last executing test programs: 17.374040248s ago: executing program 2 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) openat2(r2, &(0x7f0000000000)='./dev/mapper/control\x00', &(0x7f0000000040)={0x200, 0x0, 0x18}, 0x18) ioctl(r2, 0xc138fd01, &(0x7f0000000140)="0400000000000000000000003801") r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x66d060ca, 0x2c}, 0x48) sendmsg$nl_netfilter(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r6, 0x10c, 0x4, 0x0, &(0x7f0000001b80)) 17.291805124s ago: executing program 1 (id=538): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x2000, 0xa9) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0x4c09, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x6) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000280)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x404000000ff, 0x0, 0x0, 0x19, 0xc, "faf98317e5a114996acc96e3dfd42038bd3fe37d58128b25f5ab60c9e6d680f985881a7beda9d69098c8b534464c5111fd8a0f3500000200", "32d81a17f7061a74df2cfc06c89f3d9e234b30c50997d3bef4090ebcdda37bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b063cc06000000000000000000000000000000000200", [0x2002, 0x6]}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a7c000000060a0104000000000000000002000000500004804c0001800c0001007061796c6f6164003c000280080004400000005a0800054000000002080003400000001708000240000000020800064000000002"], 0xa4}}, 0x4) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) socket$kcm(0xa, 0x5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) 15.919187321s ago: executing program 2 (id=540): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 15.749576108s ago: executing program 4 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$evdev(0x0, 0x1, 0x400c2) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9d16000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r5, 0x2000}, {r0, 0x40}, {r4, 0xc4}, {r2, 0x208d}, {r0, 0x380}, {r5, 0x2410}, {r5, 0x100}], 0x7, 0x0, 0x0, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x10000]}, 0x8, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_adjtime(0xffffffd3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) 15.543574111s ago: executing program 3 (id=542): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x14}}, 0x800) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000300)={0x0, "030000000000000023000000debd12ffff00000004000000001020000400", 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x80000011}) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r6, 0xc0105502, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000004c0)=0x5) 14.015634467s ago: executing program 3 (id=544): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/first_group\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='2', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='6', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) write(r4, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000007c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)=""/59, &(0x7f0000000080)=0x3b) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a80000001000ffff26bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100380a04008000128009000100766c616e0000000070000280060001000400000004000380580004800c0001000a004000060000000c00010081000000080000000c00010000000000ffffffff0c00010004000000050000000c000100fbffffffff7f00000c00010003000000050000000c00010006000000000000000600050088a8000008000500", @ANYRES32=r6], 0xa8}}, 0x0) 13.88597072s ago: executing program 4 (id=545): r0 = epoll_create1(0x80000) mkdir(&(0x7f00000004c0)='./tracefs_dir/free_buffer\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x16, 0x2, 0x1, 0x40000000}]}, 0x10) write(r1, &(0x7f0000000340)='10', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) close(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) dup3(r0, r0, 0x80000) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = add_key(&(0x7f0000000200)='dns_resolver\x00', 0x0, &(0x7f0000000540)="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", 0x19c, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000003b80), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={0x0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000018) add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="95b522da9072f4bd9e005f4c4405a79698842c938892963fa9bc74c576b026f77af0a5e6529d58222c6444442119f9408972654657af9934947811443ea634462feef6449e", 0x45, r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 12.741746715s ago: executing program 1 (id=548): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) syz_io_uring_setup(0xefd, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) connect$tipc(r5, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 12.659907638s ago: executing program 4 (id=549): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12.364232006s ago: executing program 3 (id=550): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="22a108000000000000009646ced13e932687629c4360a54a5387958eeea817feafba64bf542ee6869b4495f30929f9a2fb70943a28adbeb07da74c8ef9debd1440ff7c", 0x43) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @multicast2}}, 0x1e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f00000002c0)) 9.35713183s ago: executing program 4 (id=552): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.277548816s ago: executing program 3 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xbf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x20}}, [@alu={0x7, 0x0, 0xdde0e440e894aaa1, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x440, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x41) write$nbd(0xffffffffffffffff, 0x0, 0x8d) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x8f) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0xf) write(r6, &(0x7f00000002c0)='snd_aloop.0', 0xb) 9.252998399s ago: executing program 1 (id=554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x10400, &(0x7f00000003c0)=ANY=[@ANYRESDEC]) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) getpid() sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 8.679646301s ago: executing program 3 (id=555): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x81, 0x800001000891}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 7.131200443s ago: executing program 3 (id=556): syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004893a710fd03beeb639a010203010902340001fb000000090410010334bd1b0609050102"], 0x0) r0 = syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x1003}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0xfffe, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x9}, @mss={0x2, 0x4, 0x4}, @mss={0x2, 0x4, 0x8}, @nop, @window={0x3, 0x3, 0x4}]}}}}}}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x3, @mcast1}}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x5}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000002c0)) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000080), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) setuid(0x0) 6.044070798s ago: executing program 2 (id=557): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0xb) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.977410507s ago: executing program 0 (id=558): add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8479a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c89738f489437ec7666ea5007c121db409760c", 0x1ad, 0xfffffffffffffffc) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) lseek(r0, 0x10005, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000040200000000000000000000010500000020000001e5"], 0x0, 0x2a}, 0x28) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d0101"], 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002140), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0xa, 0x0, &(0x7f00000001c0)={0x10004, 0x1, [0xb8f, 0x4a7, 0xb55, 0xcd3]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040007"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = socket$igmp6(0xa, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r5, &(0x7f0000002040)="f649b7aacb3490574e599b7d61b33f6919457d6f0786b1a703d099bf4ccdb7122cdd6fad5f0fddc7b14307734006cbb094229a17c8cd7c4d0221b9a6c62a92fa9817ae0508960b3e3cd6a00c54bc4c0179116499bbd5f4e21d664c75d47e", 0x5e, 0x4001, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect$hid(0xff12a1c58e391ae5, 0x36, &(0x7f0000002000)=ANY=[@ANYRESOCT=r1], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xe4}}, 0x8000) 4.699988028s ago: executing program 2 (id=559): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket(0x2b, 0x1, 0xa0c7) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.571363611s ago: executing program 0 (id=560): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x24, r3, 0x401, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x4800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 3.550040453s ago: executing program 0 (id=561): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 3.265295326s ago: executing program 0 (id=562): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x15, 0x5, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001800010000000000fedbdf2580200000000400050015000008000300", @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x24048005}, 0x4000) 3.136052864s ago: executing program 2 (id=563): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000100), 0x1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x2, 0x6) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r2, 0x0, 0x5, 0x8) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x2000) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x9) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44845) 3.135608689s ago: executing program 1 (id=564): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106400000000006113740000000000bfa00000000000000700000008ffffffd50301001774004095000000000000006916360000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000002c0)=@arm64={0x1, 0x4, 0xe9, '\x00', 0x33f}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0x8800}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00'}) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x2000c004) setresuid(0x0, 0xee00, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) 3.02092031s ago: executing program 4 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x204) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x1, 0x6) bind(r4, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10) listen(r4, 0x5) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'wrr\x00', 0x10}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) 2.03061204s ago: executing program 0 (id=566): socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3641) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0xba21}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@empty, @in=@broadcast, 0x4e20, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x4, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.984385693s ago: executing program 1 (id=567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x4e5ef4b7a78df6d, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x80000) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x4, 0x800) getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) socket(0x2, 0x3, 0xff) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bind$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 956.725644ms ago: executing program 4 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x10800) 144.452638ms ago: executing program 2 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7fff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvfrom(r3, 0x0, 0x0, 0x12120, 0x0, 0x0) syz_emit_ethernet(0x311, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x2db, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000005400e000026000400"}, {0x18, 0x12, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x21, 0x4, "f5000000000000000000000200000000000000000000000000008879e66485"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0)=r0, 0x12) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0xc0505405, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) 45.387476ms ago: executing program 1 (id=570): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffb]}, 0x0, 0x8) read$dsp(0xffffffffffffffff, 0x0, 0xffffffffffffff75) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0xfffffe78) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$alg(0x26, 0x5, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) syz_open_dev$dri(0x0, 0x1ff, 0x0) 0s ago: executing program 0 (id=571): r0 = socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x4, 0x1ff}}}}, 