last executing test programs: 29m7.599892214s ago: executing program 1 (id=56): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) fsopen(0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) 29m2.163434025s ago: executing program 1 (id=61): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x8801) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000002c00010028bd7000fedbdf250400000000001b80000011800000bd000a0101000000e28000003e800000d28000005b8000006300f406000000001800000043800000128000002580c4ff5028c7d5d71f51be383013274ab78b794d0fe0d47a41b3a2b7281a289a0ae7deb92c94e8cb31666a373d1505622800005700fe8000000000000000000000000000bbdbffafcb16283cd3eff2ebdf3fe7aa2805b68bfa663283065e8f668d0b548de04ffe0fc24788e59259f7b0de3a284d232d90918b70f5b13798da408f9f866f78856a6277c56d676134d68fd019521dccb0ebaae76b064d33d87201355236ab9e275d1d2e5bcb6f79b9ea19e60ea8c490f2a9c0d7e7bc09868ab34480c8cc464f398b361bc9c768795a6e9f7adcb64699f34377dc8e5fca299cc01d48d2d8b1a81242bb633894c339f2c7e0ab45636f9f5661fb288fc7a0c60000388000004280000042806d265d80bdbe8f9c4df29277c8a70498d7a5d95363ee71c67a69638f1d461252964664fb7fa0f06777454bba368c7fe9eb533872b27c1470e42693ca480b9c550af4be4d818fbac28b9d402ee011ab30dae9d87286b3f6bf4ebc0c785c3e273acc04616530a98f56bd8af6350c09fd863d03b7d037b781e2b4993cc8c5254f1f1641716602df7fee8bf6f60ca719b4295de6b11363b82c468ed91ff182d40e5b37d7a792896ffc13ea939f9e039089dae6e8293511d897fe3b5fc46e00004400fe07d51394ee7b53b2e6ea66e583470f3ae10a43490576be9987830fc4495158bc95a2fff1211dc6", @ANYRES32=r0, @ANYBLOB], 0x33}, 0x1, 0x0, 0x0, 0xc13d988464ab0c39}, 0x20040041) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000280)='-1\x00', 0x3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x1d, @MIDI_NOTEON=@note=0x3f, 0x8, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe) 29m0.188216378s ago: executing program 1 (id=63): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom$inet6(r3, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 28m55.794682591s ago: executing program 1 (id=68): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040), 0x0, 0x401, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2f}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r3, 0x1000001, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7fffeffffffffffb, 0x7, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x4734}}, 0x10) 28m53.224947254s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 28m51.466464517s ago: executing program 1 (id=76): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new d'], 0x2a, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 28m36.219034191s ago: executing program 32 (id=76): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new d'], 0x2a, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 24m12.314136153s ago: executing program 2 (id=491): mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x35314258}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x800) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x2000fb) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000340)={{0x1, 0x1, 0x10000}}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) io_setup(0x7, &(0x7f0000000280)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket(0x15, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) shutdown(r6, 0x1) 24m9.680399662s ago: executing program 2 (id=497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 24m8.334001037s ago: executing program 2 (id=499): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x1ff, 0x2, 0x0, 0x20, 0x2, 0x20, 0x0, &(0x7f0000000600)=[0x7], 0x1, 0x0}) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000440)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x9e) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 24m4.861254091s ago: executing program 2 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2108080, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 24m0.818121666s ago: executing program 2 (id=511): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6200, 0x2, &(0x7f0000000180)="c2fb"}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) unshare(0x52020400) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0x40405515, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 23m55.2991876s ago: executing program 2 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b65, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28) 23m39.105090807s ago: executing program 33 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ioctl$VT_RESIZE(0xffffffffffffffff, 0x4b65, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28) 4m28.749046049s ago: executing program 0 (id=2069): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000a00)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x5c, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x0, 0x4, 0x0, 0x2, 0x50, 0x2}, @dstopts={0x33, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x6b}, @padn]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x84) 4m28.579529989s ago: executing program 0 (id=2070): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000"], 0xc4}}, 0x20050890) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) 4m26.439121516s ago: executing program 0 (id=2076): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m24.667945708s ago: executing program 0 (id=2078): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x400007}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000001c0)=0x7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000fe5bdf250100000006"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4024880) 4m23.183188078s ago: executing program 0 (id=2082): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x20) r2 = fanotify_init(0x200, 0x1000) fanotify_mark(r2, 0x1, 0x40001002, r0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000040)=0x10, r1, 0x0, 0x807, 0x0) 4m22.926894948s ago: executing program 0 (id=2084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@subsystem='pids'}]}) 2m33.157650968s ago: executing program 3 (id=2319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 2m32.907366416s ago: executing program 3 (id=2321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}]}], {0x14, 0x10}}, 0xd8}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 2m32.462509112s ago: executing program 3 (id=2322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24048814) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000000000800"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m30.829087841s ago: executing program 3 (id=2327): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0xa, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], '\\'}, @enum64={0xf, 0x0, 0x0, 0x13, 0x0, 0x4}, @float={0x5, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0, 0x2e, 0x5f, 0x30, 0x30, 0x61, 0x61, 0x2e]}}, &(0x7f0000000700)=""/153, 0x4a, 0x99, 0x1, 0x80}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000400)="06", 0x1}, {0x0}], 0x2}}], 0x2a0, 0x20004840) 2m29.416396138s ago: executing program 3 (id=2328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) io_uring_setup(0xd94, &(0x7f0000000800)={0x0, 0x74ef, 0x40, 0x2, 0x278}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 2m28.314257137s ago: executing program 3 (id=2334): truncate(&(0x7f0000000080)='./file2\x00', 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sync() 2m12.319434005s ago: executing program 34 (id=2334): truncate(&(0x7f0000000080)='./file2\x00', 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sync() 2m0.191591289s ago: executing program 6 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) io_uring_setup(0xd94, &(0x7f0000000800)={0x0, 0x74ef, 0x40, 0x2, 0x278}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[], 0x30}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 1m59.163713672s ago: executing program 6 (id=2385): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d0072413"], 0x0) 1m56.770300797s ago: executing program 6 (id=2389): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000be9b2a204705202755af010203010902240001000010"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usbip_server_init(0x3) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1m51.069142556s ago: executing program 6 (id=2395): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 1m47.681287143s ago: executing program 6 (id=2398): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) r5 = gettid() tkill(r5, 0xb) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r7 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) fsopen(0x0, 0x1) 1m44.422566211s ago: executing program 6 (id=2402): truncate(&(0x7f0000000080)='./file2\x00', 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sync() 1m28.150185587s ago: executing program 35 (id=2402): truncate(&(0x7f0000000080)='./file2\x00', 0x4) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sync() 9.446091079s ago: executing program 5 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, r1, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) close(0x3) 7.131515653s ago: executing program 4 (id=2532): r0 = socket(0x28, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.1158102s ago: executing program 4 (id=2533): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) 4.089977338s ago: executing program 4 (id=2534): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, 0x0, 0x262840, 0x0) r1 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000019340)={0x0, 0x0, &(0x7f0000019300)={&(0x7f0000000240)=@newspdinfo={0x44, 0x24, 0x400, 0x70bd28, 0x25dfdbfe, 0x1, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004041}, 0x20008811) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) epoll_create1(0x80000) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r3, 0x40044591, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000019380), &(0x7f00000193c0)=@v2={0x3, 0x0, 0x1, 0x0, 0x5, "1b8fc09963"}, 0xe, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getdents64(0xffffffffffffffff, &(0x7f0000001f40)=""/4123, 0x101b) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd2a, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.927580481s ago: executing program 5 (id=2535): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff0700", @ANYRES32, @ANYBLOB="003000000000000014"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x800c010}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.588210425s ago: executing program 5 (id=2536): userfaultfd(0x80001) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffc, @loopback={0xffffffffffff0000}}, 0x1c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000580)={0x40, 0x31, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.373054422s ago: executing program 4 (id=2537): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af00, &(0x7f00000003c0)={0x1}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) 2.192000543s ago: executing program 4 (id=2538): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.107681917s ago: executing program 4 (id=2539): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="cdec4d026509059b0d195db294a7399d8435e9ac8136f20b8a8896c3832cf963042b784b884f7f52da3194e133bbedebd0039b8403be66285110fdee182c337cbd2f21ceec2ed39ac247020e7053ce77d5fddf1c1e7ba37c40bf9d3f887be0b7f512db9a6474c4e6020317c33d7149955ce8f2841ea0d46375a3", 0x7a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 448.489976ms ago: executing program 5 (id=2540): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 221.38757ms ago: executing program 5 (id=2541): r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 0s ago: executing program 5 (id=2542): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): : command tx timeout [ 1394.766839][T14079] nbd0: detected capacity change from 0 to 63 [ 1394.903388][T14080] block nbd0: NBD_DISCONNECT [ 1394.978381][T14080] block nbd0: Disconnected due to user request. [ 1395.008332][T14080] block nbd0: shutting down sockets [ 1395.073965][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.074100][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1395.078034][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.078065][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1395.128669][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.128705][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1395.128784][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.128807][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1395.193212][T13913] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.193239][T13913] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1395.207731][T13913] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.207761][T13913] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1395.216230][T13913] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.216258][T13913] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1395.216391][T13913] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.216412][T13913] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1395.216581][T13913] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.216602][T13913] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1395.216740][T13913] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1395.216772][T13913] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1395.275246][T13913] ldm_validate_partition_table(): Disk read failed. [ 1395.283150][T13913] Dev nbd0: unable to read RDB block 0 [ 1395.308984][T13913] nbd0: unable to read partition table [ 1395.377805][T13913] ldm_validate_partition_table(): Disk read failed. [ 1395.379301][ T3378] hsr_slave_0: left promiscuous mode [ 1395.399376][T13913] Dev nbd0: unable to read RDB block 0 [ 1395.405277][T13913] nbd0: unable to read partition table [ 1395.424412][ T3378] hsr_slave_1: left promiscuous mode [ 1395.425129][ T3378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.425145][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.461859][ T3378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1395.461877][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.676350][ T3378] veth1_macvtap: left promiscuous mode [ 1395.676416][ T3378] veth0_macvtap: left promiscuous mode [ 1395.676574][ T3378] veth1_vlan: left promiscuous mode [ 1395.676667][ T3378] veth0_vlan: left promiscuous mode [ 1396.338383][T14095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1668'. [ 1396.541086][ T9298] Bluetooth: hci0: command tx timeout [ 1397.891545][T14101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 1397.929962][T14101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1670'. [ 1398.504310][ T3378] team0 (unregistering): Port device team_slave_1 removed [ 1398.610635][ T9298] Bluetooth: hci0: command tx timeout [ 1398.611480][ T3378] team0 (unregistering): Port device team_slave_0 removed [ 1401.554170][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1403.915327][T12292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1403.987589][T12292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1404.002177][T12292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1404.016277][T12292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1404.017043][T12292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1406.204910][T14175] fuse: Bad value for 'fd' [ 1406.210822][ T9298] Bluetooth: hci5: command tx timeout [ 1407.064716][T14019] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.067121][T14019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1407.067348][T14019] bridge_slave_0: entered allmulticast mode [ 1407.076718][T14019] bridge_slave_0: entered promiscuous mode [ 1407.118738][T14019] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.118938][T14019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.119164][T14019] bridge_slave_1: entered allmulticast mode [ 1407.128589][T14019] bridge_slave_1: entered promiscuous mode [ 1407.437510][T14019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.036399][T14019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.292748][ T9298] Bluetooth: hci5: command tx timeout [ 1409.948007][T14019] team0: Port device team_slave_0 added [ 1410.371141][ T9298] Bluetooth: hci5: command tx timeout [ 1410.547592][T14019] team0: Port device team_slave_1 added [ 