last executing test programs: 18m8.910473225s ago: executing program 0 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0x8, 0x400, 0x800, 0x800}) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) 18m1.909956396s ago: executing program 0 (id=62): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000300)="ef9e6395cb0b786011cd3a128465e6ec08bdeab3c5075627e7688d6d25d06746b457f8883a1cf2b72fa468", 0x2b, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) 17m57.608226908s ago: executing program 32 (id=51): r0 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 17m52.325562839s ago: executing program 0 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 17m48.321652359s ago: executing program 0 (id=75): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x74) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x80800) 17m42.704833685s ago: executing program 4 (id=79): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x37, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000600)=""/120}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106309}], 0x0, 0x0, 0x0}) 17m41.12946384s ago: executing program 0 (id=81): setns(0xc9, 0x0) socket(0x8, 0x2, 0x5) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='mountaddr\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x3, 0x32c, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40, 0x1006, 0x200015a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb18, 0x8, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xb8}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x89c, 0x0, 0x0}}, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) cachestat(r8, 0x0, &(0x7f00000000c0), 0x0) read$FUSE(r7, 0x0, 0x0) write$FUSE_POLL(r8, &(0x7f0000002ac0)={0x18, 0x0, 0x0, {0x3}}, 0x18) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xb, 0x7, 0x4000000000000e51, 0x7e, 0x5479, 0x103d, 0x200000000006, 0x0, 0x5, 0x1, 0x1, 0x400, 0x40000000009, 0x7fffffff, 0x800000068], 0x8080000, 0x2dd1}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 17m39.516686852s ago: executing program 0 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 17m37.498249309s ago: executing program 4 (id=87): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='enable_event:', 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) 17m36.291746494s ago: executing program 4 (id=88): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 17m33.447313557s ago: executing program 4 (id=90): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./myproc/interrupts\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/1000, 0x3e8) syz_emit_ethernet(0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaae2f8c700aa6286dd6c370c5b00002b00fe800000000000000000000000000000fc26825455bdd93eba4aaa35fcf4f21b99c8561aeeaedbf75c54abc49843db729cb45b34"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c0007000000000000000000080009000000000008000800000000000800060073697000"], 0x4c}}, 0x0) 17m30.96062295s ago: executing program 4 (id=94): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x2c, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xbfff}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 17m29.720180174s ago: executing program 4 (id=95): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 17m23.507619432s ago: executing program 33 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 17m15.909348262s ago: executing program 1 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) 17m12.768257454s ago: executing program 34 (id=95): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) write(r2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)={0x14, 0x2d, 0x8c7c251b32d84713, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) 17m12.744695328s ago: executing program 1 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x7, 0x80280) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000040)=""/7, 0x7, 0xc9100021, 0x0, 0x0) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 17m9.822770726s ago: executing program 1 (id=115): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = inotify_init1(0x80800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) inotify_add_watch(r0, &(0x7f0000000500)='./file0\x00', 0x93000819) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000100)=""/1000, 0x3e8) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000540)) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) 17m8.579766303s ago: executing program 1 (id=117): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r4 = memfd_create(&(0x7f0000000100)='\x80\x005\xfb\xf7u\x83%:r\xd2\xdd=\xacy\xf7\xc2\xb9x\xa4q\xc1\xea\x7f\"\xc87a_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbeYL&\xa6\xba\xea\x01\x98\x00\x00\x001\x8bY\xf4\x1cG%\x95\x11\xbc\xf6W\xcfI$T\b\x8c\xd5\x0eKdo\xa5\xea\x1e\x82\x02W\xeduLN\xa6MB^\xbc/&8\xfb%\xfah\b\xe9\x82\xa0\xc2\x96\x85\xf5\x1cs\x9b\\\x8a\x92\xa5~\x03S\xfd\xc1.\x01\xbd\xfbQ\xa0(\xc0\xde\xbew\bFj\x0e93\x00a\xddW\x11\xd9[\xf9\x1b\xaa@\x02\xf8\xe7\xf9\xa8xi\x880\'\x96\xc9+\v(\x83\xea\xcd\xc1\xdc\xf5k\xb0\x8e\xda#p\xe4P\xfc', 0xc) ftruncate(r4, 0x2000000) fcntl$addseals(r4, 0x409, 0x7) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000005c0)={r4, 0x1f, 0x0, 0x1000000}) 17m7.263998236s ago: executing program 1 (id=118): ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) 17m6.026744208s ago: executing program 1 (id=119): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 16m59.356646286s ago: executing program 2 (id=125): r0 = socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r5, 0x3, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r6, 0x0, 0x0) 16m58.877494627s ago: executing program 2 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 16m57.29937005s ago: executing program 2 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x0, r5}) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe", 0x6}], 0x1) 16m55.513326144s ago: executing program 2 (id=128): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000002040)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) fsopen(0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x2a, 0x0, 0x0, 0xfd, @time={0xfffffffd, 0x4}, {0x6}, {}, @result}], 0x1c) 16m54.688226706s ago: executing program 2 (id=129): clock_settime(0x0, &(0x7f0000000000)={0x655409fe, 0x389fd980}) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = epoll_create1(0x0) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x288840, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000340)={0x40000013}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/142, 0x8e}], 0x1, &(0x7f0000001d80)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0) getpriority(0x1, r4) 16m53.92948234s ago: executing program 2 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cf", @ANYRES16=r1, @ANYBLOB="0500000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r4, 0x0, 0x0, 0x200880d8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 16m50.331487036s ago: executing program 35 (id=119): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x3, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 16m38.811167008s ago: executing program 36 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cf", @ANYRES16=r1, @ANYBLOB="0500000000", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r4, 0x0, 0x0, 0x200880d8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 11m41.307214174s ago: executing program 6 (id=275): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 11m39.945337156s ago: executing program 6 (id=278): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ftruncate(0xffffffffffffffff, 0x200004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m33.782097391s ago: executing program 6 (id=281): socket$inet(0x2, 0x1, 0x6) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a8110081002f000800460000284000e000062f90787f000001"], 0x3e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='md0', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/md0\x00', 0x2, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000300)="000000000000000000000000000000000a00000000040000020000000200000000000000") ioctl(r4, 0x40140921, &(0x7f0000000400)="0000000001") ioctl(r4, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r4, 0x400c0930, 0x0) 11m32.533269257s ago: executing program 6 (id=283): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x101, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x0, @loopback}}) 11m30.384546503s ago: executing program 6 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 11m23.8666174s ago: executing program 6 (id=289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='tcp\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='ipv4\n', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='127.0.0.1\n', 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='4420\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r9, &(0x7f0000000740)='1024\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(r10, &(0x7f0000000840)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys\n', 0x3b) 11m8.763238225s ago: executing program 37 (id=289): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000480)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='tcp\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='ipv4\n', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='127.0.0.1\n', 0xa) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r8, &(0x7f00000006c0)='4420\n', 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r9, &(0x7f0000000740)='1024\n', 0x5) symlinkat(&(0x7f0000000780)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write(r10, &(0x7f0000000840)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=testsubsys\n', 0x3b) 4m12.074701043s ago: executing program 7 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x3fffff) 4m9.35574788s ago: executing program 7 (id=1190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) 4m0.913126036s ago: executing program 7 (id=1202): openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x400042cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b40, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 3m59.173737568s ago: executing program 5 (id=1203): socket$nl_audit(0x10, 0x3, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633", @ANYRES8=r1], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0xfffffffc}}) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x8070bd28, 0xfffffffa, {0x2, 0x18, 0x1ef, 0x0, r5}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64000100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b32833d133}, 0x4890) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r9) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r10, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r9) 3m58.131234699s ago: executing program 5 (id=1204): openat$sndtimer(0xffffff9c, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401", @ANYRES32=0x41424344], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/enable\x00', 0x80201, 0x8) 3m56.677017176s ago: executing program 5 (id=1205): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) msync(&(0x7f0000bc9000/0x2000)=nil, 0x2000, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x48c0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7, 0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) msgrcv(0x0, 0x0, 0x0, 0x1, 0x5800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}}) 3m54.609609604s ago: executing program 3 (id=1208): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x60}}, 0x4004040) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x2000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, &(0x7f0000000040)=0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000001540)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x1000, 0x7, 0x4) 3m52.401357939s ago: executing program 5 (id=1212): openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0xccd02, 0x0) setsockopt(r0, 0x11b, 0x9, 0x0, 0x4) 3m49.894787561s ago: executing program 5 (id=1213): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000004740)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x101, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'batadv_slave_0\x00', {0x2, 0x0, @loopback}}) 3m49.573150722s ago: executing program 7 (id=1215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r0, 0x0) read$FUSE(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) 3m49.347394045s ago: executing program 3 (id=1216): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) setns(0xc9, 0x0) 3m47.527626237s ago: executing program 3 (id=1217): r0 = socket$netlink(0x10, 0x3, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfd, 0x1000000}, 0xc) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r5, 0x3, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r6, 0x0, 0x0) 3m47.456107575s ago: executing program 7 (id=1218): io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0xfff, 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08002320"], 0xb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)) fcntl$setpipe(r4, 0x407, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r4, &(0x7f00000024c0)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x80000000, 0x9, 0x8, 0x0, 0x0, {0x1, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x9, 0x9, 0x0, 0xa000, 0x0, 0x0, r6, 0x3, 0x2}}}, 0x90) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100001080000", @ANYRES32=0x0, @ANYBLOB="312000009bd5420d87dd51eb080003000400000008001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4004550c, 0x0) 3m47.308428264s ago: executing program 3 (id=1220): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000a40), &(0x7f0000000180)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x37, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x30, 0x39, 0x61, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key(&(0x7f0000000340)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000800)="bf", 0x1, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x43}, 0x48, r1) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000780)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x9a]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x60, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 3m46.7646996s ago: executing program 3 (id=1221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) 3m46.583272655s ago: executing program 7 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) epoll_create1(0x0) ioprio_get$pid(0x1, r0) epoll_create1(0x80000) open(0x0, 0x8000, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r5, &(0x7f0000001240)="5c783031303230333034203230303030303030303020302030dd197fa692f9ec327d775f1bbb7bbc29f45c896f92b7b9cc8d5b430e5e6f0fc517efb1804a45cb7141e8dda9c81027e35b7f6ca2ee0e21d59b", 0x52) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m45.543546071s ago: executing program 3 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsmount(r3, 0x0, 0x0) 3m44.417881951s ago: executing program 5 (id=1225): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3m30.030353306s ago: executing program 38 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) copy_file_range(r2, 0x0, r2, &(0x7f00000004c0)=0x100, 0x9, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x1000, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000140)=0x2) epoll_create1(0x0) ioprio_get$pid(0x1, r0) epoll_create1(0x80000) open(0x0, 0x8000, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd03, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000e80)='./proc\x00', &(0x7f0000000ec0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) write(r5, &(0x7f0000001240)="5c783031303230333034203230303030303030303020302030dd197fa692f9ec327d775f1bbb7bbc29f45c896f92b7b9cc8d5b430e5e6f0fc517efb1804a45cb7141e8dda9c81027e35b7f6ca2ee0e21d59b", 0x52) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m29.940119708s ago: executing program 39 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fsmount(r3, 0x0, 0x0) 3m28.951351121s ago: executing program 40 (id=1225): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x200, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0x1, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0xc62d71, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x4000], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x8, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.453805205s ago: executing program 9 (id=1456): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) 12.106598575s ago: executing program 9 (id=1457): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r2, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 9.041801481s ago: executing program 9 (id=1461): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) keyctl$setperm(0x5, 0x0, 0x200a0204) memfd_create(0x0, 0x1) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 7.489489012s ago: executing program 9 (id=1462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, 0x0, 0xff2e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = dup3(0xffffffffffffffff, r0, 0x0) read$FUSE(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1c0) 7.393000067s ago: executing program 8 (id=1463): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r2, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 7.266178197s ago: executing program 8 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 5.993380423s ago: executing program 8 (id=1465): syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0x4) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x200000, 0xb418842, 0x6, 0x0, 0xffffffff, 0x2}}, 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xff) sched_getscheduler(0x0) 4.250792434s ago: executing program 9 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x400000007ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) 3.089763767s ago: executing program 8 (id=1467): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x4}, {0xffbd, 0xff46}}}}, 0x11) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000040), 0x5ef9, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.642675473s ago: executing program 9 (id=1468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x10004, 0x1008, 0x1}) 1.521255373s ago: executing program 8 (id=1469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) close(r3) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=1470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000000)={0x0, 0x10004, 0x1008, 0x1}) kernel console output (not intermixed with test programs): laving as an active interface with an up link [ 682.900299][ T9433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.222898][ T9615] device-mapper: table: 248:2: target type multipath must appear alone in table [ 683.222921][ T9615] device-mapper: ioctl: error adding target to table [ 683.912424][ T6747] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 685.271596][ T6747] usb 6-1: device descriptor read/all, error -71 [ 685.567863][ T9632] FAULT_INJECTION: forcing a failure. [ 685.567863][ T9632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 685.567906][ T9632] CPU: 1 UID: 0 PID: 9632 Comm: syz.5.657 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 685.567923][ T9632] Tainted: [L]=SOFTLOCKUP [ 685.567927][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 685.567940][ T9632] Call Trace: [ 685.567945][ T9632] [ 685.567951][ T9632] dump_stack_lvl+0xe8/0x150 [ 685.567973][ T9632] should_fail_ex+0x46b/0x600 [ 685.567991][ T9632] strncpy_from_user+0x36/0x2c0 [ 685.568008][ T9632] __se_sys_request_key+0xb8/0x350 [ 685.568025][ T9632] ? __pfx___se_sys_request_key+0x10/0x10 [ 685.568046][ T9632] do_syscall_64+0x166/0x520 [ 685.568059][ T9632] ? trace_irq_disable+0x3b/0x140 [ 685.568075][ T9632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.568085][ T9632] ? clear_bhb_loop+0x70/0xc0 [ 685.568113][ T9632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.568128][ T9632] RIP: 0033:0x7fb0159ee199 [ 685.568140][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.568150][ T9632] RSP: 002b:00007fb013c46028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 685.568163][ T9632] RAX: ffffffffffffffda RBX: 00007fb015c75fa0 RCX: 00007fb0159ee199 [ 685.568171][ T9632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.568177][ T9632] RBP: 00007fb015a85888 R08: 0000000000000000 R09: 0000000000000000 [ 685.568184][ T9632] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 685.568191][ T9632] R13: 00007fb015c76038 R14: 00007fb015c75fa0 R15: 00007ffe375f6d48 [ 685.568207][ T9632] [ 685.635241][ T9433] team0: Port device team_slave_0 added [ 685.755514][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.755619][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.761721][ T203] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 685.809865][ T9433] team0: Port device team_slave_1 added [ 687.517417][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.523683][ T203] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 687.547027][ T203] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 687.547055][ T203] usb 9-1: config 1 has no interface number 0 [ 687.551299][ T203] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.551324][ T203] usb 9-1: Product: syz [ 687.551339][ T203] usb 9-1: Manufacturer: syz [ 687.551354][ T203] usb 9-1: SerialNumber: syz [ 687.673434][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 687.819797][ T203] usb 9-1: 3:1 : does not exist [ 687.819823][ T203] usb 9-1: 3:2 : does not exist [ 687.852275][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.852292][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.852319][ T9433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.916947][ T9433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.916959][ T9433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.916974][ T9433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.219226][ T1491] bridge_slave_1: left allmulticast mode [ 688.219260][ T1491] bridge_slave_1: left promiscuous mode [ 688.219513][ T1491] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.562906][ T1491] bridge_slave_0: left allmulticast mode [ 688.562943][ T1491] bridge_slave_0: left promiscuous mode [ 688.563186][ T1491] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.381108][ T203] usb 9-1: USB disconnect, device number 14 [ 691.944257][ T36] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 692.091833][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 692.092777][ T36] usb 6-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 692.142201][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.142229][ T36] usb 6-1: Product: syz [ 692.142244][ T36] usb 6-1: Manufacturer: syz [ 692.142258][ T36] usb 6-1: SerialNumber: syz [ 692.646697][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.201267][ T36] usb 6-1: config 0 descriptor?? [ 693.300350][ T36] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 693.320236][ T9288] udevd[9288]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.434799][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 694.264987][ T36] gspca_sonixj: reg_w err -71 [ 694.265086][ T36] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 694.275428][ T36] usb 6-1: USB disconnect, device number 16 [ 695.128780][ T1491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.288742][ T1491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.368297][ T1491] bond0 (unregistering): Released all slaves [ 695.763850][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 695.952047][ T5724] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 696.303866][ T5724] usb 8-1: unable to get BOS descriptor or descriptor too short [ 696.303904][ T5724] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 696.305139][ T5724] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.305155][ T5724] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 696.309663][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.309701][ T5724] usb 8-1: Product: syz [ 696.309716][ T5724] usb 8-1: Manufacturer: syz [ 696.309730][ T5724] usb 8-1: SerialNumber: syz [ 696.366492][ T5724] usb 8-1: selecting invalid altsetting 1 [ 696.367295][ T5724] usb 8-1: unit 6 not found! [ 697.777083][ T9433] hsr_slave_0: entered promiscuous mode [ 697.805628][ T9433] hsr_slave_1: entered promiscuous mode [ 697.807120][ T9433] debugfs: 'hsr0' already exists in 'hsr' [ 697.807145][ T9433] Cannot create hsr debugfs directory [ 697.924097][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.939520][ T5724] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 699.040099][ T5724] usb 8-1: USB disconnect, device number 11 [ 699.192654][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.281335][ T9288] udevd[9288]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 703.449004][ T7880] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 703.526349][ T9748] input: syz0 as /devices/virtual/input/input14 [ 703.621373][ T7880] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 703.636055][ T7880] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 703.636085][ T7880] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 703.660985][ T7880] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.661015][ T7880] usb 8-1: Product: syz [ 703.661029][ T7880] usb 8-1: Manufacturer: syz [ 703.661043][ T7880] usb 8-1: SerialNumber: syz [ 703.673630][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.396890][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.482808][ T7880] usb 8-1: Limiting number of CPorts to U8_MAX [ 705.748290][ C1] usb 8-1: invalid arpc response id received: 1280 [ 705.810820][ T1491] hsr_slave_0: left promiscuous mode [ 705.852521][ T1491] hsr_slave_1: left promiscuous mode [ 705.872271][ T1491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.872304][ T1491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.981890][ T1491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.982817][ T1491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.468854][ T7880] usb 8-1: failed to send ARPC request 1: -71 [ 706.469020][ T7880] usb 8-1: failed to execute ARPC: -71 [ 706.469030][ T7880] usb 8-1: failed to set connected state for cport 0: -71 [ 706.469040][ T7880] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 706.471197][ T7880] usb 8-1: failed to send ARPC request 3: -71 [ 706.486130][ T7880] usb 8-1: failed to execute ARPC: -71 [ 706.486153][ T7880] usb 8-1: failed to clear cport 0: -71 [ 706.486567][ T7880] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 706.637502][ T1491] veth1_macvtap: left promiscuous mode [ 706.637612][ T1491] veth0_macvtap: left promiscuous mode [ 706.638115][ T1491] veth1_vlan: left promiscuous mode [ 706.667973][ T1491] veth0_vlan: left promiscuous mode [ 706.868908][ T7880] es2_ap_driver 8-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 706.919447][ T7880] usb 8-1: USB disconnect, device number 12 [ 709.463323][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.491128][ T9812] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.721949][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.723210][ T1491] team0 (unregistering): Port device team_slave_1 removed [ 710.893986][ T1491] team0 (unregistering): Port device team_slave_0 removed [ 711.237283][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 712.891614][ T6747] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 713.042397][ T6747] usb 10-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 713.044246][ T6747] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.051340][ T6747] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.051366][ T6747] usb 10-1: Product: syz [ 713.051381][ T6747] usb 10-1: Manufacturer: syz [ 713.051395][ T6747] usb 10-1: SerialNumber: syz [ 713.459513][ T6747] dvbdev: DVB: registering new adapter (DEC3000-s) [ 713.666062][ T6747] usb 10-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 713.988407][ T6747] usb 10-1: selecting invalid altsetting 8 [ 714.238283][ T5330] usb 10-1: USB disconnect, device number 10 [ 714.566393][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.647959][ T9854] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 715.943899][ T6747] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 716.211560][ T6747] usb 6-1: Using ep0 maxpacket: 8 [ 716.216395][ T6747] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.218139][ T6747] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 716.218175][ T6747] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.218187][ T6747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.218200][ T6747] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.218212][ T6747] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.218235][ T6747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.231993][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.441822][ T5330] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 716.478007][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.597778][ T5330] usb 9-1: Using ep0 maxpacket: 8 [ 716.610225][ T5330] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 716.641769][ T5330] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.641801][ T5330] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.641825][ T5330] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.641852][ T5330] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.641894][ T5330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.020359][ T5330] usb 9-1: GET_CAPABILITIES returned 0 [ 717.020408][ T5330] usbtmc 9-1:16.0: can't read capabilities [ 717.199913][ T9885] usbtmc 6-1:16.0: simple control status returned bd [ 717.392592][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 717.488392][ T7880] usb 6-1: USB disconnect, device number 17 [ 717.490109][ T5330] usb 9-1: USB disconnect, device number 15 [ 718.656172][ T9905] syzkaller1: entered promiscuous mode [ 718.656200][ T9905] syzkaller1: entered allmulticast mode [ 720.328173][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.603125][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 722.386497][ T9433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.435989][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.437476][ T9433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.492150][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.511366][ T9433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 722.647586][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.666236][ T9433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.829788][ T9433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 723.565594][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.761244][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.687908][ T3369] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.688044][ T3369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.816070][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.816208][ T7919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.150270][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.510041][ T1491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.889715][ T4913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 729.983837][ T4913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 729.992074][ T4913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 730.023921][ T4913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 730.026893][ T4913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 731.992574][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.391603][ T60] Bluetooth: hci2: command tx timeout [ 734.471790][ T60] Bluetooth: hci2: command tx timeout [ 736.551580][ T60] Bluetooth: hci2: command tx timeout [ 736.643029][ T36] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 736.715229][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.793200][ T203] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 736.795792][ T36] usb 8-1: Using ep0 maxpacket: 32 [ 736.797812][ T36] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 736.799191][ T36] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 736.799216][ T36] usb 8-1: config 0 has no interface number 0 [ 736.799259][ T36] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 736.801257][ T36] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.801271][ T36] usb 8-1: Product: syz [ 736.801279][ T36] usb 8-1: Manufacturer: syz [ 736.801286][ T36] usb 8-1: SerialNumber: syz [ 736.882305][ T36] usb 8-1: config 0 descriptor?? [ 736.884093][T10121] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 737.014830][ T203] usb 10-1: not running at top speed; connect to a high speed hub [ 737.014869][ T203] usb 10-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 737.022970][ T203] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.023037][ T203] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.111026][T10121] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 737.209075][ T203] uvcvideo 10-1:1.0: Found UVC 1.00 