge_slave_1: left promiscuous mode [ 277.576812][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.866467][ T6708] nbd: nbd0 already in use [ 277.879954][ T6708] block nbd0: NBD_DISCONNECT [ 277.901477][ T6708] block nbd0: Send disconnect failed -32 [ 278.533031][ T5858] bridge_slave_0: left allmulticast mode [ 278.533072][ T5858] bridge_slave_0: left promiscuous mode [ 278.533322][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.408585][ T5617] Bluetooth: hci3: command tx timeout [ 279.615028][ T5721] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 279.791412][ T5721] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 279.792728][ T5721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.792767][ T5721] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 279.792787][ T5721] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 279.792816][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.925738][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.036884][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.114199][ T5858] bond0 (unregistering): Released all slaves [ 280.752842][ T5721] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 280.752906][ T5721] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 280.754092][ T5721] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 280.754154][ T5721] ATM dev 0: poll status: error -71 [ 280.754170][ T5721] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 280.754189][ T5721] ATM dev 0: usbatm_submit_urb: urb 0xffff88802bfc1600 submission failed (-8)! [ 280.754488][ T5721] ATM dev 0: usbatm_submit_urb: urb 0xffff888021f69f00 submission failed (-8)! [ 280.754515][ T5721] ATM dev 0: usbatm_submit_urb: urb 0xffff88803567a200 submission failed (-8)! [ 280.754539][ T5721] ATM dev 0: usbatm_submit_urb: urb 0xffff88802cab1b00 submission failed (-8)! [ 280.864596][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802cab1b00 submission failed (-8)! [ 280.908784][ T5721] usb 1-1: USB disconnect, device number 4 [ 280.964912][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802cab1b00 submission failed (-19)! [ 281.485441][ T5617] Bluetooth: hci3: command tx timeout [ 281.615949][ T6725] Process accounting resumed [ 282.200026][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.289660][ T6731] can: request_module (can-proto-0) failed. [ 282.376975][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.422663][ T5858] bond0 (unregistering): Released all slaves [ 283.564934][ T5617] Bluetooth: hci3: command tx timeout [ 285.593771][ T6743] netlink: 72 bytes leftover after parsing attributes in process `syz.4.178'. [ 285.593903][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.4.178'. [ 290.833644][ T6757] rxe_eth0 speed is unknown, defaulting to 1000 [ 291.057102][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 291.562303][ T6607] rxe_eth0 speed is unknown, defaulting to 1000 [ 293.785789][ T6782] can: request_module (can-proto-0) failed. [ 293.851367][ T6693] rxe_eth0 speed is unknown, defaulting to 1000 [ 296.590959][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 296.975998][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 60 seconds [ 299.804210][ T4966] udevd[4966]: worker [6445] /devices/virtual/block/nbd1 is taking a long time [ 303.392855][ T6607] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.393077][ T6607] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.393286][ T6607] bridge_slave_0: entered allmulticast mode [ 303.430991][ T6607] bridge_slave_0: entered promiscuous mode [ 303.681438][ T5858] hsr_slave_0: left promiscuous mode [ 303.716350][ T5858] hsr_slave_1: left promiscuous mode [ 303.717711][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.757159][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.981052][ T5858] hsr_slave_0: left promiscuous mode [ 304.015073][ T5858] hsr_slave_1: left promiscuous mode [ 304.016358][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.016384][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.076094][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.076124][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.188848][ T5858] veth1_macvtap: left promiscuous mode [ 304.188958][ T5858] veth0_macvtap: left promiscuous mode [ 304.189223][ T5858] veth1_vlan: left promiscuous mode [ 304.189417][ T5858] veth0_vlan: left promiscuous mode [ 312.214912][ T835] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 312.215189][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 312.344955][ T835] usb 2-1: device descriptor read/64, error -32 [ 312.674926][ T835] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 312.747947][ T6850] nbd0: detected capacity change from 0 to 63 [ 312.904883][ T835] usb 2-1: Using ep0 maxpacket: 32 [ 312.946296][ T835] usb 2-1: New USB device found: idVendor=046d, idProduct=c537, bcdDevice=0.00 [ 313.380004][ T835] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 313.380034][ T835] usb 2-1: config 0 has no interface number 0 [ 313.380089][ T835] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.380109][ T835] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.380125][ T835] usb 2-1: config 0 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.380156][ T835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.471497][ T6851] block nbd0: NBD_DISCONNECT [ 313.577548][ T835] usb 2-1: config 0 descriptor?? [ 313.651198][ T6851] block nbd0: Disconnected due to user request. [ 313.654597][ T6851] block nbd0: shutting down sockets [ 313.737642][ C1] blk_print_req_error: 117 callbacks suppressed [ 313.737667][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.737757][ C1] buffer_io_error: 138 callbacks suppressed [ 313.737771][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 313.795440][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.795533][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 313.795682][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.795754][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 313.796221][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.796294][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 313.882669][ T31] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 313.882698][ T31] Buffer I/O error on dev nbd0, logical block 0, async page read [ 313.882713][ T31] Buffer I/O error on dev nbd0, logical block 1, async page read [ 313.882725][ T31] Buffer I/O error on dev nbd0, logical block 2, async page read [ 313.882738][ T31] Buffer I/O error on dev nbd0, logical block 3, async page read [ 313.883593][ T31] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.883615][ T31] Buffer I/O error on dev nbd0, logical block 0, async page read [ 313.886742][ T31] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 313.886951][ T31] Buffer I/O error on dev nbd0, logical block 1, async page read [ 313.888084][ T31] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.889675][ T31] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 313.996631][ T31] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 314.023494][ T6476] ldm_validate_partition_table(): Disk read failed. [ 314.070395][ T6476] Dev nbd0: unable to read RDB block 0 [ 314.087160][ T6476] nbd0: unable to read partition table [ 314.230152][ T5858] team0 (unregistering): Port device team_slave_1 removed [ 314.304730][ T6476] ldm_validate_partition_table(): Disk read failed. [ 314.316163][ T6476] Dev nbd0: unable to read RDB block 0 [ 314.320332][ T6476] nbd0: unable to read partition table [ 314.351433][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.351461][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.351482][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.351522][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.351542][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.351562][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.351582][ T835] logitech-djreceiver 0003:046D:C537.0002: unknown main item tag 0x0 [ 314.497127][ T5858] team0 (unregistering): Port device team_slave_0 removed [ 316.444637][ T835] logitech-djreceiver 0003:046D:C537.0002: hidraw0: USB HID v10.00 Device [HID 046d:c537] on usb-dummy_hcd.1-1/input4 [ 317.415820][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.415896][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.809400][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.838388][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.846173][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.850736][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.852252][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.479392][ T4916] Bluetooth: hci4: command tx timeout [ 320.908030][ T6872] overlayfs: unescaped trailing colons in lowerdir mount option. [ 321.747240][ T5858] team0 (unregistering): Port device team_slave_1 removed [ 321.810689][ T5858] team0 (unregistering): Port device team_slave_0 removed [ 322.005794][ T6866] tipc: Enabling of bearer rejected, already enabled [ 322.064945][ T6871] batman_adv: batadv0: Adding interface: syz_tun [ 322.064960][ T6871] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.064984][ T6871] batman_adv: batadv0: Interface activated: syz_tun [ 322.136046][ T6607] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.136193][ T6607] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.136432][ T6607] bridge_slave_1: entered allmulticast mode [ 322.175520][ T6607] bridge_slave_1: entered promiscuous mode [ 322.267975][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 322.526071][ T5617] Bluetooth: hci4: command