last executing test programs: 6m37.429107225s ago: executing program 4 (id=155): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0xb) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20004008, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r4, 0x1, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89, 0x0, @private=0xa0100ff, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "0404a6"}, {0x0, 0x12, "960605390006fff5800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@rand_addr=0x64010101, @private=0xa010100, @multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @cipso={0x86, 0x4a, 0x0, [{0x0, 0x12, "08051a5f89f58e0820f284210200b7c8"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x2}]}]}}, "a815a23d"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x7, 0x98, &(0x7f0000000480)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x2) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6m35.874440337s ago: executing program 4 (id=157): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2"}, 0xe3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 6m28.488331419s ago: executing program 4 (id=164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0)=[{0x0}, {&(0x7f0000000740)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/159, 0x9f}, {0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8d76dabc169637c3d08377112e76b19a448253f417cf1f6ed2478401417aeb84209879cb171e735bf6647b762be14db8f6c8c797a7faed648073a442b2d3f6c3e49c71be23e1829f17c71fe8b30bd8fdf031"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) readahead(r5, 0x8004, 0x80000000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) unshare(0x22020400) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) syz_open_pts(r4, 0x8182) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6m21.290588963s ago: executing program 4 (id=172): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000180)='A') preadv(r1, &(0x7f00000033c0)=[{0x0}, {&(0x7f0000000740)=""/4096, 0x1000}, {0x0}, {&(0x7f00000017c0)=""/159, 0x9f}, {0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x6, 0x9, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x802, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x4, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0x10, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x80001, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x9], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x8000, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x1, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff5, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0xc7e9, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0) write$binfmt_aout(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="8d76dabc169637c3d08377112e76b19a448253f417cf1f6ed2478401417aeb84209879cb171e735bf6647b762be14db8f6c8c797a7faed648073a442b2d3f6c3e49c71be23e1829f17c71fe8b30bd8fdf031"], 0xff2e) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) readahead(r5, 0x8004, 0x80000000) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)) unshare(0x22020400) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x0, 0x7fffffff}]}) syz_open_pts(r4, 0x8182) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6m17.585127537s ago: executing program 4 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x40, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r4 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r4, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r4, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 6m15.026430484s ago: executing program 4 (id=180): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="7379730000009419c20882310e8f72f225164f9e"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) unshare(0x64000600) 6m3.579389679s ago: executing program 0 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="6802000000050108000000000000000005000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) 6m3.03130533s ago: executing program 0 (id=196): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="6802000000050108000000000000000005000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r6, 0x7}, 0x8) 6m1.944874155s ago: executing program 0 (id=197): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) mkdir(&(0x7f00000004c0)='./file2\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file2\x00', &(0x7f0000000580)='nfs\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=3,proto=udp\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000003700)=@newchain={0x40, 0x64, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xc, 0x9}, {0x5, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0xb}}, @TCA_RATE={0x6, 0x5, {0xd4, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/16, @ANYRES32, @ANYRES32, @ANYBLOB], 0x50) r4 = semget(0x3, 0x4, 0x69c) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c0002800500"], 0xe4}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x89fc, &(0x7f0000000340)={'bond0\x00', @random="00009e0c1100"}) semop(r4, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r4, &(0x7f0000000340)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) 6m0.485255522s ago: executing program 0 (id=199): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eebad5ff29c160e2"}, 0xe3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 5m58.773452948s ago: executing program 32 (id=180): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fsopen(&(0x7f0000000300)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='source\x00', &(0x7f0000000380)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='mount_timeout\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, &(0x7f0000001980), 0x0}) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="7379730000009419c20882310e8f72f225164f9e"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) unshare(0x64000600) 5m58.608085588s ago: executing program 0 (id=202): ioctl$DVB_DEMUX_DMX_STOP(0xffffffffffffffff, 0x6f2a) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x2c8f, 0x204200) ioctl$RTC_WIE_OFF(r0, 0x7010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) setns(0xc9, 0x0) r5 = socket(0x2a, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0x2a, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, 0x1c) getpeername$netlink(r5, 0x0, &(0x7f0000000080)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x2, 0x1}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5m56.151057791s ago: executing program 0 (id=203): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="6802000000050108000000000000000005000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r6, 0x7}, 0x8) 5m39.045667978s ago: executing program 33 (id=203): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_capability(&(0x7f00000000c0)='./sys\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="6802000000050108000000000000000005000002540201"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="300000000000000084000000"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r6, 0x7}, 0x8) 2m1.359425269s ago: executing program 3 (id=436): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$mtd(&(0x7f00000001c0), 0x2, 0x111100) ioctl$MEMWRITE(r2, 0xc0304d18, &(0x7f00000005c0)={0x0, 0x0, 0x52, 0x0, &(0x7f0000000540)="bc5f6bc96c9725cb922d8f2a5e8391f8d7022579174134fce9b4342523b3b71a222cc8379702a1fc7a36ffa7d1c887e1c69259b0d4e55ef7ac59ac820380de9189450e1b590c456372faf07154f1fcdf242a", 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000240)={0xfe, 0x0, 0x9, 0x1, 0x5}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000009ce4186ca83bdeef8a1180001009b298309650b65610300000000001000010000"], 0x24, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000680)) splice(r6, 0x0, r7, &(0x7f00000002c0)=0x1, 0x10, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x81, @mcast1, 0x78}}}, 0x118) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x3, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x5, 0x1}}}}}}}}, 0x0) 1m59.047646999s ago: executing program 3 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1000000000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=@filename='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='virtiofs\x00', 0x8000, &(0x7f0000000400)=']\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) keyctl$setperm(0x5, 0x0, 0x200a0204) memfd_create(&(0x7f0000000000)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\x1c\xe4\xd8\xb58\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\x00\b\x00\x00X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31\xb0\x87O\xc3\xa3AW\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]~\xfc1\xe5w\"\xa3\x8d\xe7\xd4x\xb3\xfa(\xc9\xc2bb\xb1\xa8\xe1\xc2\xec\xca\x7f\xe1\x1e\xb9\xd4\x80-6L\x91\x9b\xad\x85`\xf2+\xfbN+\x0e\xa6\xc4M\xda\xfc\xa1gZ)STB\xd1\xd1\xf1', 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@my=0x1, 0x2}, @local, 0x0, 0x2000000, 0x5e, 0x200000000000, 0x100000000000006}) 1m52.486718008s ago: executing program 3 (id=444): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r2, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r4 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x402, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1e0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x10, "8f7fd8cc9d9eb7c9573d1c1445921556cce3905cf2d794de0891f7841de8"}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001400)={'pcl816\x00', [0x100, 0xd, 0xd0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x8, 0x9, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x0, 0x0, 0x8, 0xee9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) 1m40.832820836s ago: executing program 3 (id=452): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f72c1662b5f8eeba"}, 0xdd, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 1m37.45138476s ago: executing program 3 (id=456): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) unshare(0x22020400) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2cd250f9f7e0adc19ad55a14d5f45c532b45cdce13d8483c405f6b42652d195b12d8edbcc428c0f35f7"}, 0xd6, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmat(0x0, &(0x7f00007d0000/0x2000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 1m34.660227963s ago: executing program 3 (id=459): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7bc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000240)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4044004, &(0x7f0000000040)={0x1d, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea8, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m19.302975739s ago: executing program 34 (id=459): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7bc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000240)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4044004, &(0x7f0000000040)={0x1d, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea8, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 16.4221489s ago: executing program 2 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0xc6b6f10a77087ab1, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x62) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_AG_GEOMETRY(r4, 0xc080583d, &(0x7f00000000c0)={0x80, 0x6, 0x7, 0x40, 0x6d22, 0x1ff, 0x3, 0x8001}) socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000005c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340), 0x42101, 0x0) 13.173366731s ago: executing program 2 (id=517): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x24020400) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mount(0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) 9.073537823s ago: executing program 1 (id=518): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xff, 0x0, 0x2, 0x9e93, 0x17, "9006a2c205000000800000000d080000000056"}) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) msgsnd(0x0, &(0x7f0000000500)={0x0, "2e890199bd0471af35c84564832b05682fd8026c4e5e2806887c0cada121a9a03024b474b71636a9ea955622b2bd0d7bb8ab4f8f6daaebbf5b035c543c1fc5b71fdac7757e4fdf3fe19fc3369966dd81db3bfb2731d71f978e200e3a6c4429d7dba51786bf0d8b6f94168ca54891a196c2920eeffae0097ac2e253f0d747dabc2971ae4ef7a9a34941c57788d61e22b4dc2a568a1a4708e587ddb22330ef0ee0fbe157ddd2"}, 0xad, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000100)={0x40, 0x7d, 0x6, 0xb, 0x81, 0x81}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000"]) 8.906003114s ago: executing program 2 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, 0x0) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 6.889613121s ago: executing program 2 (id=520): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) prlimit64(r2, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r4 = socket(0x10, 0x2, 0x0) timerfd_create(0x8, 0x0) clock_adjtime(0x0, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x40000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x2000800, 0x0, 0x0, 0x59, 0x7, 0x2000}) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) openat$dlm_monitor(0xffffff9c, &(0x7f0000000380), 0x402, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1e0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x36}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x10, "8f7fd8cc9d9eb7c9573d1c1445921556cce3905cf2d794de0891f7841de8"}}}, {{@uncond, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001400)={'pcl816\x00', [0x100, 0xd, 0xd0, 0x2, 0x1, 0x100, 0x2001, 0x20000000, 0x8, 0x9, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x0, 0x0, 0x8, 0xee9, 0x401, 0x7, 0x2, 0x4, 0x9, 0x3, 0x7, 0x7, 0x0, 0x7, 0x7, 0x8]}) 6.404911923s ago: executing program 1 (id=521): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$mtd(&(0x7f00000001c0), 0x2, 0x111100) ioctl$MEMWRITE(r2, 0xc0304d18, &(0x7f00000005c0)={0x0, 0x0, 0x52, 0x0, &(0x7f0000000540)="bc5f6bc96c9725cb922d8f2a5e8391f8d7022579174134fce9b4342523b3b71a222cc8379702a1fc7a36ffa7d1c887e1c69259b0d4e55ef7ac59ac820380de9189450e1b590c456372faf07154f1fcdf242a", 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000240)={0xfe, 0x0, 0x9, 0x1, 0x5}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000009ce4186ca83bdeef8a1180001009b298309650b65610300000000001000010000"], 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000680)) splice(r6, 0x0, r7, &(0x7f00000002c0)=0x1, 