last executing test programs: 2m22.77207422s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket(0x11, 0x3, 0x300) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 2m20.950551005s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x4000, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_socket_connect_nvme_tcp() sendmsg$sock(r0, 0x0, 0x20044894) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f00001c3000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r2, 0xc) 2m16.93173323s ago: executing program 3 (id=10): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x1000, 0x31, &(0x7f0000000100)=""/49}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 2m13.921754166s ago: executing program 3 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m58.674098794s ago: executing program 32 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1m39.418226031s ago: executing program 0 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) 1m38.816226981s ago: executing program 0 (id=56): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff14) syz_clone(0x498144ee5762a149, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 1m37.683275978s ago: executing program 0 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_restrict_self(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 1m35.585072322s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_getscheduler(0x0) getpid() pipe(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 1m33.08296764s ago: executing program 0 (id=67): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x62, 0x4d, 0x41, 0x40, 0x2040, 0x7500, 0xd883, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xd8, 0xe8, 0x1, 0xed, 0x71, 0x7c, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec4720000000000010902"], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509", @ANYBLOB], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9da, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xe9}}}}}]}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x2a, {0x2a, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x0, 0x5, 0x5, "dcded3f775"}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) read$char_usb(r3, &(0x7f0000000040)=""/134, 0x86) syz_usb_control_io$uac3(r2, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m29.766898832s ago: executing program 0 (id=75): socket$netlink(0x10, 0x3, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x6, 0x3, 0x3, 0x20, 0x1}, 0x8) 1m14.168616738s ago: executing program 33 (id=75): socket$netlink(0x10, 0x3, 0x2) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x801, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) syz_emit_ethernet(0x46, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000100)={0x6, 0x3, 0x3, 0x20, 0x1}, 0x8) 20.97143792s ago: executing program 4 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x8, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "8a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 20.911496393s ago: executing program 2 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x9, 0xb0, 0x65, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "dcb21272776694cc2ca3182a49d234405593a213bf79fd34cb9f17c207abbb71", "728a06fff618e9fd1ab3a9893bf04964a42dcf932a6a845529b10d0eea3717ce8c0b54a62ea04f6c55f20db0344616fb", "60c38bbc7c462388e5ca18f903516385091d7625386329ee57144801", {"7fc030ad0b4b6e7e3169a63c351f47c7", "d2f21d52f5b88ca047543dde3e450804"}}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x24044080) 17.575053686s ago: executing program 2 (id=208): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd12001200000014000000600000000308"], 0xfdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 17.265399313s ago: executing program 2 (id=211): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r3, &(0x7f0000000040)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f00000000c0)=""/18, 0x12) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 15.684376845s ago: executing program 4 (id=214): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 15.222346454s ago: executing program 1 (id=215): write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200000f00000016030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xfffffffc}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x403e945a0867b14b}]}}}]}, 0x58}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x200, @loopback, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r4, 0x0, 0x44040) 15.220160901s ago: executing program 4 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x9, 0xb0, 0x65, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "dcb21272776694cc2ca3182a49d234405593a213bf79fd34cb9f17c207abbb71", "728a06fff618e9fd1ab3a9893bf04964a42dcf932a6a845529b10d0eea3717ce8c0b54a62ea04f6c55f20db0344616fb", "60c38bbc7c462388e5ca18f903516385091d7625386329ee57144801", {"7fc030ad0b4b6e7e3169a63c351f47c7", "d2f21d52f5b88ca047543dde3e450804"}}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004041}, 0x8040) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080) 14.27992296s ago: executing program 2 (id=217): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a801800018014"], 0x4c}}, 0x0) 11.724493886s ago: executing program 4 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_getscheduler(0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 9.699130365s ago: executing program 4 (id=219): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd1200120000001400000060000000030887"], 0xfdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 8.650391061s ago: executing program 1 (id=220): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* rwo'], 0xa) 8.399576517s ago: executing program 1 (id=221): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x1, 0x0, 0x3}}, 0x26) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r5, &(0x7f0000000140)=""/15, 0xf, 0x4) connect$unix(r5, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000100)={0xe, "1a03e5090200030091000041392e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000280)={0x2, "fa02790d2a69a2610f0200000000000000110001000000c642000000677c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r7}) ppoll(&(0x7f00000001c0)=[{r4, 0x24}], 0x1, 0x0, 0x0, 0x0) 7.385893532s ago: executing program 1 (id=222): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x6, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0x8000, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3fd, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x7ff, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x1, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x1, 0x4, 0x2950bfaf, 0x1003, 0xa2, 0xb, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x801, 0x12b, 0x9, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x6, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.545632441s ago: executing program 1 (id=223): r0 = getpgrp(0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r4, 0x40044160, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000000)={0x7, 0xe, 0xffff, 0xb, 0x2a, "1b040f00403a4e5ef3ffffffff55cf00", 0x8001, 0x1}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) socketpair$unix(0x1, 0x1, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="02000000010020000000200004000000000000001000000000000000200000000000"], 0x24, 0x0) 5.415755522s ago: executing program 1 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) socket(0x11, 0x3, 0x300) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/75, 0x4b, 0xa0ef) 4.157924371s ago: executing program 4 (id=225): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_domain\n', 0x65) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r3, &(0x7f0000000040)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f0000000500)=""/10, 0xa) read(r4, &(0x7f00000000c0)=""/18, 0x12) sched_setaffinity(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.130971184s ago: executing program 2 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x9, 0xb0, 0x65, 0x0, 0x6, 0x11, 0x0, @empty, @multicast1}, {0x4e22, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "dcb21272776694cc2ca3182a49d234405593a213bf79fd34cb9f17c207abbb71", "728a06fff618e9fd1ab3a9893bf04964a42dcf932a6a845529b10d0eea3717ce8c0b54a62ea04f6c55f20db0344616fb", "60c38bbc7c462388e5ca18f903516385091d7625386329ee57144801", {"7fc030ad0b4b6e7e3169a63c351f47c7", "d2f21d52f5b88ca047543dde3e450804"}}}}}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004041}, 0x8040) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080) 0s ago: executing program 2 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_getscheduler(0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 75.491571][ T5571] cgroup: Unknown subsys name 'net' [ 75.733308][ T5571] cgroup: Unknown subsys name 'cpuset' [ 75.787367][ T5571] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.404407][ T5571] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.925359][ T5589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.961070][ T5597] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.964239][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.965417][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.968755][ T5597] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.981131][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.985024][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.987823][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.990186][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.002787][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.009376][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.034429][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.036370][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.037672][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.066730][ T5589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.148871][ T5589] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.168011][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.187004][ T5596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.200606][ T5589] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.209688][ T5589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.211124][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.213465][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.219937][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.226667][ T5589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.229214][ T5589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.098314][ T5589] Bluetooth: hci0: command tx timeout [ 82.100329][ T59] Bluetooth: hci1: command tx timeout [ 82.178280][ T59] Bluetooth: hci2: command tx timeout [ 82.256897][ T59] Bluetooth: hci3: command tx timeout [ 82.338325][ T59] Bluetooth: hci4: command tx timeout [ 82.569519][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.570399][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.570613][ T5581] bridge_slave_0: entered allmulticast mode [ 82.573384][ T5581] bridge_slave_0: entered promiscuous mode [ 82.591432][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.591557][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.592038][ T5584] bridge_slave_0: entered allmulticast mode [ 82.594816][ T5584] bridge_slave_0: entered promiscuous mode [ 82.640737][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.640895][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.641084][ T5581] bridge_slave_1: entered allmulticast mode [ 82.643584][ T5581] bridge_slave_1: entered promiscuous mode [ 82.674869][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.675177][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.675346][ T5584] bridge_slave_1: entered allmulticast mode [ 82.679667][ T5584] bridge_slave_1: entered promiscuous mode [ 82.749308][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.749482][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.749642][ T5583] bridge_slave_0: entered allmulticast mode [ 82.753048][ T5583] bridge_slave_0: entered promiscuous mode [ 82.807339][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.808153][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.808329][ T5583] bridge_slave_1: entered allmulticast mode [ 82.810830][ T5583] bridge_slave_1: entered promiscuous mode [ 82.839746][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.860583][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.893052][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.893549][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.893757][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.893909][ T5582] bridge_slave_0: entered allmulticast mode [ 82.896282][ T5582] bridge_slave_0: entered promiscuous mode [ 82.905913][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.928381][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.928513][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.928668][ T5587] bridge_slave_0: entered allmulticast mode [ 82.932341][ T5587] bridge_slave_0: entered promiscuous mode [ 82.954785][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.954937][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.955423][ T5582] bridge_slave_1: entered allmulticast mode [ 82.958844][ T5582] bridge_slave_1: entered promiscuous mode [ 82.983012][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.983242][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.983360][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.983830][ T5587] bridge_slave_1: entered allmulticast mode [ 82.991818][ T5587] bridge_slave_1: entered promiscuous mode [ 83.049218][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.209140][ T5581] team0: Port device team_slave_0 added [ 83.229203][ T5584] team0: Port device team_slave_0 added [ 83.257706][ T5581] team0: Port device team_slave_1 added [ 83.262689][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.265916][ T5584] team0: Port device team_slave_1 added [ 83.290712][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.309492][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.328340][ T5583] team0: Port device team_slave_0 added [ 83.334025][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.375322][ T5583] team0: Port device team_slave_1 added [ 83.395960][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.396270][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.396297][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.426176][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.426192][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.426216][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.472596][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.472613][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.472637][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.479688][ T5582] team0: Port device team_slave_0 added [ 83.480926][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.480939][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.480963][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.513710][ T5587] team0: Port device team_slave_0 added [ 83.536306][ T5582] team0: Port device team_slave_1 added [ 83.555107][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.555126][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.555150][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.561088][ T5587] team0: Port device team_slave_1 added [ 83.590183][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.590199][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.590223][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.692779][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.693289][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.693316][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.721390][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.721409][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.721433][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.751039][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.751058][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.751083][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.774252][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.774270][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.774293][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.788786][ T5581] hsr_slave_0: entered promiscuous mode [ 83.790310][ T5581] hsr_slave_1: entered promiscuous mode [ 83.835433][ T5584] hsr_slave_0: entered promiscuous mode [ 83.837675][ T5584] hsr_slave_1: entered promiscuous mode [ 83.838818][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 83.838935][ T5584] Cannot create hsr debugfs directory [ 83.902555][ T5583] hsr_slave_0: entered promiscuous mode [ 83.904889][ T5583] hsr_slave_1: entered promiscuous mode [ 83.905718][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 83.905741][ T5583] Cannot create hsr debugfs directory [ 84.030613][ T5582] hsr_slave_0: entered promiscuous mode [ 84.032799][ T5582] hsr_slave_1: entered promiscuous mode [ 84.033613][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 84.033634][ T5582] Cannot create hsr debugfs directory [ 84.058842][ T5587] hsr_slave_0: entered promiscuous mode [ 84.060102][ T5587] hsr_slave_1: entered promiscuous mode [ 84.061053][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 84.061076][ T5587] Cannot create hsr debugfs directory [ 84.177011][ T59] Bluetooth: hci1: command tx timeout [ 84.177035][ T5589] Bluetooth: hci0: command tx timeout [ 84.257100][ T59] Bluetooth: hci2: command tx timeout [ 84.336993][ T59] Bluetooth: hci3: command tx timeout [ 84.417247][ T59] Bluetooth: hci4: command tx timeout [ 85.147586][ T5581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.218080][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.231961][ T5581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.271856][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.280634][ T5581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.310882][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.334832][ T5581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.371730][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.540444][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.572102][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.579204][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.611280][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.622506][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.652234][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.672111][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.709930][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.829033][ T5582] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.871645][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.895259][ T5582] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.931664][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.944909][ T5582] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.990669][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.011017][ T5582] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.058600][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.229515][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.257096][ T59] Bluetooth: hci0: command tx timeout [ 86.257171][ T59] Bluetooth: hci1: command tx timeout [ 86.289177][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.308347][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.333129][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.336873][ T59] Bluetooth: hci2: command tx timeout [ 86.346021][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.373411][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.416952][ T59] Bluetooth: hci3: command tx timeout [ 86.426491][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.450010][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.496911][ T59] Bluetooth: hci4: command tx timeout [ 86.513427][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.585250][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.611513][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.629224][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.669983][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.684923][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.709883][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.719563][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.772869][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.779928][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.799163][ T10] cfg80211: failed to load regulatory.db [ 86.864331][ T2007] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.869351][ T2007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.875612][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.921282][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.930136][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.984473][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.017919][ T2007] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.025204][ T2007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.072125][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.072680][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.081922][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.234414][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.292644][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.292895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.335040][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.422879][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.431373][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.550561][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.609324][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.611053][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.678319][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.702977][ T2007] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.703182][ T2007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.820525][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.893742][ T2007] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.893971][ T2007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.964100][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.964334][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.336864][ T5589] Bluetooth: hci0: command tx timeout [ 88.338460][ T59] Bluetooth: hci1: command tx timeout [ 88.379003][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.426927][ T59] Bluetooth: hci2: command tx timeout [ 88.496886][ T59] Bluetooth: hci3: command tx timeout [ 88.576932][ T59] Bluetooth: hci4: command tx timeout [ 88.791417][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.813361][ T5581] veth0_vlan: entered promiscuous mode [ 88.902355][ T5581] veth1_vlan: entered promiscuous mode [ 89.212642][ T5583] veth0_vlan: entered promiscuous mode [ 89.247955][ T5581] veth0_macvtap: entered promiscuous mode [ 89.261712][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.288399][ T5581] veth1_macvtap: entered promiscuous mode [ 89.304800][ T5583] veth1_vlan: entered promiscuous mode [ 89.461597][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.480864][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.540735][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.568932][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.635515][ T5583] veth0_macvtap: entered promiscuous mode [ 89.696114][ T5583] veth1_macvtap: entered promiscuous mode [ 89.840802][ T5582] veth0_vlan: entered promiscuous mode [ 90.085880][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.093734][ T5582] veth1_vlan: entered promiscuous mode [ 90.174785][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.214615][ T5587] veth0_vlan: entered promiscuous mode [ 90.295294][ T5587] veth1_vlan: entered promiscuous mode [ 90.298001][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.298025][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.571875][ T5584] veth0_vlan: entered promiscuous mode [ 90.596582][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.608516][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.712413][ T5582] veth0_macvtap: entered promiscuous mode [ 90.775505][ T5582] veth1_macvtap: entered promiscuous mode [ 90.794369][ T5584] veth1_vlan: entered promiscuous mode [ 90.862375][ T705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.862447][ T705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.906214][ T5587] veth0_macvtap: entered promiscuous mode [ 90.954045][ T5587] veth1_macvtap: entered promiscuous mode [ 90.965542][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.045554][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.076938][ T705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.077277][ T705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.102477][ T5581] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.170387][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.205910][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.216185][ T5584] veth0_macvtap: entered promiscuous mode [ 91.336400][ T5584] veth1_macvtap: entered promiscuous mode [ 92.935958][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.456416][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.044922][ T5780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.054783][ T5780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.386777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.396777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.406787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.416759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.426766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.436762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.446759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.456767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.466768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.476762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.648492][ T5780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.651287][ T5780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.837358][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.837434][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.898886][ T705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.870454][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.878457][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.290120][ T705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.411292][ T705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.411378][ T705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.102737][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.102817][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.550244][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.566678][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.617825][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.618354][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.618589][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.618830][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.619042][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.619274][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.827691][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.827945][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.828123][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942251][ T5819] usb usb8: usbfs: process 5819 (syz.1.9) did not claim interface 0 before use [ 103.107104][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.115965][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.116010][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.116045][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.116081][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.116116][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.146575][ T4359] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.107651][ T5589] Bluetooth: hci4: command 0x0406 tx timeout [ 106.945254][ T5595] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.699950][ T5595] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.718996][ T5595] usb 5-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 107.877875][ T5595] usb 5-1: config 114 