tx timeout [ 322.934925][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.085895][ T9] usb 1-1: New USB device found: idVendor=04e6, idProduct=0005, bcdDevice=1.00 [ 323.087458][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.087486][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 323.090588][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.090614][ T9] usb 1-1: Product: syz [ 323.090630][ T9] usb 1-1: Manufacturer: syz [ 323.090646][ T9] usb 1-1: SerialNumber: syz [ 323.233987][ T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 323.329271][ T9] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 323.329271][ T9] Please send a copy of this message to and [ 324.255243][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.255379][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.255603][ T6693] bridge_slave_0: entered allmulticast mode [ 324.280668][ T6693] bridge_slave_0: entered promiscuous mode [ 324.304710][ T9] scsi host1: usb-storage 1-1:1.0 [ 324.313729][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.314109][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.331744][ T6693] bridge_slave_1: entered allmulticast mode [ 324.353458][ T6693] bridge_slave_1: entered promiscuous mode [ 324.461921][ T9] usb 1-1: USB disconnect, device number 5 [ 324.600883][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.600984][ T6860] rxe_eth0 speed is unknown, defaulting to 1000 [ 324.606439][ T5617] Bluetooth: hci4: command tx timeout [ 324.623783][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.976661][ T6912] batman_adv: batadv0: Adding interface: dummy0 [ 324.976681][ T6912] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.976716][ T6912] batman_adv: batadv0: Interface activated: dummy0 [ 325.038865][ T6693] team0: Port device team_slave_0 added [ 326.651416][ T6912] batadv0: mtu less than device minimum [ 326.684924][ T5617] Bluetooth: hci4: command tx timeout [ 326.782678][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.831524][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.866358][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.890911][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.917107][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.949403][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 326.985853][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.020384][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.045038][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 90 seconds [ 327.065854][ T6912] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.151580][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.192951][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.202398][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.203578][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.204520][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.531179][ T6693] team0: Port device team_slave_1 added [ 327.800375][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.202'. [ 327.800399][ T6933] netlink: 5740 bytes leftover after parsing attributes in process `syz.4.202'. [ 329.594924][ T4916] Bluetooth: hci5: command tx timeout [ 329.990465][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.028873][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 330.037943][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 330.045491][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 330.048650][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.908894][ T5617] Bluetooth: hci5: command tx timeout [ 332.908963][ T5617] Bluetooth: hci6: command tx timeout [ 333.846064][ T6925] rxe_eth0 speed is unknown, defaulting to 1000 [ 334.047041][ T6975] nbd4: detected capacity change from 0 to 63 [ 334.474635][ T6980] block nbd4: NBD_DISCONNECT [ 334.479784][ T6980] block nbd4: Disconnected due to user request. [ 334.479805][ T6980] block nbd4: shutting down sockets [ 334.565376][ C1] blk_print_req_error: 109 callbacks suppressed [ 334.565401][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.565835][ C1] buffer_io_error: 138 callbacks suppressed [ 334.565854][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 334.565894][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.566098][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 334.566128][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.566204][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 334.566231][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.566307][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 334.585275][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.585311][ T31] Buffer I/O error on dev nbd4, logical block 0, async page read [ 334.585334][ T31] Buffer I/O error on dev nbd4, logical block 1, async page read [ 334.585353][ T31] Buffer I/O error on dev nbd4, logical block 2, async page read [ 334.585372][ T31] Buffer I/O error on dev nbd4, logical block 3, async page read [ 334.585570][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.585597][ T31] Buffer I/O error on dev nbd4, logical block 0, async page read [ 334.585617][ T31] Buffer I/O error on dev nbd4, logical block 1, async page read [ 334.591213][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.595870][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 334.599129][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.601105][ T31] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 334.689158][ T6476] ldm_validate_partition_table(): Disk read failed. [ 334.838668][ T6476] Dev nbd4: unable to read RDB block 0 [ 334.892801][ T6476] nbd4: unable to read partition table [ 334.928537][ T5617] Bluetooth: hci6: command tx timeout [ 334.994456][ T6476] ldm_validate_partition_table(): Disk read failed. [ 335.013354][ T5617] Bluetooth: hci5: command tx timeout [ 335.027279][ T6476] Dev nbd4: unable to read RDB block 0 [ 335.033837][ T6476] nbd4: unable to read partition table [ 336.987617][ T6986] tipc: Enabling of bearer rejected, already enabled [ 337.070059][ T5617] Bluetooth: hci6: command tx timeout [ 337.085006][ T5617] Bluetooth: hci5: command tx timeout [ 337.660876][ T6939] rxe_eth0 speed is unknown, defaulting to 1000 [ 337.702640][ T6997] comedi comedi4: bad chanlist[0]=0x03333333 chan=13107 range length=2 [ 339.753549][ T5617] Bluetooth: hci6: command tx timeout [ 343.312589][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.312825][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.313009][ T6860] bridge_slave_0: entered allmulticast mode [ 343.345324][ T6860] bridge_slave_0: entered promiscuous mode [ 343.434688][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.442139][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.442327][ T6860] bridge_slave_1: entered allmulticast mode [ 343.466162][ T6860] bridge_slave_1: entered promiscuous mode [ 345.317147][ T5858] bridge_slave_1: left allmulticast mode [ 345.317188][ T5858] bridge_slave_1: left promiscuous mode [ 345.317462][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.486246][ T5858] bridge_slave_0: left allmulticast mode [ 345.486274][ T5858] bridge_slave_0: left promiscuous mode [ 345.486500][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.928056][ T5858] bridge_slave_1: left allmulticast mode [ 345.928096][ T5858] bridge_slave_1: left promiscuous mode [ 345.928441][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.139263][ T5858] bridge_slave_0: left allmulticast mode [ 346.139295][ T5858] bridge_slave_0: left promiscuous mode [ 346.139471][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.405136][ T5858] bridge_slave_1: left allmulticast mode [ 346.405185][ T5858] bridge_slave_1: left promiscuous mode [ 346.405441][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.681533][ T5858] bridge_slave_0: left allmulticast mode [ 346.681572][ T5858] bridge_slave_0: left promiscuous mode [ 346.681815][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.130904][ T7051] nbd4: detected capacity change from 0 to 63 [ 347.195468][ T7052] block nbd4: NBD_DISCONNECT [ 347.247793][ T7052] block nbd4: Disconnected due to user request. [ 347.250001][ T7052] block nbd4: shutting down sockets [ 347.315545][ C1] blk_print_req_error: 123 callbacks suppressed [ 347.315571][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.315654][ C1] buffer_io_error: 138 callbacks suppressed [ 347.315668][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 347.315876][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.315947][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 347.315974][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.316039][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 347.316062][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.316127][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 347.316619][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.316650][ T31] Buffer I/O error on dev nbd4, logical block 0, async page read [ 347.316879][ T31] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.316906][ T31] Buffer I/O error on dev nbd4, logical block 1, async page read [ 347.317041][ T31] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.317068][ T31] Buffer I/O error on dev nbd4, logical block 2, async page read [ 347.373833][ T31] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.373859][ T31] Buffer I/O error on dev nbd4, logical block 3, async page read [ 347.405298][ T31] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 347.405335][ T31] Buffer I/O error on dev nbd4, logical block 0, async page read [ 347.405357][ T31] Buffer