device (046d:0825) [ 737.638307][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.813837][ T203] uvcvideo 10-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 737.814342][ T203] uvcvideo 10-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 737.814404][ T203] uvcvideo 10-1:1.1: Failed to initialize the device (-71). [ 737.870590][ T203] uvcvideo 10-1:1.0: probe with driver uvcvideo failed with error -71 [ 737.965883][ T203] usb 10-1: USB disconnect, device number 11 [ 738.155529][ T36] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 738.155690][ T36] asix 8-1:0.188: probe with driver asix failed with error -71 [ 738.203531][ T36] usb 8-1: USB disconnect, device number 13 [ 738.511574][ T1001] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 738.631599][ T60] Bluetooth: hci2: command tx timeout [ 738.684324][ T1001] usb 9-1: Using ep0 maxpacket: 16 [ 738.685149][ T1001] usb 9-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 738.689244][ T1001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.689259][ T1001] usb 9-1: Product: syz [ 738.689267][ T1001] usb 9-1: Manufacturer: syz [ 738.689275][ T1001] usb 9-1: SerialNumber: syz [ 738.740249][ T1001] usb 9-1: config 0 descriptor?? [ 738.755811][ T1001] usb 9-1: selecting invalid altsetting 1 [ 738.755831][ T1001] technisat-usb2: could not set alternate setting to 0 [ 738.791635][ T36] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 738.976451][ T36] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 738.978304][ T36] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 738.978358][ T36] usb 10-1: config 1 has no interface number 0 [ 738.981410][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.981425][ T36] usb 10-1: Product: syz [ 738.985818][ T36] usb 10-1: Manufacturer: syz [ 738.985829][ T36] usb 10-1: SerialNumber: syz [ 739.135006][ T1001] technisat-usb2: firmware version: 0.0 [ 739.135054][ T1001] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 739.187607][ T36] usb 10-1: 3:0 : does not exist [ 739.187632][ T36] usb 10-1: 3:0 : does not exist [ 739.582252][ T1001] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 739.584300][ T1001] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 739.584356][ T1001] usb 9-1: media controller created [ 739.645029][ T1001] technisat-usb2: i2c-error: out failed 53 = -22 [ 739.645182][ T1001] dvb-usb: MAC address reading failed. [ 739.713225][ T36] usb 10-1: USB disconnect, device number 12 [ 739.713743][ T1001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 739.973681][T10136] technisat-usb2: i2c-error: out failed 41 = -22 [ 740.074328][ T1001] DVB: Unable to find symbol stv090x_attach() [ 740.074700][T10069] udevd[10069]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.075063][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 740.076447][ T1001] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 740.441581][ T31] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 741.306307][ T1001] rc_core: IR keymap rc-technisat-usb2 not found [ 741.306333][ T1001] Registered IR keymap rc-empty [ 741.327034][ T1001] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 741.347398][ T1001] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input15 [ 741.404994][ T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.406542][ T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.406570][ T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.406610][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.506014][ T1001] dvb-usb: schedule remote query interval to 100 msecs. [ 741.507970][ T1001] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 741.757275][ T31] usb 8-1: usb_control_msg returned -32 [ 741.757308][ T31] usbtmc 8-1:16.0: can't read capabilities [ 741.798139][ T36] dvb-usb: error -71 while querying for an remote control event. [ 741.914658][ T1001] usb 9-1: USB disconnect, device number 16 [ 741.914827][ T36] dvb-usb: error -19 while querying for an remote control event. [ 742.396516][ T1001] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 742.465098][T10183] input: syz1 as /devices/virtual/input/input16 [ 742.543856][ T36] usb 8-1: USB disconnect, device number 14 [ 742.721901][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.360276][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.360611][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.404875][T10064] bridge_slave_0: entered allmulticast mode [ 746.528780][T10064] bridge_slave_0: entered promiscuous mode [ 746.555812][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.808249][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.887429][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.888217][T10064] bridge_slave_1: entered allmulticast mode [ 746.998989][T10064] bridge_slave_1: entered promiscuous mode [ 747.199341][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.199414][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.278185][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.311876][ T203] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 748.341621][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 748.472673][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.813193][T10267] misc userio: No port type given on /dev/userio [ 749.122340][T10064] team0: Port device team_slave_0 added [ 749.130680][T10064] team0: Port device team_slave_1 added [ 749.231703][ T203] usb 8-1: device descriptor read/64, error -71 [ 749.564453][T10282] kAFS: No cell specified [ 749.592203][ T203] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 749.752202][ T203] usb 8-1: Using ep0 maxpacket: 32 [ 749.762703][ T203] usb 8-1: unable to get BOS descriptor or descriptor too short [ 749.762824][ T203] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 749.764473][ T203] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 749.764497][ T203] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 749.764517][ T203] usb 8-1: config 14 has no interface number 0 [ 749.764534][ T203] usb 8-1: config 14 has no interface number 1 [ 749.764602][ T203] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 749.764624][ T203] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 749.764650][ T203] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 749.764683][ T203] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 749.764710][ T203] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 749.764799][ T203] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.764826][ T203] usb 8-1: config 14 interface 57 has no altsetting 0 [ 749.764844][ T203] usb 8-1: config 14 interface 228 has no altsetting 0 [ 749.771907][ T203] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.771930][ T203] usb 8-1: Product: syz [ 749.771945][ T203] usb 8-1: Manufacturer: syz [ 749.771959][ T203] usb 8-1: SerialNumber: syz [ 749.808955][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.808972][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.808998][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.036810][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.036829][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.036857][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.281298][T10298] syz.8.813: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 750.284566][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.8.813 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 750.284596][T10298] Tainted: [L]=SOFTLOCKUP [ 750.284604][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 750.284616][T10298] Call Trace: [ 750.284624][T10298] [ 750.284633][T10298] dump_stack_lvl+0xe8/0x150 [ 750.284678][T10298] warn_alloc+0x24d/0x270 [ 750.284707][T10298] ? __kasan_kmalloc+0x22/0xb0 [ 750.284729][T10298] ? __pfx_warn_alloc+0x10/0x10 [ 750.284757][T10298] ? __get_vm_area_node+0x155/0x2f0 [ 750.284789][T10298] ? __get_vm_area_node+0x2a9/0x2f0 [ 750.284822][T10298] __vmalloc_node_range_noprof+0x36b/0x1540 [ 750.284848][T10298] ? __lock_acquire+0x747/0x2de0 [ 750.284894][T10298] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 750.284919][T10298] ? lock_acquire+0x115/0x350 [ 750.284945][T10298] ? futex_unqueue+0x22/0x240 [ 750.284979][T10298] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 750.285007][T10298] __vmalloc_noprof+0xd2/0x120 [ 750.285033][T10298] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 750.285065][T10298] bpf_prog_alloc_no_stats+0x47/0x560 [ 750.285092][T10298] ? bpf_prog_alloc+0x2a/0x1a0 [ 750.285123][T10298] bpf_prog_alloc+0x3c/0x1a0 [ 750.285153][T10298] bpf_prog_load+0x7f8/0x1c20 [ 750.285191][T10298] ? __pfx_bpf_prog_load+0x10/0x10 [ 750.285241][T10298] __sys_bpf+0xd0d/0xd90 [ 750.285277][T10298] ? __pfx___sys_bpf+0x10/0x10 [ 750.285310][T10298] ? do_futex+0x3e7/0x4e0 [ 750.285357][T10298] ? rcu_is_watching+0x16/0xb0 [ 750.285392][T10298] __x64_sys_bpf+0xba/0xd0 [ 750.285424][T10298] do_syscall_64+0x166/0x520 [ 750.285448][T10298] ? trace_irq_disable+0x3b/0x140 [ 750.285474][T10298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.285492][T10298] ? clear_bhb_loop+0x70/0xc0 [ 750.285515][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.285536][T10298] RIP: 0033:0x7fdc74dce199 [ 750.285554][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.285573][T10298] RSP: 002b:00007fdc73026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 750.285594][T10298] RAX: ffffffffffffffda RBX: 00007fdc75055fa0 RCX: 00007fdc74dce199 [ 750.285610][T10298] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 750.285624][T10298] RBP: 00007fdc74e65888 R08: 0000000000000000 R09: 0000000000000000 [ 750.285638][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.285658][T10298] R13: 00007fdc75056038 R14: 00007fdc75055fa0 R15: 00007ffe70c77288 [ 750.285689][T10298] [ 750.290331][T10298] Mem-Info: [ 750.290346][T10298] active_anon:213 inactive_anon:8158 isolated_anon:0 [ 750.290346][T10298] active_file:27231 inactive_file:34929 isolated_file:0 [ 750.290346][T10298] unevictable:0 dirty:186 writeback:0 [ 750.290346][T10298] slab_reclaimable:12841 slab_unreclaimable:107198 [ 750.290346][T10298] mapped:31214 shmem:545 pagetables:2098 [ 750.290346][T10298] sec_pagetables:0 bounce:0 [ 750.290346][T10298] kernel_misc_reclaimable:0 [ 750.290346][T10298] free:1293018 free_pcp:1605 free_cma:0 [ 750.290400][T10298] Node 0 active_anon:852kB inactive_anon:32632kB active_file:108712kB inactive_file:139716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124856kB dirty:744kB writeback:0kB shmem:2180kB kernel_stack:14780kB pagetables:8240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 750.290454][T10298] Node 1 active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 750.290502][T10298] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.290562][T10298] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 750.290599][T10298] Node 0 DMA32 free:1222600kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:852kB inactive_anon:32632kB active_file:108712kB inactive_file:139716kB unevictable:0kB writepending:744kB zspages:0kB present:3129332kB managed:2558976kB mlocked:0kB bounce:0kB free_pcp:6396kB local_pcp:2596kB free_cma:0kB [ 750.290673][T10298] lowmem_reserve[]: 0 0 1 1 1 [ 750.290709][T10298] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1808kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 750.290771][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 750.290807][T10298] Node 1 Normal free:3934112kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:212kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 750.290869][T10298] lowmem_reserve[]: 0 0 0 0 0 [ 750.290904][T10298] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 750.291036][T10298] Node 0 DMA32: 1826*4kB (UME) 1687*8kB (UME) 1149*16kB (UME) 942*32kB (UME) 633*64kB (UME) 309*128kB (UME) 158*256kB (UME) 91*512kB (UM) 51*1024kB (UM) 22*2048kB (UME) 217*4096kB (UM) = 1222544kB [ 750.291206][T10298] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 750.291313][T10298] Node 1 Normal: 2*4kB (M) 5*8kB (UM) 7*16kB (UM) 6*32kB (UM) 7*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3934112kB [ 750.371268][T10298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.371286][T10298] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.371301][T10298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 750.371317][T10298] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 750.371333][T10298] 62701 total pagecache pages [ 750.371345][T10298] 0 pages in swap cache [ 750.371352][T10298] Free swap = 124996kB [ 750.371360][T10298] Total swap = 124996kB [ 750.371368][T10298] 2097051 pages RAM [ 750.371376][T10298] 0 pages HighMem/MovableOnly [ 750.371383][T10298] 425239 pages reserved [ 750.371390][T10298] 0 pages cma reserved [ 750.380949][ T203] legousbtower 8-1:14.57: interrupt endpoints not found [ 750.926525][ T203] legousbtower 8-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 751.016970][ T203] legousbtower 8-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 751.608052][T10064] hsr_slave_0: entered promiscuous mode [ 751.612384][T10064] hsr_slave_1: entered promiscuous mode [ 751.624707][T10064] debugfs: 'hsr0' already exists in 'hsr' [ 751.624836][T10064] Cannot create hsr debugfs directory [ 754.968065][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 754.972554][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.321728][ C0] usb 8-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 755.368010][ T36] usb 8-1: USB disconnect, device number 16 [ 755.433605][ T36] legousbtower 8-1:14.228: LEGO USB Tower #-160 now disconnected [ 755.543242][ T3362] bridge_slave_1: left allmulticast mode [ 755.543279][ T3362] bridge_slave_1: left promiscuous mode [ 755.543525][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.649438][T10325] netlink: 'syz.9.819': attribute type 4 has an invalid length. [ 755.734406][ T3362] bridge_slave_0: left allmulticast mode [ 755.734442][ T3362] bridge_slave_0: left promiscuous mode [ 755.734710][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.352521][ T31] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 756.504161][ T31] usb 8-1: unable to get BOS descriptor or descriptor too short [ 756.504745][ T31] usb 8-1: not running at top speed; connect to a high speed hub [ 756.504783][ T31] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 756.506216][ T31] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 756.508790][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.508814][ T31] usb 8-1: Product: syz [ 756.508828][ T31] usb 8-1: Manufacturer: syz [ 756.508842][ T31] usb 8-1: SerialNumber: syz [ 756.861364][ T31] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 757.051762][ T31] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 757.051792][ T31] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 757.193110][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 759.041510][ T31] usb 8-1: invalid uac2 rates [ 759.041714][ T31] usb 8-1: invalid uac2 rates [ 759.043013][ T31] usb 8-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 759.043039][ T31] usb 8-1: found format II with max.bitrate = 4, frame size=7372 [ 759.188476][ T31] usb 8-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 759.231851][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.250656][ T31] usb 8-1: USB disconnect, device number 17 [ 759.355556][T10320] udevd[10320]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.392471][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.672825][ T203] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 759.695305][ T3362] bond0 (unregistering): Released all slaves [ 759.828281][ T203] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 759.830249][ T203] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 759.830276][ T203] usb 6-1: config 0 has no interface number 0 [ 759.830409][ T203] usb 6-1: config 0 interface 41 has no altsetting 0 [ 759.834144][ T203] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.834167][ T203] usb 6-1: Product: syz [ 759.834181][ T203] usb 6-1: Manufacturer: syz [ 759.834195][ T203] usb 6-1: SerialNumber: syz [ 759.847865][ T203] usb 6-1: config 0 descriptor?? [ 760.264965][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 760.731571][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.742829][ T203] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 761.421612][ T3362] hsr_slave_0: left promiscuous mode [ 761.465200][ T3362] hsr_slave_1: left promiscuous mode [ 