0x11) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r5, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x10800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 76.921560][ T5579] cgroup: Unknown subsys name 'net' [ 77.162687][ T5579] cgroup: Unknown subsys name 'cpuset' [ 77.238576][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.797109][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.120447][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.123909][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.167337][ T5596] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.179969][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.180296][ T5600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.229430][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.229877][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.244286][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.245000][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.246211][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.256035][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.268630][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.272861][ T5600] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.273510][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.273938][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.277447][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.283019][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.289742][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.293622][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.296484][ T4907] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.316042][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.335973][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.337512][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.337891][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.350123][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.584994][ T1872] cfg80211: failed to load regulatory.db [ 83.409078][ T5610] Bluetooth: hci1: command tx timeout [ 83.409319][ T5599] Bluetooth: hci4: command tx timeout [ 83.488566][ T5610] Bluetooth: hci2: command tx timeout [ 83.488677][ T5610] Bluetooth: hci0: command tx timeout [ 83.488877][ T5599] Bluetooth: hci3: command tx timeout [ 83.783285][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.783893][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.784000][ T5590] bridge_slave_0: entered allmulticast mode [ 83.785781][ T5590] bridge_slave_0: entered promiscuous mode [ 83.838722][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.838810][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.838899][ T5590] bridge_slave_1: entered allmulticast mode [ 83.840252][ T5590] bridge_slave_1: entered promiscuous mode [ 83.909814][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.909902][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.910271][ T5591] bridge_slave_0: entered allmulticast mode [ 83.911576][ T5591] bridge_slave_0: entered promiscuous mode [ 83.913049][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.913159][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.913629][ T5592] bridge_slave_0: entered allmulticast mode [ 83.915087][ T5592] bridge_slave_0: entered promiscuous mode [ 83.977920][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.978143][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.978295][ T5591] bridge_slave_1: entered allmulticast mode [ 83.979928][ T5591] bridge_slave_1: entered promiscuous mode [ 83.980723][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.980848][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.981109][ T5592] bridge_slave_1: entered allmulticast mode [ 83.982403][ T5592] bridge_slave_1: entered promiscuous mode [ 84.008997][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.009168][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.009301][ T5594] bridge_slave_0: entered allmulticast mode [ 84.015016][ T5594] bridge_slave_0: entered promiscuous mode [ 84.039920][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.076578][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.076649][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.076738][ T5593] bridge_slave_0: entered allmulticast mode [ 84.079206][ T5593] bridge_slave_0: entered promiscuous mode [ 84.083931][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.084073][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.084569][ T5594] bridge_slave_1: entered allmulticast mode [ 84.088984][ T5594] bridge_slave_1: entered promiscuous mode [ 84.106858][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.142273][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.142406][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.142868][ T5593] bridge_slave_1: entered allmulticast mode [ 84.144325][ T5593] bridge_slave_1: entered promiscuous mode [ 84.186299][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.190088][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.234040][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.236189][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.391135][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.393101][ T5590] team0: Port device team_slave_0 added [ 84.423343][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.426744][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.436506][ T5590] team0: Port device team_slave_1 added [ 84.466940][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.493280][ T5591] team0: Port device team_slave_0 added [ 84.495225][ T5592] team0: Port device team_slave_0 added [ 84.539515][ T5591] team0: Port device team_slave_1 added [ 84.541467][ T5592] team0: Port device team_slave_1 added [ 84.558227][ T5594] team0: Port device team_slave_0 added [ 84.559452][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.559464][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.559487][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.605564][ T5593] team0: Port device team_slave_0 added [ 84.609473][ T5594] team0: Port device team_slave_1 added [ 84.610455][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.610467][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.610490][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.677206][ T5593] team0: Port device team_slave_1 