0x10, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x81, @mcast1, 0x78}}}, 0x118) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x3, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x5, 0x1}}}}}}}}, 0x0) 3.879791573s ago: executing program 1 (id=522): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') lseek(r0, 0x80000002, 0x0) 3.777956709s ago: executing program 1 (id=523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0x300, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xc, 0xb}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x2, 0x7, 0x45, 0x10, 0xfe, 0x2, 0x9, 0xc, 0xc, 0x5, 0xf, 0x5, 0xb, 0xf, 0xc, 0xb], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x7, 0x8, 0x2a, 0x3, 0x134e, 0xfffc, 0x6, 0x8, 0x8ba], [0x7, 0x9, 0x3, 0x0, 0x3, 0x0, 0x5, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000045}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c1e0309000800a000", 0x33a) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r9}, 0x20) syz_open_dev$sg(0x0, 0x0, 0x8002) 3.542415981s ago: executing program 2 (id=524): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7bc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000240)="e02a7bb6e7da72697b2cdbbcff42a02b238bb691348acb814839e600969dac7c83d004000000e536bc54e8ba122e63c7063ab3697ca58e7d", 0x38, 0x4044004, &(0x7f0000000040)={0x1d, 0x4e22, 0xd000000, @dev={0xfe, 0x80, '\x00', 0xa}, 0x36}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000280), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea8, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.784719766s ago: executing program 1 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x0, 0x82a, 0x0, 0x81, 0x7}) io_setup(0x2, 0x0) connect(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44004) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x40010120) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1e02000004"], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000000100), 0x8ec02, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x38, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x3, @remote, 0x40}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) 265.763007ms ago: executing program 2 (id=526): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$mtd(&(0x7f00000001c0), 0x2, 0x111100) ioctl$MEMWRITE(r2, 0xc0304d18, &(0x7f00000005c0)={0x0, 0x0, 0x52, 0x0, &(0x7f0000000540)="bc5f6bc96c9725cb922d8f2a5e8391f8d7022579174134fce9b4342523b3b71a222cc8379702a1fc7a36ffa7d1c887e1c69259b0d4e55ef7ac59ac820380de9189450e1b590c456372faf07154f1fcdf242a", 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mkdirat(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x40045702, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000240)={0xfe, 0x0, 0x9, 0x1, 0x5}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000009ce4186ca83bdeef8a1180001009b298309650b65610300000000001000010000"], 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000680)) splice(r6, 0x0, r7, &(0x7f00000002c0)=0x1, 0x10, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r5, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x81, @mcast1, 0x78}}}, 0x118) syz_emit_ethernet(0x66, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x1, 0x58, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x3, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x5, 0x1}}}}}}}}, 0x0) 0s ago: executing program 1 (id=527): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 75.343525][ T5578] cgroup: Unknown subsys name 'net' [ 75.604757][ T5578] cgroup: Unknown subsys name 'cpuset' [ 75.658995][ T5578] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.298692][ T5578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.841009][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.847751][ T5596] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.885716][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.906131][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.913176][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.924682][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.927508][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.929664][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.933983][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.934108][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.944999][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.948399][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.955685][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.971915][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.976707][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.976861][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.981120][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.981361][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.985084][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.985849][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.990193][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.990707][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.992142][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.992904][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.993808][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.032513][ T61] Bluetooth: hci3: command tx timeout [ 82.108646][ T61] Bluetooth: hci2: command tx timeout [ 82.108829][ T61] Bluetooth: hci1: command tx timeout [ 82.108911][ T61] Bluetooth: hci4: command tx timeout [ 82.190045][ T4906] Bluetooth: hci0: command tx timeout [ 82.494440][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.495395][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.495516][ T5589] bridge_slave_0: entered allmulticast mode [ 82.497641][ T5589] bridge_slave_0: entered promiscuous mode [ 82.572272][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.572376][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.572841][ T5589] bridge_slave_1: entered allmulticast mode [ 82.575144][ T5589] bridge_slave_1: entered promiscuous mode [ 82.637138][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.637239][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.637505][ T5590] bridge_slave_0: entered allmulticast mode [ 82.639452][ T5590] bridge_slave_0: entered promiscuous mode [ 82.668806][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.669159][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.669548][ T5591] bridge_slave_0: entered allmulticast mode [ 82.671649][ T5591] bridge_slave_0: entered promiscuous mode [ 82.672854][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.673019][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.673157][ T5592] bridge_slave_0: entered allmulticast mode [ 82.674873][ T5592] bridge_slave_0: entered promiscuous mode [ 82.705119][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.705232][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.705369][ T5590] bridge_slave_1: entered allmulticast mode [ 82.712092][ T5590] bridge_slave_1: entered promiscuous mode [ 82.741573][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.741688][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.742154][ T5591] bridge_slave_1: entered allmulticast mode [ 82.744555][ T5591] bridge_slave_1: entered promiscuous mode [ 82.746006][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.746175][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.746643][ T5592] bridge_slave_1: entered allmulticast mode [ 82.750848][ T5592] bridge_slave_1: entered promiscuous mode [ 82.754361][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.754471][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.754984][ T5593] bridge_slave_0: entered allmulticast mode [ 82.757741][ T5593] bridge_slave_0: entered promiscuous mode [ 82.794000][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.835075][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.835201][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.835342][ T5593] bridge_slave_1: entered allmulticast mode [ 82.839399][ T5593] bridge_slave_1: entered promiscuous mode [ 82.865121][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.966681][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.986544][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.994358][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.015266][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.034431][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.036493][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.040520][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.063139][ T5589] team0: Port device team_slave_0 added [ 83.095584][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.117811][ T5589] team0: Port device team_slave_1 added [ 83.154357][ T5590] team0: Port device team_slave_0 added [ 83.171508][ T5591] team0: Port device team_slave_0 added [ 83.173707][ T5592] team0: Port device team_slave_0 added [ 83.197647][ T5590] team0: Port device team_slave_1 added [ 83.214418][ T5591] team0: Port device team_slave_1 added [ 83.215958][ T5592] team0: Port device team_slave_1 added [ 83.217882][ T5593] team0: Port device team_slave_0 added [ 83.243885][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.243898][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.243910][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.284453][ T5593] team0: Port device team_slave_1 added [ 83.303639][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.303656][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.303680][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.380217][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.380228][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.380241][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.389612][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.389628][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.389651][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.394889][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.394905][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.394928][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.417575][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.417593][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.417616][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.422917][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.422954][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.422978][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.425004][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.425017][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.425041][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.429369][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.429382][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.429404][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.479210][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.479228][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.479267][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.622721][ T5589] hsr_slave_0: entered promiscuous mode [ 83.624188][ T5589] hsr_slave_1: entered promiscuous mode [ 83.718459][ T5590] hsr_slave_0: entered promiscuous mode [ 83.719776][ T5590] hsr_slave_1: entered promiscuous mode [ 83.720814][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 83.720930][ T5590] Cannot create hsr debugfs directory [ 83.732005][ T5592] hsr_slave_0: entered promiscuous mode [ 83.733215][ T5592] hsr_slave_1: entered promiscuous mode [ 83.734059][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 83.734081][ T5592] Cannot create hsr debugfs directory [ 83.749721][ T5591] hsr_slave_0: entered promiscuous mode [ 83.750963][ T5591] hsr_slave_1: entered promiscuous mode [ 83.751924][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 83.751946][ T5591] Cannot create hsr debugfs directory [ 83.808357][ T5593] hsr_slave_0: entered promiscuous mode [ 83.810551][ T5593] hsr_slave_1: entered promiscuous mode [ 83.811490][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 83.811527][ T5593] Cannot create hsr debugfs directory [ 84.108891][ T4906] Bluetooth: hci3: command tx timeout [ 84.188772][ T61] Bluetooth: hci1: command tx timeout [ 84.188808][ T61] Bluetooth: hci2: command tx timeout [ 84.188941][ T4906] Bluetooth: hci4: command tx timeout [ 84.268869][ T4906] Bluetooth: hci0: command tx timeout [ 85.084697][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.118188][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.132432][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.172707][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.177029][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.214635][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.235214][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.273189][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.418493][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.441713][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.446461][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.490874][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.495485][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.524559][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.547802][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.586337][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.701411][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.744116][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.747885][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.770932][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.808629][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.831517][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.836739][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.882589][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.020441][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.073614][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.086182][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.113291][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.126039][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.151540][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.177988][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.188607][ T4906] Bluetooth: hci3: command tx timeout [ 86.212274][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.227837][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.269607][ T4906] Bluetooth: hci4: command tx timeout [ 86.269641][ T4906] Bluetooth: hci2: command tx timeout [ 86.269661][ T4906] Bluetooth: hci1: command tx timeout [ 86.349313][ T5598] Bluetooth: hci0: command tx timeout [ 86.355503][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.391274][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.401303][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.405842][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.451362][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.455160][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.486802][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.499129][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.541459][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.561360][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.562142][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.633692][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.633838][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.712252][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.780343][ T9] cfg80211: failed to load regulatory.db [ 86.832455][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.851085][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.881511][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.881645][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.932127][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.932228][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.963555][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.056193][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.056322][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.099266][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.117583][ T1356] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.117657][ T1356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.261920][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.290761][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.308157][ T1356] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.308233][ T1356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.372280][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.372406][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.451158][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.529572][ T1207] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.533867][ T1207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.616195][ T1207] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.616328][ T1207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.014369][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.269361][ T5598] Bluetooth: hci3: command tx timeout [ 88.349066][ T5598] Bluetooth: hci1: command tx timeout [ 88.349101][ T5598] Bluetooth: hci2: command tx timeout [ 88.349122][ T5598] Bluetooth: hci4: command tx timeout [ 88.428654][ T4906] Bluetooth: hci0: command tx timeout [ 88.487220][ T5589] veth0_vlan: entered promiscuous mode [ 88.563032][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.587905][ T5589] veth1_vlan: entered promiscuous mode [ 88.747712][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.858913][ T5589] veth0_macvtap: entered promiscuous mode [ 88.980801][ T5589] veth1_macvtap: entered promiscuous mode [ 89.032880][ T5591] veth0_vlan: entered promiscuous mode [ 89.071617][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.122379][ T5591] veth1_vlan: entered promiscuous mode [ 89.134121][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.185035][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.215244][ T5592] veth0_vlan: entered promiscuous mode [ 89.237572][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.300643][ T5592] veth1_vlan: entered promiscuous mode [ 89.520488][ T5591] veth0_macvtap: entered promiscuous mode [ 89.647930][ T5591] veth1_macvtap: entered promiscuous mode [ 89.830045][ T5592] veth0_macvtap: entered promiscuous mode [ 89.842557][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.860595][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.860620][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.889320][ T5593] veth0_vlan: entered promiscuous mode [ 89.918114][ T5592] veth1_macvtap: entered promiscuous mode [ 89.937683][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.992021][ T5590] veth0_vlan: entered promiscuous mode [ 89.996772][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.996792][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.011482][ T5593] veth1_vlan: entered promiscuous mode [ 90.082742][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.159917][ T5590] veth1_vlan: entered promiscuous mode [ 90.184938][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.399572][ T5589] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.638968][ T5593] veth0_macvtap: entered promiscuous mode [ 90.645484][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.645506][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.796987][ T5593] veth1_macvtap: entered promiscuous mode [ 91.086091][ T5790] jffs2: notice: (5790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 93.752295][ T5590] veth0_macvtap: entered promiscuous mode [ 93.802847][ T5590] veth1_macvtap: entered promiscuous mode [ 93.909922][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.909941][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.945612][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.028591][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.028612][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.052204][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.058405][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.112406][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.250553][ T3000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.250575][ T3000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.409513][ T806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.957467][ T5798] jffs2: notice: (5798) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 97.408555][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.639354][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.640712][ T1127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.526930][ T5810] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 101.515203][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.547541][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.548307][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.582805][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.652300][ T5809] syz.2.7 (5809) used greatest stack depth: 19456 bytes left [ 101.653323][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.661414][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.668377][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.707566][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.721888][ T5813] ±ÿ)”ëfl: renamed from lo (while UP) [ 101.726381][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.727142][ T5812] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 101.892549][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.892572][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.217520][ T5825] jffs2: notice: (5825) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 104.655536][ T1208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.655558][ T1208] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.770810][ T71] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.771279][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.777321][ T806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.777339][ T806] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.211779][ T5835] netlink: 192 bytes leftover after parsing attributes in process `syz.0.10'. [ 106.393379][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.393400][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.599854][ T1356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.704994][ T3000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.930637][ T3000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.005047][ T1138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.040340][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.042048][ T5851] overlayfs: overlapping lowerdir path [ 108.308306][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.308924][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.309160][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.309330][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.360271][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.360515][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.412970][ T1356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.416982][ T1356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.417028][ T1356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.417062][ T1356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.660054][ T5857] jffs2: notice: (5857) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 109.901439][ T5865] ======================================================= [ 109.901439][ T5865] WARNING: The mand mount option has been deprecated and [ 109.901439][ T5865] and is ignored by this kernel. Remove the mand [ 109.901439][ T5865] option from the mount to silence this warning. [ 109.901439][ T5865] ======================================================= [ 111.214857][ T5864] overlayfs: overlapping lowerdir path [ 111.956513][ T5872] jffs2: notice: (5872) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.333654][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.743809][ T5880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.841457][ T1223] rpcbind: server 127.0.0.1 not responding, timed out [ 116.350119][ T5911] syz.3.22 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 116.384536][ T5911] loop9: detected capacity change from 0 to 7 [ 117.217745][ T5911] Dev loop9: unable to read RDB block 7 [ 117.217798][ T5911] loop9: unable to read partition table [ 117.227383][ T5911] loop9: partition table beyond EOD, truncated [ 117.227440][ T5911] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 117.776999][ T5920] jffs2: notice: (5920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 121.809384][ T31] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 121.885050][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 122.678758][ T31] usb 4-1: device descriptor read/64, error -32 [ 123.099521][ T31] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 126.357331][ T5963] loop9: detected capacity change from 0 to 7 [ 126.406099][ T5963] Dev loop9: unable to read RDB block 7 [ 126.406143][ T5963] loop9: unable to read partition table [ 126.406320][ T5963] loop9: partition table beyond EOD, truncated [ 126.406342][ T5963] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 128.237002][ T1356] IPVS: starting estimator thread 0... [ 128.615182][ T5969] IPVS: using max 8 ests per chain, 19200 per kthread [ 131.968525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 132.043455][ T5700] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.450257][ T5997] netlink: 20 bytes leftover after parsing attributes in process `syz.3.39'. [ 132.450483][ T5997] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.486680][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.501336][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.879468][ T5700] usb 3-1: device descriptor read/all, error -71 [ 137.905687][ T5794] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.221524][ T31] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 144.391401][ T31] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 144.432841][ T31] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 144.432877][ T31] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 144.439599][ T31] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 144.439627][ T31] usb 2-1: Manufacturer: syz [ 144.439642][ T31] usb 2-1: SerialNumber: syz [ 146.393185][ T6044] Zero length message leads to an empty skb [ 146.732188][ T6043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.48'. [ 147.655217][ T31] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 147.691082][ T31] usb 2-1: USB disconnect, device number 3 [ 150.351256][ T6093] netlink: 192 bytes leftover after parsing attributes in process `syz.0.60'. [ 151.809776][ T6088] jffs2: notice: (6088) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 151.987905][ T6108] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 154.142368][ T6116] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 157.528445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 157.732496][ T6142] jffs2: notice: (6142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 159.023368][ T1205] rpcbind: server 127.0.0.1 not responding, timed out [ 161.959145][ T6180] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 163.198582][ T6027] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 163.378857][ T6027] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 163.380264][ T6027] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 163.380295][ T6027] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 163.382915][ T6027] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 163.382940][ T6027] usb 3-1: Manufacturer: syz [ 163.382954][ T6027] usb 3-1: SerialNumber: syz [ 163.579301][ T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 163.729303][ T31] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 163.731595][ T31] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 163.731627][ T31] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 163.738019][ T31] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 163.738045][ T31] usb 2-1: Manufacturer: syz [ 163.738059][ T31] usb 2-1: SerialNumber: syz [ 164.516285][ T5724] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.866210][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 