1411.890007][T14019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.890024][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.890043][T14019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.953541][T14019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.953557][T14019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1411.953582][T14019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.538343][ T9298] Bluetooth: hci5: command tx timeout [ 1413.773929][T14255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1414.448370][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1414.448397][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 1415.268926][T14019] hsr_slave_0: entered promiscuous mode [ 1415.277609][T14019] hsr_slave_1: entered promiscuous mode [ 1415.278137][T14019] debugfs: 'hsr0' already exists in 'hsr' [ 1415.278154][T14019] Cannot create hsr debugfs directory [ 1416.532226][T14279] fuse: Bad value for 'fd' [ 1416.832214][T14283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1703'. [ 1416.884613][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 1419.356388][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1419.356512][T14153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.356727][T14153] bridge_slave_0: entered allmulticast mode [ 1419.387292][T14153] bridge_slave_0: entered promiscuous mode [ 1419.398263][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.398373][T14153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.398579][T14153] bridge_slave_1: entered allmulticast mode [ 1419.434027][T14153] bridge_slave_1: entered promiscuous mode [ 1419.930994][ T3378] bridge_slave_1: left allmulticast mode [ 1419.931020][ T3378] bridge_slave_1: left promiscuous mode [ 1419.931222][ T3378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.975406][ T3378] bridge_slave_0: left allmulticast mode [ 1419.975430][ T3378] bridge_slave_0: left promiscuous mode [ 1419.975602][ T3378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.789631][ T3378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.882921][ T3378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.957803][ T3378] bond0 (unregistering): Released all slaves [ 1422.141695][T14153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.512732][T14331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1716'. [ 1422.793019][T14335] fuse: Bad value for 'fd' [ 1423.697303][T14153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.060783][ T3378] hsr_slave_0: left promiscuous mode [ 1424.100832][ T3378] hsr_slave_1: left promiscuous mode [ 1424.101671][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.132088][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.638723][ T3378] team0 (unregistering): Port device team_slave_1 removed [ 1425.751795][ T3378] team0 (unregistering): Port device team_slave_0 removed [ 1427.935367][T14364] befs: Unknown parameter '$' [ 1427.956806][T14153] team0: Port device team_slave_0 added [ 1428.145291][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.145362][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.183815][T14153] team0: Port device team_slave_1 added [ 1428.183935][T14365] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1726'. [ 1428.261615][T14153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1428.261633][T14153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.261658][T14153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1428.263815][T14153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1428.263828][T14153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1428.263853][T14153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1429.738696][T14153] hsr_slave_0: entered promiscuous mode [ 1429.740078][T14153] hsr_slave_1: entered promiscuous mode [ 1431.014425][T14385] fuse: Bad value for 'fd' [ 1433.865274][T14410] fuse: fd is not a fuse device [ 1436.993115][ T3378] bridge_slave_1: left allmulticast mode [ 1436.993219][ T3378] bridge_slave_1: left promiscuous mode [ 1436.993472][ T3378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.072314][ T3378] bridge_slave_0: left allmulticast mode [ 1437.072349][ T3378] bridge_slave_0: left promiscuous mode [ 1437.072608][ T3378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.561263][ T3378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.641693][ T3378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.702368][ T3378] bond0 (unregistering): Released all slaves [ 1437.744183][T14433] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1742'. [ 1438.914597][ T3378] hsr_slave_0: left promiscuous mode [ 1439.027460][ T3378] hsr_slave_1: left promiscuous mode [ 1439.028107][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.062857][ T3378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.463335][ T3378] team0 (unregistering): Port device team_slave_1 removed [ 1439.511584][ T3378] team0 (unregistering): Port device team_slave_0 removed [ 1439.952439][ T9298] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1439.969508][T14019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1440.051476][T14019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1440.303675][T14019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1440.328636][T14019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1440.346534][T14019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1440.548059][T14019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.350621][T14019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1442.448985][T14019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.177621][T14153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1444.217550][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1444.228559][T14153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1444.264986][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1444.275547][T14153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1444.308784][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1444.318337][T14153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1444.349026][T14153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.727106][T14019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.843595][T14019] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.895972][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.898565][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.935155][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.935386][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.965350][T14153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.101896][T14153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1445.143500][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.143643][ T517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.209845][ T3378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.209978][ T3378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.328870][T14551] fuse: Bad value for 'fd' [ 1448.415009][T14019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.534725][T14153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.023290][T14019] veth0_vlan: entered promiscuous mode [ 1449.097146][T14019] veth1_vlan: entered promiscuous mode [ 1449.315907][T14579] fuse: Bad value for 'fd' [ 1450.699877][T14153] veth0_vlan: entered promiscuous mode [ 1450.725466][T14153] veth1_vlan: entered promiscuous mode [ 1450.795516][T14153] veth0_macvtap: entered promiscuous mode [ 1450.810356][T14153] veth1_macvtap: entered promiscuous mode [ 1450.862245][T14153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.867227][T14153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.069406][ T89] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.092128][ T89] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.092397][ T89] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.092434][ T89] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.584811][ T517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.584838][ T517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.751906][ T2648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.751927][ T2648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.181314][T12292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1454.542709][T12292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1454.544440][T12292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1454.546341][T12292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1454.547314][T12292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1454.983497][T14616] fuse: Bad value for 'fd' [ 1456.402893][T14622] fuse: Bad value for 'fd' [ 1458.275010][ T9298] Bluetooth: hci0: command tx timeout [ 1460.681931][T12292] Bluetooth: hci0: command tx timeout [ 1460.780655][T13452] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1461.724950][T14662] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1786'. [ 1461.897059][T13452] usb 6-1: Using ep0 maxpacket: 16 [ 1461.903639][T13452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.903693][T13452] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1461.903715][T13452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.959057][T13452] usb 6-1: config 0 descriptor?? [ 1462.705914][T12292] Bluetooth: hci0: command tx timeout [ 1463.205924][T13452] usbhid 6-1:0.0: can't add hid device: -71 [ 1463.206043][T13452] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1463.266043][T13452] usb 6-1: USB disconnect, device number 2 [ 1464.771605][T12292] Bluetooth: hci0: command tx timeout [ 1465.749105][T14696] sg_write: data in/out 453597/490 bytes for SCSI command 0x0-- guessing data in; [ 1465.749105][T14696] program syz.5.1794 not setting count and/or reply_len properly [ 1468.858056][T14716] fuse: Bad value for 'fd' [ 1470.096634][T14582] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1470.290632][T14582] usb 6-1: Using ep0 maxpacket: 32 [ 1470.300896][T14582] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.320932][T14582] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1470.320961][T14582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.320982][T14582] usb 6-1: Product: syz [ 1470.320996][T14582] usb 6-1: Manufacturer: syz [ 1470.321010][T14582] usb 6-1: SerialNumber: syz [ 1470.616713][T14582] usb 6-1: config 0 descriptor?? [ 1471.536307][T14714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.536758][T14714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.581940][T14582] cdc_ether 6-1:0.0: missing cdc header descriptor [ 1471.719221][T14582] usb 6-1: unsupported MDLM descriptors [ 1474.986653][T14753] fuse: Bad value for 'fd' [ 1476.771111][T13323] usb 6-1: USB disconnect, device number 3 [ 1477.091407][T14594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.091586][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.091954][T14594] bridge_slave_0: entered allmulticast mode [ 1477.094507][T14594] bridge_slave_0: entered promiscuous mode [ 1477.134882][T14594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.135078][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.135302][T14594] bridge_slave_1: entered allmulticast mode [ 1477.145114][T14594] bridge_slave_1: entered promiscuous mode [ 1477.286082][T14594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.372098][T13323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1477.395315][T14594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.520671][T13323] usb 6-1: Using ep0 maxpacket: 8 [ 1477.523198][T13323] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1477.523230][T13323] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1477.523261][T13323] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 1477.523284][T13323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.545264][T13323] usb 6-1: config 0 descriptor?? [ 1477.607130][ T5909] bridge_slave_1: left allmulticast mode [ 1477.607165][ T5909] bridge_slave_1: left promiscuous mode [ 1477.607417][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.749397][ T5909] bridge_slave_0: left allmulticast mode [ 1477.749432][ T5909] bridge_slave_0: left promiscuous mode [ 1477.755157][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.263850][T13323] usbhid 6-1:0.0: can't add hid device: -71 [ 1479.263967][T13323] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1479.276751][T13323] usb 6-1: USB disconnect, device number 4 [ 1479.662713][T14806] fuse: fd is not a fuse device [ 1482.620641][T13323] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1482.652966][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.731378][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1482.753261][ T5909] bond0 (unregistering): Released all slaves [ 1482.772637][T13323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1482.772664][T13323] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1482.776286][T13323] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1482.776316][T13323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.776335][T13323] usb 6-1: Product: syz [ 1482.776349][T13323] usb 6-1: Manufacturer: syz [ 1482.776362][T13323] usb 6-1: SerialNumber: syz [ 1482.784097][T13323] usb 6-1: config 0 descriptor?? [ 1482.967452][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1482.969499][T14594] team0: Port device team_slave_0 added [ 1482.998130][T14594] team0: Port device team_slave_1 added [ 1483.038968][T14824] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1483.039000][T14824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1483.060202][T14824] vhci_hcd vhci_hcd.0: Device attached [ 1483.067885][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.069653][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.181830][T14828] vhci_hcd: connection closed [ 1483.194480][T12489] usb 6-1: USB disconnect, device number 5 [ 1483.290631][T13452] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 1483.357917][T13642] vhci_hcd vhci_hcd.5: stop threads [ 1483.357934][T13642] vhci_hcd vhci_hcd.5: release socket [ 1483.358161][T13642] vhci_hcd vhci_hcd.5: disconnect device [ 1483.524473][T14594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1483.524547][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1483.524575][T14594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1483.660837][ T5909] hsr_slave_0: left promiscuous mode [ 1483.681524][ T5909] hsr_slave_1: left promiscuous mode [ 1483.682576][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.732199][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.812500][ T5909] veth1_vlan: left promiscuous mode [ 1483.812613][ T5909] veth0_vlan: left promiscuous mode [ 1483.892491][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 1483.892508][ T36] audit: type=1326 audit(1777923700.900:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14837 comm="syz.5.1829" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc309cccdd9 code=0x0 [ 1489.523774][T13452] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1489.579735][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.579812][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.914494][T14866] binder: 14862:14866 ioctl c0306201 200000000680 returned -14 [ 1490.513117][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1490.572420][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1490.968960][T14856] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1490.969001][T14856] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1490.969020][T14856] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1490.987399][T14594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1490.987415][T14594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.987440][T14594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1491.298625][T14594] hsr_slave_0: entered promiscuous mode [ 1491.299920][T14594] hsr_slave_1: entered promiscuous mode [ 1491.315985][T14594] debugfs: 'hsr0' already exists in 'hsr' [ 1491.316012][T14594] Cannot create hsr debugfs directory [ 1498.267179][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1501.760849][T14991] nbd0: detected capacity change from 0 to 63 [ 1501.763007][T12292] block nbd0: Receive control failed (result -32) [ 1502.843297][T14878] block nbd0: Dead connection, failed to find a fallback [ 1502.843323][T14878] block nbd0: shutting down sockets [ 1502.843337][T14878] blk_print_req_error: 138 callbacks suppressed [ 