has an invalid interface number: 216 but max is 0 [ 107.891775][ T5595] usb 5-1: config 114 has no interface number 0 [ 107.894157][ T5595] usb 5-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 107.912309][ T5595] usb 5-1: config 114 interface 216 has no altsetting 0 [ 107.915251][ T5595] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.915277][ T5595] usb 5-1: Product: syz [ 107.915292][ T5595] usb 5-1: Manufacturer: syz [ 107.915307][ T5595] usb 5-1: SerialNumber: syz [ 108.310110][ T5595] usb 5-1: can't set config #114, error -71 [ 111.135507][ T5595] usb 5-1: USB disconnect, device number 2 [ 116.874368][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.668744][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 118.677912][ T36] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 118.694951][ T36] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 118.694998][ T36] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 118.695178][ T36] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 118.695206][ T36] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 118.695230][ T36] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.049097][ T36] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.392600][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 119.434164][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 119.445828][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 119.463909][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 119.485456][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.725338][ T36] usb 2-1: config 0 descriptor?? [ 119.748641][ T36] usb 2-1: can't set config #0, error -71 [ 119.815140][ T36] usb 2-1: USB disconnect, device number 2 [ 120.626848][ T5682] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.885123][ T5682] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.887832][ T5682] usb 3-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 120.893482][ T5682] usb 3-1: config 114 has an invalid interface number: 216 but max is 0 [ 120.893510][ T5682] usb 3-1: config 114 has no interface number 0 [ 120.893554][ T5682] usb 3-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 120.893579][ T5682] usb 3-1: config 114 interface 216 has no altsetting 0 [ 120.938493][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.938522][ T5682] usb 3-1: Product: syz [ 120.938541][ T5682] usb 3-1: Manufacturer: syz [ 120.938556][ T5682] usb 3-1: SerialNumber: syz [ 121.555930][ T5904] binder: 5901:5904 ioctl c00c6211 0 returned -14 [ 121.617005][ T59] Bluetooth: hci5: command tx timeout [ 123.699861][ T59] Bluetooth: hci5: command tx timeout [ 124.178150][ T5682] usb 3-1: can't set config #114, error -71 [ 124.286249][ T5682] usb 3-1: USB disconnect, device number 2 [ 126.201192][ T59] Bluetooth: hci5: command tx timeout [ 127.279069][ T5934] process 'syz.4.39' launched './file1' with NULL argv: empty string added [ 128.283886][ T59] Bluetooth: hci5: command tx timeout [ 131.135389][ T5952] binder: 5950:5952 ioctl c00c6211 0 returned -14 [ 131.455371][ T1161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.821579][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838458][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270564][ T5963] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 133.680484][ T5717] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 133.728882][ T1161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.908199][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.917011][ T5717] usb 5-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 133.920392][ T5717] usb 5-1: config 114 has an invalid interface number: 216 but max is 0 [ 133.920428][ T5717] usb 5-1: config 114 has no interface number 0 [ 133.920472][ T5717] usb 5-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 133.920496][ T5717] usb 5-1: config 114 interface 216 has no altsetting 0 [ 133.944743][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.944781][ T5717] usb 5-1: Product: syz [ 133.944795][ T5717] usb 5-1: Manufacturer: syz [ 133.944808][ T5717] usb 5-1: SerialNumber: syz [ 134.031529][ T5961] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 135.146819][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.170770][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.234005][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 135.603400][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.604145][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.670056][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.670735][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.675084][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.686666][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.896000][ T1161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.920625][ T5961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.921279][ T5961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.070726][ T5717] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 136.087877][ T5717] usb 5-1: selecting invalid altsetting 0 [ 136.199411][ T5717] usb 5-1: USB disconnect, device number 3 [ 136.262484][ T2369] pvrusb2: Failed to submit write-control URB status=-19 [ 136.433532][ T2369] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 136.442037][ T2369] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 136.611832][ T1161] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.805568][ T5990] binder: 5989:5990 ioctl c00c6211 0 returned -14 [ 140.176883][ T5589] Bluetooth: hci1: command 0x0406 tx timeout [ 141.801412][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.974750][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 141.981439][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 141.998926][ T31] usb 1-1: config 114 has an invalid interface number: 216 but max is 0 [ 142.007689][ T31] usb 1-1: config 114 has no interface number 0 [ 142.007747][ T31] usb 1-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 142.007774][ T31] usb 1-1: config 114 interface 216 has no altsetting 0 [ 142.039622][ T1161] bridge_slave_1: left allmulticast mode [ 142.039829][ T1161] bridge_slave_1: left promiscuous mode [ 142.095561][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.095634][ T31] usb 1-1: Product: syz [ 142.095650][ T31] usb 1-1: Manufacturer: syz [ 142.095665][ T31] usb 1-1: SerialNumber: syz [ 142.152830][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.187622][ T6021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 143.465962][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.467522][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.492775][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.519386][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.533237][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.533795][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.535431][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.543676][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.760785][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.761555][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.869903][ T31] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 143.870587][ T31] usb 1-1: selecting invalid altsetting 0 [ 143.891232][ T31] usb 1-1: USB disconnect, device number 2 [ 143.895749][ T31] pvrusb2: Device being rendered inoperable [ 144.055589][ T1161] bridge_slave_0: left allmulticast mode [ 144.076985][ T1161] bridge_slave_0: left promiscuous mode [ 144.077235][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.047671][ T5589] Bluetooth: hci3: command 0x0406 tx timeout [ 147.570024][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.627711][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.655015][ T1161] bond0 (unregistering): Released all slaves [ 151.682637][ T5589] Bluetooth: hci0: command 0x0406 tx timeout [ 154.564355][ T6114] comedi comedi3: dt2817: I/O base address or length out of range [ 155.867787][ T6117] bridge0: port 3(gretap0) entered blocking state [ 155.872615][ T6117] bridge0: port 3(gretap0) entered disabled state [ 155.874529][ T6117] gretap0: entered allmulticast mode [ 155.888907][ T6117] gretap0: entered promiscuous mode [ 155.892640][ T6117] bridge0: port 3(gretap0) entered blocking state [ 155.898753][ T6117] bridge0: port 3(gretap0) entered forwarding state [ 157.876921][ T5697] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 158.899318][ T5697] usb 3-1: unable to get BOS descriptor or descriptor too short [ 158.899407][ T5697] usb 3-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 158.904664][ T5697] usb 3-1: config 114 has an invalid interface number: 216 but max is 0 [ 158.904693][ T5697] usb 3-1: config 114 has no interface number 0 [ 158.904738][ T5697] usb 3-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 158.904762][ T5697] usb 3-1: config 114 interface 216 has no altsetting 0 [ 158.915656][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.915686][ T5697] usb 3-1: Product: syz [ 158.915701][ T5697] usb 3-1: Manufacturer: syz [ 158.915715][ T5697] usb 3-1: SerialNumber: syz [ 159.002741][ T6136] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.248200][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.268817][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.091366][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.105668][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.142984][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.200460][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.206113][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.210823][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.454734][ T6136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.487760][ T6136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.553738][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.553886][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.554089][ T5879] bridge_slave_0: entered allmulticast mode [ 160.584844][ T5879] bridge_slave_0: entered promiscuous mode [ 160.629574][ T5697] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 160.658244][ T5697] usb 3-1: selecting invalid altsetting 0 [ 160.747645][ T5697] usb 3-1: USB disconnect, device number 3 [ 160.764397][ T5697] pvrusb2: Device being rendered inoperable [ 160.998530][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.998684][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.998876][ T5879] bridge_slave_1: entered allmulticast mode [ 161.009497][ T5879] bridge_slave_1: entered promiscuous mode [ 161.947449][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.232090][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.428267][ T5589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 162.528707][ T5589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 162.541657][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 162.542789][ T5589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 162.566479][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 162.758740][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.915665][ T5879] team0: Port device team_slave_0 added [ 162.929508][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.929593][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 162.931920][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.931944][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.931990][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 162.941276][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 162.941304][ T31] usb 3-1: Product: syz [ 162.941320][ T31] usb 3-1: Manufacturer: syz [ 162.944033][ T5879] team0: Port device team_slave_1 added [ 164.922239][ T5589] Bluetooth: hci2: command tx timeout [ 165.445934][ T31] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 165.461506][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.486582][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.760307][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 2 on unit 49: -71 (exp. 1). [ 165.780649][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 166.046287][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 166.058147][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 166.070624][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 166.081708][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 166.082225][ T31] uvcvideo 3-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 49: -71 (exp. 1). [ 166.083954][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 166.084661][ T31] uvcvideo 3-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 166.084898][ T31] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 166.352498][ T31] usb 3-1: USB disconnect, device number 4 [ 167.491450][ T5589] Bluetooth: hci2: command tx timeout [ 168.256110][ T5246] 8021q: adding VLAN 0 to HW filter on device eth1 [ 168.273707][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.286368][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.286398][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.494112][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.494168][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.494193][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.922920][ T5589] Bluetooth: hci2: command tx timeout [ 171.313011][ T6234] comedi comedi3: dt2817: I/O base address or length out of range [ 171.741014][ T1161] hsr_slave_0: left promiscuous mode [ 173.126451][ T5589] Bluetooth: hci2: command tx timeout [ 173.274843][ T1161] hsr_slave_1: left promiscuous mode [ 173.337581][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.366981][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.413168][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.420944][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.552476][ T1161] veth1_macvtap: left promiscuous mode [ 173.560165][ T1161] veth0_macvtap: left promiscuous mode [ 173.560529][ T1161] veth1_vlan: left promiscuous mode [ 173.560869][ T1161] veth0_vlan: left promiscuous mode [ 177.267829][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 177.674922][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 177.684880][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 177.694637][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 177.705552][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.207492][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 178.293025][ T6278] comedi comedi3: dt2817: I/O base address or length out of range [ 179.021562][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 180.532631][ T5589] Bluetooth: hci1: command tx timeout [ 182.642346][ T59] Bluetooth: hci1: command tx timeout [ 184.673818][ T59] Bluetooth: hci1: command tx timeout [ 185.019367][ T5246] 8021q: adding VLAN 0 to HW filter on device eth2 [ 186.473744][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.475482][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.477407][ T6149] bridge_slave_0: entered allmulticast mode [ 186.486474][ T6149] bridge_slave_0: entered promiscuous mode [ 186.543696][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.545174][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.545377][ T6149] bridge_slave_1: entered allmulticast mode [ 186.549182][ T6149] bridge_slave_1: entered promiscuous mode [ 186.615334][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.641160][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.737486][ T59] Bluetooth: hci1: command tx timeout [ 186.824423][ T6149] team0: Port device team_slave_0 added [ 186.843157][ T6149] team0: Port device team_slave_1 added [ 187.015017][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.022107][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.022139][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.142020][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.149382][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 187.149415][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.941713][ T6383] fuse: Bad value for 'group_id' [ 187.978479][ T6383] fuse: Bad value for 'group_id' [ 188.973408][ T1161] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.132265][ T5246] 8021q: adding VLAN 0 to HW filter on device eth3 [ 190.915264][ T1161] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.226263][ T6149] hsr_slave_0: entered promiscuous mode [ 191.242940][ T6149] hsr_slave_1: entered promiscuous mode [ 191.311277][ T6149] debugfs: 'hsr0' already exists in 'hsr' [ 191.320188][ T6149] Cannot create hsr debugfs directory [ 191.871897][ T1161] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.893887][ T6433] bridge0: port 3(gretap0) entered blocking state [ 192.902770][ T6433] bridge0: port 3(gretap0) entered disabled state [ 192.904189][ T6433] gretap0: entered allmulticast mode [ 192.924102][ T6433] gretap0: entered promiscuous mode [ 192.930207][ T6433] bridge0: port 3(gretap0) entered blocking state [ 192.939526][ T6433] bridge0: port 3(gretap0) entered forwarding state [ 194.021864][ T5246] 8021q: adding VLAN 0 to HW filter on device eth4 [ 194.380000][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.385134][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.325699][ T1161] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.411300][ T2369] pvrusb2: request_firmware fatal error with code=-110 [ 199.411407][ T2369] pvrusb2: Failure uploading firmware1 [ 199.411416][ T2369] pvrusb2: Device initialization was not successful. [ 199.411424][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 199.411433][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 199.579467][ T5717] pvrusb2: Device being rendered inoperable [ 200.033152][ T6495] bond1 (unregistering): Released all slaves [ 200.343262][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.346977][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.347202][ T6265] bridge_slave_0: entered allmulticast mode [ 200.350122][ T6265] bridge_slave_0: entered promiscuous mode [ 200.649885][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.657519][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.657738][ T6265] bridge_slave_1: entered allmulticast mode [ 200.660954][ T6265] bridge_slave_1: entered promiscuous mode [ 202.065922][ T6265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.149320][ T6265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.494609][ T6535] FAULT_INJECTION: forcing a failure. [ 202.494609][ T6535] name failslab, interval 1, probability 0, space 0, times 1 [ 202.507769][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.1.179 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 202.507806][ T6535] Tainted: [L]=SOFTLOCKUP [ 202.507813][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 202.507833][ T6535] Call Trace: [ 202.507842][ T6535] [ 202.507851][ T6535] dump_stack_lvl+0xe8/0x150 [ 202.507888][ T6535] should_fail_ex+0x46b/0x600 [ 202.507928][ T6535] should_failslab+0xa8/0x100 [ 202.507963][ T6535] __kmalloc_noprof+0xfb/0x790 [ 202.507992][ T6535] ? __memcg_list_lru_alloc+0x211/0x830 [ 202.508024][ T6535] ? __memcg_list_lru_alloc+0x211/0x830 [ 202.508065][ T6535] __memcg_list_lru_alloc+0x211/0x830 [ 202.508107][ T6535] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 202.508138][ T6535] ? xa_load+0x60/0x210 [ 202.508182][ T6535] __memcg_slab_post_alloc_hook+0x3e6/0xfe0 [ 202.508212][ T6535] ? __memcg_slab_post_alloc_hook+0x22f/0xfe0 [ 202.508255][ T6535] ? bpf_fs_alloc_inode+0x2c/0x120 [ 202.508280][ T6535] kmem_cache_alloc_lru_noprof+0x41c/0x680 [ 202.508306][ T6535] ? bpf_fs_alloc_inode+0x2c/0x120 [ 202.508330][ T6535] ? bpf_fs_alloc_inode+0x2c/0x120 [ 202.508356][ T6535] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 202.508384][ T6535] bpf_fs_alloc_inode+0x2c/0x120 [ 202.508408][ T6535] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 202.508430][ T6535] alloc_inode+0x6a/0x1b0 [ 202.508465][ T6535] new_inode+0x1f/0x170 [ 202.508490][ T6535] bpf_fill_super+0x1e9/0xce0 [ 202.508517][ T6535] ? __pfx_set_anon_super_fc+0x10/0x10 [ 202.508545][ T6535] ? __pfx_bpf_fill_super+0x10/0x10 [ 202.508577][ T6535] ? rcu_is_watching+0x16/0xb0 [ 202.508608][ T6535] ? cap_capable+0x123/0x460 [ 202.508630][ T6535] ? __pfx_bpf_fill_super+0x10/0x10 [ 202.508657][ T6535] get_tree_nodev+0xbb/0x150 [ 202.508683][ T6535] vfs_get_tree+0x92/0x2a0 [ 202.508710][ T6535] vfs_cmd_create+0xa2/0x200 [ 202.508744][ T6535] __se_sys_fsconfig+0x6bf/0x810 [ 202.508780][ T6535] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 202.508812][ T6535] ? rcu_is_watching+0x16/0xb0 [ 202.508849][ T6535] ? __x64_sys_fsconfig+0x20/0xc0 [ 202.508880][ T6535] do_syscall_64+0x166/0x520 [ 202.508912][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.508934][ T6535] ? clear_bhb_loop+0x70/0xc0 [ 202.508960][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.508981][ T6535] RIP: 0033:0x7fe39567e159 [ 202.509007][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.509031][ T6535] RSP: 002b:00007fe3938d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 202.509059][ T6535] RAX: ffffffffffffffda RBX: 00007fe395905fa0 RCX: 00007fe39567e159 [ 202.509079][ T6535] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 202.509091][ T6535] RBP: 00007fe395715024 R08: 0000000000000000 R09: 0000000000000000 [ 202.509104][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.509116][ T6535] R13: 00007fe395906038 R14: 00007fe395905fa0 R15: 00007ffe021139f8 [ 202.509149][ T6535] [ 203.118120][ T6265] team0: Port device team_slave_0 added [ 203.244242][ T6546] Zero length message leads to an empty skb [ 203.398282][ T6265] team0: Port device team_slave_1 added [ 203.583479][ T6557] 9p: Bad value for 'wfdno' [ 205.732966][ T1161] bridge_slave_1: left allmulticast mode [ 205.733076][ T1161] bridge_slave_1: left promiscuous mode [ 205.733410][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.899921][ T1161] bridge_slave_0: left allmulticast mode [ 205.900019][ T1161] bridge_slave_0: left promiscuous mode [ 205.900318][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.899288][ T6584] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 208.874063][ T1161] bridge_slave_1: left allmulticast mode [ 208.874101][ T1161] bridge_slave_1: left promiscuous mode [ 208.874332][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.904245][ T6591] 9p: Bad value for 'wfdno' [ 209.048514][ T1161] bridge_slave_0: left allmulticast mode [ 209.048615][ T1161] bridge_slave_0: left promiscuous mode [ 209.048843][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.687676][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.797137][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 209.797914][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.858932][ T1161] bond0 (unregistering): Released all slaves [ 209.969503][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 209.969599][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=d8.83 [ 209.989989][ T31] usb 5-1: config 114 has an invalid interface number: 216 but max is 0 [ 209.990067][ T31] usb 5-1: config 114 has no interface number 0 [ 209.990112][ T31] usb 5-1: config 114 interface 216 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 209.990138][ T31] usb 5-1: config 114 interface 216 has no altsetting 0 [ 210.025446][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.025524][ T31] usb 5-1: Product: syz [ 210.025540][ T31] usb 5-1: Manufacturer: syz [ 210.025553][ T31] usb 5-1: SerialNumber: syz [ 210.103365][ T6597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.364932][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.377506][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.403015][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.452643][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.489953][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.494061][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.504632][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.572956][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.776090][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.782090][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.812043][ T31] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 210.812450][ T31] usb 5-1: selecting invalid altsetting 0 [ 210.850578][ T2369] pvrusb2: Invalid read control endpoint [ 210.854697][ T31] usb 5-1: USB disconnect, device number 4 [ 210.862761][ T2369] usb 5-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 210.862781][ T2369] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 210.947852][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.017612][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.063985][ T1161] bond0 (unregistering): Released all slaves [ 211.099717][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.099786][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.099823][ T6265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.312110][ T6603] netlink: 104 bytes leftover after parsing attributes in process `syz.2.198'. [ 211.386635][ T6265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.386776][ T6265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.386800][ T6265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.125936][ T6149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 213.222547][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.235199][ T6149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.266693][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.317243][ T6149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.373433][ T6620] 9p: Bad value for 'wfdno' [ 213.378583][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.448739][ T6149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.541645][ T6149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.577328][ T6265] hsr_slave_0: entered promiscuous mode [ 213.604370][ T6265] hsr_slave_1: entered promiscuous mode [ 213.605333][ T6265] debugfs: 'hsr0' already exists in 'hsr' [ 213.605401][ T6265] Cannot create hsr debugfs directory [ 218.769603][ T5246] 8021q: adding VLAN 0 to HW filter on device eth5 [ 218.950560][ T6670] 9p: Bad value for 'wfdno' [ 219.164148][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.190146][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.433933][ T1161] hsr_slave_0: left promiscuous mode [ 219.488005][ T1161] hsr_slave_1: left promiscuous mode [ 219.489204][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.489232][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.494297][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.494323][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.950295][ T1161] veth1_macvtap: left promiscuous mode [ 222.976202][ T1161] veth0_macvtap: left promiscuous mode [ 223.080651][ T1161] veth1_vlan: left promiscuous mode [ 223.080916][ T1161] veth0_vlan: left promiscuous mode [ 223.386938][ T5589] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 223.423457][ T5589] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.000379][ T5589] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.098501][ T5589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.109767][ T5589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.189787][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 226.433150][ T59] Bluetooth: hci5: command tx timeout [ 227.030726][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 228.918480][ T59] Bluetooth: hci5: command tx timeout [ 229.536457][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 229.598590][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 231.236802][ T59] Bluetooth: hci5: command tx timeout [ 233.297478][ T5589] Bluetooth: hci5: command tx timeout [ 314.107073][ T5589] Bluetooth: hci1: command 0x0406 tx timeout [ 339.696758][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 339.703977][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6733/2:b..l P6673/2:b..l P6721/6:b..l P6717/1:b..l [ 339.715399][ C0] rcu: (detected by 0, t=10502 jiffies, g=17561, q=1224 ncpus=2) [ 339.724005][ C0] task:syz.1.224 state:R running task stack:25608 pid:6717 tgid:6717 ppid:5581 task_flags:0x40004c flags:0x00080001 [ 339.737766][ C0] Call Trace: [ 339.741041][ C0] [ 339.744050][ C0] __schedule+0x16d9/0x5700 [ 339.748855][ C0] ? __lock_acquire+0x747/0x2de0 [ 339.753869][ C0] ? __pfx___schedule+0x10/0x10 [ 339.758861][ C0] ? __lock_acquire+0x747/0x2de0 [ 339.763902][ C0] preempt_schedule_irq+0x4b/0x90 [ 339.769098][ C0] irqentry_exit+0x14f/0x910 [ 339.773703][ C0] ? trace_irq_disable+0x3b/0x140 [ 339.780937][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 339.787159][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 339.792469][ C0] Code: ff ff ff e8 40 7a b4 09 f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 72 25 03 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 8f 4e b8 09 cc 48 8d 3d 77 24 13 [ 339.812557][ C0] RSP: 0018:ffffc90004f47000 EFLAGS: 00000296 [ 339.818620][ C0] RAX: 576d33d4a1a5c300 RBX: 0000000000000000 RCX: 0000000000000046 [ 339.826717][ C0] RDX: 0000000010530efd RSI: ffffffff8db3cbac RDI: ffffffff8bcc2280 [ 339.834767][ C0] RBP: ffff888038261f40 R08: ffffffff8177e1bf R09: 0000000000000000 [ 339.842915][ C0] R10: ffffc90004f47138 R11: ffffffff81b13c90 R12: ffffffff8e1c3b40 [ 339.850893][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 339.858880][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 339.865063][ C0] ? unwind_next_frame+0x8f/0x2550 [ 339.870271][ C0] ? folios_put_refs+0x815/0x920 [ 339.875377][ C0] ? unwind_next_frame+0x8f/0x2550 [ 339.880484][ C0] unwind_next_frame+0xac/0x2550 [ 339.885415][ C0] ? unwind_next_frame+0x8f/0x2550 [ 339.890542][ C0] ? free_unref_folios+0xd0f/0x1950 [ 339.895876][ C0] ? unwind_next_frame+0x8f/0x2550 [ 339.900994][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 339.907163][ C0] arch_stack_walk+0x11b/0x150 [ 339.911920][ C0] ? folios_put_refs+0x815/0x920 [ 339.916843][ C0] stack_trace_save+0xa9/0x100 [ 339.921603][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 339.926972][ C0] save_stack+0x124/0x230 [ 339.931311][ C0] ? __pfx_save_stack+0x10/0x10 [ 339.936148][ C0] ? free_unref_folios+0xd0f/0x1950 [ 339.941617][ C0] ? folios_put_refs+0x815/0x920 [ 339.946643][ C0] ? page_ext_put+0x97/0xc0 [ 339.951239][ C0] __reset_page_owner+0x71/0x1f0 [ 339.956639][ C0] free_unref_folios+0xd0f/0x1950 [ 339.961994][ C0] ? folios_put_refs+0x7c6/0x920 [ 339.967236][ C0] folios_put_refs+0x815/0x920 [ 339.972033][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 339.977336][ C0] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 339.983672][ C0] shmem_undo_range+0x4e6/0x15d0 [ 339.988724][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 339.994085][ C0] ? __lock_acquire+0x747/0x2de0 [ 339.999030][ C0] ? __lock_acquire+0x747/0x2de0 [ 340.003984][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.009148][ C0] ? percpu_counter_add_batch+0xec/0x1d0 [ 340.014797][ C0] shmem_evict_inode+0x247/0xae0 [ 340.019740][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.025571][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 340.030849][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 340.036232][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 340.041718][ C0] ? rt_spin_unlock+0x159/0x200 [ 340.046578][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.051413][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 340.056885][ C0] evict+0x624/0xb50 [ 340.060816][ C0] ? __pfx_evict+0x10/0x10 [ 340.065234][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.070093][ C0] ? iput+0xb84/0xf00 [ 340.074080][ C0] dentry_kill+0x1b9/0x880 [ 340.078499][ C0] finish_dput+0x1a/0x260 [ 340.082829][ C0] __fput+0x699/0xa80 [ 340.086809][ C0] task_work_run+0x1d9/0x270 [ 340.091397][ C0] ? __pfx_task_work_run+0x10/0x10 [ 340.096495][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.101344][ C0] do_exit+0x73a/0x2360 [ 340.105499][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.111298][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.117094][ C0] ? __pfx_do_exit+0x10/0x10 [ 340.121672][ C0] do_group_exit+0x22d/0x2f0 [ 340.126249][ C0] __x64_sys_exit_group+0x3f/0x40 [ 340.131256][ C0] x64_sys_call+0x18c6/0x18d0 [ 340.135916][ C0] do_syscall_64+0x166/0x520 [ 340.140663][ C0] ? trace_irq_disable+0x3b/0x140 [ 340.145693][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.151765][ C0] ? clear_bhb_loop+0x70/0xc0 [ 340.156527][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.162414][ C0] RIP: 0033:0x7fe39567e159 [ 340.166994][ C0] RSP: 002b:00007ffe02113d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 340.175398][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe39567e159 [ 340.183545][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.191619][ C0] RBP: 00007ffe02113d9c R08: 0000000000000000 R09: 00000000000927c0 [ 340.199602][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000051 [ 340.207613][ C0] R13: 00000000000927c0 R14: 0000000000037950 R15: 00007ffe02113df0 [ 340.216396][ C0] [ 340.219559][ C0] task:syz.4.225 state:R running task stack:25608 pid:6721 tgid:6721 ppid:5584 task_flags:0x40044c flags:0x00080002 [ 340.233505][ C0] Call Trace: [ 340.236798][ C0] [ 340.240331][ C0] __schedule+0x16d9/0x5700 [ 340.245060][ C0] ? __pfx___schedule+0x10/0x10 [ 340.250181][ C0] ? irqentry_exit+0x218/0x910 [ 340.254949][ C0] ? trace_irq_disable+0x3b/0x140 [ 340.260166][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 340.265545][ C0] preempt_schedule_common+0x7f/0xd0 [ 340.271091][ C0] preempt_schedule_thunk+0x16/0x40 [ 340.276299][ C0] __mod_memcg_lruvec_state+0x211/0x360 [ 340.281897][ C0] mod_memcg_lruvec_state+0x1e7/0x270 [ 340.287275][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 340.292751][ C0] lru_activate+0x691/0x11a0 [ 340.297713][ C0] folio_batch_move_lru+0x4c7/0x820 [ 340.302946][ C0] ? __pfx_lru_activate+0x10/0x10 [ 340.308000][ C0] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 340.313734][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 340.318769][ C0] ? __pfx_lru_activate+0x10/0x10 [ 340.323798][ C0] __folio_batch_add_and_move+0x44c/0xaa0 [ 340.329616][ C0] ? __pfx_lru_activate+0x10/0x10 [ 340.334637][ C0] folio_mark_accessed+0x36c/0x4a0 [ 340.339872][ C0] __zap_vma_range+0x1d49/0x4a60 [ 340.344849][ C0] ? flush_tlb_mm_range+0x53f/0x1090 [ 340.350181][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 340.355602][ C0] ? mas_find+0x6d9/0xcb0 [ 340.359949][ C0] unmap_vmas+0x390/0x550 [ 340.364921][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 340.369877][ C0] ? mas_next_slot+0xc94/0xd70 [ 340.374669][ C0] exit_mmap+0x293/0x9f0 [ 340.378906][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 340.383671][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.388704][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.394520][ C0] ? __pfx_exit_aio+0x10/0x10 [ 340.399200][ C0] ? uprobe_clear_state+0x2a7/0x3e0 [ 340.404402][ C0] __mmput+0xcb/0x3d0 [ 340.408391][ C0] exit_mm+0x186/0x240 [ 340.412483][ C0] do_exit+0x6cd/0x2360 [ 340.416659][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.422686][ C0] ? __pfx_do_exit+0x10/0x10 [ 340.427640][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 340.433288][ C0] ? rt_spin_unlock+0x159/0x200 [ 340.438137][ C0] do_group_exit+0x22d/0x2f0 [ 340.442814][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.447665][ C0] get_signal+0x121b/0x12c0 [ 340.452371][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 340.457976][ C0] ? sched_clock+0x41/0x60 [ 340.462528][ C0] ? sched_clock_cpu+0x74/0x440 [ 340.467376][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.473677][ C0] irqentry_exit+0x2ba/0x910 [ 340.478643][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.484712][ C0] RIP: 0033:0x7f1cc63926c0 [ 340.489312][ C0] RSP: 002b:00007ffd37260390 EFLAGS: 00000286 [ 340.495387][ C0] RAX: ffffffff821a9d69 RBX: ffffffff821a9488 RCX: ffffffff821a9488 [ 340.503350][ C0] RDX: ffffffff821a9e4e RSI: ffffffff821a9488 RDI: 00007f1cc5b1d008 [ 340.511397][ C0] RBP: 0000000000000000 R08: 00007f1cc6730000 R09: 00007f1cc6732000 [ 340.519575][ C0] R10: 00000000821a948c R11: 0000000000000008 R12: 00007f1cc6746128 [ 340.527627][ C0] R13: 0000000000006dff R14: ffffffff821a9d69 R15: 00007f1cc7275720 [ 340.535697][ C0] ? copy_pmd_range+0x7f9/0x58f0 [ 340.540631][ C0] ? print_bad_page_map+0xd28/0xd50 [ 340.545821][ C0] ? copy_pmd_range+0x7f9/0x58f0 [ 340.550756][ C0] ? print_bad_page_map+0xd28/0xd50 [ 340.555940][ C0] ? copy_pmd_range+0x8de/0x58f0 [ 340.561125][ C0] ? print_bad_page_map+0xd28/0xd50 [ 340.566320][ C0] [ 340.569355][ C0] task:syz.2.211 state:R running task stack:22504 pid:6673 tgid:6673 ppid:5587 task_flags:0x40064c flags:0x00080001 [ 340.583028][ C0] Call Trace: [ 340.586296][ C0] [ 340.589213][ C0] __schedule+0x16d9/0x5700 [ 340.593723][ C0] ? __pfx___schedule+0x10/0x10 [ 340.598579][ C0] ? __css_rstat_updated+0x237/0x540 [ 340.603857][ C0] preempt_schedule_irq+0x4b/0x90 [ 340.608871][ C0] irqentry_exit+0x14f/0x910 [ 340.613449][ C0] ? trace_irq_disable+0x3b/0x140 [ 340.618462][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.624445][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0xa0/0xb0 [ 340.631366][ C0] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 db 84 93 09 cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 340.651433][ C0] RSP: 0018:ffffc900042771d8 EFLAGS: 00000293 [ 340.657492][ C0] RAX: ffffffff820c42e4 RBX: ffffea00013f7c00 RCX: ffff8880298b9f40 [ 340.665458][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 340.673428][ C0] RBP: ffffea00013f7c08 R08: 0000000000000000 R09: 0000000000000000 [ 340.681396][ C0] R10: dffffc0000000000 R11: fffff9400027ef81 R12: 1ffffd400027ef81 [ 340.689359][ C0] R13: 0000000000000001 R14: dead000000000100 R15: dffffc0000000000 [ 340.697411][ C0] ? __page_cache_release+0x8e4/0xba0 [ 340.702799][ C0] __page_cache_release+0x8e4/0xba0 [ 340.708085][ C0] folios_put_refs+0x3b8/0x920 [ 340.712864][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 340.718174][ C0] ? folio_batch_remove_exceptionals+0x183/0x1f0 [ 340.724776][ C0] shmem_undo_range+0x4e6/0x15d0 [ 340.729753][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 340.735192][ C0] ? __lock_acquire+0x747/0x2de0 [ 340.740144][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 340.745221][ C0] shmem_evict_inode+0x247/0xae0 [ 340.750167][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 340.755975][ C0] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 340.761352][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 340.766727][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 340.772195][ C0] ? rt_spin_unlock+0x159/0x200 [ 340.777466][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.782352][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 340.787920][ C0] evict+0x624/0xb50 [ 340.791826][ C0] ? __pfx_evict+0x10/0x10 [ 340.796356][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.801297][ C0] ? iput+0xb84/0xf00 [ 340.805282][ C0] dentry_kill+0x1b9/0x880 [ 340.809693][ C0] finish_dput+0x1a/0x260 [ 340.814015][ C0] __fput+0x699/0xa80 [ 340.818015][ C0] task_work_run+0x1d9/0x270 [ 340.822643][ C0] ? __pfx_task_work_run+0x10/0x10 [ 340.827784][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.832624][ C0] do_exit+0x73a/0x2360 [ 340.836774][ C0] ? __pfx_do_exit+0x10/0x10 [ 340.841353][ C0] ? proc_coredump_connector+0x187/0x4e0 [ 340.847012][ C0] ? rt_spin_unlock+0x159/0x200 [ 340.851890][ C0] do_group_exit+0x22d/0x2f0 [ 340.856472][ C0] ? rt_spin_unlock+0x165/0x200 [ 340.861311][ C0] get_signal+0x121b/0x12c0 [ 340.865821][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 340.871542][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 340.877707][ C0] irqentry_exit+0x2ba/0x910 [ 340.882290][ C0] ? trace_irq_disable+0x3b/0x140 [ 340.887301][ C0] asm_exc_page_fault+0x26/0x30 [ 340.892209][ C0] RIP: 0033:0x7f23faffe161 [ 340.896608][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 340.902670][ C0] RAX: 0000000000000000 RBX: 00007f23fb285fa0 RCX: 00007f23faffe159 [ 340.910670][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 340.918653][ C0] RBP: 00007f23fb095024 R08: 0000000000000000 R09: 0000000000000000 [ 340.926619][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 340.934673][ C0] R13: 00007f23fb286038 R14: 00007f23fb285fa0 R15: 00007fff52c498e8 [ 340.942831][ C0] [ 340.945847][ C0] task:syz.4.225 state:Z running task stack:24664 pid:6733 tgid:6733 ppid:5584 task_flags:0x40064c flags:0x00080003 [ 340.959416][ C0] Call Trace: [ 340.962786][ C0] [ 340.965705][ C0] __schedule+0x16d9/0x5700 [ 340.970211][ C0] ? __pfx___schedule+0x10/0x10 [ 340.975066][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 340.980532][ C0] preempt_schedule_common+0x7f/0xd0 [ 340.985826][ C0] preempt_schedule_thunk+0x16/0x40 [ 340.991059][ C0] try_to_wake_up+0x887/0x1430 [ 340.995925][ C0] signal_wake_up_state+0xb5/0x120 [ 341.001032][ C0] __send_signal_locked+0xbab/0xeb0 [ 341.006765][ C0] do_notify_parent+0xc23/0xe60 [ 341.011654][ C0] ? __pfx_do_notify_parent+0x10/0x10 [ 341.017158][ C0] ? preempt_count_add+0x6a/0x140 [ 341.022213][ C0] ? kill_orphaned_pgrp+0x5f5/0x610 [ 341.027410][ C0] do_exit+0x13f8/0x2360 [ 341.031673][ C0] ? __pfx_do_exit+0x10/0x10 [ 341.036265][ C0] ? proc_coredump_connector+0x187/0x4e0 [ 341.041908][ C0] ? rt_spin_unlock+0x159/0x200 [ 341.046805][ C0] do_group_exit+0x22d/0x2f0 [ 341.051400][ C0] ? rt_spin_unlock+0x165/0x200 [ 341.056247][ C0] get_signal+0x121b/0x12c0 [ 341.060863][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 341.066503][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 341.072671][ C0] irqentry_exit+0x2ba/0x910 [ 341.077269][ C0] ? trace_irq_disable+0x3b/0x140 [ 341.082405][ C0] asm_exc_page_fault+0x26/0x30 [ 341.087276][ C0] RIP: 0033:0x7f1cc64be161 [ 341.091678][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 341.097724][ C0] RAX: 0000000000000000 RBX: 00007f1cc6746090 RCX: 00007f1cc64be159 [ 341.105691][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 341.113843][ C0] RBP: 00007f1cc6555024 R08: 0000000000000000 R09: 0000000000000000 [ 341.121916][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 341.129877][ C0] R13: 00007f1cc6746128 R14: 00007f1cc6746090 R15: 00007ffd37260348 [ 341.137848][ C0] [ 341.140973][ C0] rcu: rcu_preempt kthread starved for 10549 jiffies! g17561 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 341.152069][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 341.162032][ C0] rcu: RCU grace-period kthread stack dump: [ 341.167908][ C0] task:rcu_preempt state:R running task stack:27688 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 341.181367][ C0] Call Trace: [ 341.184651][ C0] [ 341.187586][ C0] __schedule+0x16d9/0x5700 [ 341.192090][ C0] ? __pfx___schedule+0x10/0x10 [ 341.196933][ C0] ? lock_acquire+0x115/0x350 [ 341.201604][ C0] ? schedule+0x90/0x2b0 [ 341.205935][ C0] schedule+0x164/0x2b0 [ 341.210108][ C0] schedule_timeout+0x152/0x2c0 [ 341.214953][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 341.220338][ C0] ? __pfx_process_timeout+0x10/0x10 [ 341.225628][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 341.231543][ C0] ? prepare_to_swait_event+0x322/0x350 [ 341.237226][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 341.242191][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 341.248438][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 341.253827][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 341.259635][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 341.264225][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 341.269436][ C0] ? __kthread_parkme+0x71/0x1f0 [ 341.274379][ C0] ? __kthread_parkme+0x199/0x1f0 [ 341.279392][ C0] kthread+0x38b/0x470 [ 341.283446][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 341.288635][ C0] ? __pfx_kthread+0x10/0x10 [ 341.293244][ C0] ret_from_fork+0x514/0xb70 [ 341.297844][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 341.302977][ C0] ? __switch_to+0xc89/0x1420 [ 341.307656][ C0] ? __pfx_kthread+0x10/0x10 [ 341.312270][ C0] ret_from_fork_asm+0x1a/0x30 [ 341.317039][ C0] [ 341.320044][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 341.326377][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.337491][ C0] Tainted: [L]=SOFTLOCKUP [ 341.341801][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.351859][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 341.357487][ C0] Code: 0c 62 02 e9 93 d8 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 4b 13 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 341.377096][ C0] RSP: 0018:ffffffff8de07ca0 EFLAGS: 00000246 [ 341.383197][ C0] RAX: 000000000071e065 RBX: ffffffff819a7b70 RCX: 8000000000000001 [ 341.391171][ C0] RDX: 0000000000000001 RSI: ffffffff8d8ca675 RDI: ffffffff8bcc2280 [ 341.399128][ C0] RBP: ffffffff8de07d78 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 341.407179][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 341.415150][ C0] R13: 1ffffffff1bdedf0 R14: 1ffffffff1bc0f9c R15: dffffc0000000000 [ 341.423130][ C0] FS: 0000000000000000(0000) GS:ffff888125bd1000(0000) knlGS:0000000000000000 [ 341.432062][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.438642][ C0] CR2: 00007f2cbdc3ced3 CR3: 0000000035382000 CR4: 00000000003526f0 [ 341.446790][ C0] Call Trace: [ 341.450060][ C0] [ 341.452977][ C0] default_idle+0x9/0x20 [ 341.457219][ C0] default_idle_call+0x72/0xb0 [ 341.462010][ C0] do_idle+0x2e0/0x540 [ 341.466085][ C0] ? __pfx_do_idle+0x10/0x10 [ 341.470782][ C0] cpu_startup_entry+0x43/0x60 [ 341.475541][ C0] rest_init+0x378/0x3a0 [ 341.479785][ C0] ? __pfx_rest_init+0x10/0x10 [ 341.484561][ C0] ? __pfx_kernel_init+0x10/0x10 [ 341.489502][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 341.494903][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 341.500188][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 341.505469][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 341.510923][ C0] start_kernel+0x392/0x3e0 [ 341.515428][ C0] x86_64_start_reservations+0x24/0x30 [ 341.520880][ C0] x86_64_start_kernel+0x137/0x1b0 [ 341.525986][ C0] common_startup_64+0x13e/0x157 [ 341.530920][ C0] [ 343.415796][ T2369] pvrusb2: request_firmware fatal error with code=-110 [ 343.415826][ T2369] pvrusb2: Failure uploading firmware1 [ 343.415830][ T2369] pvrusb2: Device initialization was not successful. [ 343.415834][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 343.415839][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 343.422548][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.422659][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 343.430218][ T31] pvrusb2: Device being rendered inoperable [ 343.434149][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 343.434216][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=376 sent=0 n=-1 (errno 32: Broken pipe) [ 348.424266][ T1057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.462067][ T5246] 8021q: adding VLAN 0 to HW filter on device eth6 [ 348.733046][ T1057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.084553][ T1057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.117791][ T5246] 8021q: adding VLAN 0 to HW filter on device eth7 [ 349.433450][ T1057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.591509][ T5246] 8021q: adding VLAN 0 to HW filter on device eth8