added [ 84.701379][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.701392][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.701413][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.703455][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.703467][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.703490][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.750295][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.750309][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.750331][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.753300][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.753312][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.753335][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.774311][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.774323][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.774346][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.803412][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.803426][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.803448][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.827854][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.827867][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.827890][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.841759][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.841772][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.841795][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.912515][ T5590] hsr_slave_0: entered promiscuous mode [ 84.913956][ T5590] hsr_slave_1: entered promiscuous mode [ 85.055307][ T5591] hsr_slave_0: entered promiscuous mode [ 85.056794][ T5591] hsr_slave_1: entered promiscuous mode [ 85.057648][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 85.057768][ T5591] Cannot create hsr debugfs directory [ 85.068568][ T5592] hsr_slave_0: entered promiscuous mode [ 85.069894][ T5592] hsr_slave_1: entered promiscuous mode [ 85.070704][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 85.070724][ T5592] Cannot create hsr debugfs directory [ 85.138329][ T5594] hsr_slave_0: entered promiscuous mode [ 85.139250][ T5594] hsr_slave_1: entered promiscuous mode [ 85.140399][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 85.140419][ T5594] Cannot create hsr debugfs directory [ 85.145566][ T5593] hsr_slave_0: entered promiscuous mode [ 85.146254][ T5593] hsr_slave_1: entered promiscuous mode [ 85.146757][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 85.146773][ T5593] Cannot create hsr debugfs directory [ 85.488074][ T5599] Bluetooth: hci4: command tx timeout [ 85.488116][ T5599] Bluetooth: hci1: command tx timeout [ 85.569225][ T5596] Bluetooth: hci3: command tx timeout [ 85.569253][ T5596] Bluetooth: hci0: command tx timeout [ 85.569273][ T5596] Bluetooth: hci2: command tx timeout [ 86.110696][ T5590] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.159795][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.171417][ T5590] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.192958][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.197407][ T5590] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.222188][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.239550][ T5590] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.260686][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.369593][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.410867][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.415017][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.451299][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.453333][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.490640][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.506317][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.531253][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.635779][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.672900][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.690683][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.710675][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.713266][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.752883][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.777253][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.800270][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.934450][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.960940][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.970552][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.011910][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.016370][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.060376][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.081340][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.122098][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.151181][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.242913][ T5591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.280704][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.290752][ T5591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.330851][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.336020][ T5591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.370410][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.372317][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.375636][ T5591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.430472][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.467541][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.467668][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.504308][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.537568][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.537676][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.568074][ T5599] Bluetooth: hci4: command tx timeout [ 87.578520][ T5599] Bluetooth: hci1: command tx timeout [ 87.621919][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.648207][ T5610] Bluetooth: hci3: command tx timeout [ 87.648287][ T5596] Bluetooth: hci0: command tx timeout [ 87.648356][ T5599] Bluetooth: hci2: command tx timeout [ 