164.991821][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 164.997242][ T5724] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 165.036388][ T5724] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.046889][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.046941][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.998851][ T31] usb 2-1: can't set config #36, error -71 [ 166.051126][ T31] usb 2-1: USB disconnect, device number 4 [ 166.067965][ T6027] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 166.206130][ T6027] usb 3-1: USB disconnect, device number 5 [ 166.234176][ T5724] usb 4-1: config 0 descriptor?? [ 169.081728][ T5724] usbhid 4-1:0.0: can't add hid device: -71 [ 169.081854][ T5724] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 169.144963][ T5724] usb 4-1: USB disconnect, device number 4 [ 169.563082][ T6240] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 170.028507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.998420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.203909][ T1205] IPVS: starting estimator thread 0... [ 176.298651][ T6272] IPVS: using max 9 ests per chain, 21600 per kthread [ 177.364949][ T6279] loop9: detected capacity change from 0 to 7 [ 177.487809][ T6279] Dev loop9: unable to read RDB block 7 [ 177.487854][ T6279] loop9: unable to read partition table [ 177.488200][ T6279] loop9: partition table beyond EOD, truncated [ 177.488225][ T6279] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.508417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 179.352602][ T5700] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 180.045197][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 182.578612][ T5700] usb 5-1: device descriptor read/all, error -71 [ 183.796942][ T6339] netlink: 192 bytes leftover after parsing attributes in process `syz.2.111'. [ 187.292214][ T43] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 189.187273][ T6374] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 189.984743][ T6377] netlink: 192 bytes leftover after parsing attributes in process `syz.3.119'. [ 193.918757][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 197.194028][ T71] rpcbind: server 127.0.0.1 not responding, timed out [ 197.300859][ T6408] netlink: 192 bytes leftover after parsing attributes in process `syz.4.121'. [ 197.318731][ T43] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 198.620032][ T6413] Bluetooth: MGMT ver 1.23 [ 198.620189][ T6413] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 198.706626][ T6423] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 199.824585][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.824660][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.561485][ T5700] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 200.899335][ T5700] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 200.904793][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.904822][ T5700] usb 4-1: Product: syz [ 200.904836][ T5700] usb 4-1: Manufacturer: syz [ 200.904850][ T5700] usb 4-1: SerialNumber: syz [ 201.551294][ T1127] rpcbind: server 127.0.0.1 not responding, timed out [ 203.481062][ T5700] usb 4-1: can't set config #118, error -71 [ 203.496572][ T5700] usb 4-1: USB disconnect, device number 5 [ 204.748623][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 213.032059][ T806] rpcbind: server 127.0.0.1 not responding, timed out [ 215.268756][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 215.318063][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 215.342779][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 215.354329][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 215.376682][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 218.010587][ T6501] jffs2: notice: (6501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 218.522706][ T5597] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 218.996121][ T5597] usb 1-1: Using ep0 maxpacket: 16 [ 219.057351][ T5597] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 219.169149][ T5597] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.169194][ T5597] usb 1-1: config 0 interface 0 has no altsetting 0 [ 219.169303][ T5597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.758365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 219.885923][ T5597] usb 1-1: config 0 descriptor?? [ 222.919124][ T5701] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 223.000978][ T5724] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 223.241091][ T5701] usb 2-1: Using ep0 maxpacket: 16 [ 224.088989][ T1356] rpcbind: server 127.0.0.1 not responding, timed out [ 224.095969][ T5724] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 224.114130][ T1469] rpcbind: server 127.0.0.1 not responding, timed out [ 224.130962][ T5735] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 224.279780][ T5701] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 224.292845][ T5701] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.292894][ T5701] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.292934][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.298065][ T5724] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 224.298099][ T5724] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 224.312956][ T5724] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 224.312984][ T5724] usb 4-1: Manufacturer: syz [ 224.312998][ T5724] usb 4-1: SerialNumber: syz [ 224.371027][ T5735] usb 3-1: Using ep0 maxpacket: 16 [ 224.374998][ T5735] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 224.376915][ T5735] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.376946][ T5735] usb 3-1: config 0 interface 0 has no altsetting 0 [ 224.376979][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.435012][ T5597] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 224.484203][ T6539] jffs2: notice: (6539) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 224.780519][ T5597] nzxt-smart2 0003:1E71:2009.0001: init_device failed: -38 [ 228.320623][ T5735] usb 3-1: config 0 descriptor?? [ 228.321222][ T5735] usb 3-1: can't set config #0, error -71 [ 228.355890][ T5597] nzxt-smart2 0003:1E71:2009.0001: probe with driver nzxt-smart2 failed with error -38 [ 228.392169][ T5735] usb 3-1: USB disconnect, device number 6 [ 230.523196][ T5701] usb 2-1: config 0 descriptor?? [ 231.035327][ T5701] usb 2-1: can't set config #0, error -71 [ 231.551513][ T5724] usb 4-1: can't set config #36, error -71 [ 231.585017][ T5597] usb 1-1: USB disconnect, device number 2 [ 231.768033][ T5701] usb 2-1: USB disconnect, device number 6 [ 231.888367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.908364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.918351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.928349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 233.295910][ T6572] jffs2: notice: (6572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 234.091100][ T5724] usb 4-1: USB disconnect, device number 7 [ 234.518875][ T5735] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 234.530339][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 234.658737][ T5735] usb 3-1: device descriptor read/64, error -32 [ 234.985753][ T5735] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 235.063176][ T6583] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 236.038577][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 238.680020][ T5701] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 238.750338][ T5735] usb 3-1: device descriptor read/all, error -71 [ 238.756928][ T5735] usb usb3-port1: attempt power cycle [ 238.963689][ T6027] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 239.280316][ T6589] ceph: No mds server is up or the cluster is laggy [ 239.296975][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 239.318858][ T5701] usb 5-1: device descriptor read/64, error -71 [ 242.333397][ T5724] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 242.590711][ T5701] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 242.734998][ T6624] loop9: detected capacity change from 0 to 7 [ 242.752559][ T6624] Dev loop9: unable to read RDB block 7 [ 242.752602][ T6624] loop9: unable to read partition table [ 242.753779][ T6624] loop9: partition table beyond EOD, truncated [ 242.753816][ T6624] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 245.618151][ T1001] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 245.649396][ T1001] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 246.312197][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 246.499928][ T6661] jffs2: notice: (6661) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 246.699779][ T6641] ceph: No mds server is up or the cluster is laggy [ 246.892382][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 247.436465][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 249.279044][ T6669] ceph: No mds server is up or the cluster is laggy [ 252.860455][ T6545] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 253.005968][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 253.192708][ T6545] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 253.275893][ T6694] netlink: 112 bytes leftover after parsing attributes in process `syz.3.186'. [ 253.699446][ T5597] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 253.834925][ T6709] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 254.065572][ T6687] ceph: No mds server is up or the cluster is laggy [ 254.721702][ T1223] rpcbind: server 127.0.0.1 not responding, timed out [ 255.558177][ T6719] overlayfs: overlapping lowerdir path [ 256.527074][ T5597] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 256.696376][ T5597] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 256.702018][ T5597] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 256.702053][ T5597] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 256.729177][ T5597] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 256.729205][ T5597] usb 3-1: Manufacturer: syz [ 256.729219][ T5597] usb 3-1: SerialNumber: syz [ 258.402876][ T5597] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 258.506182][ T5597] usb 3-1: USB disconnect, device number 10 [ 258.864812][ T6737] netlink: 192 bytes leftover after parsing attributes in process `syz.0.197'. [ 261.226279][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.226352][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.326927][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 262.753275][ T6753] ceph: No mds server is up or the cluster is laggy [ 262.775666][ T5597] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 263.206608][ T6764] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 263.886254][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 263.911418][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 263.931596][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 263.947768][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 263.956824][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.226052][ T6770] overlayfs: overlapping lowerdir path [ 265.590819][ T6775] jffs2: notice: (6775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 266.039969][ T5611] Bluetooth: hci5: command tx timeout [ 268.183416][ T5611] Bluetooth: hci5: command tx timeout [ 270.238565][ T5611] Bluetooth: hci5: command tx timeout [ 270.840368][ T6808] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 272.268506][ T5611] Bluetooth: hci5: command tx timeout [ 274.413478][ T6826] overlayfs: overlapping lowerdir path [ 276.177313][ T6817] jffs2: notice: (6817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 276.225135][ T3000] rpcbind: server 127.0.0.1 not responding, timed out [ 277.805213][ T6840] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.492453][ T6849] jffs2: notice: (6849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 282.616564][ T6858] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 286.180520][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 286.210655][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 286.215503][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 286.234060][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 286.240762][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.081593][ T6883] netlink: 192 bytes leftover after parsing attributes in process `syz.3.228'. [ 288.968649][ T5611] Bluetooth: hci0: command tx timeout [ 289.217112][ T1356] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.661323][ T6896] netlink: 192 bytes leftover after parsing attributes in process `syz.1.229'. [ 291.068572][ T5611] Bluetooth: hci0: command tx timeout [ 292.501686][ T5724] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 293.164109][ T5611] Bluetooth: hci0: command tx timeout [ 293.496847][ T1356] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.549562][ T6915] ceph: No mds server is up or the cluster is laggy [ 293.705399][ T5794] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 293.708502][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 293.878458][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 293.901230][ T31] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 293.921330][ T31] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.921372][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 293.921406][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.953292][ T31] usb 4-1: config 0 descriptor?? [ 294.326398][ T1356] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.561127][ T31] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 294.628422][ T31] nzxt-smart2 0003:1E71:2009.0002: init_device failed: -38 [ 294.949146][ T31] nzxt-smart2 0003:1E71:2009.0002: probe with driver nzxt-smart2 failed with error -38 [ 294.996485][ T1356] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.229015][ T5611] Bluetooth: hci0: command tx timeout [ 295.591452][ T5735] usb 4-1: USB disconnect, device number 8 [ 297.846623][ T1573] rpcbind: server 127.0.0.1 not responding, timed out [ 298.073972][ T6951] ceph: No mds server is up or the cluster is laggy [ 299.385857][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.385975][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.386201][ T6763] bridge_slave_0: entered allmulticast mode [ 299.404456][ T6763] bridge_slave_0: entered promiscuous mode [ 299.807290][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.807415][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.807615][ T6763] bridge_slave_1: entered allmulticast mode [ 299.832030][ T6763] bridge_slave_1: entered promiscuous mode [ 300.358967][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.990344][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.192779][ T1356] bridge_slave_1: left allmulticast mode [ 302.192915][ T1356] bridge_slave_1: left promiscuous mode [ 302.214822][ T5724] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 302.241028][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.160834][ T5724] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 303.202911][ T6994] overlayfs: overlapping lowerdir path [ 303.228516][ T6987] ceph: No mds server is up or the cluster is laggy [ 303.234218][ T1356] bridge_slave_0: left allmulticast mode [ 303.234243][ T1356] bridge_slave_0: left promiscuous mode [ 303.234395][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.628560][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.709051][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.733237][ T1356] bond0 (unregistering): Released all slaves [ 304.952602][ T6763] team0: Port device team_slave_0 added [ 305.024360][ T6763] team0: Port device team_slave_1 added [ 305.205592][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.205610][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.205634][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.263670][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.263687][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.263712][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.765866][ T1573] rpcbind: server 127.0.0.1 not responding, timed out [ 308.192732][ T7025] jffs2: notice: (7025) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 311.495710][ T7044] jffs2: notice: (7044) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 313.490104][ T5252] 8021q: adding VLAN 0 to HW filter on device eth1 [ 315.237774][ T7060] jffs2: notice: (7060) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 319.932374][ T7073] ceph: No mds server is up or the cluster is laggy [ 320.554505][ T6763] hsr_slave_0: entered promiscuous mode [ 320.555487][ T6763] hsr_slave_1: entered promiscuous mode [ 320.556079][ T6763] debugfs: 'hsr0' already exists in 'hsr' [ 320.556100][ T6763] Cannot create hsr debugfs directory [ 320.608573][ T43] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 320.670066][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.670187][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.670370][ T6867] bridge_slave_0: entered allmulticast mode [ 320.676567][ T6867] bridge_slave_0: entered promiscuous mode [ 320.748254][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.748416][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.748602][ T6867] bridge_slave_1: entered allmulticast mode [ 320.750197][ T6867] bridge_slave_1: entered promiscuous mode [ 320.799056][ T43] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 320.800147][ T43] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 320.800178][ T43] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 320.801992][ T43] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 320.802015][ T43] usb 2-1: Manufacturer: syz [ 320.802026][ T43] usb 2-1: SerialNumber: syz [ 321.118755][ T1356] hsr_slave_0: left promiscuous mode [ 321.161604][ T1356] hsr_slave_1: left promiscuous mode [ 321.166489][ T1356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.166591][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.189616][ T43] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 321.206416][ T43] usb 2-1: USB disconnect, device number 7 [ 321.227040][ T1356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.227068][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.360325][ T1356] veth1_macvtap: left promiscuous mode [ 321.360622][ T1356] veth0_macvtap: left promiscuous mode [ 321.363703][ T1356] veth1_vlan: left promiscuous mode [ 321.363995][ T1356] veth0_vlan: left promiscuous mode [ 322.720730][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.720797][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.237478][ T7108] netlink: 192 bytes leftover after parsing attributes in process `syz.2.263'. [ 324.236789][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.267455][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.268804][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.270056][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.270842][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.537332][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 325.595065][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 326.331404][ T7124] netlink: 192 bytes leftover after parsing attributes in process `syz.3.264'. [ 326.388749][ T5611] Bluetooth: hci1: command tx timeout [ 327.034169][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.081789][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.205895][ T6867] team0: Port device team_slave_0 added [ 327.232567][ T6867] team0: Port device team_slave_1 added [ 328.428581][ T5611] Bluetooth: hci1: command tx timeout [ 330.508475][ T5611] Bluetooth: hci1: command tx timeout [ 332.041359][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.041378][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.041403][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.109015][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.109032][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.109056][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.451983][ T6867] hsr_slave_0: entered promiscuous mode [ 332.487840][ T6867] hsr_slave_1: entered promiscuous mode [ 332.491175][ T6867] debugfs: 'hsr0' already exists in 'hsr' [ 332.491201][ T6867] Cannot create hsr debugfs directory [ 332.612038][ T5611] Bluetooth: hci1: command tx timeout [ 333.244644][ T7168] netlink: 192 bytes leftover after parsing attributes in process `syz.1.272'. [ 333.791598][ T1223] rpcbind: server 127.0.0.1 not responding, timed out [ 334.551276][ T7179] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7181] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7179] [ 336.273298][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 336.460775][ T7177] ceph: No mds server is up or the cluster is laggy [ 336.907585][ T6349] rpcbind: server 127.0.0.1 not responding, timed out [ 338.171636][ T5252] 8021q: adding VLAN 0 to HW filter on device eth2 [ 338.555001][ T5794] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 339.510943][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 339.818093][ T7207] ceph: No mds server is up or the cluster is laggy [ 340.270133][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 340.347779][ T5794] usb 2-1: device descriptor read/all, error -71 [ 342.265748][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.319142][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.320698][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.325357][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.326072][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.551854][ T1356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.589840][ T1573] rpcbind: server 127.0.0.1 not responding, timed out [ 343.895261][ T5252] 8021q: adding VLAN 0 to HW filter on device eth3 [ 344.441787][ T1356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.508946][ T5611] Bluetooth: hci5: command tx timeout [ 345.376151][ T7255] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7256] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7255] [ 346.588443][ T5611] Bluetooth: hci5: command tx timeout [ 348.668473][ T5611] Bluetooth: hci5: command tx timeout [ 350.287603][ T1356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.748521][ T5611] Bluetooth: hci5: command tx timeout [ 350.943396][ T5600] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 351.928661][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 351.958898][ T7278] ceph: No mds server is up or the cluster is laggy [ 352.957809][ T7299] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7300] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7299] [ 353.881596][ T43] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 354.059319][ T43] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 354.060862][ T43] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 354.060896][ T43] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 354.063153][ T43] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 354.063177][ T43] usb 2-1: Manufacturer: syz [ 354.063190][ T43] usb 2-1: SerialNumber: syz [ 354.284894][ T1356] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.286773][ T7304] jffs2: notice: (7304) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 354.525842][ T43] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 354.543622][ T43] usb 2-1: USB disconnect, device number 10 [ 354.619681][ T6867] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 354.624726][ T5252] 8021q: adding VLAN 0 to HW filter on device eth4 [ 355.082989][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.083195][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.083388][ T7110] bridge_slave_0: entered allmulticast mode [ 355.190335][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 355.511715][ T7110] bridge_slave_0: entered promiscuous mode [ 355.790159][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.790295][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.790501][ T7110] bridge_slave_1: entered allmulticast mode [ 355.827632][ T7110] bridge_slave_1: entered promiscuous mode [ 356.407313][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.528596][ T5735] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 356.576345][ T7328] jffs2: notice: (7328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 356.831812][ T5735] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 356.932093][ T5735] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 356.932135][ T5735] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 357.126476][ T5735] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 357.126515][ T5735] usb 4-1: Manufacturer: syz [ 357.126581][ T5735] usb 4-1: SerialNumber: syz [ 359.684532][ T5735] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 359.810879][ T7335] jffs2: notice: (7335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 361.157596][ T5735] usb 4-1: USB disconnect, device number 9 [ 361.209173][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.226265][ T6027] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 362.280731][ T7342] ceph: No mds server is up or the cluster is laggy [ 363.053366][ T7351] netlink: 192 bytes leftover after parsing attributes in process `syz.3.297'. [ 363.292039][ T43] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 363.686357][ T7110] team0: Port device team_slave_0 added [ 363.724550][ T7110] team0: Port device team_slave_1 added [ 365.086056][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.086074][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.086096][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.167362][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.167379][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.167399][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.571758][ T7373] jffs2: notice: (7373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 365.711635][ T1356] bridge_slave_1: left allmulticast mode [ 365.711713][ T1356] bridge_slave_1: left promiscuous mode [ 366.155245][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.852293][ T1356] bridge_slave_0: left allmulticast mode [ 366.852332][ T1356] bridge_slave_0: left promiscuous mode [ 366.853192][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.280646][ T7384] netlink: 192 bytes leftover after parsing attributes in process `syz.3.303'. [ 368.039003][ T1356] bridge_slave_1: left allmulticast mode [ 368.039081][ T1356] bridge_slave_1: left promiscuous mode [ 368.039415][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.341661][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 368.960119][ T1356] bridge_slave_0: left allmulticast mode [ 368.960158][ T1356] bridge_slave_0: left promiscuous mode [ 368.960396][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.249079][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.314949][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.370582][ T1356] bond0 (unregistering): Released all slaves [ 371.694582][ T6344] rpcbind: server 127.0.0.1 not responding, timed out [ 372.116730][ T7401] ceph: No mds server is up or the cluster is laggy [ 373.831279][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.583773][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.659343][ T1356] bond0 (unregistering): Released all slaves [ 376.157482][ T7110] hsr_slave_0: entered promiscuous mode [ 376.175846][ T7110] hsr_slave_1: entered promiscuous mode [ 376.176655][ T7110] debugfs: 'hsr0' already exists in 'hsr' [ 376.176679][ T7110] Cannot create hsr debugfs directory [ 376.203110][ T1573] rpcbind: server 127.0.0.1 not responding, timed out [ 377.275892][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.276031][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.276237][ T7234] bridge_slave_0: entered allmulticast mode [ 377.307894][ T7234] bridge_slave_0: entered promiscuous mode [ 378.356397][ T7438] ceph: No mds server is up or the cluster is laggy [ 378.385746][ T6027] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 378.403488][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.403615][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.403819][ T7234] bridge_slave_1: entered allmulticast mode [ 378.407059][ T7234] bridge_slave_1: entered promiscuous mode [ 378.512813][ T7446] jffs2: notice: (7446) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 378.692492][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.709033][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.930532][ T7234] team0: Port device team_slave_0 added [ 379.025322][ T7234] team0: Port device team_slave_1 added [ 379.207800][ T6027] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 379.405204][ T6027] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 379.415884][ T6027] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 379.416495][ T6027] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 379.456268][ T6027] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 379.456295][ T6027] usb 4-1: Manufacturer: syz [ 379.456309][ T6027] usb 4-1: SerialNumber: syz [ 379.543992][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.544010][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.544035][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.551282][ T36] audit: type=1800 audit(1791099696.382:2): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.316" name=80 dev="sda1" ino=2047 res=0 errno=0 [ 381.969026][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.969045][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.969069][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.284703][ T5252] 8021q: adding VLAN 0 to HW filter on device eth5 [ 383.727279][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.727350][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.283415][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 384.317139][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 384.333434][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.871448][ T7495] netlink: 192 bytes leftover after parsing attributes in process `syz.2.320'. [ 386.017892][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.668245][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.672188][ T6027] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 387.746297][ T7234] hsr_slave_0: entered promiscuous mode [ 387.759005][ T7234] hsr_slave_1: entered promiscuous mode [ 387.761493][ T7234] debugfs: 'hsr0' already exists in 'hsr' [ 387.761521][ T7234] Cannot create hsr debugfs directory [ 388.752309][ T1356] hsr_slave_0: left promiscuous mode [ 388.849803][ T1356] hsr_slave_1: left promiscuous mode [ 389.040244][ T5611] Bluetooth: hci0: command tx timeout [ 389.149202][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.303401][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.627823][ T5597] usb 4-1: USB disconnect, device number 10 [ 389.877924][ T1356] hsr_slave_0: left promiscuous mode [ 389.961047][ T1356] hsr_slave_1: left promiscuous mode [ 389.977982][ T1356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.978008][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.047179][ T1356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.047206][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.385067][ T1356] veth1_macvtap: left promiscuous mode [ 390.391259][ T1356] veth0_macvtap: left promiscuous mode [ 390.394537][ T1356] veth1_vlan: left promiscuous mode [ 390.403287][ T1356] veth0_vlan: left promiscuous mode [ 391.104723][ T5611] Bluetooth: hci0: command tx timeout [ 391.318590][ T7536] ceph: No mds server is up or the cluster is laggy [ 391.327056][ T7539] jffs2: notice: (7539) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 393.158466][ T5611] Bluetooth: hci0: command tx timeout [ 393.544644][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 393.581573][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 394.493618][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 394.569246][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 395.228388][ T5611] Bluetooth: hci0: command tx timeout [ 395.251846][ T5252] 8021q: adding VLAN 0 to HW filter on device eth6 [ 398.234246][ T5252] 8021q: adding VLAN 0 to HW filter on device eth7 [ 400.597879][ T7234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.880142][ T7614] overlayfs: overlapping lowerdir path [ 401.657795][ T7234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.857365][ T7234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 402.946239][ T1573] rpcbind: server 127.0.0.1 not responding, timed out [ 403.139470][ T7625] netlink: 192 bytes leftover after parsing attributes in process `syz.2.340'. [ 403.202332][ T7234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.191785][ T7486] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.192932][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.193157][ T7486] bridge_slave_0: entered allmulticast mode [ 404.228206][ T7486] bridge_slave_0: entered promiscuous mode [ 404.587808][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 404.618972][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 404.620613][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 404.623070][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 404.625376][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 404.708022][ T7486] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.708159][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.722728][ T7486] bridge_slave_1: entered allmulticast mode [ 404.743410][ T7486] bridge_slave_1: entered promiscuous mode [ 405.272407][ T7637] netlink: 192 bytes leftover after parsing attributes in process `syz.3.338'. [ 405.449362][ T7647] netlink: 192 bytes leftover after parsing attributes in process `syz.1.342'. [ 406.543171][ T7486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.562874][ T7486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.914015][ T7657] kvm [7655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 406.954856][ T7657] kvm [7655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 406.976015][ T7657] kvm [7655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 406.976092][ T7657] kvm [7655]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 407.087032][ T7657] kvm [7655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 407.087116][ T7657] kvm [7655]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 407.111011][ T7657] kvm [7655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 407.111092][ T7657] kvm [7655]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 407.180449][ T7657] kvm [7655]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 407.180533][ T7657] kvm [7655]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 407.232243][ T5599] Bluetooth: hci1: command tx timeout [ 408.572474][ T7486] team0: Port device team_slave_0 added [ 408.845501][ T7486] team0: Port device team_slave_1 added [ 409.313020][ T5599] Bluetooth: hci1: command tx timeout [ 409.552909][ T7690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 409.703900][ T5252] 8021q: adding VLAN 0 to HW filter on device eth8 [ 410.091804][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.091822][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.091847][ T7486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.099765][ T7486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.099784][ T7486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.099809][ T7486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.078241][ T7486] hsr_slave_0: entered promiscuous mode [ 411.095089][ T7486] hsr_slave_1: entered promiscuous mode [ 411.096080][ T7486] debugfs: 'hsr0' already exists in 'hsr' [ 411.102770][ T7486] Cannot create hsr debugfs directory [ 411.388848][ T5599] Bluetooth: hci1: command tx timeout [ 412.523074][ T1127] rpcbind: server 127.0.0.1 not responding, timed out [ 413.478401][ T5599] Bluetooth: hci1: command tx timeout [ 413.992341][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.353'. [ 415.183401][ T1127] rpcbind: server 127.0.0.1 not responding, timed out [ 415.742860][ T7746] jffs2: notice: (7746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 417.883779][ T7759] jffs2: notice: (7759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 419.759544][ T7770] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.917564][ T7772] jffs2: notice: (7772) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 422.111875][ T1223] rpcbind: server 127.0.0.1 not responding, timed out [ 424.358522][ T5893] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 424.383098][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.363'. [ 424.548908][ T5893] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 424.550307][ T5893] usb 4-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 424.552573][ T5893] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 424.552598][ T5893] usb 4-1: Manufacturer: syz [ 424.552613][ T5893] usb 4-1: SerialNumber: syz [ 424.624264][ T7794] jffs2: notice: (7794) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 425.495121][ T5893] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 425.509225][ T5893] usb 4-1: USB disconnect, device number 11 [ 426.342294][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.342786][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.342995][ T7629] bridge_slave_0: entered allmulticast mode [ 426.354971][ T7629] bridge_slave_0: entered promiscuous mode [ 426.392738][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.393982][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.394551][ T7629] bridge_slave_1: entered allmulticast mode [ 426.402557][ T7629] bridge_slave_1: entered promiscuous mode [ 426.579608][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.609509][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.288572][ T7823] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7824] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7823] [ 428.888134][ T7629] team0: Port device team_slave_0 added [ 429.317072][ T7835] netlink: 192 bytes leftover after parsing attributes in process `syz.2.369'. [ 430.173068][ T7629] team0: Port device team_slave_1 added [ 431.303494][ T7848] ceph: No mds server is up or the cluster is laggy [ 431.659041][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.659057][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.659076][ T7629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.661508][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.661524][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.661547][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.798896][ T5724] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 432.028649][ T5724] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 432.030191][ T5724] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 432.030224][ T5724] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 432.032288][ T5724] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 432.032313][ T5724] usb 2-1: Manufacturer: syz [ 432.032327][ T5724] usb 2-1: SerialNumber: syz [ 432.476371][ T7629] hsr_slave_0: entered promiscuous mode [ 432.478763][ T7629] hsr_slave_1: entered promiscuous mode [ 432.479749][ T7629] debugfs: 'hsr0' already exists in 'hsr' [ 432.479773][ T7629] Cannot create hsr debugfs directory [ 433.615764][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.373'. [ 435.036342][ T7893] netlink: 192 bytes leftover after parsing attributes in process `syz.2.375'. [ 437.074020][ T5724] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 438.219786][ T7900] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7906] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7900] [ 439.140975][ T6344] rpcbind: server 127.0.0.1 not responding, timed out [ 439.768690][ T1356] bridge_slave_1: left allmulticast mode [ 439.768729][ T1356] bridge_slave_1: left promiscuous mode [ 439.769011][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.237641][ T1356] bridge_slave_0: left allmulticast mode [ 440.237675][ T1356] bridge_slave_0: left promiscuous mode [ 440.243436][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.159700][ T7911] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7912] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7911] [ 442.229841][ T1356] bridge_slave_1: left allmulticast mode [ 442.229879][ T1356] bridge_slave_1: left promiscuous mode [ 442.230136][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.434090][ T1356] bridge_slave_0: left allmulticast mode [ 442.434126][ T1356] bridge_slave_0: left promiscuous mode [ 442.434344][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.710735][ T5597] usb 2-1: USB disconnect, device number 11 [ 442.800112][ T1356] bridge_slave_1: left allmulticast mode [ 442.800151][ T1356] bridge_slave_1: left promiscuous mode [ 442.800381][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.963956][ T1356] bridge_slave_0: left allmulticast mode [ 442.963996][ T1356] bridge_slave_0: left promiscuous mode [ 442.980663][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.338525][ T5893] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 444.313321][ T1469] rpcbind: server 127.0.0.1 not responding, timed out [ 444.379891][ T5893] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 444.380918][ T5893] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 444.380937][ T5893] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 444.384835][ T5893] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 444.384850][ T5893] usb 4-1: Manufacturer: syz [ 444.384858][ T5893] usb 4-1: SerialNumber: syz [ 445.816959][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.817111][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.767117][ T5893] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 446.823243][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.854001][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.855934][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.875139][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.875995][ T5893] usb 4-1: USB disconnect, device number 12 [ 446.907310][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.094172][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.670170][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.390102][ T5611] Bluetooth: hci5: command tx timeout [ 450.562788][ T1356] bond0 (unregistering): Released all slaves [ 452.428554][ T5599] Bluetooth: hci5: command tx timeout [ 455.317024][ T5599] Bluetooth: hci5: command tx timeout [ 455.716161][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.840014][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.925430][ T1356] bond0 (unregistering): Released all slaves [ 456.363958][ T7967] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7968] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7967] [ 456.939376][ T6027] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 457.243793][ T6027] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 457.389851][ T5611] Bluetooth: hci5: command tx timeout [ 457.524962][ T6027] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x7C, changing to 0xC [ 457.525006][ T6027] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 457.576085][ T7978] jffs2: notice: (7978) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 457.732656][ T6027] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 457.732676][ T6027] usb 4-1: Manufacturer: syz [ 457.732683][ T6027] usb 4-1: SerialNumber: syz [ 458.764273][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 460.663783][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.939803][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.131607][ T1356] bond0 (unregistering): Released all slaves [ 463.719512][ T6027] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 464.066982][ T5893] usb 4-1: USB disconnect, device number 13 [ 464.250851][ T5599] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 464.285297][ T5599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 464.286956][ T5599] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 464.292245][ T5599] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 464.319983][ T5599] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 466.558689][ T5611] Bluetooth: hci6: command tx timeout [ 468.311759][ T8041] jffs2: notice: (8041) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 468.588482][ T5611] Bluetooth: hci6: command tx timeout [ 470.668439][ T5611] Bluetooth: hci6: command tx timeout [ 471.097035][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 472.012716][ T8066] jffs2: notice: (8066) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 472.751503][ T5611] Bluetooth: hci6: command tx timeout [ 477.506317][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9 [ 479.691900][ T8106] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'. [ 480.458469][ T5597] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 480.620732][ T5597] usb 4-1: Using ep0 maxpacket: 16 [ 480.621797][ T5597] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 480.624832][ T5597] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.624937][ T5597] usb 4-1: config 0 interface 0 has no altsetting 0 [ 480.624998][ T5597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.806718][ T5597] usb 4-1: config 0 descriptor?? [ 481.974017][ T5597] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 482.039670][ T5597] nzxt-smart2 0003:1E71:2009.0003: init_device failed: -38 [ 482.049260][ T1356] hsr_slave_0: left promiscuous mode [ 482.076437][ T5597] nzxt-smart2 0003:1E71:2009.0003: probe with driver nzxt-smart2 failed with error -38 [ 482.197128][ T8119] jffs2: notice: (8119) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 484.975433][ T1356] hsr_slave_1: left promiscuous mode [ 484.977743][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.015669][ T5893] usb 4-1: USB disconnect, device number 14 [ 485.045707][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.397004][ T8136] jffs2: notice: (8136) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 489.201421][ T1356] hsr_slave_0: left promiscuous mode [ 489.258974][ T1356] hsr_slave_1: left promiscuous mode [ 489.260135][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.310902][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.028461][ T1356] hsr_slave_0: left promiscuous mode [ 491.048395][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 491.078517][ T1356] hsr_slave_1: left promiscuous mode [ 491.087370][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.119293][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.198411][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 491.200358][ T31] usb 4-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 491.201673][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.201697][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.204687][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.204710][ T31] usb 4-1: Product: syz [ 491.204724][ T31] usb 4-1: Manufacturer: syz [ 491.204739][ T31] usb 4-1: SerialNumber: syz [ 491.666145][ T31] usb 4-1: unit 6 not found! [ 491.666178][ T31] usb 4-1: unit 0 not found! [ 491.929709][ T31] usb 4-1: USB disconnect, device number 15 [ 493.176700][ T8163] overlayfs: overlapping lowerdir path [ 494.141066][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 494.237440][ T8154] udevd[8154]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.260724][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 494.674379][ T8170] jffs2: notice: (8170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 495.925054][ T8179] jffs2: notice: (8179) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 498.981961][ T8189] jffs2: notice: (8189) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 500.989188][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 501.083705][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 504.884186][ T8224] jffs2: notice: (8224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 507.550504][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.550577][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.775890][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 507.915056][ T8229] jffs2: notice: (8229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 508.122888][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 509.413432][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 509.465338][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 509.468220][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 509.832000][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 509.883989][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.741902][ T8245] jffs2: notice: (8245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 512.108942][ T5611] Bluetooth: hci0: command tx timeout [ 514.279701][ T5611] Bluetooth: hci0: command tx timeout [ 516.348593][ T5611] Bluetooth: hci0: command tx timeout [ 518.428399][ T5611] Bluetooth: hci0: command tx timeout [ 518.963355][ T36] audit: type=1800 audit(1791099834.984:3): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.451" name=80 dev="sda1" ino=2047 res=0 errno=0 [ 521.743410][ T8293] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8294] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8293] [ 528.829020][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.861917][ T5599] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.870184][ T5599] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.885888][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.886614][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.076460][ T5611] Bluetooth: hci1: command tx timeout [ 533.148451][ T5611] Bluetooth: hci1: command tx timeout [ 535.230576][ T5611] Bluetooth: hci1: command tx timeout [ 535.624750][ T8231] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.625312][ T8231] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.625643][ T8231] bridge_slave_0: entered allmulticast mode [ 535.645958][ T8231] bridge_slave_0: entered promiscuous mode [ 535.700251][ T8231] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.700376][ T8231] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.700569][ T8231] bridge_slave_1: entered allmulticast mode [ 535.703836][ T8231] bridge_slave_1: entered promiscuous mode [ 537.328031][ T5611] Bluetooth: hci1: command tx timeout [ 537.866497][ T8231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.899399][ T8231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.065778][ T8393] jffs2: notice: (8393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 540.886157][ T8231] team0: Port device team_slave_0 added [ 540.960241][ T8231] team0: Port device team_slave_1 added [ 543.649579][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.649598][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.649623][ T8231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.721087][ T8231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.721104][ T8231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.721128][ T8231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.892825][ T8231] hsr_slave_0: entered promiscuous mode [ 543.894143][ T8231] hsr_slave_1: entered promiscuous mode [ 543.895017][ T8231] debugfs: 'hsr0' already exists in 'hsr' [ 543.895041][ T8231] Cannot create hsr debugfs directory [ 544.004885][ T5599] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 544.042355][ T5599] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 544.043735][ T5599] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 544.065962][ T5599] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 544.068725][ T5599] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 545.280589][ T8323] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.280802][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.281011][ T8323] bridge_slave_0: entered allmulticast mode [ 545.286583][ T8323] bridge_slave_0: entered promiscuous mode [ 545.382332][ T8323] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.382457][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.382632][ T8323] bridge_slave_1: entered allmulticast mode [ 545.389581][ T8323] bridge_slave_1: entered promiscuous mode [ 546.269580][ T5611] Bluetooth: hci5: command tx timeout [ 546.270817][ T8453] jffs2: notice: (8453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 548.380148][ T5611] Bluetooth: hci5: command tx timeout [ 548.392604][ T8468] overlay: Unknown parameter '/' [ 549.212891][ T8323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.434939][ T5611] Bluetooth: hci5: command tx timeout [ 550.616822][ T8483] overlayfs: missing 'lowerdir' [ 550.946012][ T8323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.346145][ T8323] team0: Port device team_slave_0 added [ 551.380415][ T8323] team0: Port device team_slave_1 added [ 551.609006][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.609025][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.609049][ T8323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.640867][ T8323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.640885][ T8323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.640910][ T8323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.518545][ T5611] Bluetooth: hci5: command tx timeout [ 553.827048][ T8323] hsr_slave_0: entered promiscuous mode [ 553.849916][ T8323] hsr_slave_1: entered promiscuous mode [ 553.850947][ T8323] debugfs: 'hsr0' already exists in 'hsr' [ 553.850970][ T8323] Cannot create hsr debugfs directory [ 556.159446][ T1356] bridge_slave_1: left allmulticast mode [ 556.159484][ T1356] bridge_slave_1: left promiscuous mode [ 556.159889][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.341512][ T1356] bridge_slave_0: left allmulticast mode [ 556.341551][ T1356] bridge_slave_0: left promiscuous mode [ 556.341804][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.618557][ T1356] bridge_slave_1: left allmulticast mode [ 556.618595][ T1356] bridge_slave_1: left promiscuous mode [ 556.618844][ T1356] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.175935][ T8548] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8549] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8548] [ 558.231538][ T1356] bridge_slave_0: left allmulticast mode [ 558.231573][ T1356] bridge_slave_0: left promiscuous mode [ 558.231821][ T1356] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.644965][ T1356] bond0 (unregistering): Released all slaves [ 561.880237][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.964187][ T8564] jffs2: notice: (8564) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 562.285699][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.882774][ T1356] bond0 (unregistering): Released all slaves [ 563.829436][ T1356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.953010][ T1356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.025614][ T1356] bond0 (unregistering): Released all slaves [ 564.501774][ T5252] 8021q: adding VLAN 0 to HW filter on device eth9 [ 566.216610][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 566.245784][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 566.247064][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 566.253368][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 566.254139][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 566.370380][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.370483][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.370663][ T8411] bridge_slave_0: entered allmulticast mode [ 566.375355][ T8411] bridge_slave_0: entered promiscuous mode [ 566.486311][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.486410][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.486589][ T8411] bridge_slave_1: entered allmulticast mode [ 566.510988][ T8411] bridge_slave_1: entered promiscuous mode [ 566.841999][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.860246][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.032945][ T8411] team0: Port device team_slave_0 added [ 567.037471][ T8411] team0: Port device team_slave_1 added [ 568.522037][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.522109][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.628056][ T5599] Bluetooth: hci4: command tx timeout [ 569.143398][ T1001] kworker/1:2 (1001) used greatest stack depth: 19008 bytes left [ 570.840817][ T5599] Bluetooth: hci4: command tx timeout [ 573.307391][ T5599] Bluetooth: hci4: command tx timeout [ 574.051109][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.051128][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.051152][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.109359][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.109376][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.109397][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.279872][ T1356] hsr_slave_0: left promiscuous mode [ 574.318425][ T1356] hsr_slave_1: left promiscuous mode [ 574.321399][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.369282][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.583924][ T1356] hsr_slave_0: left promiscuous mode [ 574.618466][ T1356] hsr_slave_1: left promiscuous mode [ 574.643118][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.679390][ T1356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.448591][ T8641] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8642] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8641] [ 576.028042][ T5599] Bluetooth: hci4: command tx timeout [ 577.284764][ T8650] overlayfs: missing 'lowerdir' [ 577.453298][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.498'. [ 578.539064][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 578.621964][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 581.189318][ T1356] team0 (unregistering): Port device team_slave_1 removed [ 581.258997][ T1356] team0 (unregistering): Port device team_slave_0 removed [ 584.524087][ T8411] hsr_slave_0: entered promiscuous mode [ 584.526095][ T8411] hsr_slave_1: entered promiscuous mode [ 584.527085][ T8411] debugfs: 'hsr0' already exists in 'hsr' [ 584.527110][ T8411] Cannot create hsr debugfs directory [ 585.638029][ T8687] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8688] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[8687] [ 586.680652][ T8683] jffs2: notice: (8683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 588.054369][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 588.106642][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 588.121961][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 588.190463][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 588.239537][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 591.959689][ T5611] Bluetooth: hci6: command tx timeout [ 594.028367][ T5611] Bluetooth: hci6: command tx timeout [ 596.108695][ T5611] Bluetooth: hci6: command tx timeout [ 598.377189][ T5611] Bluetooth: hci6: command tx timeout [ 603.991008][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 604.073511][ T5599] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 604.388744][ T8796] random: crng reseeded on system resumption [ 605.427963][ T5599] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 605.429115][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 605.430236][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 605.911662][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.911867][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.912065][ T8582] bridge_slave_0: entered allmulticast mode [ 605.916711][ T8582] bridge_slave_0: entered promiscuous mode [ 606.013049][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.013200][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.013374][ T8582] bridge_slave_1: entered allmulticast mode [ 606.016109][ T8582] bridge_slave_1: entered promiscuous mode [ 606.216526][ T8582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.262360][ T8582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.438127][ T8582] team0: Port device team_slave_0 added [ 606.463497][ T8582] team0: Port device team_slave_1 added [ 607.179018][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.179040][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.179065][ T8582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.262971][ T8582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.262989][ T8582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.263015][ T8582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.125109][ T5599] Bluetooth: hci0: command tx timeout [ 610.188906][ T5599] Bluetooth: hci0: command tx timeout [ 610.324617][ T8582] hsr_slave_0: entered promiscuous mode [ 610.345076][ T8582] hsr_slave_1: entered promiscuous mode [ 610.365808][ T8582] debugfs: 'hsr0' already exists in 'hsr' [ 610.365887][ T8582] Cannot create hsr debugfs directory [ 612.270821][ T5599] Bluetooth: hci0: command tx timeout [ 614.040480][ T8848] jffs2: notice: (8848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 614.374847][ T5599] Bluetooth: hci0: command tx timeout [ 616.308838][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.309006][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.309221][ T8701] bridge_slave_0: entered allmulticast mode [ 616.312651][ T8701] bridge_slave_0: entered promiscuous mode [ 616.394888][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.395014][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.395205][ T8701] bridge_slave_1: entered allmulticast mode [ 616.428140][ T8701] bridge_slave_1: entered promiscuous mode [ 616.641458][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 616.693966][ T8861] netlink: 112 bytes leftover after parsing attributes in process `syz.1.523'. [ 618.097740][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.140688][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.294051][ T8701] team0: Port device team_slave_0 added [ 618.324360][ T8701] team0: Port device team_slave_1 added [ 620.287734][ T8875] jffs2: notice: (8875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 623.103530][ T8874] ------------[ cut here ]------------ [ 623.103548][ T8874] failed to allocate ring buffer on CPU 1 [ 623.103569][ T8874] WARNING: kernel/trace/ring_buffer.c:8110 at trace_rb_cpu_prepare+0x330/0x3c0, CPU#1: syz.1.527/8874 [ 623.131421][ T8874] Modules linked in: [ 623.135352][ T8874] CPU: 1 UID: 0 PID: 8874 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 623.145161][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.155320][ T8874] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 623.161419][ T8874] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 3e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2f eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 623.182348][ T8874] RSP: 0018:ffffc900042977d0 EFLAGS: 00010287 [ 623.188494][ T8874] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000 [ 623.196513][ T8874] RDX: ffffc9000f6bc000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 623.205134][ T8874] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 623.213212][ T8874] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 623.223170][ T8874] R13: ffff888034383c88 R14: ffff888061e530a0 R15: 0000000000000000 [ 623.231971][ T8874] FS: 00007fc0b94966c0(0000) GS:ffff888125cc2000(0000) knlGS:0000000000000000 [ 623.241007][ T8874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.247623][ T8874] CR2: 0000200000006000 CR3: 00000000604b0000 CR4: 00000000003526f0 [ 623.255791][ T8874] Call Trace: [ 623.259184][ T8874] [ 623.262151][ T8874] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 623.267922][ T8874] cpuhp_invoke_callback+0x498/0x810 [ 623.273324][ T8874] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 623.280012][ T8874] cpuhp_issue_call+0x3f0/0x750 [ 623.284913][ T8874] ? mutex_lock_nested+0x152/0x1d0 [ 623.290119][ T8874] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 623.297012][ T8874] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 623.303789][ T8874] __cpuhp_state_add_instance+0x25/0x40 [ 623.309568][ T8874] alloc_buffer+0x188f/0x1d70 [ 623.314417][ T8874] __ring_buffer_alloc+0x2c/0x40 [ 623.319450][ T8874] allocate_trace_buffer+0x1d2/0x950 [ 623.324780][ T8874] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 623.331479][ T8874] ? trace_array_create_systems+0x75/0xe60 [ 623.337329][ T8874] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 623.343274][ T8874] ? __raw_spin_lock_init+0x45/0x100 [ 623.348683][ T8874] trace_array_create_systems+0x590/0xe60 [ 623.354464][ T8874] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 623.360374][ T8874] ? mutex_lock_nested+0x152/0x1d0 [ 623.365552][ T8874] instance_mkdir+0xd5/0x140 [ 623.370240][ T8874] tracefs_syscall_mkdir+0x11a/0x190 [ 623.375568][ T8874] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 623.381460][ T8874] ? generic_permission+0x2bf/0x670 [ 623.386691][ T8874] ? __pfx_tracefs_permission+0x10/0x10 [ 623.392341][ T8874] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 623.397433][ T8874] vfs_mkdir+0x408/0x620 [ 623.401782][ T8874] filename_mkdirat+0x289/0x520 [ 623.406671][ T8874] ? __pfx_filename_mkdirat+0x10/0x10 [ 623.412120][ T8874] ? do_getname+0x151/0x250 [ 623.416619][ T8874] __se_sys_mkdirat+0x35/0x150 [ 623.421479][ T8874] do_syscall_64+0x166/0x520 [ 623.426090][ T8874] ? trace_irq_disable+0x3b/0x140 [ 623.431170][ T8874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.437230][ T8874] ? clear_bhb_loop+0x70/0xc0 [ 623.441955][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.447986][ T8874] RIP: 0033:0x7fc0bb23e159 [ 623.452482][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.472166][ T8874] RSP: 002b:00007fc0b9496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 623.480660][ T8874] RAX: ffffffffffffffda RBX: 00007fc0bb4c5fa0 RCX: 00007fc0bb23e159 [ 623.488707][ T8874] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 623.496699][ T8874] RBP: 00007fc0bb2d506b R08: 0000000000000000 R09: 0000000000000000 [ 623.504713][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.512710][ T8874] R13: 00007fc0bb4c6038 R14: 00007fc0bb4c5fa0 R15: 00007ffd0177d878 [ 623.520727][ T8874] [ 623.523808][ T8874] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 623.531098][ T8874] CPU: 1 UID: 0 PID: 8874 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 623.540876][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.551089][ T8874] Call Trace: [ 623.554447][ T8874] [ 623.557431][ T8874] vpanic+0x56d/0xa60 [ 623.561420][ T8874] ? __pfx__printk+0x10/0x10 [ 623.566379][ T8874] ? __pfx_vpanic+0x10/0x10 [ 623.570916][ T8874] ? is_bpf_text_address+0x292/0x2b0 [ 623.577361][ T8874] ? is_bpf_text_address+0x26/0x2b0 [ 623.582798][ T8874] panic+0xc5/0xd0 [ 623.586553][ T8874] ? __pfx_panic+0x10/0x10 [ 623.590995][ T8874] __warn+0x315/0x4c0 [ 623.594988][ T8874] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 623.600379][ T8874] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 623.605778][ T8874] __report_bug+0x276/0x570 [ 623.610293][ T8874] ? trace_rb_cpu_prepare+0x330/0x3c0 [ 623.615683][ T8874] ? __pfx___report_bug+0x10/0x10 [ 623.621077][ T8874] ? rb_allocate_cpu_buffer+0x5cf/0x3070 [ 623.626734][ T8874] report_bug_entry+0x19b/0x290 [ 623.631592][ T8874] ? trace_rb_cpu_prepare+0x332/0x3c0 [ 623.636987][ T8874] ? trace_rb_cpu_prepare+0x337/0x3c0 [ 623.643648][ T8874] handle_bug+0xce/0x200 [ 623.647939][ T8874] exc_invalid_op+0x1a/0x50 [ 623.652750][ T8874] asm_exc_invalid_op+0x1a/0x20 [ 623.657616][ T8874] RIP: 0010:trace_rb_cpu_prepare+0x332/0x3c0 [ 623.663598][ T8874] Code: 08 f0 48 0f ab 03 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7d 3e 92 09 cc e8 87 2c fc ff 48 8d 3d e0 2f eb 0d 89 ee <67> 48 0f b9 3a b8 f4 ff ff ff eb d2 e8 6d 2c fc ff e9 ef fe ff ff [ 623.683650][ T8874] RSP: 0018:ffffc900042977d0 EFLAGS: 00010287 [ 623.689756][ T8874] RAX: ffffffff81caaba9 RBX: dffffc0000000000 RCX: 0000000000080000 [ 623.697760][ T8874] RDX: ffffc9000f6bc000 RSI: 0000000000000001 RDI: ffffffff8fb5db90 [ 623.705831][ T8874] RBP: 0000000000000001 R08: ffffffff8fb22c7f R09: 1ffffffff1f6458f [ 623.714109][ T8874] R10: dffffc0000000000 R11: fffffbfff1f64590 R12: 0000000000000000 [ 623.722443][ T8874] R13: ffff888034383c88 R14: ffff888061e530a0 R15: 0000000000000000 [ 623.730422][ T8874] ? trace_rb_cpu_prepare+0x329/0x3c0 [ 623.736013][ T8874] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 623.741754][ T8874] cpuhp_invoke_callback+0x498/0x810 [ 623.747104][ T8874] ? __pfx_trace_rb_cpu_prepare+0x10/0x10 [ 623.752848][ T8874] cpuhp_issue_call+0x3f0/0x750 [ 623.757708][ T8874] ? mutex_lock_nested+0x152/0x1d0 [ 623.762820][ T8874] ? __cpuhp_state_add_instance_cpuslocked+0x126/0x560 [ 623.770018][ T8874] __cpuhp_state_add_instance_cpuslocked+0x225/0x560 [ 623.776727][ T8874] __cpuhp_state_add_instance+0x25/0x40 [ 623.782319][ T8874] alloc_buffer+0x188f/0x1d70 [ 623.787026][ T8874] __ring_buffer_alloc+0x2c/0x40 [ 623.791992][ T8874] allocate_trace_buffer+0x1d2/0x950 [ 623.797324][ T8874] ? __kmalloc_node_track_caller_noprof+0x58c/0x7b0 [ 623.803930][ T8874] ? trace_array_create_systems+0x75/0xe60 [ 623.809755][ T8874] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 623.815597][ T8874] ? __raw_spin_lock_init+0x45/0x100 [ 623.820990][ T8874] trace_array_create_systems+0x590/0xe60 [ 623.826754][ T8874] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 623.832592][ T8874] ? mutex_lock_nested+0x152/0x1d0 [ 623.837711][ T8874] instance_mkdir+0xd5/0x140 [ 623.842299][ T8874] tracefs_syscall_mkdir+0x11a/0x190 [ 623.847584][ T8874] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 623.853387][ T8874] ? generic_permission+0x2bf/0x670 [ 623.858583][ T8874] ? __pfx_tracefs_permission+0x10/0x10 [ 623.864128][ T8874] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 623.869166][ T8874] vfs_mkdir+0x408/0x620 [ 623.873429][ T8874] filename_mkdirat+0x289/0x520 [ 623.878288][ T8874] ? __pfx_filename_mkdirat+0x10/0x10 [ 623.883661][ T8874] ? do_getname+0x151/0x250 [ 623.888179][ T8874] __se_sys_mkdirat+0x35/0x150 [ 623.892992][ T8874] do_syscall_64+0x166/0x520 [ 623.897594][ T8874] ? trace_irq_disable+0x3b/0x140 [ 623.902614][ T8874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.908676][ T8874] ? clear_bhb_loop+0x70/0xc0 [ 623.913358][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.919413][ T8874] RIP: 0033:0x7fc0bb23e159 [ 623.923849][ T8874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.943457][ T8874] RSP: 002b:00007fc0b9496028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 623.951876][ T8874] RAX: ffffffffffffffda RBX: 00007fc0bb4c5fa0 RCX: 00007fc0bb23e159 [ 623.959845][ T8874] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 623.967816][ T8874] RBP: 00007fc0bb2d506b R08: 0000000000000000 R09: 0000000000000000 [ 623.975790][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.983754][ T8874] R13: 00007fc0bb4c6038 R14: 00007fc0bb4c5fa0 R15: 00007ffd0177d878 [ 623.991740][ T8874] [ 623.994915][ T8874] Kernel Offset: disabled [ 623.999233][ T8874] Rebooting in 86400 seconds..