761.466478][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.494181][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.762136][ T203] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 761.762167][ T203] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 761.762425][ T203] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 761.778392][ T203] usb 6-1: USB disconnect, device number 18 [ 762.161588][ T36] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 762.314670][ T36] usb 10-1: not running at top speed; connect to a high speed hub [ 762.314714][ T36] usb 10-1: New USB device found, idVendor=04bb, idProduct=0951, bcdDevice=3b.b8 [ 762.316257][ T36] usb 10-1: config 7 has an invalid interface number: 171 but max is 0 [ 762.316283][ T36] usb 10-1: config 7 has no interface number 0 [ 762.361300][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.361328][ T36] usb 10-1: Product: syz [ 762.361343][ T36] usb 10-1: Manufacturer: syz [ 762.361356][ T36] usb 10-1: SerialNumber: syz [ 762.673726][ T36] usb 10-1: USB disconnect, device number 13 [ 762.961939][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 763.045827][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 763.411776][ T36] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 763.485205][ T203] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 763.591575][ T36] usb 6-1: Using ep0 maxpacket: 16 [ 763.594345][ T36] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 763.596591][ T36] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 763.596617][ T36] usb 6-1: config 0 has no interface number 0 [ 763.596661][ T36] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 763.596687][ T36] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 763.631642][ T203] usb 8-1: Using ep0 maxpacket: 32 [ 763.667672][ T203] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 763.668744][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.668769][ T36] usb 6-1: Product: syz [ 763.668784][ T36] usb 6-1: Manufacturer: syz [ 763.668798][ T36] usb 6-1: SerialNumber: syz [ 763.669288][ T203] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.669316][ T203] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.669352][ T203] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.707654][ T203] usb 8-1: config 0 descriptor?? [ 763.757390][ T36] usb 6-1: config 0 descriptor?? [ 763.763204][T10431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 763.763397][T10431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 764.021780][T10431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 764.021972][T10431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 764.224974][ T36] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 764.411169][ T203] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 764.472962][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 764.880415][ T31] usb 8-1: USB disconnect, device number 18 [ 765.512055][ T36] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 765.512088][ T36] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 765.512423][ T36] asix 6-1:0.34: probe with driver asix failed with error -71 [ 765.593200][ T36] usb 6-1: USB disconnect, device number 19 [ 765.606817][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 767.375328][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.971193][T10468] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 65535 (only 8 groups) [ 768.871660][ T31] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 769.042386][ T31] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 769.043908][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 769.043963][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.049603][ T31] usb 10-1: config 0 descriptor?? [ 769.473596][ T31] ath6kl: Unsupported hardware version: 0x0 [ 769.478310][ T31] ath6kl: Failed to init ath6kl core: -22 [ 769.592076][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 769.763420][ T31] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 771.057917][ T31] usb 10-1: USB disconnect, device number 14 [ 773.702432][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 774.822825][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 777.299836][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.484728][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.485743][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.919468][T10064] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 781.215613][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 781.250576][T10064] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 781.293316][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 781.297424][T10064] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 781.315462][ T31] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 781.351046][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 781.354196][T10064] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 781.466589][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 781.467569][ T31] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 781.469291][ T31] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 781.469315][ T31] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.469335][ T31] usb 9-1: config 0 has no interface number 0 [ 781.469373][ T31] usb 9-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.548450][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.548478][ T31] usb 9-1: Product: syz [ 781.548492][ T31] usb 9-1: Manufacturer: syz [ 781.548507][ T31] usb 9-1: SerialNumber: syz [ 781.593409][ T31] usb 9-1: config 0 descriptor?? [ 781.607522][ T31] radio-si470x 9-1:0.35: could not find interrupt in endpoint [ 781.607617][ T31] radio-si470x 9-1:0.35: probe with driver radio-si470x failed with error -5 [ 781.697936][T10064] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.827578][ T31] radio-raremono 9-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 782.065963][ T31] radio-raremono 9-1:0.35: V4L2 device registered as radio48 [ 783.261165][ T1001] usb 9-1: USB disconnect, device number 17 [ 783.273734][ T1001] radio-raremono 9-1:0.35: Thanko's Raremono disconnected [ 783.718019][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.873539][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.986714][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.986963][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.022731][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.022970][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.438331][T10597] faux_driver vgem: [drm] Unknown color mode 65540; guessing buffer size. [ 785.141580][ T1001] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 785.302448][ T1001] usb 9-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 785.305109][ T1001] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.305141][ T1001] usb 9-1: config 0 interface 0 has no altsetting 0 [ 785.305174][ T1001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.375885][ T1001] usb 9-1: config 0 descriptor?? [ 785.594134][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 785.836241][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.985834][ T1001] wacom 0003:056A:003F.0009: hidraw0: USB HID v0.00 Device [HID 056a:003f] on usb-dummy_hcd.8-1/input0 [ 786.026753][ T1001] usb 9-1: USB disconnect, device number 18 [ 786.233270][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.389970][T10636] fido_id[10636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 787.757824][ T4913] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.817536][ T4913] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.831113][ T4913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.850499][ T4913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.882942][ T4913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 789.242082][ T1001] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 789.301601][ T31] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 789.394522][ T1001] usb 10-1: Using ep0 maxpacket: 16 [ 789.395773][ T1001] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 789.396870][ T1001] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 789.399112][ T1001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.399135][ T1001] usb 10-1: Product: syz [ 789.399149][ T1001] usb 10-1: Manufacturer: syz [ 789.399163][ T1001] usb 10-1: SerialNumber: syz [ 789.476384][ T1001] usb 10-1: config 0 descriptor?? [ 789.491714][ T31] usb 9-1: Using ep0 maxpacket: 8 [ 789.493355][ T31] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 789.494705][ T31] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 789.494772][ T31] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 789.494795][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 789.494819][ T31] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 789.494843][ T31] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.494884][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.584469][ T1001] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 789.584500][ T1001] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 789.808294][ T31] usb 9-1: usb_control_msg returned -32 [ 789.808345][ T31] usbtmc 9-1:16.0: can't read capabilities [ 790.012592][ T60] Bluetooth: hci1: command tx timeout [ 790.114256][ T1001] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 790.223970][T10676] usbtmc 9-1:16.0: INITIATE_CLEAR returned 0 [ 790.465762][ T31] usb 9-1: USB disconnect, device number 19 [ 790.597379][ T1001] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 790.597415][ T1001] em28xx 10-1:0.0: board has no eeprom [ 790.901681][ T1001] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 790.901727][ T1001] em28xx 10-1:0.0: dvb set to bulk mode. [ 790.903955][ T31] em28xx 10-1:0.0: Binding DVB extension [ 790.947072][ T1001] usb 10-1: USB disconnect, device number 15 [ 790.981841][ T1001] em28xx 10-1:0.0: Disconnecting em28xx [ 791.108010][ T31] em28xx 10-1:0.0: Registering input extension [ 791.136725][ T1001] em28xx 10-1:0.0: Closing input extension [ 791.353430][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.493152][ T1001] em28xx: Freeing device [ 792.005599][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.087180][ T60] Bluetooth: hci1: command tx timeout [ 792.511611][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 792.672025][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 792.673059][ T9] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 792.673074][ T9] usb 6-1: config 4 has no interface number 0 [ 792.673099][ T9] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 792.673114][ T9] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.673134][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.860233][ T9] hub 6-1:4.128: USB hub found [ 793.005899][ T9] hub 6-1:4.128: 27 ports detected [ 793.005962][ T9] hub 6-1:4.128: Using single TT (err -22) [ 793.036445][ T9] hub 6-1:4.128: insufficient power available to use all downstream ports [ 794.167711][ T60] Bluetooth: hci1: command tx timeout [ 794.656334][ T9] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 794.852698][ T9] usb 6-1: USB disconnect, device number 20 [ 796.637462][ T60] Bluetooth: hci1: command tx timeout [ 796.883597][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.511645][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.611486][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.919'. [ 797.665669][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.8.919'. [ 797.752757][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.314820][T10749] fuse: fd is not a fuse device [ 801.807916][T10777] netlink: 20 bytes leftover after parsing attributes in process `syz.8.933'. [ 801.953574][T10777] bond0: (slave bond_slave_0): Releasing backup interface [ 801.982684][T10782] netlink: 'syz.5.936': attribute type 46 has an invalid length. [ 802.003557][T10782] syz.5.936(10782): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 802.561357][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.890967][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.740967][T10777] bond_slave_0: entered promiscuous mode [ 804.741100][T10777] bond_slave_0: entered allmulticast mode [ 805.082822][ T3358] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.082868][ T3358] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.082902][ T3358] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.082937][ T3358] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 805.450069][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.450196][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.450359][T10654] bridge_slave_0: entered allmulticast mode [ 805.508402][T10654] bridge_slave_0: entered promiscuous mode [ 805.890709][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.891041][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.891245][T10654] bridge_slave_1: entered allmulticast mode [ 805.897594][T10654] bridge_slave_1: entered promiscuous mode [ 806.399176][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.073519][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.087276][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.087345][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.136184][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.421781][ T3362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.363638][T10654] team0: Port device team_slave_0 added [ 813.153529][T10654] team0: Port device team_slave_1 added [ 813.856555][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.856574][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.856601][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.938290][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.938309][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 813.938344][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.133366][ T57] bridge_slave_1: left allmulticast mode [ 814.133402][ T57] bridge_slave_1: left promiscuous mode [ 814.133657][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.397191][ T3360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 815.905692][ T36] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 816.167450][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 816.212963][ T57] bridge_slave_0: left allmulticast mode [ 816.212999][ T57] bridge_slave_0: left promiscuous mode [ 816.213255][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.442849][ T36] usb 9-1: Using ep0 maxpacket: 32 [ 816.443809][ T36] usb 9-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 816.445565][ T36] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.501323][ T36] usb 9-1: config 0 descriptor?? [ 816.527848][ T36] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 816.612147][ T36] input: xirlink-cit as /devices/platform/dummy_hcd.8/usb9/9-1/input/input22 [ 817.608282][T10884] binder: 10881:10884 unknown command 0 [ 817.608302][T10884] binder: 10881:10884 ioctl c0306201 200000000080 returned -22 [ 817.689862][ T36] usb 9-1: USB disconnect, device number 20 [ 817.991826][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 819.513006][ T3362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.081563][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 821.490567][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 821.520062][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 821.537205][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 821.559813][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 821.559890][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 821.559915][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 821.559940][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 821.559964][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 821.560006][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.946623][T10932] usbtmc 10-1:16.0: simple control status returned bd [ 824.755497][ T5711] usb 10-1: USB disconnect, device number 16 [ 825.287530][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.779621][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.852252][ T5711] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 827.120833][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.192803][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 827.213586][ T57] bond0 (unregistering): Released all slaves [ 827.232419][ T5711] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 827.233919][ T5711] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 827.233949][ T5711] usb 10-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.233970][ T5711] usb 10-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 827.233989][ T5711] usb 10-1: config 0 interface 0 has no altsetting 0 [ 827.234023][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.333221][ T5711] usb 10-1: config 0 descriptor?? [ 827.705596][T10654] hsr_slave_0: entered promiscuous mode [ 827.708410][T10654] hsr_slave_1: entered promiscuous mode [ 827.711057][T10654] debugfs: 'hsr0' already exists in 'hsr' [ 827.711083][T10654] Cannot create hsr debugfs directory [ 828.026857][ T5711] input: HID 17ef:6047 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:17EF:6047.000A/input/input23 [ 828.410702][ T5711] lenovo 0003:17EF:6047.