I/O error on dev nbd4, logical block 1, async page read [ 347.437343][ T5854] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 347.457940][ T6476] ldm_validate_partition_table(): Disk read failed. [ 347.464687][ T6476] Dev nbd4: unable to read RDB block 0 [ 347.474474][ T6476] nbd4: unable to read partition table [ 347.606410][ T6476] ldm_validate_partition_table(): Disk read failed. [ 347.609265][ T6476] Dev nbd4: unable to read RDB block 0 [ 347.610623][ T6476] nbd4: unable to read partition table [ 349.571187][ T5858] bond0 (unregistering): Released all slaves [ 349.785642][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.848245][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.887249][ T5858] bond0 (unregistering): Released all slaves [ 350.105409][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.165714][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.207177][ T5858] bond0 (unregistering): Released all slaves [ 350.225301][ T7056] tipc: Enabling of bearer rejected, already enabled [ 350.776957][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 350.874084][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.431743][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.611244][ T6860] team0: Port device team_slave_0 added [ 351.624929][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 351.685177][ T6860] team0: Port device team_slave_1 added [ 351.774959][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 351.775848][ T9] usb 5-1: New USB device found: idVendor=056a, idProduct=5200, bcdDevice=0.00 [ 351.777287][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.777321][ T9] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.777357][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.777386][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 351.777422][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.866145][ T9] usb 5-1: config 0 descriptor?? [ 353.149458][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x3 [ 353.149571][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x6 [ 353.149663][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 353.149691][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 353.149720][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 353.149749][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 353.149778][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 353.149806][ T9] wacom 0003:056A:5200.0003: unknown main item tag 0x0 [ 353.152209][ T9] wacom 0003:056A:5200.0003: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 353.244279][ T7075] netlink: 'syz.0.218': attribute type 2 has an invalid length. [ 353.244307][ T7075] netlink: 'syz.0.218': attribute type 2 has an invalid length. [ 353.293378][ T9] usb 5-1: USB disconnect, device number 9 [ 355.108298][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.108320][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.108357][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.249978][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.249997][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.250026][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.392457][ T7085] tipc: Enabling of bearer rejected, already enabled [ 357.449606][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 120 seconds [ 358.492603][ T6860] hsr_slave_0: entered promiscuous mode [ 358.500915][ T6860] hsr_slave_1: entered promiscuous mode [ 358.512613][ T6860] debugfs: 'hsr0' already exists in 'hsr' [ 358.512643][ T6860] Cannot create hsr debugfs directory [ 358.515161][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.515509][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.516014][ T6925] bridge_slave_0: entered allmulticast mode [ 358.552240][ T6925] bridge_slave_0: entered promiscuous mode [ 358.731389][ T7103] syz.0.221 uses obsolete (PF_INET,SOCK_PACKET) [ 358.751863][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.751992][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.752185][ T6925] bridge_slave_1: entered allmulticast mode [ 358.779611][ T6925] bridge_slave_1: entered promiscuous mode [ 359.292423][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.433053][ T7112] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 359.433053][ T7112] [ 359.433507][ T7112] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 359.445999][ T7112] CIFS: Attempting to mount //127.0.0.1/share [ 360.120016][ T7112] CIFS: VFS: Error connecting to socket. Aborting operation. [ 360.120431][ T7112] CIFS: VFS: cifs_mount failed w/return code = -111 [ 360.465709][ T5858] hsr_slave_0: left promiscuous mode [ 360.507715][ T5858] hsr_slave_1: left promiscuous mode [ 360.577186][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.620359][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.122222][ T5858] hsr_slave_0: left promiscuous mode [ 361.141481][ T7113] syz.4.223 (7113) used greatest stack depth: 18904 bytes left [ 361.159377][ T5858] hsr_slave_1: left promiscuous mode [ 361.173329][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.198030][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.358454][ T7116] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'. [ 361.627380][ T5589] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 361.788044][ T5589] usb 5-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 361.789916][ T5589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 361.789937][ T5589] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 361.789954][ T5589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 361.789970][ T5589] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 361.789999][ T5589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.794125][ T5589] usb 5-1: config 0 descriptor?? [ 361.870071][ T5858] team0 (unregistering): Port device team_slave_1 removed [ 361.945952][ T5858] team0 (unregistering): Port device team_slave_0 removed [ 362.113085][ T5589] hdpvr 5-1:0.0: unexpected answer of status request, len 7 [ 362.113126][ T5589] hdpvr 5-1:0.0: device init failed [ 362.113292][ T5589] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 362.567199][ T5858] team0 (unregistering): Port device team_slave_1 removed [ 362.615559][ T5858] team0 (unregistering): Port device team_slave_0 removed [ 362.839547][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.871797][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 363.026196][ T6925] team0: Port device team_slave_0 added [ 363.088333][ T6925] team0: Port device team_slave_1 added [ 363.174088][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.174274][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.174425][ T6939] bridge_slave_0: entered allmulticast mode [ 363.197810][ T6939] bridge_slave_0: entered promiscuous mode [ 363.239536][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.239706][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.239958][ T6939] bridge_slave_1: entered allmulticast mode [ 363.241692][ T6939] bridge_slave_1: entered promiscuous mode [ 363.312404][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.312423][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.312453][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.391971][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.391986][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.392006][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.543835][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.581870][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.761472][ T6939] team0: Port device team_slave_0 added [ 364.069140][ T6925] hsr_slave_0: entered promiscuous mode [ 364.071168][ T6925] hsr_slave_1: entered promiscuous mode [ 364.074558][ T6925] debugfs: 'hsr0' already exists in 'hsr' [ 364.074605][ T6925] Cannot create hsr debugfs directory [ 364.099806][ T6939] team0: Port device team_slave_1 added [ 364.339503][ T835] usb 5-1: USB disconnect, device number 10 [ 366.052788][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.052803][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.052823][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.098395][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.098446][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.098527][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.282431][ T7142] netlink: 'syz.4.226': attribute type 2 has an invalid length. [ 366.282450][ T7142] netlink: 'syz.4.226': attribute type 2 has an invalid length. [ 366.332111][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 366.405541][ T6939] hsr_slave_0: entered promiscuous mode [ 366.410811][ T6939] hsr_slave_1: entered promiscuous mode [ 366.413719][ T6939] debugfs: 'hsr0' already exists in 'hsr' [ 366.413751][ T6939] Cannot create hsr debugfs directory [ 371.057208][ T7161] tipc: Enabling of bearer rejected, already enabled [ 371.438326][ T4916] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.469873][ T4916] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.471450][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.507724][ T4916] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 371.509215][ T4916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.911330][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 372.185218][ T5858] bridge_slave_1: left allmulticast mode [ 372.185260][ T5858] bridge_slave_1: left promiscuous mode [ 372.189788][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.338117][ T5858] bridge_slave_0: left allmulticast mode [ 372.338158][ T5858] bridge_slave_0: left promiscuous mode [ 