87.656630][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.657035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.692257][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.725053][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.725123][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.804927][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.878997][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.879205][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.907159][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.937360][ T1428] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.937481][ T1428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.079271][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.140477][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.144786][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.144988][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.196955][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.197079][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.258263][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.292555][ T1461] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.293003][ T1461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.386785][ T1461] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.389729][ T1461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.961884][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.359691][ T5590] veth0_vlan: entered promiscuous mode [ 89.403705][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.467781][ T5590] veth1_vlan: entered promiscuous mode [ 89.511471][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.648991][ T5596] Bluetooth: hci4: command tx timeout [ 89.649036][ T5599] Bluetooth: hci1: command tx timeout [ 89.699662][ T5590] veth0_macvtap: entered promiscuous mode [ 89.718934][ T5592] veth0_vlan: entered promiscuous mode [ 89.729684][ T5599] Bluetooth: hci2: command tx timeout [ 89.729712][ T5599] Bluetooth: hci0: command tx timeout [ 89.729733][ T5599] Bluetooth: hci3: command tx timeout [ 89.732234][ T5590] veth1_macvtap: entered promiscuous mode [ 89.791289][ T5592] veth1_vlan: entered promiscuous mode [ 89.881596][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.931800][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.006744][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.098788][ T5592] veth0_macvtap: entered promiscuous mode [ 90.127860][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.160575][ T5592] veth1_macvtap: entered promiscuous mode [ 90.356579][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.414851][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.452360][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.452382][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.502556][ T5594] veth0_vlan: entered promiscuous mode [ 90.524804][ T5593] veth0_vlan: entered promiscuous mode [ 90.622549][ T5594] veth1_vlan: entered promiscuous mode [ 90.631417][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.631435][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.708177][ T5591] veth0_vlan: entered promiscuous mode [ 90.776994][ T5593] veth1_vlan: entered promiscuous mode [ 90.996776][ T5591] veth1_vlan: entered promiscuous mode [ 91.089826][ T1291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.089844][ T1291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.204959][ T5594] veth0_macvtap: entered promiscuous mode [ 91.223667][ T5593] veth0_macvtap: entered promiscuous mode [ 91.235901][ T5594] veth1_macvtap: entered promiscuous mode [ 91.240407][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.240423][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.297517][ T5593] veth1_macvtap: entered promiscuous mode [ 91.394897][ T5591] veth0_macvtap: entered promiscuous mode [ 91.430484][ T5591] veth1_macvtap: entered promiscuous mode [ 91.435387][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.606272][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.614410][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.947710][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.706898][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.794282][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.831374][ T5793] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.852409][ T37] audit: type=1326 audit(1787078195.168:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 92.852459][ T37] audit: type=1326 audit(1787078195.178:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 92.854600][ T37] audit: type=1326 audit(1787078195.178:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 92.854642][ T37] audit: type=1326 audit(1787078195.178:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 92.854679][ T37] audit: type=1326 audit(1787078195.178:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f69b7e2e90e code=0x7ffc0000 [ 92.854716][ T37] audit: type=1326 audit(1787078195.178:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f69b7e2e90e code=0x7ffc0000 [ 92.854753][ T37] audit: type=1326 audit(1787078195.178:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f69b7e2e90e code=0x7ffc0000 [ 92.854790][ T37] audit: type=1326 audit(1787078195.178:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 92.854826][ T37] audit: type=1326 audit(1787078195.178:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 92.866290][ T37] audit: type=1326 audit(1787078195.188:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5790 comm="syz.2.3" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 93.006430][ T5791] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.444748][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.444768][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.577211][ T5813] 9pnet_fd: p9_fd_create_tcp (5813): problem connecting socket to 127.0.0.1 [ 94.595076][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.595094][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.744424][ T200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.744437][ T200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.005466][ T5818] netlink: 'syz.1.14': attribute type 10 has an invalid length. [ 95.005539][ T5818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14'. [ 95.022038][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.022056][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.108478][ T5818] erspan0: entered promiscuous mode [ 95.108530][ T5818] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 95.179920][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.179940][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.576909][ T1461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.576929][ T1461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.652102][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654496][ T1176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654762][ T1176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.656653][ T1176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.657090][ T1176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.657597][ T1176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.822518][ T1176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.328264][ T1428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.484115][ T200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.501503][ T200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.525011][ T200] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.677834][ T200] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.722633][ T200] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655838][ T1461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.728356][ T1461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.728737][ T1461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190224][ T1428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190566][ T1428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.190905][ T1428] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.191175][ T1428] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.413022][ T5853] futex_wake_op: syz.3.20 tries to shift op by -1; fix this program [ 102.614133][ T5873] netlink: 'syz.2.26': attribute type 1 has an invalid length. [ 102.615131][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.2.26'. [ 102.969430][ T5886] netlink: 'syz.2.26': attribute type 10 has an invalid length. [ 103.116924][ T5886] team0: Device vxcan0 is of different type [ 103.635318][ T5898] Bluetooth: MGMT ver 1.23 [ 103.635357][ T5898] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 106.199652][ T5927] netlink: 32 bytes leftover after parsing attributes in process `syz.4.42'. [ 106.245861][ T37] kauditd_printk_skb: 114 callbacks suppressed [ 106.245876][ T37] audit: type=1326 audit(1787078208.558:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3943e0d9 code=0x7ffc0000 [ 106.245909][ T37] audit: type=1326 audit(1787078208.568:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3943e0d9 code=0x7ffc0000 [ 106.247162][ T37] audit: type=1326 audit(1787078208.568:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3943e0d9 code=0x7ffc0000 [ 106.247208][ T37] audit: type=1326 audit(1787078208.568:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3943e0d9 code=0x7ffc0000 [ 106.252145][ T37] audit: type=1326 audit(1787078208.578:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1b393fe90e code=0x7ffc0000 [ 106.257684][ T37] audit: type=1326 audit(1787078208.578:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1b393fe90e code=0x7ffc0000 [ 106.257727][ T37] audit: type=1326 audit(1787078208.578:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1b3943de42 code=0x7ffc0000 [ 106.257765][ T37] audit: type=1326 audit(1787078208.578:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b3943df07 code=0x7ffc0000 [ 106.266759][ T37] audit: type=1326 audit(1787078208.588:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1b3943df07 code=0x7ffc0000 [ 106.266804][ T37] audit: type=1326 audit(1787078208.588:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5926 comm="syz.4.42" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1b3943ded7 code=0x7ffc0000 [ 107.950917][ T5939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 115.126861][ T5988] ehci-platform pcspkr: error -ENXIO: IRQ index 0 not found [ 116.446974][ T6004] kAFS: bad VL server IP address [ 117.573583][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 117.573613][ T37] audit: type=1326 audit(1787078219.888:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.573658][ T37] audit: type=1326 audit(1787078219.898:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.573697][ T37] audit: type=1326 audit(1787078219.898:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.581891][ T37] audit: type=1326 audit(1787078219.898:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.584319][ T37] audit: type=1326 audit(1787078219.908:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.598070][ T37] audit: type=1326 audit(1787078219.918:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.649201][ T37] audit: type=1326 audit(1787078219.918:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.649245][ T37] audit: type=1326 audit(1787078219.968:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.649285][ T37] audit: type=1326 audit(1787078219.968:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.649322][ T37] audit: type=1326 audit(1787078219.928:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6011 comm="syz.2.62" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b7e6e0d9 code=0x7ffc0000 [ 117.848618][ T1872] IPVS: starting estimator thread 0... [ 117.999074][ T6020] IPVS: using max 9 ests per chain, 21600 per kthread [ 118.170100][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 120.455283][ T6048] kAFS: unable to lookup cell '' [ 120.465938][ T997] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.843046][ T997] usb 1-1: Using ep0 maxpacket: 8 [ 121.845795][ T997] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 121.902355][ T997] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.902379][ T997] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.902427][ T997] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.902467][ T997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.196437][ T6062] netlink: 'syz.3.76': attribute type 15 has an invalid length. [ 122.196460][ T6062] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.76'. [ 124.772707][ T997] hub 1-1:1.0: bad descriptor, ignoring hub [ 124.772745][ T997] hub 1-1:1.0: probe with driver hub failed with error -5 [ 124.773982][ T997] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 124.846370][ T997] usb 1-1: USB disconnect, device