1502.843349][T14878] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.843374][T14878] buffer_io_error: 138 callbacks suppressed [ 1502.843383][T14878] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1502.843548][T14878] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.843570][T14878] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1502.843706][T14878] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.843728][T14878] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1502.850679][T14878] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.850711][T14878] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1502.850889][T14878] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.850911][T14878] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1502.851047][T14878] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.851066][T14878] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1502.851215][T14878] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.851236][T14878] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1502.851371][T14878] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.851391][T14878] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1502.851542][T14878] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.851563][T14878] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1502.851697][T14878] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1502.851717][T14878] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1502.890342][T14878] ldm_validate_partition_table(): Disk read failed. [ 1502.903355][T14878] Dev nbd0: unable to read RDB block 0 [ 1502.915321][T14878] nbd0: unable to read partition table [ 1503.121325][T14878] ldm_validate_partition_table(): Disk read failed. [ 1503.123513][T14878] Dev nbd0: unable to read RDB block 0 [ 1503.125758][T14878] nbd0: unable to read partition table [ 1506.358229][T15026] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1876'. [ 1509.562656][T15059] GUP no longer grows the stack in syz.3.1884 (15059): 200000006000-200000009000 (200000004000) [ 1509.562711][T15059] CPU: 0 UID: 0 PID: 15059 Comm: syz.3.1884 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1509.562736][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1509.562753][T15059] Call Trace: [ 1509.562760][T15059] [ 1509.562769][T15059] dump_stack_lvl+0xe8/0x150 [ 1509.562800][T15059] fixup_user_fault+0x637/0x6f0 [ 1509.562829][T15059] fault_in_user_writeable+0x71/0xd0 [ 1509.562859][T15059] futex_lock_pi+0x816/0xb10 [ 1509.562892][T15059] ? __pfx_futex_lock_pi+0x10/0x10 [ 1509.562943][T15059] ? __pfx_futex_wake_mark+0x10/0x10 [ 1509.562979][T15059] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 1509.563014][T15059] do_futex+0x292/0x420 [ 1509.563049][T15059] ? __pfx_do_futex+0x10/0x10 [ 1509.563078][T15059] ? __vm_munmap+0x2e6/0x3d0 [ 1509.563113][T15059] __se_sys_futex+0x3a8/0x450 [ 1509.563150][T15059] ? __pfx___se_sys_futex+0x10/0x10 [ 1509.563179][T15059] ? rcu_is_watching+0x15/0xb0 [ 1509.563255][T15059] ? __x64_sys_futex+0x21/0xf0 [ 1509.563286][T15059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.563309][T15059] do_syscall_64+0x15f/0xf80 [ 1509.563407][T15059] ? trace_irq_disable+0x3b/0x140 [ 1509.563431][T15059] ? clear_bhb_loop+0x40/0x90 [ 1509.563456][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.563481][T15059] RIP: 0033:0x7fee9900cdd9 [ 1509.563504][T15059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1509.563523][T15059] RSP: 002b:00007fee96df9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1509.563555][T15059] RAX: ffffffffffffffda RBX: 00007fee99286270 RCX: 00007fee9900cdd9 [ 1509.563571][T15059] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 1509.563584][T15059] RBP: 00007fee990a2d69 R08: 0000000000000000 R09: 0000000000000082 [ 1509.563598][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1509.563611][T15059] R13: 00007fee99286308 R14: 00007fee99286270 R15: 00007ffd6c4373e8 [ 1509.563644][T15059] [ 1512.311587][T14594] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1512.392491][T14594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1514.636265][ T9298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1514.670302][ T9298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1514.673414][ T9298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1514.689911][ T9298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1514.693198][ T9298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1516.056224][T15119] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1516.056264][T15119] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1516.056283][T15119] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1516.858945][T12292] Bluetooth: hci0: command tx timeout [ 1517.151091][T15138] nbd: nbd0 already in use [ 1517.151492][T15138] block nbd0: NBD_DISCONNECT [ 1517.151522][T15138] block nbd0: Send disconnect failed -32 [ 1519.375371][T12292] Bluetooth: hci0: command tx timeout [ 1521.427371][T12292] Bluetooth: hci0: command tx timeout [ 1522.202592][T15172] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1522.202619][T15172] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1522.202711][T15172] vhci_hcd vhci_hcd.0: Device attached [ 1522.460678][T14582] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 1522.520846][T15173] vhci_hcd: connection reset by peer [ 1522.521405][ T8001] vhci_hcd vhci_hcd.4: stop threads [ 1522.521427][ T8001] vhci_hcd vhci_hcd.4: release socket [ 1522.521493][ T8001] vhci_hcd vhci_hcd.4: disconnect device [ 1529.917323][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 1533.467567][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 1533.467589][T15191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 1534.867475][T12292] Bluetooth: hci0: command tx timeout [ 1535.090609][T14582] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1536.950753][T12292] Bluetooth: hci5: command 0x0406 tx timeout [ 1537.020804][T15241] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1537.020831][T15241] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1537.020929][T15241] vhci_hcd vhci_hcd.0: Device attached [ 1537.260612][ T5603] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 1538.306729][T15246] vhci_hcd: connection reset by peer [ 1538.307121][T13783] vhci_hcd vhci_hcd.0: stop threads [ 1538.307142][T13783] vhci_hcd vhci_hcd.0: release socket [ 1538.307213][T13783] vhci_hcd vhci_hcd.0: disconnect device [ 1540.187201][T15291] fuse: Bad value for 'fd' [ 1543.404388][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.404572][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.404812][T15102] bridge_slave_0: entered allmulticast mode [ 1543.429291][T15102] bridge_slave_0: entered promiscuous mode [ 1543.461039][ T5603] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1544.716358][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.716475][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.716664][T15102] bridge_slave_1: entered allmulticast mode [ 1544.726344][T15102] bridge_slave_1: entered promiscuous mode [ 1544.978201][ T89] bridge_slave_1: left allmulticast mode [ 1544.978236][ T89] bridge_slave_1: left promiscuous mode [ 1544.978498][ T89] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.069320][ T89] bridge_slave_0: left allmulticast mode [ 1545.069362][ T89] bridge_slave_0: left promiscuous mode [ 1545.069612][ T89] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.124317][T15323] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1545.124346][T15323] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1545.126718][T15323] vhci_hcd vhci_hcd.0: Device attached [ 1545.394867][T13323] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 1545.442130][T15324] vhci_hcd: connection reset by peer [ 1545.442650][ T6044] vhci_hcd vhci_hcd.4: stop threads [ 1545.442671][ T6044] vhci_hcd vhci_hcd.4: release socket [ 1545.448734][ T6044] vhci_hcd vhci_hcd.4: disconnect device [ 1548.492324][ T89] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.595939][ T89] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.679554][ T89] bond0 (unregistering): Released all slaves [ 1550.446831][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1550.475170][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1550.630737][T13323] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1550.704246][T15102] team0: Port device team_slave_0 added [ 1550.707695][T15102] team0: Port device team_slave_1 added [ 1550.778708][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.778724][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.778749][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.836687][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.836703][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.836726][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.840929][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1957'. [ 1550.840949][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1957'. [ 1551.014627][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.014692][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.150178][T15391] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1552.150204][T15391] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1552.150299][T15391] vhci_hcd vhci_hcd.0: Device attached [ 1552.331423][T15102] hsr_slave_0: entered promiscuous mode [ 1552.378734][T15102] hsr_slave_1: entered promiscuous mode [ 1552.379856][T15102] debugfs: 'hsr0' already exists in 'hsr' [ 1552.379879][T15102] Cannot create hsr debugfs directory [ 1552.390831][T15392] vhci_hcd: connection closed [ 1552.398173][ T6044] vhci_hcd vhci_hcd.0: stop threads [ 1552.398210][ T6044] vhci_hcd vhci_hcd.0: release socket [ 1552.398294][ T6044] vhci_hcd vhci_hcd.0: disconnect device [ 1552.420608][T13452] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 1552.420674][T13452] usb 33-1: enqueue for inactive port 0 [ 1552.500629][T13452] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1552.854079][ T89] hsr_slave_0: left promiscuous mode [ 1552.920651][ T89] hsr_slave_1: left promiscuous mode [ 1552.921641][ T89] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.891347][ T89] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.298738][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'. [ 1555.298762][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 1557.286966][T15451] binfmt_misc: register: failed to install interpreter file ./file0 [ 1559.270641][ T5603] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1559.432266][ T5603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1559.432292][ T5603] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1559.434938][ T5603] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1559.434966][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.434985][ T5603] usb 6-1: Product: syz [ 1559.434998][ T5603] usb 6-1: Manufacturer: syz [ 1559.435011][ T5603] usb 6-1: SerialNumber: syz [ 1559.644643][ T5603] usb 6-1: config 0 descriptor?? [ 1560.574467][T15464] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1560.574496][T15464] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1560.574593][T15464] vhci_hcd vhci_hcd.0: Device attached [ 1560.633144][T15467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1560.658403][T15467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1560.725283][ T89] team0 (unregistering): Port device team_slave_1 removed [ 1560.835342][T15465] vhci_hcd: connection closed [ 1560.836544][ T517] vhci_hcd vhci_hcd.5: stop threads [ 1560.836569][ T517] vhci_hcd vhci_hcd.5: release socket [ 1560.836643][ T517] vhci_hcd vhci_hcd.5: disconnect device [ 1560.863807][ T5603] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1560.896355][T13323] usb 6-1: USB disconnect, device number 6 [ 1560.903084][ T89] team0 (unregistering): Port device team_slave_0 removed [ 1561.209797][T15473] nbd0: detected capacity change from 0 to 63 [ 1561.219408][T15474] block nbd0: NBD_DISCONNECT [ 1561.231625][T15474] block nbd0: Disconnected due to user request. [ 1561.231709][T15474] block nbd0: shutting down sockets [ 1561.253035][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1561.282477][ C1] blk_print_req_error: 138 callbacks suppressed [ 1561.282495][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.282523][ C1] buffer_io_error: 138 callbacks suppressed [ 1561.282534][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1561.282604][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.282640][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1561.282692][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.282714][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1561.282768][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.282788][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1561.285083][T14878] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.285110][T14878] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1561.285257][T14878] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.285279][T14878] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1561.285412][T14878] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.285433][T14878] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1561.285562][T14878] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.285584][T14878] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1561.285727][T14878] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.285748][T14878] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1561.285888][T14878] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.285909][T14878] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1561.315715][T14878] ldm_validate_partition_table(): Disk read failed. [ 1561.330285][T14878] Dev nbd0: unable to read RDB block 0 [ 1561.352464][T14878] nbd0: unable to read partition table [ 1561.535067][T14878] ldm_validate_partition_table(): Disk read failed. [ 1561.545756][T14878] Dev nbd0: unable to read RDB block 0 [ 1561.562442][T14878] nbd0: unable to read partition table [ 1562.163180][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'. [ 1562.205939][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'. [ 1562.299571][T15487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1985'. [ 1566.010189][T15514] binder: 15512:15514 ioctl c0306201 200000000540 returned -22 [ 1568.102862][T15526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1993'. [ 1571.720507][ T9298] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1578.603807][T12292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1578.656455][T12292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1578.682982][T12292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1578.688331][T12292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1578.713713][T12292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1579.074695][ T8001] bridge_slave_1: left allmulticast mode [ 1579.074751][ T8001] bridge_slave_1: left promiscuous mode [ 1579.075034][ T8001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.186334][ T8001] bridge_slave_0: left allmulticast mode [ 1579.186371][ T8001] bridge_slave_0: left promiscuous mode [ 1579.186621][ T8001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.850654][ T9298] Bluetooth: hci0: command tx timeout [ 1582.188891][ T8001] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.251071][ T8001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.311920][ T8001] bond0 (unregistering): Released all slaves [ 1583.818169][ T9298] Bluetooth: hci0: command tx timeout [ 1585.320601][ T8001] hsr_slave_0: left promiscuous mode [ 1585.385589][ T8001] hsr_slave_1: left promiscuous mode [ 1585.398977][ T8001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.434148][ T8001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1585.897094][ T9298] Bluetooth: hci0: command tx timeout [ 1587.325913][ T8001] team0 (unregistering): Port device team_slave_1 removed [ 1587.373454][ T8001] team0 (unregistering): Port device team_slave_0 removed [ 1588.650594][ T9298] Bluetooth: hci0: command tx timeout [ 1592.425721][T15609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.426757][T15609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.426943][T15609] bridge_slave_0: entered allmulticast mode [ 