372.338434][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.840059][ T5617] Bluetooth: hci3: command tx timeout [ 373.911159][ T7188] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 373.911180][ T7188] netlink: 'syz.4.234': attribute type 2 has an invalid length. [ 374.144304][ T7194] ubi0: attaching mtd0 [ 374.207503][ T7194] ubi0: scanning is finished [ 375.021607][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.116319][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.211831][ T7194] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 375.265558][ T5858] bond0 (unregistering): Released all slaves [ 376.989941][ T5617] Bluetooth: hci3: command tx timeout [ 377.225329][ T7201] tipc: Enabling of bearer rejected, already enabled [ 377.480658][ T4916] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.508765][ T4916] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.512600][ T4916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.557618][ T4916] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.559819][ T4916] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 378.365621][ T5858] team0 (unregistering): Port device team_slave_1 removed [ 378.436842][ T5858] team0 (unregistering): Port device team_slave_0 removed [ 378.786528][ T7169] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.858477][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.858552][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.016186][ T5617] Bluetooth: hci3: command tx timeout [ 379.735169][ T5617] Bluetooth: hci7: command tx timeout [ 381.085957][ T5617] Bluetooth: hci3: command tx timeout [ 381.804897][ T5617] Bluetooth: hci7: command tx timeout [ 382.329145][ T7205] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.425654][ T7235] netlink: 'syz.4.241': attribute type 2 has an invalid length. [ 382.425682][ T7235] netlink: 'syz.4.241': attribute type 2 has an invalid length. [ 383.979400][ T6925] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 384.011296][ T5617] Bluetooth: hci7: command tx timeout [ 384.218179][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.292194][ T6925] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.380870][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.409876][ T6925] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 384.450778][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.503237][ T6925] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 384.547036][ T6925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.988975][ T36] audit: type=1800 audit(1793352099.630:3): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.245" name=08 dev="sda1" ino=2058 res=0 errno=-22 [ 386.323736][ T5617] Bluetooth: hci7: command tx timeout [ 387.420096][ T4916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 387.484677][ T4916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 387.497252][ T4916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 387.501516][ T4916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 387.515609][ T4916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 387.809776][ T7298] netlink: 32 bytes leftover after parsing attributes in process `syz.4.246'. [ 387.847455][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 150 seconds [ 388.074946][ T5721] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 388.236974][ T5721] usb 5-1: New USB device found: idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 388.261096][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 388.261130][ T5721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 388.261157][ T5721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 388.261181][ T5721] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 388.261221][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.352741][ T5721] usb 5-1: config 0 descriptor?? [ 388.443250][ T7169] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.443352][ T7169] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.443533][ T7169] bridge_slave_0: entered allmulticast mode [ 388.460698][ T7169] bridge_slave_0: entered promiscuous mode [ 388.601118][ T5721] hdpvr 5-1:0.0: unexpected answer of status request, len 7 [ 388.601141][ T5721] hdpvr 5-1:0.0: device init failed [ 388.601226][ T5721] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 388.932338][ T7169] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.932469][ T7169] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.932653][ T7169] bridge_slave_1: entered allmulticast mode [ 388.945919][ T7169] bridge_slave_1: entered promiscuous mode [ 389.513600][ T7169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.602199][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 389.647149][ T5612] Bluetooth: hci4: command tx timeout [ 389.657206][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 389.683623][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 389.701626][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 389.712277][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 390.080069][ T7169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.214428][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.214542][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.215109][ T7205] bridge_slave_0: entered allmulticast mode [ 390.244048][ T7205] bridge_slave_0: entered promiscuous mode [ 390.393098][ T5589] usb 5-1: USB disconnect, device number 11 [ 392.074961][ T5617] Bluetooth: hci4: command tx timeout [ 392.208152][ T5617] Bluetooth: hci5: command tx timeout [ 392.297220][ T7350] netlink: 'syz.4.248': attribute type 2 has an invalid length. [ 392.297244][ T7350] netlink: 'syz.4.248': attribute type 2 has an invalid length. [ 392.585346][ T7299] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.586957][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.587041][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.587201][ T7205] bridge_slave_1: entered allmulticast mode [ 392.591307][ T7205] bridge_slave_1: entered promiscuous mode [ 393.898159][ T7169] team0: Port device team_slave_0 added [ 394.073196][ T7169] team0: Port device team_slave_1 added [ 394.124998][ T5617] Bluetooth: hci4: command tx timeout [ 394.285017][ T5617] Bluetooth: hci5: command tx timeout [ 394.435444][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.536974][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.538050][ T7169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.538067][ T7169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.538095][ T7169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.761682][ T7169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.761703][ T7169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.761732][ T7169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.043523][ T7205] team0: Port device team_slave_0 added [ 395.219176][ T7205] team0: Port device team_slave_1 added [ 397.081826][ T4916] Bluetooth: hci5: command tx timeout [ 397.081938][ T5617] Bluetooth: hci4: command tx timeout [ 397.421443][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.421463][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.421491][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.503228][ T7169] hsr_slave_0: entered promiscuous mode [ 397.504652][ T7169] hsr_slave_1: entered promiscuous mode [ 397.517702][ T7169] debugfs: 'hsr0' already exists in 'hsr' [ 397.517731][ T7169] Cannot create hsr debugfs directory [ 397.518663][ T7334] rxe_eth0 speed is unknown, defaulting to 1000 [ 397.609538][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.609567][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.609597][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.418658][ T7205] hsr_slave_0: entered promiscuous mode [ 398.421060][ T7205] hsr_slave_1: entered promiscuous mode [ 398.422121][ T7205] debugfs: 'hsr0' already exists in 'hsr' [ 398.422147][ T7205] Cannot create hsr debugfs directory [ 400.337084][ T5612] Bluetooth: hci5: command tx timeout [ 400.366926][ T1170] bridge_slave_1: left allmulticast mode [ 400.366965][ T1170] bridge_slave_1: left promiscuous mode [ 400.367237][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.484286][ T7405] netlink: 'syz.4.255': attribute type 2 has an invalid length. [ 400.484312][ T7405] netlink: 'syz.4.255': attribute type 2 has an invalid length. [ 400.558256][ T1170] bridge_slave_0: left allmulticast mode [ 400.558295][ T1170] bridge_slave_0: left promiscuous mode [ 400.560084][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.149319][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.226525][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.288961][ T1170] bond0 (unregistering): Released all slaves [ 404.401200][ T1170] hsr_slave_0: left promiscuous mode [ 404.434933][ T1170] hsr_slave_1: left promiscuous mode [ 404.436200][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.488172][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.444378][ T7442] can: request_module (can-proto-0) failed. [ 407.305739][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 407.366737][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 408.201111][ T7452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 409.049028][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.049227][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.049362][ T7299] bridge_slave_0: entered allmulticast mode [ 409.051214][ T7299] bridge_slave_0: entered promiscuous mode [ 409.114453][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.114538][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.114687][ T7299] bridge_slave_1: entered allmulticast mode [ 409.139305][ T7299] bridge_slave_1: entered promiscuous mode [ 409.345186][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.457272][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.457364][ T7169] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 409.521470][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.593908][ T7169] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 409.639828][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.861153][ T7169] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 409.935953][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.975091][ T835] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 410.004142][ T7299] team0: Port device team_slave_0 added [ 410.004663][ T7169] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 410.053650][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.112862][ T7299] team0: Port device team_slave_1 added [ 410.136210][ T835] usb 5-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 410.138455][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.138489][ T835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.138529][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.184658][ T835] usb 5-1: config 0 descriptor?? [ 410.645724][ T835] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 410.645764][ T835] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 410.645793][ T835] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 410.645821][ T835] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 410.645849][ T835] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 410.653960][ T835] playstation 0003:054C:0DF2.0004: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 410.919394][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 410.921042][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.921058][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.921086][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.114339][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.114357][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.114400][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.658312][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.658929][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.659144][ T7334] bridge_slave_0: entered allmulticast mode [ 411.691981][ T7334] bridge_slave_0: entered promiscuous mode [ 411.786309][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.786470][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.786665][ T7334] bridge_slave_1: entered allmulticast mode [ 411.792452][ T7334] bridge_slave_1: entered promiscuous mode [ 413.061925][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.179320][ T7299] hsr_slave_0: entered promiscuous mode [ 413.201341][ T7299] hsr_slave_1: entered promiscuous mode [ 413.216039][ T7299] debugfs: 'hsr0' already exists in 'hsr' [ 413.216315][ T7299] Cannot create hsr debugfs directory [ 413.456479][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.853965][ T835] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 413.854117][ T835] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 413.854179][ T835] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 413.854195][ T835] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 413.935101][ T7334] team0: Port device team_slave_0 added [ 413.989651][ T835] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -71 [ 414.049703][ T7334] team0: Port device team_slave_1 added [ 414.059587][ T835] usb 5-1: USB disconnect, device number 12 [ 417.172625][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.172645][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.172674][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.247424][ T4966] udevd[4966]: worker [6445] /devices/virtual/block/nbd1 timeout; kill it [ 417.248237][ T4966] udevd[4966]: seq 11384 '/devices/virtual/block/nbd1' killed [ 417.269940][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.269982][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.270055][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.857475][ T7334] hsr_slave_0: entered promiscuous mode [ 417.859171][ T7334] hsr_slave_1: entered promiscuous mode [ 417.863053][ T7334] debugfs: 'hsr0' already exists in 'hsr' [ 417.863079][ T7334] Cannot create hsr debugfs directory [ 417.935014][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 180 seconds [ 417.998627][ T7205] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 418.020846][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.153350][ T7205] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 418.179765][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.636301][ T7205] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 420.679480][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.021409][ T7525] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 423.338993][ T7205] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.557729][ T7205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 424.294361][ T7169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.443213][ T7169] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.732836][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.733051][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.745062][ T5748] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 424.784007][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.784148][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.916923][ T5748] usb 5-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 424.919716][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.919752][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.919792][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.978709][ T5748] usb 5-1: config 0 descriptor?? [ 425.057450][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.395519][ T1170] bridge_slave_1: left allmulticast mode [ 425.395558][ T1170] bridge_slave_1: left promiscuous mode [ 425.395814][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.464531][ T5748] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 425.464568][ T5748] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 425.464588][ T5748] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 425.464608][ T5748] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 425.464628][ T5748] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 425.511186][ T5748] playstation 0003:054C:0DF2.0005: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 425.606995][ T1170] bridge_slave_0: left allmulticast mode [ 425.607035][ T1170] bridge_slave_0: left promiscuous mode [ 425.607310][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.905130][ T1170] bridge_slave_1: left allmulticast mode [ 425.905178][ T1170] bridge_slave_1: left promiscuous mode [ 425.905443][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.036567][ T1170] bridge_slave_0: left allmulticast mode [ 426.036610][ T1170] bridge_slave_0: left promiscuous mode [ 426.036856][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.805720][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.905737][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.969762][ T1170] bond0 (unregistering): Released all slaves [ 427.346469][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.457393][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.520508][ T1170] bond0 (unregistering): Released all slaves [ 427.787113][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 428.470365][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.783083][ T5748] playstation 0003:054C:0DF2.0005: Failed to retrieve feature with reportID 32: -71 [ 428.783116][ T5748] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense firmware info: -71 [ 428.783170][ T5748] playstation 0003:054C:0DF2.0005: Failed to get firmware info from DualSense [ 428.783188][ T5748] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 428.901877][ T5748] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -71 [ 428.932820][ T5748] usb 5-1: USB disconnect, device number 13 [ 428.994429][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.994585][ T6068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.810137][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.891756][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.182579][ T5617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 433.217211][ T5617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 433.218957][ T5617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 433.237257][ T5617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 433.240560][ T5617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 433.479553][ T1170] hsr_slave_0: left promiscuous mode [ 433.517753][ T1170] hsr_slave_1: left promiscuous mode [ 433.519068][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.567214][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.765132][ T1170] hsr_slave_0: left promiscuous mode [ 433.805269][ T1170] hsr_slave_1: left promiscuous mode [ 433.806631][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.639311][ T5617] Bluetooth: hci6: command tx timeout [ 435.683037][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.337780][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 436.395528][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 437.984936][ T5617] Bluetooth: hci6: command tx timeout [ 438.675482][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 