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.9-1/input0 [ 829.333233][ T57] hsr_slave_0: left promiscuous mode [ 829.366275][ T57] hsr_slave_1: left promiscuous mode [ 829.367584][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.406958][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.172913][ T57] team0 (unregistering): Port device team_slave_1 removed [ 830.232565][ T57] team0 (unregistering): Port device team_slave_0 removed [ 830.403415][ T1491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.476219][ T5724] usb 10-1: USB disconnect, device number 17 [ 831.533705][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 832.953342][ T3361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 833.040894][T10654] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 833.076601][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.078128][T10654] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 833.121768][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.123307][T10654] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 833.180949][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.225113][T10654] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 833.257015][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.468630][T10654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.505218][T10654] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.530396][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.531000][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.567616][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.567820][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.047540][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.103185][T10654] veth0_vlan: entered promiscuous mode [ 834.118405][T10654] veth1_vlan: entered promiscuous mode [ 834.158111][T10654] veth0_macvtap: entered promiscuous mode [ 834.167897][T10654] veth1_macvtap: entered promiscuous mode [ 834.186615][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.205295][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.449110][ T3362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.450613][ T3362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.451050][ T3362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.509406][ T3362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.042909][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.042931][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.402591][ T3362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.402614][ T3362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.563028][ T1491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.568553][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.721905][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 841.308475][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 843.982866][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 845.201561][ T203] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 846.409495][ T203] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 846.423903][ T203] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.455405][ T203] usb 6-1: config 0 descriptor?? [ 846.716870][ T203] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 847.035575][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 847.294785][ T203] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 847.294812][ T203] [drm] Initialized udl on minor 1 [ 848.401708][ T5605] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 848.662342][ T5605] usb 9-1: Using ep0 maxpacket: 32 [ 848.663573][ T5605] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 848.713457][ T5605] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.713474][ T5605] usb 9-1: Product: syz [ 848.713482][ T5605] usb 9-1: Manufacturer: syz [ 848.713490][ T5605] usb 9-1: SerialNumber: syz [ 849.596777][T10946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 849.697020][ T5605] usb 9-1: config 0 descriptor?? [ 849.837395][ T5605] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 850.251573][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 850.405357][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 850.405415][ T36] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 850.407845][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.407869][ T36] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.412906][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.412931][ T36] usb 4-1: Product: syz [ 850.412946][ T36] usb 4-1: Manufacturer: syz [ 850.412960][ T36] usb 4-1: SerialNumber: syz [ 850.545644][ T36] usb 4-1: selecting invalid altsetting 1 [ 850.557443][ T36] usb 4-1: unit 6 not found! [ 852.656418][ T5605] gspca_ov534_9: reg_r err -110 [ 852.704264][ T3362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.825996][ T203] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 852.830545][ T36] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 852.920508][ T203] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 852.947254][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 852.972078][ T5605] gspca_ov534_9: Unknown sensor 0000 [ 852.972170][ T5605] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 853.074412][ T203] usb 6-1: USB disconnect, device number 21 [ 853.076342][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 853.078589][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 853.181737][ T5711] usb 9-1: USB disconnect, device number 21 [ 854.636404][ T36] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 854.799853][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1017'. [ 854.800020][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.073245][ T36] usb 4-1: USB disconnect, device number 2 [ 855.146468][T11167] udevd[11167]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.373881][ T1491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 857.672433][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 857.774600][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 859.203827][ T203] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 859.421827][ T203] usb 9-1: Using ep0 maxpacket: 32 [ 859.422659][ T203] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 859.450358][ T203] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.450391][ T203] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.450431][ T203] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.508193][ T203] usb 9-1: config 0 descriptor?? [ 859.576919][ T203] hub 9-1:0.0: USB hub found [ 859.786780][ T203] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 860.018380][ T203] usbhid 9-1:0.0: can't add hid device: -71 [ 860.018502][ T203] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 860.186873][ T203] usb 9-1: USB disconnect, device number 22 [ 860.482122][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 862.007411][T11253] trusted_key: encrypted_key: insufficient parameters specified [ 863.032444][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 866.220398][T11287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'. [ 866.232648][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 868.076043][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 870.074102][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.074172][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.691332][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 873.288323][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 878.008917][T11360] fuse: fd is not a fuse device [ 878.153831][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 879.033563][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 882.910807][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 885.451195][ T57] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 885.501900][ T37] audit: type=1800 audit(1700007086.510:162): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.1083" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 888.633046][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 891.201953][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 893.475505][T11480] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 895.118004][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 897.759499][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 897.816866][ T1491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 898.983430][T11509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 901.770425][ T1491] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 903.376245][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 903.431629][ T36] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 903.605855][ T36] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 903.629548][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.662686][ T36] usb 4-1: config 0 descriptor?? [ 903.967835][ T36] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 904.428332][ T36] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 904.428350][ T36] [drm] Initialized udl on minor 1 [ 904.478628][ T36] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 904.479117][ T36] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 904.498553][ T5711] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 904.517983][ T36] usb 4-1: USB disconnect, device number 3 [ 907.770689][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 909.368182][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 910.754917][T11566] Failed to allocate memory for VMCI context [ 911.970974][T11574] futex_wake_op: syz.9.1128 tries to shift op by 144; fix this program [ 912.872683][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 915.009857][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 917.657834][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 919.532195][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 920.633118][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 924.564938][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 924.674482][T11636] blk-mq: reduced tag depth (128 -> 64) [ 928.062720][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 930.242580][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 930.858240][T11659] bus_add_driver: uevent attr (raw-gadget.0) failed [ 931.161678][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 931.756733][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.759394][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.803040][ T36] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 931.823975][T11659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.845799][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 931.845827][ T36] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 931.871619][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 931.871647][ T36] usb 4-1: Product: syz [ 931.871661][ T36] usb 4-1: Manufacturer: syz [ 932.182350][ T36] usb 4-1: USB disconnect, device number 4 [ 934.577296][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 935.352582][ T3361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 937.404357][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 940.468615][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 941.910364][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 942.718871][T11719] binder: BINDER_SET_CONTEXT_MGR already set [ 942.718890][T11719] binder: 11717:11719 ioctl 4018620d 200000004a80 returned -16 [ 944.818547][T11728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1169'. [ 945.595234][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 947.519966][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.449766][T10946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.671764][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.514228][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.752410][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 957.753583][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 962.890741][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 963.512389][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 964.357671][ T60] Bluetooth: hci1: unexpected event 0x2f length: 509 > 255 [ 969.109379][T10946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 972.126433][T11856] tmpfs: Bad value for 'mpol' [ 973.671030][T11859] openvswitch: netlink: Missing valid actions attribute. [ 973.671065][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 974.440629][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 974.594431][T11866] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 979.188334][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 982.349529][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 982.363405][T10946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 987.884730][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 987.907168][T10946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 992.960944][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.961015][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.145878][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 994.174161][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 998.958810][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 999.455756][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1000.939820][T10946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1003.536733][ T4913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.621630][ T4913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.628169][ T4913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.642801][ T4913] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.651341][ T4913] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1003.857796][T12032] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1003.971759][T12032] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1004.002120][T12032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1004.056412][T12032] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1004.057159][T12032] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1005.632032][ T3365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1006.172352][T12030] Bluetooth: hci2: command tx timeout [ 1006.829640][T12030] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1006.848014][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1006.940735][T12030] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1006.964815][T12030] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1006.965930][T12030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1006.971338][T12030] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1007.027936][T12027] Bluetooth: hci3: command tx timeout [ 1008.472157][T12030] Bluetooth: hci2: command tx timeout [ 1009.031736][T12030] Bluetooth: hci3: command tx timeout [ 1009.767764][T12030] Bluetooth: hci0: command tx timeout [ 1010.563776][T12030] Bluetooth: hci2: command tx timeout [ 1011.123570][T12030] Bluetooth: hci3: command tx timeout [ 1011.592618][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1011.831802][T12030] Bluetooth: hci0: command tx timeout [ 1013.452463][T12030] Bluetooth: hci2: command tx timeout [ 1013.452505][T12030] Bluetooth: hci3: command tx timeout [ 1013.538709][ T3361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1013.923510][ T60] Bluetooth: hci0: command tx timeout [ 1017.107992][ T60] Bluetooth: hci0: command tx timeout [ 1017.283371][ T3362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1017.472869][ T3365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.552183][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1019.935013][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1020.091713][ T3365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.239805][ T3365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.713540][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1024.174685][ T3365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.600589][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1025.799995][ T31] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1025.881986][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.882940][T12049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.883160][T12049] bridge_slave_0: entered allmulticast mode [ 1025.885266][T12049] bridge_slave_0: entered promiscuous mode [ 1025.962964][ T31] usb 9-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1025.963210][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.964257][T12049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.966228][T12049] bridge_slave_1: entered allmulticast mode [ 1025.968383][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.968408][ T31] usb 9-1: Product: syz [ 1025.968423][ T31] usb 9-1: Manufacturer: syz [ 1025.968437][ T31] usb 9-1: SerialNumber: syz [ 1026.035886][T12049] bridge_slave_1: entered promiscuous mode [ 1027.187797][ T31] usb 9-1: USB disconnect, device number 23 [ 1029.800030][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1031.495847][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1031.885928][T12049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.921934][T12026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.922114][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.922290][T12026] bridge_slave_0: entered allmulticast mode [ 1031.958800][T12026] bridge_slave_0: entered promiscuous mode [ 1032.010352][T12049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.020756][T12026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.020827][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.020965][T12026] bridge_slave_1: entered allmulticast mode [ 1032.045673][T12026] bridge_slave_1: entered promiscuous mode [ 1032.545011][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.545228][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.545398][T12029] bridge_slave_0: entered allmulticast mode [ 1032.551045][T12029] bridge_slave_0: entered promiscuous mode [ 1032.657434][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.657662][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.657831][T12029] bridge_slave_1: entered allmulticast mode [ 1032.665827][T12029] bridge_slave_1: entered promiscuous mode [ 1032.702276][T12049] team0: Port device team_slave_0 added [ 1032.852343][ T3365] bridge_slave_1: left allmulticast mode [ 1032.852379][ T3365] bridge_slave_1: left promiscuous mode [ 1032.852787][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.168625][ T3365] bridge_slave_0: left allmulticast mode [ 1033.168663][ T3365] bridge_slave_0: left promiscuous mode [ 1033.168969][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.827463][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1037.112532][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.391386][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1040.369538][T12203] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 1041.676762][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1042.877052][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1043.302609][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.692147][ T36] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 1044.190822][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.314330][ T3365] bond0 (unregistering): Released all slaves [ 1044.334508][ T36] usb 9-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1044.351205][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.351234][ T36] usb 9-1: Product: syz [ 1044.351249][ T36] usb 9-1: Manufacturer: syz [ 1044.351263][ T36] usb 9-1: SerialNumber: syz [ 1045.488653][T12026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.522914][T12049] team0: Port device team_slave_1 added [ 1045.680224][ T36] usb 9-1: USB disconnect, device number 24 [ 1045.786089][T12026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.885705][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.928451][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.964991][T12049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1045.965004][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.965018][T12049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.967333][T12026] team0: Port device team_slave_0 added [ 1045.998708][T12026] team0: Port device team_slave_1 added [ 1045.999792][T12049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.999805][T12049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1045.999839][T12049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.339483][T12232] nvmet_fc: nvme_fc_parse_traddr: bad traddr string [ 1046.435921][T12029] team0: Port device team_slave_0 added [ 1046.488293][T12026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.488311][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.488326][T12026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.497157][T12234] nvmet: adding nsid 1 to subsystem testsubsys [ 1046.545230][T12029] team0: Port device team_slave_1 added [ 1046.545938][T12026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.545954][T12026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.545981][T12026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.570680][T12234] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 1046.866983][ T101] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:b4105602-ecc3-49e0-af5a-97ff179596e8. [ 1047.007279][T12234] nvme nvme0: creating 2 I/O queues. [ 1047.160537][T12234] nvme nvme0: mapped 2/0/0 default/read/poll queues. [ 1047.352222][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1047.549910][T12234] nvme nvme0: new ctrl: NQN "testsubsys", addr 127.0.0.1:4420, hostnqn: nqn.2014-08.org.nvmexpress:uuid:b4105602-ecc3-49e0-af5a-97ff179596e8 [ 1047.585335][T12049] hsr_slave_0: entered promiscuous mode [ 1047.586864][T12049] hsr_slave_1: entered promiscuous mode [ 1047.588053][T12049] debugfs: 'hsr0' already exists in 'hsr' [ 1047.588079][T12049] Cannot create hsr debugfs directory [ 1047.589698][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.589712][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.589737][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.805371][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.805390][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.805417][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.092381][T12026] hsr_slave_0: entered promiscuous mode [ 1050.093740][T12026] hsr_slave_1: entered promiscuous mode [ 1050.094687][T12026] debugfs: 'hsr0' already exists in 'hsr' [ 1050.094710][T12026] Cannot create hsr debugfs directory [ 1051.174373][T12029] hsr_slave_0: entered promiscuous mode [ 1051.175682][T12029] hsr_slave_1: entered promiscuous mode [ 1051.176620][T12029] debugfs: 'hsr0' already exists in 'hsr' [ 1051.176643][T12029] Cannot create hsr debugfs directory [ 1052.608447][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.845882][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1054.368803][T12259] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 1054.389821][T12259] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 1054.415613][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.415682][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.575683][ T3365] hsr_slave_0: left promiscuous mode [ 1054.621037][ C1] nvme nvme0: starting error recovery [ 1054.870675][ T3363] nvme nvme0: queue 1 socket state 11 [ 1054.936766][ T3365] hsr_slave_1: left promiscuous mode [ 1054.943738][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.943766][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1055.135082][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1055.135110][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.659868][ T3363] nvme nvme0: Reconnecting in 10 seconds... [ 1056.686111][ T3361] block nvme0n1: no usable path - requeuing I/O [ 1056.711026][ T3365] veth1_macvtap: left promiscuous mode [ 1056.711141][ T3365] veth0_macvtap: left promiscuous mode [ 1056.723881][ T3365] veth1_vlan: left promiscuous mode [ 1056.724099][ T3365] veth0_vlan: left promiscuous mode [ 1056.773294][ T11] block nvme0n1: no usable path - requeuing I/O [ 1059.008872][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1059.037131][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1059.044392][T11971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1059.494347][ T5724] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 1059.642162][ T5724] usb 9-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1059.645378][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.645396][ T5724] usb 9-1: Product: syz [ 1059.645404][ T5724] usb 9-1: Manufacturer: syz [ 1059.645412][ T5724] usb 9-1: SerialNumber: syz [ 1059.912293][ T5724] usb 9-1: USB disconnect, device number 25 [ 1061.184511][ T3365] team0 (unregistering): Port device team_slave_1 removed [ 1061.907288][ T3365] team0 (unregistering): Port device team_slave_0 removed [ 1063.801376][T12316] nvmet_tcp: address family 4 not supported [ 1064.072493][T12030] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1064.123963][T12030] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1064.137218][T12030] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1064.147295][T12030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1064.159338][T12030] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1065.704127][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1065.704826][ T3397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1066.738984][T12030] Bluetooth: hci1: command tx timeout [ 1067.000416][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1068.039492][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1068.117477][ T5259] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1068.128993][T12027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1068.137245][T12027] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1068.140487][T12027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1068.168587][T12030] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1068.308233][T12030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1068.375421][T12030] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1068.376608][T12030] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1068.377319][T12030] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1068.799792][ T60] Bluetooth: hci1: command tx timeout [ 1069.750935][T11971] nvme nvme0: failed to connect socket: -111 [ 1070.050699][T11971] nvme nvme0: Failed reconnect attempt 1/60 [ 1070.050724][T11971] nvme nvme0: Reconnecting in 10 seconds... [ 1070.663070][ T36] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 1070.818848][ T36] usb 9-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1070.840498][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.840527][ T36] usb 9-1: Product: syz [ 1070.840541][ T36] usb 9-1: Manufacturer: syz [ 1070.840556][ T36] usb 9-1: SerialNumber: syz [ 1070.872019][T12027] Bluetooth: hci1: command tx timeout [ 1071.041294][ T3358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.048672][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1071.361005][T12027] Bluetooth: hci5: command tx timeout [ 1071.494511][ T36] usb 9-1: USB disconnect, device number 26 [ 1071.601690][T12027] Bluetooth: hci6: command tx timeout [ 1072.952243][T12027] Bluetooth: hci1: command tx timeout [ 1072.990081][T12383] nvmet_tcp: address family 4 not supported [ 1073.432563][T12027] Bluetooth: hci5: command tx timeout [ 1073.454944][ T5259] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1074.054822][T12027] Bluetooth: hci6: command tx timeout [ 1075.315661][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 1075.315810][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000080: 0x0003 instead [ 1075.316921][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 1075.316976][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 1075.317033][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 1075.319253][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 1075.319345][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 1075.319408][T12396] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 1075.511441][T12396] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1075.511509][T12396] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1075.511707][T12027] Bluetooth: hci5: command tx timeout [ 1076.071608][ T60] Bluetooth: hci6: command tx timeout [ 1076.330357][ T3369] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1076.797834][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1077.599204][ T60] Bluetooth: hci5: command tx timeout [ 1078.156082][ T60] Bluetooth: hci6: command tx timeout [ 1079.471473][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1080.687903][ T3364] nvme nvme0: failed to connect socket: -111 [ 1080.688109][ T3364] nvme nvme0: Failed reconnect attempt 2/60 [ 1080.688121][ T3364] nvme nvme0: Reconnecting in 10 seconds... [ 1081.203148][ T3365] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.438941][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1081.731411][ T5259] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1083.310422][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1083.508288][ T3365] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.367397][ T3365] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.301183][ T3365] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.608877][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1086.844258][ T37] audit: type=1800 audit(1700007287.840:163): pid=12454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1312" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1089.627362][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1090.879827][ T3363] nvme nvme0: failed to connect socket: -111 [ 1090.880022][ T3363] nvme nvme0: Failed reconnect attempt 3/60 [ 1090.880033][ T3363] nvme nvme0: Reconnecting in 10 seconds... [ 1090.927590][T12317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.927717][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.927904][T12317] bridge_slave_0: entered allmulticast mode [ 1090.930735][T12317] bridge_slave_0: entered promiscuous mode [ 1090.950404][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.950536][T12321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.950699][T12321] bridge_slave_0: entered allmulticast mode [ 1090.955790][T12321] bridge_slave_0: entered promiscuous mode [ 1090.997569][T12317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.997698][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.997872][T12317] bridge_slave_1: entered allmulticast mode [ 1091.007493][T12317] bridge_slave_1: entered promiscuous mode [ 1091.079487][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.079614][T12321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.079785][T12321] bridge_slave_1: entered allmulticast mode [ 1091.092826][T12321] bridge_slave_1: entered promiscuous mode [ 1091.390346][T12319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.391687][T12319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.391861][T12319] bridge_slave_0: entered allmulticast mode [ 1091.406852][T12319] bridge_slave_0: entered promiscuous mode [ 1091.585713][T12317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.591779][T12319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.591897][T12319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.592081][T12319] bridge_slave_1: entered allmulticast mode [ 1091.603104][T12319] bridge_slave_1: entered promiscuous mode [ 1091.610001][ T5259] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1091.624043][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.652973][T12317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.744564][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.158592][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1093.045458][T12319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.099912][T12317] team0: Port device team_slave_0 added [ 1093.119610][T12319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.131119][T12321] team0: Port device team_slave_0 added [ 1093.146888][T12317] team0: Port device team_slave_1 added [ 1093.286977][T12321] team0: Port device team_slave_1 added [ 1093.507496][T12319] team0: Port device team_slave_0 added [ 1093.766076][T12319] team0: Port device team_slave_1 added [ 1093.769118][T12317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.769129][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.769143][T12317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.773130][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.773141][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.773155][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.969192][T12317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.969211][T12317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.969239][T12317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.970564][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.970752][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.971066][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.468701][T12319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.468720][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.468761][T12319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.529226][T12319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.529242][T12319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.529269][T12319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.357009][ T3360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1095.436832][T12317] hsr_slave_0: entered promiscuous mode [ 1095.632179][T12317] hsr_slave_1: entered promiscuous mode [ 1095.633158][T12317] debugfs: 'hsr0' already exists in 'hsr' [ 1095.633183][T12317] Cannot create hsr debugfs directory [ 1096.036696][T12321] hsr_slave_0: entered promiscuous mode [ 1096.038026][T12321] hsr_slave_1: entered promiscuous mode [ 1096.039899][T12321] debugfs: 'hsr0' already exists in 'hsr' [ 1096.039923][T12321] Cannot create hsr debugfs directory [ 1096.426510][ T5731] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 1097.403851][ T5731] usb 9-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1097.486877][ T3362] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1097.495500][ T5731] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.495529][ T5731] usb 9-1: Product: syz [ 1097.495544][ T5731] usb 9-1: Manufacturer: syz [ 1097.495558][ T5731] usb 9-1: SerialNumber: syz [ 1098.059398][ T5731] usb 9-1: USB disconnect, device number 27 [ 1098.231186][ T3365] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.443156][T12319] hsr_slave_0: entered promiscuous mode [ 1098.449170][T12319] hsr_slave_1: entered promiscuous mode [ 1098.462527][T12319] debugfs: 'hsr0' already exists in 'hsr' [ 1098.462555][T12319] Cannot create hsr debugfs directory [ 1099.757199][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.135729][T11971] nvme nvme0: failed to connect socket: -111 [ 1101.136065][T11971] nvme nvme0: Failed reconnect attempt 4/60 [ 1101.136084][T11971] nvme nvme0: Reconnecting in 10 seconds... [ 1101.959477][ T3365] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.032180][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1103.153705][ T3365] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.184830][ T37] audit: type=1800 audit(1700007304.190:164): pid=12523 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1324" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1106.462079][ T37] audit: type=1800 audit(1700007307.460:165): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1331" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1107.590353][ T3365] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.687080][ T3368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1108.911689][ T36] usb 9-1: new full-speed USB device number 28 using dummy_hcd [ 1110.070851][ T36] usb 9-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 1110.119270][ T36] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.119289][ T36] usb 9-1: Product: syz [ 1110.119296][ T36] usb 9-1: Manufacturer: syz [ 1110.119304][ T36] usb 9-1: SerialNumber: syz [ 1110.666797][ T36] usb 9-1: USB disconnect, device number 28 [ 1111.357093][ T7919] nvme nvme0: failed to connect socket: -111 [ 1111.357296][ T7919] nvme nvme0: Failed reconnect attempt 5/60 [ 1111.357308][ T7919] nvme nvme0: Reconnecting in 10 seconds... [ 1111.956290][ T37] audit: type=1800 audit(1700007312.960:166): pid=12567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1340" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1114.552285][ T3360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1114.554274][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.841834][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.841908][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.795568][ T4964] udevd[4964]: worker [12271] /devices/virtual/nvme-subsystem/nvme-subsys0/nvme0n1 is taking a long time [ 1118.564726][ T5259] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1121.802831][ T60] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1121.834470][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1121.834896][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1122.490943][ T3360] nvme nvme0: failed to connect socket: -111 [ 1122.491288][ T3360] nvme nvme0: Failed reconnect attempt 6/60 [ 1122.491309][ T3360] nvme nvme0: Reconnecting in 10 seconds... [ 1122.860572][T12027] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1122.970646][T12027] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1122.973654][T12027] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1122.974836][T12027] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1122.975507][T12027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1124.526247][T12027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1126.409648][T12027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1126.430376][T12027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1126.440171][T12027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1126.450360][T12027] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1126.535850][ T60] Bluetooth: hci0: command tx timeout [ 1126.883180][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.883863][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1127.321125][T12027] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1127.460037][T12027] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1127.465140][T12027] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1127.468593][T12027] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1127.470062][T12027] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1128.781800][T12027] Bluetooth: hci0: command tx timeout [ 1128.951819][T12027] Bluetooth: hci2: command tx timeout [ 1129.523104][ T5259] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1129.591630][T12027] Bluetooth: hci3: command tx timeout [ 1129.643653][ T3365] bridge_slave_1: left allmulticast mode [ 1129.643689][ T3365] bridge_slave_1: left promiscuous mode [ 1129.643960][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.813372][ T3365] bridge_slave_0: left allmulticast mode [ 1129.813409][ T3365] bridge_slave_0: left promiscuous mode [ 1129.813690][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.364778][T12027] Bluetooth: hci0: command tx timeout [ 1131.364813][T12027] Bluetooth: hci2: command tx timeout [ 1131.481800][ T3365] bridge_slave_1: left allmulticast mode [ 1131.481850][ T3365] bridge_slave_1: left promiscuous mode [ 1131.482125][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.646110][ T3365] bridge_slave_0: left allmulticast mode [ 1131.646146][ T3365] bridge_slave_0: left promiscuous mode [ 1131.646391][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.671534][ T60] Bluetooth: hci3: command tx timeout [ 1132.588677][ T3368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1132.589966][ T3360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.615447][ T3358] nvme nvme0: failed to connect socket: -111 [ 1133.615762][ T3358] nvme nvme0: Failed reconnect attempt 7/60 [ 1133.615781][ T3358] nvme nvme0: Reconnecting in 10 seconds... [ 1133.761875][ T60] Bluetooth: hci3: command tx timeout [ 1134.064055][T12027] Bluetooth: hci0: command tx timeout [ 1134.064112][ T60] Bluetooth: hci2: command tx timeout [ 1135.212154][ T3365] bridge_slave_1: left allmulticast mode [ 1135.212192][ T3365] bridge_slave_1: left promiscuous mode [ 1135.212437][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.333352][ T3365] bridge_slave_0: left allmulticast mode [ 1135.333395][ T3365] bridge_slave_0: left promiscuous mode [ 1135.333723][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.332671][ T60] Bluetooth: hci3: command tx timeout [ 1136.332709][ T60] Bluetooth: hci2: command tx timeout [ 1136.762329][ T3365] bridge_slave_1: left allmulticast mode [ 1136.762364][ T3365] bridge_slave_1: left promiscuous mode [ 1136.762611][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.232534][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1138.233611][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1138.298161][ T3365] bridge_slave_0: left allmulticast mode [ 1138.298200][ T3365] bridge_slave_0: left promiscuous mode [ 1138.298437][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.464526][T12027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.518497][ T3368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.532247][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1144.543855][ T3370] nvme nvme0: failed to connect socket: -111 [ 1144.544172][ T3370] nvme nvme0: Failed reconnect attempt 8/60 [ 1144.544191][ T3370] nvme nvme0: Reconnecting in 10 seconds... [ 1144.672367][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.822328][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.916520][ T3365] bond0 (unregistering): Released all slaves [ 1145.138723][ T37] audit: type=1800 audit(1700007346.140:167): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1379" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1145.313305][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.454082][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.561156][ T3365] bond0 (unregistering): Released all slaves [ 1146.840687][ T37] audit: type=1800 audit(1700007347.830:168): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1383" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1149.515861][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.600924][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.646563][ T3365] bond0 (unregistering): Released all slaves [ 1149.777623][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1150.396334][ T3363] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1153.581174][T12785] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1154.779019][ T37] audit: type=1800 audit(1700007355.760:169): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1397" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1154.903153][ T3366] nvme nvme0: failed to connect socket: -111 [ 1154.935165][ T3366] nvme nvme0: Failed reconnect attempt 9/60 [ 1154.935190][ T3366] nvme nvme0: Reconnecting in 10 seconds... [ 1155.003300][ T3365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1155.094952][ T3365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1155.140620][ T3365] bond0 (unregistering): Released all slaves [ 1155.577760][T11971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1155.578481][T11971] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1157.888301][ T37] audit: type=1800 audit(1700007358.890:170): pid=12812 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1400" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1160.350570][ T37] audit: type=1800 audit(1700007361.350:171): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1403" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1160.632435][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1161.538247][ T3368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1161.884936][T12027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1166.043564][ T5259] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1166.070207][ T3370] nvme nvme0: failed to connect socket: -111 [ 1166.070521][ T3370] nvme nvme0: Failed reconnect attempt 10/60 [ 1166.070540][ T3370] nvme nvme0: Reconnecting in 10 seconds... [ 1167.688213][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1170.284386][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1170.738222][ T37] audit: type=1800 audit(1700007371.740:172): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1417" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1172.411237][ T37] audit: type=1800 audit(1700007373.390:173): pid=12902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1420" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1173.732475][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1176.115064][ T3366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1176.664391][ T7919] nvme nvme0: failed to connect socket: -111 [ 1176.683617][ T7919] nvme nvme0: Failed reconnect attempt 11/60 [ 1176.683641][ T7919] nvme nvme0: Reconnecting in 10 seconds... [ 1177.501360][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.506615][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.520724][ T3364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1180.303568][T12027] Bluetooth: hci10: link tx timeout [ 1181.193608][ T3359] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1181.419527][ T37] audit: type=1800 audit(1700007382.420:174): pid=12960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1438" name=08 dev="sda1" ino=2069 res=0 errno=0 [ 1182.163808][T12027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.142391][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1184.191723][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1184.197911][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1184.214328][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1184.217694][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1185.202971][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1185.730599][T12027] Bluetooth: hci10: link tx timeout [ 1186.469063][ T3367] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1186.888551][ T3360] nvme nvme0: failed to connect socket: -111 [ 1186.888857][ T3360] nvme nvme0: Failed reconnect attempt 12/60 [ 1186.888875][ T3360] nvme nvme0: Reconnecting in 10 seconds... [ 1187.158405][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1187.232457][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1187.251143][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1187.261265][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1187.267431][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1187.356280][ T60] Bluetooth: hci1: command tx timeout [ 1187.598878][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1187.669293][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1187.983540][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1188.522007][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1188.547544][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1189.432338][T12027] Bluetooth: hci6: command tx timeout [ 1189.440701][ T60] Bluetooth: hci1: command tx timeout [ 1190.712409][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1191.164523][ T60] Bluetooth: hci7: command tx timeout [ 1191.522414][ T60] Bluetooth: hci1: command tx timeout [ 1191.522522][ T60] Bluetooth: hci6: command tx timeout [ 1192.111893][ T7919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1193.596433][ T60] Bluetooth: hci7: command tx timeout [ 1193.596479][ T60] Bluetooth: hci10: link tx timeout [ 1193.601608][T12030] Bluetooth: hci6: command tx timeout [ 1194.499225][T12030] Bluetooth: hci1: command tx timeout [ 1195.675339][T12030] Bluetooth: hci6: command tx timeout [ 1195.675372][T12030] Bluetooth: hci5: command 0x0406 tx timeout [ 1195.676690][T12030] Bluetooth: hci7: command tx timeout [ 1195.853351][ T3365] hsr_slave_0: left promiscuous mode [ 1195.963976][ T3365] hsr_slave_1: left promiscuous mode [ 1195.965253][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.109814][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.303286][ T3365] hsr_slave_0: left promiscuous mode [ 1196.341796][ T3365] hsr_slave_1: left promiscuous mode [ 