1592.448990][T15609] bridge_slave_0: entered promiscuous mode [ 1592.461443][T15609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.461668][T15609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.461854][T15609] bridge_slave_1: entered allmulticast mode [ 1592.477228][T15609] bridge_slave_1: entered promiscuous mode [ 1592.789345][T15609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1592.804839][T15609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.643108][T15609] team0: Port device team_slave_0 added [ 1594.661328][T15609] team0: Port device team_slave_1 added [ 1595.744912][ T9298] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1595.776027][T15609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1595.776043][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.776063][T15609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1595.782190][T15609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1595.782205][T15609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1595.782244][T15609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1596.113251][T15609] hsr_slave_0: entered promiscuous mode [ 1596.118596][T15609] hsr_slave_1: entered promiscuous mode [ 1596.119583][T15609] debugfs: 'hsr0' already exists in 'hsr' [ 1596.119607][T15609] Cannot create hsr debugfs directory [ 1597.555170][T15749] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1598.393250][T15755] nbd4: detected capacity change from 0 to 63 [ 1598.393670][T15757] block nbd4: NBD_DISCONNECT [ 1598.394776][T15757] block nbd4: Disconnected due to user request. [ 1598.394793][T15757] block nbd4: shutting down sockets [ 1598.407360][T15742] blk_print_req_error: 138 callbacks suppressed [ 1598.407377][T15742] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.407401][T15742] buffer_io_error: 138 callbacks suppressed [ 1598.407411][T15742] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1598.407552][T15742] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.407573][T15742] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1598.407699][T15742] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.407720][T15742] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1598.407856][T15742] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.407876][T15742] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1598.408011][T15742] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.408032][T15742] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1598.410618][T15742] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.410644][T15742] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1598.410788][T15742] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.410809][T15742] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1598.410936][T15742] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.410957][T15742] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1598.411091][T15742] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.411111][T15742] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1598.411245][T15742] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1598.411265][T15742] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1598.495257][T15742] ldm_validate_partition_table(): Disk read failed. [ 1598.497131][T15742] Dev nbd4: unable to read RDB block 0 [ 1598.531035][T15742] nbd4: unable to read partition table [ 1598.548939][T15742] ldm_validate_partition_table(): Disk read failed. [ 1598.555827][T15742] Dev nbd4: unable to read RDB block 0 [ 1598.559458][T15742] nbd4: unable to read partition table [ 1599.608057][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2046'. [ 1599.616346][T15765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.968455][T15765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.363323][T15771] nbd0: detected capacity change from 0 to 63 [ 1600.381119][ T9298] block nbd0: Receive control failed (result -104) [ 1600.382168][T15609] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1602.168618][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1602.375763][T15609] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1605.725451][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1605.758844][T15609] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1605.797888][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1605.799217][T15609] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1605.864437][T15609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1606.050146][T15609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1606.073961][T15609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.088113][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.088399][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1606.102093][T13642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.102289][T13642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1607.581247][T15819] fuse: fd is not a fuse device [ 1613.079444][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.079513][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.175026][T15609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.912582][T15609] veth0_vlan: entered promiscuous mode [ 1614.925342][T15609] veth1_vlan: entered promiscuous mode [ 1615.099890][T15609] veth0_macvtap: entered promiscuous mode [ 1615.118727][T15609] veth1_macvtap: entered promiscuous mode [ 1615.197318][T15609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1615.230143][T15609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1615.269234][ T3378] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.284035][ T3378] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.284073][ T3378] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.284107][ T3378] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.512914][ T9298] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1616.465607][T15886] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 1619.541282][T15902] binder: 15900:15902 ioctl c0306201 200000000540 returned -22 [ 1620.370619][ T5603] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1620.388436][ T5909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1620.388454][ T5909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1620.533721][ T5603] usb 6-1: device descriptor read/64, error -71 [ 1620.787227][ T5974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1620.787247][ T5974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.470608][ T5603] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1622.600604][ T5603] usb 6-1: device descriptor read/64, error -71 [ 1622.711012][ T5603] usb usb6-port1: attempt power cycle [ 1623.450638][ T5603] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1623.574792][ T5603] usb 6-1: device descriptor read/8, error -71 [ 1626.407878][T12489] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1626.517119][T15955] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2094'. [ 1626.524072][T12292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1626.569639][T12489] usb 7-1: Using ep0 maxpacket: 32 [ 1626.623659][T12489] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.625697][T12292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1626.627281][T12292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1626.633513][T12292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1626.633867][T12489] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1626.633891][T12489] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.633911][T12489] usb 7-1: Product: syz [ 1626.633924][T12489] usb 7-1: Manufacturer: syz [ 1626.633937][T12489] usb 7-1: SerialNumber: syz [ 1626.653653][T12292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1626.750206][T12489] usb 7-1: config 0 descriptor?? [ 1626.856080][T12489] cdc_ether 7-1:0.0: missing cdc header descriptor [ 1626.879576][T12489] usb 7-1: unsupported MDLM descriptors [ 1627.264517][T12489] usb 7-1: USB disconnect, device number 2 [ 1628.785786][ T9298] Bluetooth: hci1: command tx timeout [ 1629.340232][ T5909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.699672][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1630.131679][ T10] usb 6-1: device descriptor read/64, error -71 [ 1631.322087][ T9298] Bluetooth: hci1: command tx timeout [ 1631.542344][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 30 seconds [ 1631.545072][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 30 seconds [ 1631.545110][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 30 seconds [ 1631.545139][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 30 seconds [ 1631.570584][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1631.716478][ T10] usb 6-1: device descriptor read/64, error -71 [ 1631.844048][ T10] usb usb6-port1: attempt power cycle [ 1632.440729][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1632.650530][ T10] usb 6-1: device not accepting address 13, error -71 [ 1632.743634][ T5909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1633.595311][ T9298] Bluetooth: hci1: command tx timeout [ 1633.651557][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1633.788179][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1633.795720][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1633.810287][ T10] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1633.810318][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.810338][ T10] usb 6-1: Product: syz [ 1633.810352][ T10] usb 6-1: Manufacturer: syz [ 1633.810366][ T10] usb 6-1: SerialNumber: syz [ 1633.859944][ T10] usb 6-1: config 0 descriptor?? [ 1633.874298][ T10] cdc_ether 6-1:0.0: missing cdc header descriptor [ 1633.879914][ T10] usb 6-1: unsupported MDLM descriptors [ 1634.096085][ T10] usb 6-1: USB disconnect, device number 14 [ 1634.454824][ T5909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.990518][ T9298] Bluetooth: hci1: command tx timeout [ 1636.443766][T16043] tmpfs: Unsupported parameter 'huge' [ 1638.395063][ T5909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.104155][T15953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.104257][T15953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.104457][T15953] bridge_slave_0: entered allmulticast mode [ 1650.106499][T15953] bridge_slave_0: entered promiscuous mode [ 1650.198668][T15953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.198784][T15953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.198971][T15953] bridge_slave_1: entered allmulticast mode [ 1650.245628][T15953] bridge_slave_1: entered promiscuous mode [ 1650.290596][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1650.377739][T15953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.420622][ T31] usb 6-1: device descriptor read/64, error -71 [ 1651.310673][ T31] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1651.865019][ T5909] bridge0: port 3(team0) entered disabled state [ 1651.920606][ T31] usb 6-1: device descriptor read/64, error -71 [ 1651.921836][ T5909] bridge_slave_1: left allmulticast mode [ 1651.921866][ T5909] bridge_slave_1: left promiscuous mode [ 1651.922119][ T5909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.032374][ T31] usb usb6-port1: attempt power cycle [ 1652.056568][ T5909] bridge_slave_0: left allmulticast mode [ 1652.056602][ T5909] bridge_slave_0: left promiscuous mode [ 1652.056854][ T5909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.598252][ T31] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1652.738374][ T31] usb 6-1: device descriptor read/8, error -71 [ 1653.000617][ T31] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1653.205232][ T31] usb 6-1: device descriptor read/8, error -71 [ 1653.311919][ T31] usb usb6-port1: unable to enumerate USB device [ 1653.538641][T16190] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2162'. [ 1653.931272][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1654.183373][ T31] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1654.183401][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.183419][ T31] usb 6-1: Product: syz [ 1654.183432][ T31] usb 6-1: Manufacturer: syz [ 1654.183446][ T31] usb 6-1: SerialNumber: syz [ 1654.384298][ T31] usb 6-1: config 0 descriptor?? [ 1655.550669][ T31] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 1655.550697][ T31] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1655.550732][ T31] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 1655.568583][ T31] usb 6-1: USB disconnect, device number 19 [ 1655.901606][ T5909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.971332][ T5909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.018308][ T5909] bond0 (unregistering): Released all slaves [ 1658.109133][T15953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1658.168575][T16218] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 1658.168575][T16218] program syz.6.2173 not setting count and/or reply_len properly [ 1658.425093][T16220] overlayfs: failed to clone upperpath [ 1659.779281][T16228] overlayfs: failed to clone upperpath [ 1659.873074][T15953] team0: Port device team_slave_0 added [ 1659.892204][T15953] team0: Port device team_slave_1 added [ 1660.004911][T15953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.004927][T15953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.004952][T15953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.089605][T15953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.089622][T15953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.089648][T15953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.170211][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 60 seconds [ 1662.170265][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 60 seconds [ 1662.170294][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 60 seconds [ 1662.170322][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 60 seconds [ 1662.802013][T16258] tmpfs: Unsupported parameter 'huge' [ 1662.976011][T15953] hsr_slave_0: entered promiscuous mode [ 1662.978871][T15953] hsr_slave_1: entered promiscuous mode [ 1662.985623][T15953] debugfs: 'hsr0' already exists in 'hsr' [ 1662.985649][T15953] Cannot create hsr debugfs directory [ 1664.173533][ T5585] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1665.350589][ T5585] usb 6-1: Using ep0 maxpacket: 32 [ 1665.352884][ T5585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.379554][ T5585] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1665.379584][ T5585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.379604][ T5585] usb 6-1: Product: syz [ 1665.379618][ T5585] usb 6-1: Manufacturer: syz [ 1665.379632][ T5585] usb 6-1: SerialNumber: syz [ 1665.392141][ T5585] usb 6-1: config 0 descriptor?? [ 1665.422987][ T5909] hsr_slave_0: left promiscuous mode [ 1665.462507][ T5585] cdc_ether 6-1:0.0: missing cdc header descriptor [ 1665.490561][ T5909] hsr_slave_1: left promiscuous mode [ 1665.491569][ T5909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.491593][ T5909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.499841][ T5585] usb 6-1: unsupported MDLM descriptors [ 1665.801801][ T5909] veth1_macvtap: left promiscuous mode [ 1665.801863][ T5909] veth0_macvtap: left promiscuous mode [ 1665.802009][ T5909] veth1_vlan: left promiscuous mode [ 1665.802110][ T5909] veth0_vlan: left promiscuous mode [ 1667.755417][ T5909] team_slave_1 (unregistering): left promiscuous mode [ 1667.755453][ T5909] team_slave_1 (unregistering): left allmulticast mode [ 1667.801717][ T5909] team0 (unregistering): Port device team_slave_1 removed [ 1667.812198][ T5909] team_slave_0 (unregistering): left promiscuous mode [ 1667.812229][ T5909] team_slave_0 (unregistering): left allmulticast mode [ 1667.861514][ T5909] team0 (unregistering): Port device team_slave_0 removed [ 1668.098173][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1671.838577][T10739] usb 6-1: USB disconnect, device number 20 [ 1674.244153][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.244227][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.510592][ T9298] Bluetooth: hci1: link tx timeout [ 1676.510788][ T9298] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1676.521640][T12292] Bluetooth: hci1: link tx timeout [ 1676.521658][T12292] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1677.825949][T16383] sg_write: data in/out 424924/122 bytes for SCSI command 0x0-- guessing data in; [ 1677.825949][T16383] program syz.6.2216 not setting count and/or reply_len properly [ 1678.530714][T12292] Bluetooth: hci1: command 0x0406 tx timeout [ 1678.865281][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1679.021116][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1679.022917][ T10] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.022942][ T10] usb 6-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1679.024562][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1679.024588][ T10] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1679.024619][ T10] usb 6-1: Product: syz [ 1679.024626][ T10] usb 6-1: Manufacturer: syz [ 1681.849844][T10739] usb 6-1: USB disconnect, device number 21 [ 1685.949409][T12292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1686.009391][T12292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1686.019626][T12292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1686.029414][T12292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1686.048636][T12292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1687.462111][ T5727] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1688.778460][ T5727] usb 7-1: Using ep0 maxpacket: 32 [ 1688.796507][T12292] Bluetooth: hci2: command tx timeout [ 1688.820800][ T5727] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1688.820825][ T5727] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1688.824847][ T5727] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1688.824876][ T5727] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1688.824896][ T5727] usb 7-1: Product: syz [ 1688.824910][ T5727] usb 7-1: Manufacturer: syz [ 1692.782002][ T5727] usb 7-1: can't set config #4, error -71 [ 1692.792521][ T5727] usb 7-1: USB disconnect, device number 3 [ 1692.881382][T12292] Bluetooth: hci2: command tx timeout [ 1695.588387][ T9298] Bluetooth: hci2: command tx timeout [ 1695.681100][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 90 seconds [ 1695.681145][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 90 seconds [ 1695.681173][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 90 seconds [ 1695.681201][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 90 seconds [ 1697.695166][ T9298] Bluetooth: hci2: command tx timeout [ 1701.804654][ T9298] Bluetooth: hci0: command tx timeout [ 1703.530177][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.530360][T16455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.531071][T16455] bridge_slave_0: entered allmulticast mode [ 1703.539854][T16455] bridge_slave_0: entered promiscuous mode [ 1703.644522][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.691945][T16455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.692119][T16455] bridge_slave_1: entered allmulticast mode [ 1703.716584][T16455] bridge_slave_1: entered promiscuous mode [ 1703.895311][T16455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.925300][T16455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.991561][T16455] team0: Port device team_slave_0 added [ 1703.995817][T16455] team0: Port device team_slave_1 added [ 1704.054672][T16455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.054689][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.054714][T16455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.057147][T16455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.057161][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.057184][T16455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.082727][T16455] hsr_slave_0: entered promiscuous mode [ 1707.130728][T16455] hsr_slave_1: entered promiscuous mode [ 1707.131738][T16455] debugfs: 'hsr0' already exists in 'hsr' [ 1707.131764][T16455] Cannot create hsr debugfs directory [ 1713.635684][ T13] bridge_slave_1: left allmulticast mode [ 1713.635710][ T13] bridge_slave_1: left promiscuous mode [ 1713.635914][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.765917][ T13] bridge_slave_0: left allmulticast mode [ 1713.765956][ T13] bridge_slave_0: left promiscuous mode [ 1713.771294][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1714.311718][T16654] ubi: mtd0 is already attached to ubi31 [ 1717.744276][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1717.961178][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1718.071228][ T13] bond0 (unregistering): Released all slaves [ 1721.892893][ T13] hsr_slave_0: left promiscuous mode [ 1721.934541][ T13] hsr_slave_1: left promiscuous mode [ 1721.937319][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1721.981697][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1724.548519][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1725.500903][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1725.770820][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 120 seconds [ 1725.770866][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 120 seconds [ 1725.770894][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 120 seconds [ 1725.770916][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 120 seconds [ 1726.941083][T16776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1726.941112][T16776] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1726.942294][T16776] vhci_hcd vhci_hcd.0: Device attached [ 1728.265382][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1728.360641][ T5728] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 1728.468088][T16777] vhci_hcd: connection reset by peer [ 1728.468394][ T6044] vhci_hcd vhci_hcd.4: stop threads [ 1728.468419][ T6044] vhci_hcd vhci_hcd.4: release socket [ 1728.755205][ T6044] vhci_hcd vhci_hcd.4: disconnect device [ 1731.268297][T16809] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1731.559189][T16812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2322'. [ 1731.764611][T16819] vxfs: unable to read disk superblock at 1 [ 1731.765041][T16819] vxfs: unable to read disk superblock at 8 [ 1731.765057][T16819] vxfs: can't find superblock. [ 1734.133160][ T5585] IPVS: starting estimator thread 0... [ 1734.227010][T16836] IPVS: using max 8 ests per chain, 19200 per kthread [ 1734.243676][ T5728] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1735.283481][T16864] tmpfs: Unsupported parameter 'huge' [ 1735.861342][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.861421][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.088719][T16865] futex_wake_op: syz.3.2334 tries to shift op by 32; fix this program [ 1737.587571][T16873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2336'. [ 1738.953273][T16879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2336'. [ 1744.500578][ T5585] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1744.760427][T16940] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2351'. [ 1744.820545][ T5585] usb 7-1: Using ep0 maxpacket: 32 [ 1744.824210][ T5585] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.824263][ T5585] usb 7-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1744.884926][ T5585] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1744.884970][ T5585] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1744.884992][ T5585] usb 7-1: Product: syz [ 1744.885006][ T5585] usb 7-1: Manufacturer: syz [ 1745.561033][T16943] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2351'. [ 1746.813139][ T5585] hub 7-1:4.0: bad descriptor, ignoring hub [ 1746.813181][ T5585] hub 7-1:4.0: probe with driver hub failed with error -5 [ 1746.890173][ T5585] usbhid 7-1:4.0: couldn't find an input interrupt endpoint [ 1748.376688][T12292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1748.680081][T12292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1748.711079][T12292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1748.746433][ T5585] usb 7-1: USB disconnect, device number 4 [ 1748.747274][T12292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1748.748048][T12292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1751.057562][ T9298] Bluetooth: hci1: command tx timeout [ 1753.090533][ T9298] Bluetooth: hci1: command tx timeout [ 1753.787992][T12292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1753.858277][T12292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1753.899587][T12292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1753.973900][T12292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1753.978050][T12292] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1755.817701][ T9298] Bluetooth: hci1: command tx timeout [ 1755.877394][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 150 seconds [ 1755.877439][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 150 seconds [ 1755.877459][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 150 seconds [ 1755.877479][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 150 seconds [ 1755.940657][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1756.101095][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1756.103970][ T10] usb 7-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1756.106512][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1756.106547][ T10] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1756.106567][ T10] usb 7-1: Product: syz [ 1756.106580][ T10] usb 7-1: Manufacturer: syz [ 1756.139862][T12292] Bluetooth: hci6: command tx timeout [ 1756.226339][ T10] hub 7-1:4.0: bad descriptor, ignoring hub [ 1756.226375][ T10] hub 7-1:4.0: probe with driver hub failed with error -5 [ 1756.252042][ T10] usbhid 7-1:4.0: couldn't find an input interrupt endpoint [ 1756.849620][T17052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2370'. [ 1757.892363][T12292] Bluetooth: hci1: command tx timeout [ 1758.233038][T12292] Bluetooth: hci6: command tx timeout [ 1758.940004][T10739] usb 7-1: USB disconnect, device number 5 [ 1760.023981][T16962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.024101][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.024335][T16962] bridge_slave_0: entered allmulticast mode [ 1760.058570][T16962] bridge_slave_0: entered promiscuous mode [ 1760.294153][T12292] Bluetooth: hci6: command tx timeout [ 1760.612427][T16962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.612556][T16962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.612790][T16962] bridge_slave_1: entered allmulticast mode [ 1760.618314][T16962] bridge_slave_1: entered promiscuous mode [ 1762.292720][ T5728] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1762.377112][T12292] Bluetooth: hci6: command tx timeout [ 1762.470668][ T5727] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1762.486939][T16962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1762.538907][T16962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1762.641030][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.641058][ T5727] usb 6-1: config 0 has no interfaces? [ 1762.642782][ T5728] usb 7-1: Using ep0 maxpacket: 32 [ 1762.654208][ T5727] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1762.654241][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.654261][ T5727] usb 6-1: Product: syz [ 1762.654275][ T5727] usb 6-1: Manufacturer: syz [ 1762.654289][ T5727] usb 6-1: SerialNumber: syz [ 1762.659291][ T5728] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.667343][ T5728] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1762.667379][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.667399][ T5728] usb 7-1: Product: syz [ 1762.667414][ T5728] usb 7-1: Manufacturer: syz [ 1762.667427][ T5728] usb 7-1: SerialNumber: syz [ 1763.042296][ T5728] usb 7-1: config 0 descriptor?? [ 1763.061932][ T5728] cdc_ether 7-1:0.0: missing cdc header descriptor [ 1763.063821][ T5727] usb 6-1: config 0 descriptor?? [ 1763.063959][ T5728] usb 7-1: unsupported MDLM descriptors [ 1763.340222][ T5728] usb 7-1: USB disconnect, device number 6 [ 1763.917360][T16962] team0: Port device team_slave_0 added [ 1764.103728][T16962] team0: Port device team_slave_1 added [ 1765.575841][T16180] usb 6-1: USB disconnect, device number 22 [ 1765.673073][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1765.820759][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1765.824761][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.847932][ T31] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1765.847962][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.847981][ T31] usb 7-1: Product: syz [ 1765.847993][ T31] usb 7-1: Manufacturer: syz [ 1765.848006][ T31] usb 7-1: SerialNumber: syz [ 1765.889523][ T31] usb 7-1: config 0 descriptor?? [ 1765.962894][ T31] cdc_ether 7-1:0.0: missing cdc header descriptor [ 1765.964421][ T31] usb 7-1: unsupported MDLM descriptors [ 1766.018565][T16180] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1766.071353][T16962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1766.071398][T16962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.071419][T16962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.164923][ T10] usb 7-1: USB disconnect, device number 7 [ 1766.182922][T16962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.182938][T16962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1766.182958][T16962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.204658][T16180] usb 6-1: Using ep0 maxpacket: 32 [ 1766.206975][T16180] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1766.274923][T16180] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1766.274956][T16180] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1766.274976][T16180] usb 6-1: Product: syz [ 1766.274990][T16180] usb 6-1: Manufacturer: syz [ 1766.333086][T16180] hub 6-1:4.0: bad descriptor, ignoring hub [ 1766.333128][T16180] hub 6-1:4.0: probe with driver hub failed with error -5 [ 1766.387659][T16180] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 1766.526685][T17013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.528400][T17013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.528658][T17013] bridge_slave_0: entered allmulticast mode [ 1766.561174][T17013] bridge_slave_0: entered promiscuous mode [ 1766.566275][T17013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.566398][T17013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.566605][T17013] bridge_slave_1: entered allmulticast mode [ 1766.569283][T17013] bridge_slave_1: entered promiscuous mode [ 1766.764527][ T12] bridge_slave_1: left allmulticast mode [ 1766.764563][ T12] bridge_slave_1: left promiscuous mode [ 1766.764822][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.992094][ T12] bridge_slave_0: left allmulticast mode [ 1766.992129][ T12] bridge_slave_0: left promiscuous mode [ 1766.992529][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.089970][T16180] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1769.262897][T16180] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.262925][T16180] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1769.270737][T16180] usb 7-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1769.270767][T16180] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.270786][T16180] usb 7-1: Product: syz [ 1769.270798][T16180] usb 7-1: Manufacturer: syz [ 1769.270811][T16180] usb 7-1: SerialNumber: syz [ 1769.289843][T16180] usb 7-1: config 0 descriptor?? [ 1769.615009][ T820] usb 6-1: USB disconnect, device number 23 [ 1770.481686][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1770.613209][T17138] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1770.613237][T17138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1770.613334][T17138] vhci_hcd vhci_hcd.0: Device attached [ 1770.625684][T17138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1770.626330][T17138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1771.940529][T16180] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1772.164871][T17154] vhci_hcd: connection reset by peer [ 1772.165481][ T89] vhci_hcd vhci_hcd.6: stop threads [ 1772.165505][ T89] vhci_hcd vhci_hcd.6: release socket [ 1772.232451][ T89] vhci_hcd vhci_hcd.6: disconnect device [ 1772.260529][ T5727] usb 7-1: USB disconnect, device number 8 [ 1772.284942][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1773.713180][ T12] bond0 (unregistering): Released all slaves [ 1776.323042][T16962] hsr_slave_0: entered promiscuous mode [ 1776.325878][T16962] hsr_slave_1: entered promiscuous mode [ 1776.330326][T16962] debugfs: 'hsr0' already exists in 'hsr' [ 1776.330355][T16962] Cannot create hsr debugfs directory [ 1776.383509][T17013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1776.408315][T17013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.630613][ T5603] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1776.804163][T17013] team0: Port device team_slave_0 added [ 1776.831906][T17013] team0: Port device team_slave_1 added [ 1776.870515][ T5603] usb 6-1: Using ep0 maxpacket: 32 [ 1776.889120][ T5603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.918714][ T5603] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1776.918747][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.918765][ T5603] usb 6-1: Product: syz [ 1776.918778][ T5603] usb 6-1: Manufacturer: syz [ 1776.918789][ T5603] usb 6-1: SerialNumber: syz [ 1776.943636][ T5603] usb 6-1: config 0 descriptor?? [ 1777.009013][ T5603] cdc_ether 6-1:0.0: missing cdc header descriptor [ 1777.133542][ T5603] usb 6-1: unsupported MDLM descriptors [ 1777.210624][T16180] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1777.227603][T17183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.229605][T17183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.233115][T17208] futex_wake_op: syz.6.2402 tries to shift op by 32; fix this program [ 1780.839850][ T12] hsr_slave_0: left promiscuous mode [ 1780.870788][ T12] hsr_slave_1: left promiscuous mode [ 1780.871612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1781.112259][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1782.996890][ T4961] udevd[4961]: worker [15742] /devices/virtual/block/nbd0 timeout; kill it [ 1782.997044][ T4961] udevd[4961]: seq 24788 '/devices/virtual/block/nbd0' killed [ 1783.553080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1783.612920][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1783.878436][T17013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.878453][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.878480][T17013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1783.948638][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1783.963195][T17013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1783.963213][T17013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1783.963240][T17013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.747721][T10739] usb 6-1: USB disconnect, device number 24 [ 1786.192143][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 180 seconds [ 1786.192185][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 180 seconds [ 1786.192213][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 180 seconds [ 1786.192239][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 180 seconds [ 1786.366427][T17013] hsr_slave_0: entered promiscuous mode [ 1786.368760][T17013] hsr_slave_1: entered promiscuous mode [ 1786.369903][T17013] debugfs: 'hsr0' already exists in 'hsr' [ 1786.369933][T17013] Cannot create hsr debugfs directory [ 1787.672926][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1787.832696][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1787.832724][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1787.838024][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1787.838060][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.838078][ T10] usb 6-1: Product: syz [ 1787.838090][ T10] usb 6-1: Manufacturer: syz [ 1787.838103][ T10] usb 6-1: SerialNumber: syz [ 1787.932767][ T10] usb 6-1: config 0 descriptor?? [ 1788.321537][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1790.411609][ T10] usb 6-1: USB disconnect, device number 25 [ 1793.687192][T16962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1793.779204][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1793.809301][T16962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1793.859972][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1793.873664][T16962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1793.932246][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1793.939314][T16962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1793.995650][T16962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1796.772851][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.772921][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.810537][ T5585] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1796.977287][ T5585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.977315][ T5585] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1796.979902][ T5585] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1796.979932][ T5585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.979951][ T5585] usb 6-1: Product: syz [ 1796.979965][ T5585] usb 6-1: Manufacturer: syz [ 1796.979978][ T5585] usb 6-1: SerialNumber: syz [ 1796.997837][ T5585] usb 6-1: config 0 descriptor?? [ 1797.268982][T16962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.405839][ T9298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1797.468116][ T9298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1797.473481][ T9298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1797.484742][ T9298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1797.488526][ T9298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1797.630157][T17013] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1797.673473][T17013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1797.683682][T17013] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1797.727275][T17013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1797.742809][T17013] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1797.868169][T17013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1797.879108][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1797.887906][T17013] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1797.988417][T17013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1798.131734][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.133785][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.326903][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.327080][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.499719][T16180] usb 6-1: USB disconnect, device number 26 [ 1799.463811][T17013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.650666][ T9298] Bluetooth: hci2: command tx timeout [ 1799.682623][T17013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1799.707796][T16086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.707937][T16086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1799.740513][ T5728] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1799.769662][T16086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.769852][T16086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1799.890576][ T5728] usb 6-1: Using ep0 maxpacket: 32 [ 1799.908511][ T5728] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1799.924184][ T5728] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1799.924215][ T5728] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1799.924234][ T5728] usb 6-1: Product: syz [ 1799.924245][ T5728] usb 6-1: Manufacturer: syz [ 1800.015553][ T5728] hub 6-1:4.0: bad descriptor, ignoring hub [ 1800.015592][ T5728] hub 6-1:4.0: probe with driver hub failed with error -5 [ 1800.018626][ T5728] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 1801.218388][T16962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.037272][ T9298] Bluetooth: hci2: command tx timeout [ 1802.432475][T17425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2432'. [ 1802.432498][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2432'. [ 1802.562432][T17339] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.562678][T17339] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.562914][T17339] bridge_slave_0: entered allmulticast mode [ 1802.566953][T17339] bridge_slave_0: entered promiscuous mode [ 1802.585342][T17339] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.585459][T17339] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.585652][T17339] bridge_slave_1: entered allmulticast mode [ 1802.589609][T17339] bridge_slave_1: entered promiscuous mode [ 1802.640921][ T5603] usb 6-1: USB disconnect, device number 27 [ 1803.028601][T16962] veth0_vlan: entered promiscuous mode [ 1803.059539][T17339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.142662][T17430] ubi: mtd0 is already attached to ubi31 [ 1804.050490][ T9298] Bluetooth: hci2: command tx timeout [ 1804.200236][T17339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.377305][T16962] veth1_vlan: entered promiscuous mode [ 1804.502373][T17339] team0: Port device team_slave_0 added [ 1804.549482][T17339] team0: Port device team_slave_1 added [ 1804.701128][T17339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1804.701139][T17339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.701157][T17339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.722951][T17339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.722968][T17339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.722993][T17339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.760604][ T5585] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1804.939673][T17013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1804.955067][ T5585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.955095][ T5585] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1804.990220][ T5585] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1804.990253][ T5585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.990274][ T5585] usb 6-1: Product: syz [ 1804.990288][ T5585] usb 6-1: Manufacturer: syz [ 1804.990302][ T5585] usb 6-1: SerialNumber: syz [ 1805.029375][ T5585] usb 6-1: config 0 descriptor?? [ 1805.336782][T17339] hsr_slave_0: entered promiscuous mode [ 1805.337798][T17339] hsr_slave_1: entered promiscuous mode [ 1805.338440][T17339] debugfs: 'hsr0' already exists in 'hsr' [ 1805.338458][T17339] Cannot create hsr debugfs directory [ 1805.469438][T16962] veth0_macvtap: entered promiscuous mode [ 1805.510057][T16962] veth1_macvtap: entered promiscuous mode [ 1805.631650][T16962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.673098][T16962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1805.705548][ T3378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.728753][ T3378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.757943][ T3378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.788212][ T3378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.789034][T17013] veth0_vlan: entered promiscuous mode [ 1806.008126][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2436'. [ 1806.008150][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 1806.136702][ T9298] Bluetooth: hci2: command tx timeout [ 1806.559235][T12292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1806.635386][T12292] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1806.649339][T12292] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1806.656633][T12292] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1806.658652][T12292] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1806.886913][T17013] veth1_vlan: entered promiscuous mode [ 1807.581252][T10739] usb 6-1: USB disconnect, device number 28 [ 1808.523169][T17013] veth0_macvtap: entered promiscuous mode [ 1808.527194][T17339] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1808.940693][ T9298] Bluetooth: hci7: command tx timeout [ 1808.969306][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1808.979651][T17339] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1809.710704][ T5603] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1809.839937][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1809.993896][ T5603] usb 6-1: Using ep0 maxpacket: 32 [ 1810.006961][ T5603] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1810.006996][ T5603] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.022162][ T5603] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1810.022192][ T5603] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1810.022213][ T5603] usb 6-1: Product: syz [ 1810.022226][ T5603] usb 6-1: Manufacturer: syz [ 1810.030751][T17339] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1810.051914][ T5603] hub 6-1:4.0: USB hub found [ 1810.861451][ T5603] hub 6-1:4.0: 2 ports detected [ 1810.997797][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1810.998570][T17013] veth1_macvtap: entered promiscuous mode [ 1811.028398][ T9298] Bluetooth: hci7: command tx timeout [ 1811.063259][ T5603] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 1811.063287][ T5603] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 1811.091488][ T5603] usb 6-1: USB disconnect, device number 29 [ 1811.901396][T17339] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1811.944677][T17339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1812.136305][ T5603] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1812.325870][ T5603] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.325897][ T5603] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1812.417711][T12292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1812.464914][T12292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1812.466612][T12292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1812.472068][ T5603] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 1812.472097][ T5603] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.472116][ T5603] usb 6-1: Product: syz [ 1812.472129][ T5603] usb 6-1: Manufacturer: syz [ 1812.472144][ T5603] usb 6-1: SerialNumber: syz [ 1812.492282][ T5603] usb 6-1: config 0 descriptor?? [ 1812.532104][T12292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1812.533030][T12292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1812.751915][T17490] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1812.751942][T17490] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1812.752039][T17490] vhci_hcd vhci_hcd.0: Device attached [ 1812.759753][T17490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.795749][T17490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1813.052488][ T5603] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 1813.092437][ T9298] Bluetooth: hci7: command tx timeout [ 1813.268772][T17505] vhci_hcd: connection reset by peer [ 1813.271856][ T5727] usb 6-1: USB disconnect, device number 30 [ 1813.335971][T16086] vhci_hcd vhci_hcd.5: stop threads [ 1813.336012][T16086] vhci_hcd vhci_hcd.5: release socket [ 1813.336087][T16086] vhci_hcd vhci_hcd.5: disconnect device [ 1814.808666][ T9298] Bluetooth: hci1: command tx timeout [ 1814.939454][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.170640][ T9298] Bluetooth: hci7: command tx timeout [ 1817.153730][ T9298] Bluetooth: hci1: command tx timeout [ 1817.200646][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 210 seconds [ 1817.207520][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 210 seconds [ 1817.207553][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 210 seconds [ 1817.207576][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 210 seconds [ 1817.485542][ T31] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1817.536224][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.651640][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1817.668852][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.685090][ T31] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1817.685119][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.685129][ T31] usb 6-1: Product: syz [ 1817.685137][ T31] usb 6-1: Manufacturer: syz [ 1817.685144][ T31] usb 6-1: SerialNumber: syz [ 1817.707207][ T31] usb 6-1: config 0 descriptor?? [ 1817.733108][ T31] cdc_ether 6-1:0.0: missing cdc header descriptor [ 1817.743087][ T31] usb 6-1: unsupported MDLM descriptors [ 1818.025332][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.222912][ T5603] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1818.508720][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.728236][T17539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2452'. [ 1819.151156][ T5728] usb 6-1: USB disconnect, device number 31 [ 1819.172815][ T9298] Bluetooth: hci1: command tx timeout [ 1821.251718][ T9298] Bluetooth: hci1: command tx timeout [ 1821.337698][T17557] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2456'. [ 1821.643161][T17339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.075301][T17566] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2460'. [ 1822.520948][ T56] bridge_slave_1: left allmulticast mode [ 1822.520982][ T56] bridge_slave_1: left promiscuous mode [ 1822.521224][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.622303][ T56] bridge_slave_0: left allmulticast mode [ 1822.622331][ T56] bridge_slave_0: left promiscuous mode [ 1822.622732][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.760605][ T5728] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1822.924839][ T5728] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1822.924870][ T5728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.924889][ T5728] usb 6-1: Product: syz [ 1822.924903][ T5728] usb 6-1: Manufacturer: syz [ 1822.924917][ T5728] usb 6-1: SerialNumber: syz [ 1822.928815][ T5728] usb 6-1: config 0 descriptor?? [ 1823.539807][ T5728] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 1823.539826][ T5728] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1823.539849][ T5728] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 1823.574707][ T5728] usb 6-1: USB disconnect, device number 32 [ 1823.642061][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.701911][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.732589][ T56] bond0 (unregistering): Released all slaves [ 1824.048256][T17456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.048370][T17456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.048561][T17456] bridge_slave_0: entered allmulticast mode [ 1824.050182][T17456] bridge_slave_0: entered promiscuous mode [ 1824.379675][T17456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.379801][T17456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.380050][T17456] bridge_slave_1: entered allmulticast mode [ 1824.385783][T17456] bridge_slave_1: entered promiscuous mode [ 1824.525628][T17582] ubi: mtd0 is already attached to ubi31 [ 1825.592263][ T56] hsr_slave_0: left promiscuous mode [ 1825.710620][ T56] hsr_slave_1: left promiscuous mode [ 1825.711695][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1825.711720][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.835626][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1825.835652][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.954245][ T56] veth1_macvtap: left promiscuous mode [ 1825.954349][ T56] veth0_macvtap: left promiscuous mode [ 1825.954585][ T56] veth1_vlan: left promiscuous mode [ 1825.954753][ T56] veth0_vlan: left promiscuous mode [ 1826.821185][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1826.862859][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1827.210002][T17339] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.243202][T17456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1827.255510][T17456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1827.603020][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.603144][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.628193][T17456] team0: Port device team_slave_0 added [ 1827.962688][T17456] team0: Port device team_slave_1 added [ 1828.958221][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.958379][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.050538][T10739] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1829.130817][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1829.132688][T17456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1829.132704][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1829.132728][T17456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1829.242539][T10739] usb 6-1: Using ep0 maxpacket: 32 [ 1829.257646][T17456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1829.257661][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1829.257688][T17456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1829.316671][T10739] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.316702][T10739] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.379463][T10739] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1829.379494][T10739] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1829.379514][T10739] usb 6-1: Product: syz [ 1829.379528][T10739] usb 6-1: Manufacturer: syz [ 1829.434985][T10739] hub 6-1:4.0: USB hub found [ 1829.491622][T17498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.491919][T17498] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.492236][T17498] bridge_slave_0: entered allmulticast mode [ 1829.496834][T17498] bridge_slave_0: entered promiscuous mode [ 1829.623733][T17498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.623852][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.624120][T17498] bridge_slave_1: entered allmulticast mode [ 1829.692975][T17498] bridge_slave_1: entered promiscuous mode [ 1829.763164][T17456] hsr_slave_0: entered promiscuous mode [ 1829.764654][T17456] hsr_slave_1: entered promiscuous mode [ 1829.765647][T17456] debugfs: 'hsr0' already exists in 'hsr' [ 1829.785492][T17456] Cannot create hsr debugfs directory [ 1829.892981][T10739] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1829.995205][T10739] usb 6-1: USB disconnect, device number 33 [ 1830.007231][T17498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.077937][T17498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.288181][T17498] team0: Port device team_slave_0 added [ 1830.323553][T17498] team0: Port device team_slave_1 added [ 1833.601422][T16180] IPVS: starting estimator thread 0... [ 1834.053270][T17659] IPVS: using max 8 ests per chain, 19200 per kthread [ 1834.441980][T17498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1834.441991][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.442006][T17498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1834.495780][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1834.497221][T17498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1834.497236][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.497262][T17498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1834.809581][T17498] hsr_slave_0: entered promiscuous mode [ 1834.811107][T17498] hsr_slave_1: entered promiscuous mode [ 1834.812087][T17498] debugfs: 'hsr0' already exists in 'hsr' [ 1834.812110][T17498] Cannot create hsr debugfs directory [ 1835.510618][ T31] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1835.660631][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1835.663101][ T31] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.663135][ T31] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1835.665563][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1835.665593][ T31] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1835.665614][ T31] usb 6-1: Product: syz [ 1835.665628][ T31] usb 6-1: Manufacturer: syz [ 1836.787961][ T31] hub 6-1:4.0: USB hub found [ 1836.960984][ T31] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1838.385434][ T5585] usb 6-1: USB disconnect, device number 34 [ 1838.857923][T17705] ubi: mtd0 is already attached to ubi31 [ 1840.230520][T14582] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1840.511535][T14582] usb 6-1: device descriptor read/64, error -71 [ 1841.580668][T14582] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1841.791222][T14582] usb 6-1: device descriptor read/64, error -71 [ 1842.229940][T14582] usb usb6-port1: attempt power cycle [ 1842.930549][T14582] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1842.962398][T14582] usb 6-1: device descriptor read/8, error -71 [ 1843.200678][T14582] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1843.224030][T14582] usb 6-1: device descriptor read/8, error -71 [ 1843.331002][T14582] usb usb6-port1: unable to enumerate USB device [ 1843.761090][T14582] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1843.941533][T14582] usb 6-1: Using ep0 maxpacket: 32 [ 1843.943728][T14582] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.943750][T14582] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.945332][T14582] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1843.945358][T14582] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1843.945370][T14582] usb 6-1: Product: syz [ 1843.945377][T14582] usb 6-1: Manufacturer: syz [ 1844.052086][T14582] hub 6-1:4.0: USB hub found [ 1844.234736][T14582] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1844.409294][T14582] usb 6-1: USB disconnect, device number 39 [ 1844.881422][T17339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.148172][ T56] bridge_slave_1: left allmulticast mode [ 1846.148207][ T56] bridge_slave_1: left promiscuous mode [ 1846.148444][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.345801][ T56] bridge_slave_0: left allmulticast mode [ 1846.345839][ T56] bridge_slave_0: left promiscuous mode [ 1846.346121][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.377082][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 240 seconds [ 1847.377328][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 240 seconds [ 1847.377437][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 240 seconds [ 1847.377543][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 240 seconds [ 1851.213473][T17831] ubi: mtd0 is already attached to ubi31 [ 1852.300286][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1852.581358][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1852.603932][ T56] bond0 (unregistering): Released all slaves [ 1852.690703][T17839] ubi: mtd0 is already attached to ubi31 [ 1855.963818][ T56] hsr_slave_0: left promiscuous mode [ 1856.005977][ T56] hsr_slave_1: left promiscuous mode [ 1856.037873][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1856.051617][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1856.162773][T12292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1856.229888][T12292] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1856.243012][T12292] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1856.245795][T12292] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1856.248775][T12292] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1856.354003][ T56] veth1_macvtap: left promiscuous mode [ 1856.354065][ T56] veth0_macvtap: left promiscuous mode [ 1856.354199][ T56] veth1_vlan: left promiscuous mode [ 1856.354291][ T56] veth0_vlan: left promiscuous mode [ 1858.838711][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.838780][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.840324][T12292] Bluetooth: hci6: command tx timeout [ 1859.424465][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1859.481124][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1860.250550][ T5603] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1860.400864][ T5603] usb 6-1: Using ep0 maxpacket: 32 [ 1860.410175][ T5603] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1860.410321][ T5603] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1860.459220][ T5603] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1860.459249][ T5603] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1860.459266][ T5603] usb 6-1: Product: syz [ 1860.459279][ T5603] usb 6-1: Manufacturer: syz [ 1860.644672][ T5603] hub 6-1:4.0: USB hub found [ 1860.851327][T12292] Bluetooth: hci6: command tx timeout [ 1860.952277][ T5603] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1860.986169][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1862.836184][T17852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.836305][T17852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.836551][T17852] bridge_slave_0: entered allmulticast mode [ 1862.866749][T17852] bridge_slave_0: entered promiscuous mode [ 1862.931985][T12292] Bluetooth: hci6: command tx timeout [ 1863.142649][T14586] usb 6-1: USB disconnect, device number 40 [ 1863.493199][T17852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.493268][T17852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.493450][T17852] bridge_slave_1: entered allmulticast mode [ 1863.498868][T17852] bridge_slave_1: entered promiscuous mode [ 1863.668584][T17919] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1865.024363][T12292] Bluetooth: hci6: command tx timeout [ 1866.259677][T17852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1866.342748][T17852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1867.135091][ T9298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1867.187493][ T9298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1867.193713][ T9298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1867.231912][ T9298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1867.239781][ T9298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1868.837982][T17852] team0: Port device team_slave_0 added [ 1869.384198][T17852] team0: Port device team_slave_1 added [ 1869.410737][T12292] Bluetooth: hci2: command tx timeout [ 1869.890853][ T31] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1870.040544][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 1870.046651][ T31] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.046673][ T31] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1870.071493][ T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1870.071522][ T31] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1870.071542][ T31] usb 6-1: Product: syz [ 1870.071555][ T31] usb 6-1: Manufacturer: syz [ 1870.104577][ T31] hub 6-1:4.0: USB hub found [ 1870.311050][ T31] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1870.352904][ T31] usb 6-1: USB disconnect, device number 41 [ 1870.744134][T17852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.744147][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.744162][T17852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1870.895920][T17852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1870.895937][T17852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.895964][T17852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.293474][T17852] hsr_slave_0: entered promiscuous mode [ 1871.302933][T17852] hsr_slave_1: entered promiscuous mode [ 1871.303881][T17852] debugfs: 'hsr0' already exists in 'hsr' [ 1871.303904][T17852] Cannot create hsr debugfs directory [ 1871.312184][ T820] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1871.314373][T17498] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1871.363559][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1871.381614][T17498] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1871.423517][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1871.478916][T17498] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1871.490595][T12292] Bluetooth: hci2: command tx timeout [ 1871.498045][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 1871.499937][ T820] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.499959][ T820] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1871.526677][ T820] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1871.526697][ T820] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1871.526707][ T820] usb 6-1: Product: syz [ 1871.526715][ T820] usb 6-1: Manufacturer: syz [ 1871.563467][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1871.567459][ T820] hub 6-1:4.0: USB hub found [ 1871.655606][T17498] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1871.676789][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1871.996155][ T820] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 1872.383932][ T56] bridge_slave_1: left allmulticast mode [ 1872.383967][ T56] bridge_slave_1: left promiscuous mode [ 1872.384273][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.445194][ T56] bridge_slave_0: left allmulticast mode [ 1872.445230][ T56] bridge_slave_0: left promiscuous mode [ 1872.445503][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.947153][ T9298] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1872.959135][ T9298] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1872.972957][ T9298] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1872.982682][ T9298] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1872.993980][ T9298] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1873.576685][ T9298] Bluetooth: hci2: command tx timeout [ 1873.952598][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1874.036806][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1874.087722][ T56] bond0 (unregistering): Released all slaves [ 1875.124679][ T5727] usb 6-1: reset high-speed USB device number 42 using dummy_hcd [ 1875.170677][ T9298] Bluetooth: hci7: command tx timeout [ 1875.601647][ T5727] usb 6-1: device firmware changed [ 1875.647104][ T56] hsr_slave_0: left promiscuous mode [ 1875.658023][ T5727] usb 6-1: USB disconnect, device number 42 [ 1875.664366][ T9298] Bluetooth: hci2: command tx timeout [ 1875.674456][ T56] hsr_slave_1: left promiscuous mode [ 1875.679126][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1875.721861][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1875.980597][ T5727] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1876.140517][ T5727] usb 6-1: Using ep0 maxpacket: 32 [ 1876.142751][ T5727] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.148567][ T5727] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1876.148596][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.148616][ T5727] usb 6-1: Product: syz [ 1876.148630][ T5727] usb 6-1: Manufacturer: syz [ 1876.148644][ T5727] usb 6-1: SerialNumber: syz [ 1876.158030][ T5727] usb 6-1: config 0 descriptor?? [ 1876.209484][ T5727] cdc_ether 6-1:0.0: missing cdc header descriptor [ 1876.298929][ T5727] usb 6-1: unsupported MDLM descriptors [ 1876.711474][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1876.761375][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1877.270624][ T9298] Bluetooth: hci7: command tx timeout [ 1877.450788][ T11] block nbd0: Possible stuck request ffff888026de4440: control (read@0,1024B). Runtime 270 seconds [ 1877.450834][ T11] block nbd0: Possible stuck request ffff888026de4600: control (read@1024,1024B). Runtime 270 seconds [ 1877.450863][ T11] block nbd0: Possible stuck request ffff888026de47c0: control (read@2048,1024B). Runtime 270 seconds [ 1877.450891][ T11] block nbd0: Possible stuck request ffff888026de4980: control (read@3072,1024B). Runtime 270 seconds [ 1879.385016][ T9298] Bluetooth: hci7: command tx timeout [ 1879.414698][T10739] usb 6-1: USB disconnect, device number 43 [ 1879.455057][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1879.856806][T17932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1879.859092][T17932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.859341][T17932] bridge_slave_0: entered allmulticast mode [ 1879.897494][T17932] bridge_slave_0: entered promiscuous mode [ 1880.014384][T17932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1880.014508][T17932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.014713][T17932] bridge_slave_1: entered allmulticast mode [ 1880.017637][T17932] bridge_slave_1: entered promiscuous mode [ 1880.171143][T17932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1880.240523][ T5727] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1880.680088][T14582] IPVS: starting estimator thread 0... [ 1881.182453][T18032] IPVS: using max 7 ests per chain, 16800 per kthread [ 1881.351342][ T5727] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1881.351374][ T5727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.351394][ T5727] usb 6-1: Product: syz [ 1881.351408][ T5727] usb 6-1: Manufacturer: syz [ 1881.351422][ T5727] usb 6-1: SerialNumber: syz [ 1881.357050][ T5727] usb 6-1: config 0 descriptor?? [ 1881.430052][ T9298] Bluetooth: hci7: command tx timeout [ 1881.570297][ T5727] usb 6-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1881.570317][ T5727] f81604 6-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1881.570645][ T5727] f81604 6-1:0.0: probe with driver f81604 failed with error -121 [ 1881.796056][T17932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1882.285661][T17932] team0: Port device team_slave_0 added [ 1882.303265][T17932] team0: Port device team_slave_1 added [ 1882.993953][ T820] usb 6-1: USB disconnect, device number 44 [ 1883.137057][T17932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1883.137075][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1883.137100][T17932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1883.382950][T17932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1883.382966][T17932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1883.382994][T17932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1883.841098][ T37] INFO: task syz.3.2334:16865 blocked for more than 143 seconds. [ 1883.841122][ T37] Not tainted syzkaller #0 [ 1883.841132][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1883.841141][ T37] task:syz.3.2334 state:D stack:24632 pid:16865 tgid:16863 ppid:5599 task_flags:0x400140 flags:0x00080802 [ 1883.841197][ T37] Call Trace: [ 1883.841204][ T37] [ 1883.841216][ T37] __schedule+0x1681/0x54c0 [ 1883.841354][ T37] ? __pfx___schedule+0x10/0x10 [ 1883.841372][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1883.841412][ T37] rt_mutex_schedule+0x76/0xf0 [ 1883.841431][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1883.841467][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1883.841501][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1883.841528][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 1883.841552][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1883.841586][ T37] ? sync_bdevs+0x27e/0x470 [ 1883.841614][ T37] ? sync_bdevs+0x27e/0x470 [ 1883.841643][ T37] ? sync_bdevs+0x27e/0x470 [ 1883.841664][ T37] mutex_lock_nested+0x168/0x1d0 [ 1883.841693][ T37] sync_bdevs+0x27e/0x470 [ 1883.841715][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.841734][ T37] __ia32_sys_sync+0xc5/0x120 [ 1883.841754][ T37] ? __pfx___ia32_sys_sync+0x10/0x10 [ 1883.841775][ T37] ? do_syscall_64+0x9d/0xf80 [ 1883.841796][ T37] do_syscall_64+0x15f/0xf80 [ 1883.841814][ T37] ? trace_irq_disable+0x3b/0x140 [ 1883.841835][ T37] ? clear_bhb_loop+0x40/0x90 [ 1883.841858][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.841876][ T37] RIP: 0033:0x7fee9900cdd9 [ 1883.841893][ T37] RSP: 002b:00007fee9725e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1883.841913][ T37] RAX: ffffffffffffffda RBX: 00007fee99285fa0 RCX: 00007fee9900cdd9 [ 1883.841928][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1883.841939][ T37] RBP: 00007fee99285fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1883.841951][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.841963][ T37] R13: 00007fee99286038 R14: 00007fee99285fa0 R15: 00007ffd6c4373e8 [ 1883.841994][ T37] [ 1883.842032][ T37] [ 1883.842032][ T37] Showing all locks held in the system: [ 1883.842041][ T37] 3 locks held by kworker/u8:0/12: [ 1883.842052][ T37] #0: ffff8880330d0138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1883.842106][ T37] #1: ffffc90000117c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1883.842155][ T37] #2: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x124/0x1680 [ 1883.842253][ T37] 2 locks held by kworker/u8:1/13: [ 1883.842264][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1883.842309][ T37] #1: ffffc90000127c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1883.842371][ T37] 1 lock held by khungtaskd/37: [ 1883.842382][ T37] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1883.842462][ T37] 6 locks held by kworker/u8:3/56: [ 1883.842472][ T37] #0: ffff88801b290938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1883.842523][ T37] #1: ffffc9000122fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1883.842566][ T37] #2: ffffffff8f347de0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1883.842645][ T37] #3: ffff8880b0cd6160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1883.842723][ T37] #4: ffff88802b11a310 (&devlink->lock_key#18){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1883.842775][ T37] #5: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x13a/0x830 [ 1883.842878][ T37] 2 locks held by dhcpcd/5256: [ 1883.842889][ T37] #0: ffff888089dec928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1883.842983][ T37] #1: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1883.843059][ T37] 2 locks held by getty/5350: [ 1883.843070][ T37] #0: ffff888036c040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1883.843115][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1883.843165][ T37] 3 locks held by kworker/1:5/5603: [ 1883.843175][ T37] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1883.843219][ T37] #1: ffffc90004547c40 (reg_regdb_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1883.843262][ T37] #2: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: reg_regdb_apply+0x18/0x180 [ 1883.843342][ T37] 2 locks held by kworker/u8:17/8001: [ 1883.843353][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1883.843397][ T37] #1: ffffc90004737c40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1883.843446][ T37] 1 lock held by udevd/15742: [ 1883.843457][ T37] #0: ffff888026d154c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 1883.843572][ T37] 1 lock held by syz.3.2334/16865: [ 1883.843585][ T37] #0: ffff888026d154c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 1883.843629][ T37] 1 lock held by syz.6.2402/17209: [ 1883.843639][ T37] #0: ffff888026d154c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x27e/0x470 [ 1883.843686][ T37] 7 locks held by syz-executor/17852: [ 1883.843698][ T37] 1 lock held by syz-executor/17932: [ 1883.843708][ T37] #0: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1883.843750][ T37] 2 locks held by syz-executor/17968: [ 1883.843760][ T37] #0: ffffffff8f88fdd8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1883.843809][ T37] #1: ffffffff8f356b38 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1883.843853][ T37] 1 lock held by syz.4.2539/18038: [ 1883.843863][ T37] 2 locks held by syz.4.2539/18039: [ 1883.843874][ T37] 5 locks held by syz.4.2539/18040: [ 1883.843885][ T37] 3 locks held by syz.4.2539/18041: [ 1883.843898][ T37] [ 1883.843903][ T37] ============================================= [ 1883.843903][ T37] [ 1883.843922][ T37] NMI backtrace for cpu 1 [ 1883.843937][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1883.843957][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1883.843969][ T37] Call Trace: [ 1883.843977][ T37] [ 1883.843985][ T37] dump_stack_lvl+0xe8/0x150 [ 1883.844010][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1883.844094][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1883.844118][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1883.844144][ T37] sys_info+0x135/0x170 [ 1883.844193][ T37] watchdog+0xfd3/0x1030 [ 1883.844225][ T37] ? watchdog+0x1c9/0x1030 [ 1883.844250][ T37] kthread+0x388/0x470 [ 1883.844275][ T37] ? __pfx_watchdog+0x10/0x10 [ 1883.844292][ T37] ? __pfx_kthread+0x10/0x10 [ 1883.844315][ T37] ret_from_fork+0x514/0xb70 [ 1883.844339][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1883.844359][ T37] ? __switch_to+0xc79/0x1410 [ 1883.844387][ T37] ? __pfx_kthread+0x10/0x10 [ 1883.844411][ T37] ret_from_fork_asm+0x1a/0x30 [ 1883.844457][ T37] [ 1883.844465][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1883.844537][ C0] NMI backtrace for cpu 0 [ 1883.844551][ C0] CPU: 0 UID: 0 PID: 18039 Comm: syz.4.2539 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1883.844570][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1883.844580][ C0] RIP: 0010:__lock_acquire+0x5ed/0x2cf0 [ 1883.844603][ C0] Code: 3b 9e f0 0b 00 00 0f 8c 0b ff ff ff 44 89 e0 38 04 24 76 16 e8 c4 a3 fd 02 85 c0 74 0d 83 3d dd ad e8 0d 00 0f 84 0a 08 00 00 <83> 7c 24 10 00 0f 84 a8 00 00 00 41 8b 45 20 66 85 c0 0f 88 8c 00 [ 1883.844619][ C0] RSP: 0000:ffffc90005f7f3a8 EFLAGS: 00000046 [ 1883.844634][ C0] RAX: 0000000000000002 RBX: ffff8880271349e8 RCX: 0000000000000002 [ 1883.844645][ C0] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000000 [ 1883.844656][ C0] RBP: ffff8880271349c8 R08: ffffffff8b1eb53e R09: ffff888027134870 [ 1883.844667][ C0] R10: dffffc0000000000 R11: fffff52000befea0 R12: 0000000000000002 [ 1883.844680][ C0] R13: ffff8880271349c8 R14: ffff888027133d80 R15: 0000000000000002 [ 1883.844691][ C0] FS: 00007fd3b993d6c0(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 1883.844704][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1883.844724][ C0] CR2: 0000200000fa5000 CR3: 0000000031256000 CR4: 00000000003526f0 [ 1883.844738][ C0] Call Trace: [ 1883.844745][ C0] [ 1883.844758][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1883.844778][ C0] ? rt_mutex_slowunlock+0x18e/0x8b0 [ 1883.844797][ C0] lock_acquire+0x106/0x350 [ 1883.844816][ C0] ? rt_mutex_slowunlock+0x18e/0x8b0 [ 1883.844839][ C0] ? rcu_is_watching+0x15/0xb0 [ 1883.844861][ C0] _raw_spin_lock+0x2e/0x40 [ 1883.844917][ C0] ? rt_mutex_slowunlock+0x18e/0x8b0 [ 1883.844936][ C0] rt_mutex_slowunlock+0x18e/0x8b0 [ 1883.844958][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1883.844979][ C0] ? __rcu_read_unlock+0x83/0xe0 [ 1883.844995][ C0] ? rt_spin_unlock+0x160/0x200 [ 1883.845015][ C0] __wake_up_common_lock+0x18a/0x1e0 [ 1883.845036][ C0] __unix_dgram_recvmsg+0x485/0xd60 [ 1883.845093][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1883.845117][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1883.845136][ C0] ? rcu_is_watching+0x15/0xb0 [ 1883.845155][ C0] ? unix_dgram_recvmsg+0xae/0xd0 [ 1883.845195][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1883.845212][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 1883.845284][ C0] ____sys_recvmsg+0x3ef/0x4b0 [ 1883.845305][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1883.845328][ C0] ? import_iovec+0x73/0xa0 [ 1883.845359][ C0] ___sys_recvmsg+0x215/0x590 [ 1883.845379][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1883.845397][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1883.845449][ C0] do_recvmmsg+0x33a/0x800 [ 1883.845469][ C0] ? file_init_path+0x3b/0x5b0 [ 1883.845489][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1883.845506][ C0] ? __asan_memcpy+0x40/0x70 [ 1883.845530][ C0] ? __pfx_do_futex+0x10/0x10 [ 1883.845556][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1883.845575][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1883.845597][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.845612][ C0] do_syscall_64+0x15f/0xf80 [ 1883.845627][ C0] ? trace_irq_disable+0x3b/0x140 [ 1883.845646][ C0] ? clear_bhb_loop+0x40/0x90 [ 1883.845663][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.845678][ C0] RIP: 0033:0x7fd3bb70cdd9 [ 1883.845693][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.845706][ C0] RSP: 002b:00007fd3b993d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1883.845728][ C0] RAX: ffffffffffffffda RBX: 00007fd3bb986090 RCX: 00007fd3bb70cdd9 [ 1883.845739][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1883.845750][ C0] RBP: 00007fd3bb7a2d69 R08: 0000000000000000 R09: 0000000000000000 [ 1883.845759][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1883.845768][ C0] R13: 00007fd3bb986128 R14: 00007fd3bb986090 R15: 00007ffead4adda8 [ 1883.845786][ C0] [ 1883.846543][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1883.846559][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1883.846579][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1883.846589][ T37] Call Trace: [ 1883.846596][ T37] [ 1883.846604][ T37] vpanic+0x56c/0xa60 [ 1883.846632][ T37] ? __pfx_vpanic+0x10/0x10 [ 1883.846663][ T37] panic+0xc5/0xd0 [ 1883.846684][ T37] ? __pfx_panic+0x10/0x10 [ 1883.846714][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1883.846742][ T37] watchdog+0x102c/0x1030 [ 1883.846770][ T37] ? watchdog+0x1c9/0x1030 [ 1883.846796][ T37] kthread+0x388/0x470 [ 1883.846819][ T37] ? __pfx_watchdog+0x10/0x10 [ 1883.846837][ T37] ? __pfx_kthread+0x10/0x10 [ 1883.846861][ T37] ret_from_fork+0x514/0xb70 [ 1883.846885][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1883.846904][ T37] ? __switch_to+0xc79/0x1410 [ 1883.846932][ T37] ? __pfx_kthread+0x10/0x10 [ 1883.846961][ T37] ret_from_fork_asm+0x1a/0x30 [ 1883.846998][ T37] [ 1883.847410][ T37] Kernel Offset: disabled