438.726255][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 439.269626][ T7587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 439.793492][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.819523][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.842583][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.854351][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.856103][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 440.045565][ T5617] Bluetooth: hci6: command tx timeout [ 440.325861][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.325937][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.546202][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 441.790181][ T9] usb 5-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 441.826382][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.826418][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.826460][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.876193][ T9] usb 5-1: config 0 descriptor?? [ 442.055012][ T5617] Bluetooth: hci3: command tx timeout [ 442.105637][ T7571] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.135181][ T5617] Bluetooth: hci6: command tx timeout [ 442.330531][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 442.330571][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 442.330601][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 442.330631][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 442.330660][ T9] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 442.462547][ T7299] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 442.492739][ T9] playstation 0003:054C:0DF2.0006: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 442.514474][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.524794][ T7299] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 442.588306][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.626169][ T7299] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 443.011858][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.033589][ T7299] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 443.308027][ T7299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.357337][ T7590] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.126293][ T5617] Bluetooth: hci3: command tx timeout [ 444.922606][ T7334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 445.041868][ T7334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.248050][ T7334] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 445.281213][ T7334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 446.206581][ T5617] Bluetooth: hci3: command tx timeout [ 446.382513][ T7334] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 446.434319][ T7334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 446.467898][ T7334] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 446.563143][ T7334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.797020][ T9] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 32: -71 [ 446.797055][ T9] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense firmware info: -71 [ 446.797108][ T9] playstation 0003:054C:0DF2.0006: Failed to get firmware info from DualSense [ 446.797126][ T9] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 446.870294][ T9] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 446.917173][ T9] usb 5-1: USB disconnect, device number 14 [ 448.004856][ T7588] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 210 seconds [ 448.284920][ T5617] Bluetooth: hci3: command tx timeout [ 449.938474][ T7334] kthread_run failed with err -4 [ 450.400270][ T5612] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 450.463802][ T5612] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 450.465397][ T5612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 450.473996][ T5612] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 450.483918][ T5612] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 451.794483][ T5612] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 451.854221][ T5612] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 451.858500][ T5612] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 451.880356][ T5612] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 451.881067][ T5612] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 453.692915][ T5617] Bluetooth: hci7: command tx timeout [ 454.059031][ T5617] Bluetooth: hci8: command tx timeout [ 456.186727][ T5617] Bluetooth: hci7: command tx timeout [ 456.186758][ T5617] Bluetooth: hci8: command tx timeout [ 456.525125][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.525269][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.525480][ T7571] bridge_slave_0: entered allmulticast mode [ 456.587232][ T7571] bridge_slave_0: entered promiscuous mode [ 456.646385][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.646518][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.649513][ T7571] bridge_slave_1: entered allmulticast mode [ 456.663235][ T7571] bridge_slave_1: entered promiscuous mode [ 457.120712][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.179004][ T7664] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.204529][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.727878][ T7571] team0: Port device team_slave_0 added [ 457.812495][ T7571] team0: Port device team_slave_1 added [ 458.205557][ T5612] Bluetooth: hci8: command tx timeout [ 458.205579][ T5617] Bluetooth: hci7: command tx timeout [ 458.327306][ T7657] rxe_eth0 speed is unknown, defaulting to 1000 [ 458.328908][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.329035][ T7590] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.329203][ T7590] bridge_slave_0: entered allmulticast mode [ 458.334197][ T7590] bridge_slave_0: entered promiscuous mode [ 458.385886][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.385904][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.385934][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.460695][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.460921][ T7590] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.461119][ T7590] bridge_slave_1: entered allmulticast mode [ 458.487440][ T7590] bridge_slave_1: entered promiscuous mode [ 458.498223][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.498266][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.498381][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.951954][ T7590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.974211][ T7590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.975002][ T5757] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 459.126408][ T5757] usb 5-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 459.128076][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.128109][ T5757] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.128150][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.141206][ T7571] hsr_slave_0: entered promiscuous mode [ 459.144215][ T7571] hsr_slave_1: entered promiscuous mode [ 459.148391][ T7571] debugfs: 'hsr0' already exists in 'hsr' [ 459.148462][ T7571] Cannot create hsr debugfs directory [ 459.201376][ T5757] usb 5-1: config 0 descriptor?? [ 459.443499][ T7590] team0: Port device team_slave_0 added [ 459.523626][ T7590] team0: Port device team_slave_1 added [ 459.662844][ T5757] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 459.662885][ T5757] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 459.662914][ T5757] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 459.662943][ T5757] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 459.662970][ T5757] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 459.744632][ T5757] playstation 0003:054C:0DF2.0007: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 460.155443][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.155464][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.155495][ T7590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.285054][ T5617] Bluetooth: hci7: command tx timeout [ 460.285067][ T5612] Bluetooth: hci8: command tx timeout [ 460.294064][ T7590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.294082][ T7590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.294123][ T7590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.417562][ T7590] hsr_slave_0: entered promiscuous mode [ 461.421616][ T7590] hsr_slave_1: entered promiscuous mode [ 461.429611][ T7590] debugfs: 'hsr0' already exists in 'hsr' [ 461.429686][ T7590] Cannot create hsr debugfs directory [ 462.835056][ T1170] bridge_slave_1: left allmulticast mode [ 462.835156][ T1170] bridge_slave_1: left promiscuous mode [ 462.835553][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.904171][ T5757] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -71 [ 462.904204][ T5757] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -71 [ 462.904262][ T5757] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense [ 462.904280][ T5757] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 462.945884][ T5757] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -71 [ 462.965511][ T5757] usb 5-1: USB disconnect, device number 15 [ 463.037380][ T1170] bridge_slave_0: left allmulticast mode [ 463.037409][ T1170] bridge_slave_0: left promiscuous mode [ 463.037604][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.120080][ T7746] can: request_module (can-proto-0) failed. [ 463.365946][ T1170] bridge_slave_1: left allmulticast mode [ 463.366044][ T1170] bridge_slave_1: left promiscuous mode [ 463.366734][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.529845][ T1170] bridge_slave_0: left allmulticast mode [ 463.529959][ T1170] bridge_slave_0: left promiscuous mode [ 463.530650][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.999467][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.088555][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.132892][ T1170] bond0 (unregistering): Released all slaves [ 467.985586][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.066126][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.087582][ T1170] bond0 (unregistering): Released all slaves [ 468.936097][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 469.090526][ T10] usb 5-1: New USB device found: idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 469.092109][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.092143][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.092183][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.166999][ T10] usb 5-1: config 0 descriptor?? [ 469.462602][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.463200][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.463609][ T7664] bridge_slave_0: entered allmulticast mode [ 469.504223][ T7664] bridge_slave_0: entered promiscuous mode [ 469.609040][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 469.609090][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 469.609120][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 469.609150][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 469.609179][ T10] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 469.691842][ T10] playstation 0003:054C:0DF2.0008: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 470.391738][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.392331][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.400203][ T7664] bridge_slave_1: entered allmulticast mode [ 470.436371][ T7664] bridge_slave_1: entered promiscuous mode [ 471.169163][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.169578][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.170128][ T7657] bridge_slave_0: entered allmulticast mode [ 471.197966][ T7657] bridge_slave_0: entered promiscuous mode [ 471.222793][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.234108][ T7657] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.234237][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.234429][ T7657] bridge_slave_1: entered allmulticast mode [ 471.264565][ T7657] bridge_slave_1: entered promiscuous mode [ 471.282890][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.415344][ T1170] hsr_slave_0: left promiscuous mode [ 471.455061][ T1170] hsr_slave_1: left promiscuous mode [ 471.457411][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.480120][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.645782][ T1170] hsr_slave_0: left promiscuous mode [ 471.684974][ T1170] hsr_slave_1: left promiscuous mode [ 471.691121][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.741875][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.766979][ T10] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 32: -71 [ 473.767009][ T10] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -71 [ 473.767060][ T10] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense [ 473.767075][ T10] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 473.820327][ T10] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -71 [ 473.882032][ T10] usb 5-1: USB disconnect, device number 16 [ 474.123353][ T7777] can: request_module (can-proto-0) failed. [ 474.178783][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 474.255645][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 478.084883][ T867] block nbd1: Possible stuck request ffff888027ae3480: control (read@0,1024B). Runtime 240 seconds [ 478.153186][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 478.258076][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 479.001446][ T7657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.016469][ T7664] team0: Port device team_slave_0 added [ 479.041122][ T7664] team0: Port device team_slave_1 added [ 479.064088][ T7657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.283682][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.283703][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.283733][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.326407][ T39] INFO: task syz.1.193:6846 blocked for more than 144 seconds. [ 479.326652][ T39] Not tainted syzkaller #0 [ 479.326701][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 479.326743][ T39] task:syz.1.193 state:D stack:26536 pid:6846 tgid:6843 ppid:5601 task_flags:0x400040 flags:0x00080002 [ 479.326987][ T39] Call Trace: [ 479.327078][ T39] [ 479.327148][ T39] __schedule+0x171d/0x56f0 [ 479.327422][ T39] ? trace_irq_disable+0x3b/0x140 [ 479.327590][ T39] ? __pfx___schedule+0x10/0x10 [ 479.327897][ T39] rt_mutex_schedule+0x76/0xf0 [ 479.332411][ T39] rt_mutex_slowlock_block+0x540/0x6a0 [ 479.332816][ T39] ? rt_mutex_slowlock_block+0x33f/0x6a0 [ 479.332918][ T39] rt_mutex_slowlock+0x2d4/0x780 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 479.332992][ T39] ? rt_mutex_slowlock+0x1f2/0x780 [ 479.333047][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 479.333191][ T39] ? sync_bdevs+0x276/0x470 [ 479.333315][ T39] mutex_lock_nested+0x163/0x1d0 [ 479.333419][ T39] sync_bdevs+0x276/0x470 [ 479.333506][ T39] __ia32_sys_sync+0xc5/0x120 [ 479.333620][ T39] ? __pfx___ia32_sys_sync+0x10/0x10 [ 479.333709][ T39] ? do_syscall_64+0xc8/0x520 [ 479.334052][ T39] do_syscall_64+0x166/0x520 [ 479.334143][ T39] ? trace_irq_disable+0x3b/0x140 [ 479.339811][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.342971][ T39] ? clear_bhb_loop+0x70/0xc0 [ 479.343076][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.343149][ T39] RIP: 0033:0x7f34610ff559 [ 479.343252][ T39] RSP: 002b:00007f345f335028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 479.343319][ T39] RAX: ffffffffffffffda RBX: 00007f3461386090 RCX: 00007f34610ff559 [ 479.343363][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.343397][ T39] RBP: 00007f3461386090 R08: 0000000000000000 R09: 0000000000000000 [ 479.343439][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.343480][ T39] R13: 00007f3461386128 R14: 00007f3461386090 R15: 00007ffeab0c96f8 [ 479.343579][ T39] [ 479.343725][ T39] [ 479.343725][ T39] Showing all locks held in the system: [ 479.343782][ T39] locks held by kworker/u8:0/12: 6, last CPU#1: [ 479.343871][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.344113][ T39] #1: ffffc90000117c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.353582][ T39] #2: ffff88802a514310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 479.353911][ T39] #3: ffff88802edae920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 479.354052][ T39] #4: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.354220][ T39] #5: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 479.354411][ T39] locks held by pr/ttyS0/38: 3, last CPU#1: [ 479.354460][ T39] #0: ffffffff8f29b018 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 479.354580][ T39] #1: ffffffff9b14d558 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x6ac/0x8d0 [ 479.355423][ T39] #2: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.361730][ T39] locks held by khungtaskd/39: 1, last CPU#0: [ 479.361753][ T39] #0: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 479.361894][ T39] locks held by kworker/u8:6/702: 5, last CPU#0: [ 479.361944][ T39] #0: ffff888033595140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.362136][ T39] #1: ffffc900043afc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.362311][ T39] #2: ffffffff8f255b40 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 479.362461][ T39] #3: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 479.362602][ T39] #4: ffff88806fe48758 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 479.362900][ T39] locks held by kworker/u8:9/1170: 4, on CPU#1: [ 479.362950][ T39] #0: ffff88801c290940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.363123][ T39] #1: ffffc900069e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.464900][ T39] #2: ffffffff907fc480 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 479.465118][ T39] #3: ffff888070ad99b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 479.465256][ T39] locks held by jbd2/sda1-8/4929: 2, last CPU#0: [ 479.465330][ T39] #0: ffffffff8f516b90 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 479.465575][ T39] #1: ffff8881 ** replaying previous printk message ** [ 479.465575][ T39] #1: ffff88813ff10d58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xee/0x2c0 [ 479.465719][ T39] locks held by getty/5354: 2, on CPU#0: [ 479.465748][ T39] #0: ffff8880334580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 479.466000][ T39] #1: ffffc900044e32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 479.466146][ T39] locks held by sshd-session/5585: 4, last CPU#0: [ 479.466181][ T39] #0: ffff888030b61318 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 479.601230][ T39] #1: ffff8880b8424808 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 479.601474][ T39] #2: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.601643][ T39] #3: ffff888030b61220 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 479.601741][ T39] locks held by syz-executor/5586: 4, last CPU#0: [ 479.601793][ T39] #0: ffff888033c02ab8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 479.601983][ T39] #1: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: folio_lruvec_lock_irqsave+0x24/0x550 [ 479.602152][ T39] #2: ffff88801c2c2668 (&lruvec->lru_lock){+.