1196.342972][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.432429][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1196.472000][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1196.667914][ T3365] hsr_slave_0: left promiscuous mode [ 1196.701643][ T3365] hsr_slave_1: left promiscuous mode [ 1196.702974][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1196.703013][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.752825][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.752854][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.149101][ T3368] nvme nvme0: failed to connect socket: -111 [ 1197.149437][ T3368] nvme nvme0: Failed reconnect attempt 13/60 [ 1197.149457][ T3368] nvme nvme0: Reconnecting in 10 seconds... [ 1197.171646][ T3365] hsr_slave_0: left promiscuous mode [ 1197.211660][ T3365] hsr_slave_1: left promiscuous mode [ 1197.348533][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.386729][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.613661][ T60] Bluetooth: hci10: link tx timeout [ 1197.928833][ T3370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1197.947337][ T60] Bluetooth: hci7: command tx timeout [ 1197.961172][ T3365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.961199][ T3365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1198.949573][ T3365] veth1_macvtap: left promiscuous mode [ 1198.949688][ T3365] veth0_macvtap: left promiscuous mode [ 1198.949968][ T3365] veth1_vlan: left promiscuous mode [ 1198.950137][ T3365] veth0_vlan: left promiscuous mode [ 1199.102194][ T3365] veth1_macvtap: left promiscuous mode [ 1199.102259][ T3365] veth0_macvtap: left promiscuous mode [ 1199.102402][ T3365] veth1_vlan: left promiscuous mode [ 1199.102505][ T3365] veth0_vlan: left promiscuous mode [ 1201.601799][T12027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1202.249298][ T3368] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1203.155819][ T3365] team0 (unregistering): Port device team_slave_1 removed [ 1204.682914][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1204.706478][ T3365] team0 (unregistering): Port device team_slave_0 removed [ 1206.343713][ T3365] team0 (unregistering): Port device team_slave_1 removed [ 1206.407128][ T3365] team0 (unregistering): Port device team_slave_0 removed [ 1207.538772][ T3360] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1207.593838][T13064] nvme nvme0: failed to connect socket: -111 [ 1207.594173][T13064] nvme nvme0: Failed reconnect attempt 14/60 [ 1207.594192][T13064] nvme nvme0: Reconnecting in 10 seconds... [ 1210.043503][T13064] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1210.508071][ T3365] team0 (unregistering): Port device team_slave_1 removed [ 1210.733918][ T3365] team0 (unregistering): Port device team_slave_0 removed [ 1213.137867][ T1123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1213.751761][ T38] INFO: task udevd:12271 blocked for more than 144 seconds. [ 1213.751791][ T38] Tainted: G L syzkaller #0 [ 1213.751803][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1213.751813][ T38] task:udevd state:D stack:27504 pid:12271 tgid:12271 ppid:4964 task_flags:0x400140 flags:0x00080000 [ 1213.751874][ T38] Call Trace: [ 1213.751881][ T38] [ 1213.751896][ T38] __schedule+0x16d9/0x5700 [ 1213.751935][ T38] ? tomoyo_check_open_permission+0x32c/0x470 [ 1213.751982][ T38] ? __pfx___schedule+0x10/0x10 [ 1213.752019][ T38] rt_mutex_schedule+0x76/0xf0 [ 1213.752045][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1213.752083][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1213.752113][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1213.752144][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1213.752181][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1213.752225][ T38] ? bdev_open+0xde/0xd00 [ 1213.752252][ T38] ? bdev_open+0xde/0xd00 [ 1213.752271][ T38] mutex_lock_nested+0x168/0x1d0 [ 1213.752305][ T38] bdev_open+0xde/0xd00 [ 1213.752338][ T38] blkdev_open+0x47f/0x630 [ 1213.752364][ T38] ? __pfx_blkdev_open+0x10/0x10 [ 1213.752387][ T38] do_dentry_open+0x849/0x1420 [ 1213.752421][ T38] vfs_open+0x3b/0x350 [ 1213.752438][ T38] ? path_openat+0x142d/0x1d60 [ 1213.752467][ T38] path_openat+0x1448/0x1d60 [ 1213.752514][ T38] do_file_open+0x23e/0x4a0 [ 1213.752547][ T38] ? __pfx_do_file_open+0x10/0x10 [ 1213.752604][ T38] ? alloc_fd+0x654/0x6d0 [ 1213.752638][ T38] do_sys_openat2+0x115/0x200 [ 1213.752662][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 1213.752684][ T38] ? exc_page_fault+0x6a/0xc0 [ 1213.752711][ T38] ? do_user_addr_fault+0xc4c/0x1340 [ 1213.752737][ T38] __x64_sys_openat+0x138/0x170 [ 1213.752764][ T38] do_syscall_64+0x166/0x520 [ 1213.752786][ T38] ? trace_irq_disable+0x3b/0x140 [ 1213.752811][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.752832][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1213.752857][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.752879][ T38] RIP: 0033:0x7f8237aa3407 [ 1213.752897][ T38] RSP: 002b:00007ffc87010750 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1213.752917][ T38] RAX: ffffffffffffffda RBX: 00007f82379b5880 RCX: 00007f8237aa3407 [ 1213.752933][ T38] RDX: 0000000000080000 RSI: 000055f6025e2de0 RDI: ffffffffffffff9c [ 1213.752948][ T38] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1213.752960][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 000055f601f0595f [ 1213.752973][ T38] R13: 000055f601f16660 R14: 0000000000000000 R15: 00000000ffffffff [ 1213.753005][ T38] [ 1213.753078][ T38] [ 1213.753078][ T38] Showing all locks held in the system: [ 1213.753094][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1213.753109][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1213.753181][ T38] locks held by kworker/u8:14/3358: 3, on CPU#0: [ 1213.753195][ T38] #0: ffff888032fa3938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.753250][ T38] #1: ffffc9000ec3fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.753306][ T38] #2: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1213.753360][ T38] locks held by kworker/u8:17/3361: 3, on CPU#1: [ 1213.753374][ T38] #0: ffff888026ab1938 ((wq_completion)nvme-wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.753428][ T38] #1: ffffc9000ec9fc40 ((work_completion)(&head->partition_scan_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.753483][ T38] #2: ffff88805fc924c8 (&disk->open_mutex){+.+.}-{4:4}, at: nvme_partition_scan_work+0x97/0xf0 [ 1213.753539][ T38] locks held by kworker/u8:21/3365: 4, on CPU#1: [ 1213.753554][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.753614][ T38] #1: ffffc9000eeafc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.753668][ T38] #2: ffffffff8f5c7240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1213.753717][ T38] #3: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 1213.753770][ T38] locks held by dhcpcd/5259: 2, on CPU#0: [ 1213.753785][ T38] #0: ffff88803ff86928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 1213.753838][ T38] #1: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1213.753887][ T38] locks held by getty/5359: 2, on CPU#1: [ 1213.753901][ T38] #0: ffff8880260cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1213.753953][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1213.754019][ T38] locks held by kworker/u8:2/7919: 3, on CPU#0: [ 1213.754034][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.754088][ T38] #1: ffffc90004ea7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1213.754142][ T38] #2: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1213.754199][ T38] locks held by udevd/12271: 1, on CPU#1: [ 1213.754213][ T38] #0: ffff88805fc924c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd00 [ 1213.754262][ T38] locks held by syz-executor/12319: 7, on CPU#1: [ 1213.754277][ T38] #0: ffff888035f88510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1213.754334][ T38] #1: ffff88805fb21078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1213.754383][ T38] #2: ffff888029674698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1213.754440][ T38] #3: ffffffff8ee45df8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1213.754498][ T38] #4: ffff888033df5160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1213.754549][ T38] #5: ffff88801dff8310 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1213.754604][ T38] #6: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1213.754660][ T38] locks held by syz-executor/12629: 1, on CPU#1: [ 1213.754675][ T38] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1213.754730][ T38] locks held by syz-executor/12644: 1, on CPU#1: [ 1213.754744][ T38] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1213.754800][ T38] locks held by syz-executor/12974: 1, on CPU#0: [ 1213.754814][ T38] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1213.754866][ T38] locks held by syz-executor/12993: 1, on CPU#1: [ 1213.754881][ T38] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1213.754932][ T38] locks held by syz-executor/12998: 1, on CPU#1: [ 1213.754946][ T38] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 1213.754998][ T38] locks held by syz.9.1468/13107: 5, last CPU#0: [ 1213.755012][ T38] #0: ffff8880661fb7b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1213.755066][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1213.755117][ T38] #2: ffff888034d00118 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1213.755174][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1213.755229][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1213.755284][ T38] locks held by syz.8.1470/13112: 5, last CPU#0: [ 1213.755299][ T38] #0: ffff88805fa483b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1213.755352][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 1213.755403][ T38] #2: ffff888034ecb298 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 1213.755461][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1213.755515][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 1213.755570][ T38] [ 1213.755575][ T38] ============================================= [ 1213.755575][ T38] [ 1213.755591][ T38] NMI backtrace for cpu 1 [ 1213.755608][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1213.755635][ T38] Tainted: [L]=SOFTLOCKUP [ 1213.755642][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1213.755653][ T38] Call Trace: [ 1213.755661][ T38] [ 1213.755669][ T38] dump_stack_lvl+0xe8/0x150 [ 1213.755697][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1213.755725][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1213.755748][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1213.755779][ T38] sys_info+0x135/0x170 [ 1213.755804][ T38] watchdog+0xfd7/0x1030 [ 1213.755838][ T38] ? watchdog+0x1c7/0x1030 [ 1213.755870][ T38] kthread+0x38b/0x470 [ 1213.755890][ T38] ? __pfx_watchdog+0x10/0x10 [ 1213.755913][ T38] ? __pfx_kthread+0x10/0x10 [ 1213.755934][ T38] ret_from_fork+0x514/0xb70 [ 1213.755957][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1213.755977][ T38] ? __switch_to+0xc89/0x1420 [ 1213.756008][ T38] ? __pfx_kthread+0x10/0x10 [ 1213.756029][ T38] ret_from_fork_asm+0x1a/0x30 [ 1213.756063][ T38] [ 1213.756072][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1213.756102][ C0] NMI backtrace for cpu 0 [ 1213.756119][ C0] CPU: 0 UID: 0 PID: 13112 Comm: syz.8.1470 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1213.756142][ C0] Tainted: [L]=SOFTLOCKUP [ 1213.756148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1213.756158][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2b/0x80 [ 1213.756181][ C0] Code: 0f 1e fa 48 8b 04 24 65 48 8b 0d d8 07 df 10 65 48 8b 15 d8 07 df 10 89 d7 81 e7 00 00 00 ff be 00 01 00 00 23 b1 fc 0b 00 00 <09> f7 74 1d 85 f6 74 45 81 fa ff ff ff 0f 77 3d 81 e2 00 00 00 0f [ 1213.756196][ C0] RSP: 0018:ffffc90004a77348 EFLAGS: 00000246 [ 1213.756211][ C0] RAX: ffffffff823a0487 RBX: 0000000000000001 RCX: ffff888031871f40 [ 1213.756224][ C0] RDX: 8000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1213.756235][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1213.756246][ C0] R10: dffffc0000000000 R11: fffff9400026d771 R12: ffffea000136bbb0 [ 1213.756259][ C0] R13: dffffc0000000000 R14: ffffffff823a0444 R15: ffffea000136bb80 [ 1213.756272][ C0] FS: 0000000000000000(0000) GS:ffff888125bc2000(0000) knlGS:0000000000000000 [ 1213.756286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1213.756298][ C0] CR2: 00007fdc73004ff8 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 1213.756314][ C0] Call Trace: [ 1213.756320][ C0] [ 1213.756326][ C0] page_table_check_clear+0x167/0x500 [ 1213.756352][ C0] ? vm_normal_page+0xf9/0x210 [ 1213.756371][ C0] __zap_vma_range+0x34c6/0x4a60 [ 1213.756404][ C0] ? mas_next_node+0xbd7/0xe50 [ 1213.756436][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1213.756459][ C0] ? mas_find+0x6d9/0xcb0 [ 1213.756479][ C0] unmap_vmas+0x390/0x550 [ 1213.756500][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1213.756515][ C0] ? mas_next_slot+0xc94/0xd70 [ 1213.756547][ C0] exit_mmap+0x293/0x9f0 [ 1213.756569][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1213.756589][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1213.756614][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1213.756639][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1213.756666][ C0] ? uprobe_clear_state+0x2a7/0x3e0 [ 1213.756688][ C0] __mmput+0xcb/0x3d0 [ 1213.756709][ C0] exit_mm+0x18e/0x240 [ 1213.756727][ C0] do_exit+0x6cd/0x2360 [ 1213.756744][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1213.756765][ C0] ? __pfx_do_exit+0x10/0x10 [ 1213.756782][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1213.756808][ C0] ? rt_spin_unlock+0x159/0x200 [ 1213.756833][ C0] do_group_exit+0x22d/0x2f0 [ 1213.756849][ C0] ? rt_spin_unlock+0x165/0x200 [ 1213.756873][ C0] get_signal+0x121b/0x12c0 [ 1213.756905][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 1213.756931][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1213.756958][ C0] ? __x64_sys_recvmmsg+0x198/0x250 [ 1213.756984][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 1213.757006][ C0] ? rcu_is_watching+0x16/0xb0 [ 1213.757032][ C0] do_syscall_64+0x328/0x520 [ 1213.757051][ C0] ? trace_irq_disable+0x3b/0x140 [ 1213.757072][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.757094][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1213.757113][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.757129][ C0] RIP: 0033:0x7fdc74dce199 [ 1213.757144][ C0] Code: Unable to access opcode bytes at 0x7fdc74dce16f. [ 1213.757152][ C0] RSP: 002b:00007fdc73005028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1213.757169][ C0] RAX: 0000000000010106 RBX: 00007fdc75056090 RCX: 00007fdc74dce199 [ 1213.757181][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1213.757192][ C0] RBP: 00007fdc74e65888 R08: 0000000000000000 R09: 0000000000000000 [ 1213.757203][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1213.757214][ C0] R13: 00007fdc75056128 R14: 00007fdc75056090 R15: 00007ffe70c77288 [ 1213.757236][ C0] [ 1213.758266][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1215.022704][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1215.033891][ T38] Tainted: [L]=SOFTLOCKUP [ 1215.038204][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1215.048241][ T38] Call Trace: [ 1215.051512][ T38] [ 1215.054547][ T38] vpanic+0x56d/0xa60 [ 1215.058519][ T38] ? __pfx___schedule+0x10/0x10 [ 1215.063368][ T38] ? __pfx_vpanic+0x10/0x10 [ 1215.067885][ T38] panic+0xc5/0xd0 [ 1215.071605][ T38] ? __pfx_panic+0x10/0x10 [ 1215.076014][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1215.081464][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1215.086835][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1215.092995][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1215.099173][ T38] watchdog+0x1030/0x1030 [ 1215.103507][ T38] ? watchdog+0x1c7/0x1030 [ 1215.107922][ T38] kthread+0x38b/0x470 [ 1215.111996][ T38] ? __pfx_watchdog+0x10/0x10 [ 1215.116666][ T38] ? __pfx_kthread+0x10/0x10 [ 1215.121345][ T38] ret_from_fork+0x514/0xb70 [ 1215.125951][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1215.131087][ T38] ? __switch_to+0xc89/0x1420 [ 1215.135766][ T38] ? __pfx_kthread+0x10/0x10 [ 1215.140348][ T38] ret_from_fork_asm+0x1a/0x30 [ 1215.145127][ T38] [ 1215.148399][ T38] Kernel Offset: disabled [ 1215.152714][ T38] Rebooting in 86400 seconds..