+.}-{3:3}, at: folio_lruvec_lock_irqsave+0x294/0x550 [ 479.602295][ T39] #3: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.602471][ T39] locks held by kworker/1:6/5757: 3, last CPU#1: [ 479.602513][ T39] #0: ffff88813ff3a540 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.602682][ T39] #1: ffffc9000616fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.628184][ T39] #2: ffffffff8ff26598 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 479.628464][ T39] locks held by kworker/u8:13/5858: 6, on CPU#0: [ 479.628506][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.628633][ T39] #1: ffffc90006357c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.628804][ T39] #2: ffff888070bac310 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 479.628951][ T39] #3: ffff888061f55520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 479.629096][ T39] #4: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.629276][ T39] #5: ffff8880b8437b10 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 479.645760][ T39] locks held by kworker/u8:15/5931: 6, last CPU#0: [ 479.645817][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.645954][ T39] #1: ffffc900065b7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.646169][ T39] #2: ffff88803847e310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xca0 [ 479.646344][ T39] #3: ffff88803de0cd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xca0 [ 479.646502][ T39] #4: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.646667][ T39] #5: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.646818][ T39] locks held by kworker/u8:18/6068: 6, last CPU#0: [ 479.646860][ T39] #0: ffff88813fe3c140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.647059][ T39] #1: ffffc900069d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 479.733633][ T39] #2: ffffffff9b006960 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 479.733977][ T39] #3: ffffffff9b0ebbc0 (&obj_hash[i].lock){-...}-{2:2}, at: debug_object_activate+0xa8/0x3b0 [ 479.734145][ T39] #4: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 479.734302][ T39] #5: ffffffff8f3c1640 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 479.734490][ T39] locks held by udevd/6445: 1, on CPU#1: [ 479.734532][ T39] #0: ffff888026c744c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 479.737540][ T7657] team0: Port device team_slave_0 added [ 479.738944][ T39] locks held by syz.1.193/6846: 1, on CPU#0: [ 479.738964][ T39] #0: ffff888026c744c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 479.739137][ T39] locks held by syz.0.221/7101: 1, on CPU#1: [ 479.766174][ T39] #0: ffff888026c744c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470 [ 479.766394][ T39] locks held by syz-executor/7571: 4, on CPU#1: [ 479.766435][ T39] #0: ffff888035926510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 479.766661][ T39] #1: ffff88803659c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 479.766852][ T39] #2: ffff88802a55c878 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 479.767008][ T39] #3: ffffffff9005de78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6c0 [ 479.767135][ T39] locks held by syz-executor/7590: 6, last CPU#0: [ 479.767175][ T39] #0: ffff888035926510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 479.767341][ T39] #1: ffff8880260ca878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 479.767503][ T39] #2: ffff88802a55c788 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 479.783097][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.783140][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.783245][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.796750][ T39] #3: ffffffff9005de78 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 479.796948][ T39] #4: ffff8880636c6160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa9/0x7d0 [ 479.797243][ T39] #5: ffff888055f70310 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 479.797413][ T39] locks held by syz-executor/7657: 1, last CPU#0: [ 479.797455][ T39] #0: ffff88806382eeb8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 479.797652][ T39] locks held by syz-executor/7664: 2, last CPU#0: [ 479.797693][ T39] #0: ffffffff9080b158 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 479.797854][ T39] #1: ffff888061c9c1c0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xcf/0xf90 [ 479.798015][ T39] locks held by syz.4.296/7790: 2, last CPU#0: [ 479.798056][ T39] #0: ffff8880693d6510 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0xac3/0x10c0 [ 479.798225][ T39] #1: ffff8880605da190 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 479.826393][ T39] locks held by dhcpcd-run-hook/7791: 1, last CPU#0: [ 479.826438][ T39] #0: ffff8880402210b8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f0/0x520 [ 479.826628][ T39] [ 479.826641][ T39] ============================================= [ 479.826641][ T39] [ 479.826681][ T39] NMI backtrace for cpu 0 [ 479.826731][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.826794][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 479.826826][ T39] Call Trace: [ 479.826848][ T39] [ 479.826864][ T39] dump_stack_lvl+0xe8/0x150 [ 479.826997][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 479.827149][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 479.827231][ T39] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 479.827334][ T39] sys_info+0x135/0x170 [ 479.827411][ T39] watchdog+0x1073/0x10f0 [ 479.827486][ T39] ? watchdog+0x209/0x10f0 [ 479.827546][ T39] kthread+0x38b/0x470 [ 479.827617][ T39] ? __pfx_watchdog+0x10/0x10 [ 479.827669][ T39] ? __pfx_kthread+0x10/0x10 [ 479.827733][ T39] ret_from_fork+0x514/0xb70 [ 479.827839][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 479.827897][ T39] ? __switch_to+0xc78/0x1410 [ 479.827960][ T39] ? __pfx_kthread+0x10/0x10 [ 479.828033][ T39] ret_from_fork_asm+0x1a/0x30 [ 479.828137][ T39] [ 479.828199][ T39] Sending NMI from CPU 0 to CPUs 1: [ 479.828257][ C1] NMI backtrace for cpu 1 [ 479.828271][ C1] CPU: 1 UID: 0 PID: 38 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.828291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 479.828302][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 479.828367][ C1] Code: e8 8e 08 56 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bf a5 c8 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 479.828383][ C1] RSP: 0018:ffffc90000af78b8 EFLAGS: 00000202 [ 479.828398][ C1] RAX: 1ffffffff3629a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 479.828411][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 479.828422][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.828434][ C1] R10: dffffc0000000000 R11: ffffffff8571d5f0 R12: dffffc0000000000 [ 479.828447][ C1] R13: 0000000000000000 R14: ffffffff9b14d580 R15: 0000000000000000 [ 479.828459][ C1] FS: 0000000000000000(0000) GS:ffff888124824000(0000) knlGS:0000000000000000 [ 479.828475][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.828487][ C1] CR2: 00007fb888a7df88 CR3: 00000000708e6000 CR4: 00000000003526f0 [ 479.828503][ C1] Call Trace: [ 479.828510][ C1] [ 479.828518][ C1] wait_for_lsr+0x190/0x300 [ 479.828573][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 479.828600][ C1] serial8250_console_write+0xaa2/0x1220 [ 479.828638][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 479.828676][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 479.828703][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 479.828725][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 479.828766][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 479.828799][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 479.828827][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 479.828864][ C1] ? __kthread_parkme+0x71/0x1f0 [ 479.828883][ C1] ? __kthread_parkme+0x199/0x1f0 [ 479.828903][ C1] kthread+0x38b/0x470 [ 479.828924][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 479.828950][ C1] ? __pfx_kthread+0x10/0x10 [ 479.828972][ C1] ret_from_fork+0x514/0xb70 [ 479.828994][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 479.829014][ C1] ? __switch_to+0xc78/0x1410 [ 479.829033][ C1] ? __pfx_kthread+0x10/0x10 [ 479.829053][ C1] ret_from_fork_asm+0x1a/0x30 [ 479.829082][ C1] [ 479.845946][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 480.880900][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.890528][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 480.900583][ T39] Call Trace: [ 480.903858][ T39] [ 480.906788][ T39] vpanic+0x26f/0x710 [ 480.910776][ T39] panic+0xc5/0xd0 [ 480.914498][ T39] ? __pfx_panic+0x10/0x10 [ 480.918916][ T39] ? preempt_schedule_common+0x7f/0xd0 [ 480.924426][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 480.929809][ T39] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 480.935985][ T39] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 480.942157][ T39] watchdog+0x10e7/0x10f0 [ 480.946494][ T39] ? watchdog+0x209/0x10f0 [ 480.950931][ T39] kthread+0x38b/0x470 [ 480.955018][ T39] ? __pfx_watchdog+0x10/0x10 [ 480.959735][ T39] ? __pfx_kthread+0x10/0x10 [ 480.964334][ T39] ret_from_fork+0x514/0xb70 [ 480.968933][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 480.974048][ T39] ? __switch_to+0xc78/0x1410 [ 480.978737][ T39] ? __pfx_kthread+0x10/0x10 [ 480.983331][ T39] ret_from_fork_asm+0x1a/0x30 [ 480.988111][ T39] [ 480.991321][ T39] Kernel Offset: disabled [ 480.995661][ T39] Rebooting in 86400 seconds..