number 2 [ 125.143015][ T6072] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 125.193703][ T6072] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.299069][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 125.316343][ T6072] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.493068][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.493360][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.540436][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.540597][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.590902][ T6072] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.606988][ T6075] bridge_slave_1: left allmulticast mode [ 125.607015][ T6075] bridge_slave_1: left promiscuous mode [ 125.607319][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.821094][ T6087] tipc: Failed to remove unknown binding: 66,0,0/0:2634123148/2634123149 [ 125.821801][ T6087] tipc: Failed to remove unknown binding: 66,0,0/0:2634123148/2634123149 [ 125.825404][ T6075] bridge_slave_0: left allmulticast mode [ 125.825434][ T6075] bridge_slave_0: left promiscuous mode [ 125.825675][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.953779][ T6075] bond0: (slave bridge0): Releasing backup interface [ 128.909158][ T5696] IPVS: starting estimator thread 0... [ 129.088467][ T6130] IPVS: rr: TCP 127.0.0.1:21 - no destination available [ 129.228036][ T6129] IPVS: using max 9 ests per chain, 21600 per kthread [ 129.500607][ T6138] process 'syz.3.94' launched './file0' with NULL argv: empty string added [ 133.127475][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.127581][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.169310][ T37] kauditd_printk_skb: 33 callbacks suppressed [ 133.169324][ T37] audit: type=1326 audit(1787078235.488:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6155 comm="syz.4.101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3943e0d9 code=0x7ffc0000 [ 133.170430][ T37] audit: type=1326 audit(1787078235.498:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6155 comm="syz.4.101" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b3943e0d9 code=0x7ffc0000 [ 133.463370][ T37] audit: type=1326 audit(1787078235.788:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.463599][ T37] audit: type=1326 audit(1787078235.788:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.468642][ T37] audit: type=1326 audit(1787078235.798:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.509886][ T37] audit: type=1326 audit(1787078235.808:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.509915][ T37] audit: type=1326 audit(1787078235.808:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.509936][ T37] audit: type=1326 audit(1787078235.838:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.509956][ T37] audit: type=1326 audit(1787078235.838:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.510790][ T37] audit: type=1326 audit(1787078235.838:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6169 comm="syz.3.104" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd4e8e0d9 code=0x7ffc0000 [ 133.977973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.997966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.007964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.017965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.047962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.057964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.067964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.077983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.087970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.097970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.682527][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 136.682549][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 139.748841][ T6205] syz.1.116 (6205): drop_caches: 2 [ 141.614448][ T6216] Zero length message leads to an empty skb [ 143.202725][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.691504][ T6236] binder_alloc: 6231: binder_alloc_buf size 12224 failed, no address space [ 143.691581][ T6236] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 144.808058][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.958592][ T31] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 144.961928][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.961979][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 144.961999][ T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.962038][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.514581][ T1872] usb 2-1: USB disconnect, device number 3 [ 145.552208][ T6234] syz.2.123 (6234): drop_caches: 2 [ 146.170894][ T6259] bridge0: port 3(veth0) entered blocking state [ 146.172712][ T6259] bridge0: port 3(veth0) entered disabled state [ 146.172911][ T6259] veth0: entered allmulticast mode [ 146.193772][ T6259] veth0: entered promiscuous mode [ 146.216805][ T6259] bridge0: port 3(veth0) entered blocking state [ 146.216919][ T6259] bridge0: port 3(veth0) entered forwarding state [ 152.477678][ T6289] syz.3.140 (6289) used greatest stack depth: 18736 bytes left [ 154.652907][ T6328] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 155.669873][ T6335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'. [ 160.627248][ T5596] Bluetooth: Unknown LE signaling command 0x83 [ 160.627271][ T5596] Bluetooth: Wrong link type (-22) [ 163.074217][ T6380] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 163.861648][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 167.477740][ T6412] syz.0.172 (6412) used greatest stack depth: 18248 bytes left [ 167.838053][ T6196] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.862753][ T6415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 167.988000][ T6196] usb 2-1: Using ep0 maxpacket: 16 [ 167.988962][ T6196] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 167.990392][ T6196] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.990440][ T6196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.990467][ T6196] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 167.990487][ T6196] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 167.990508][ T6196] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.991902][ T6196] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 167.991924][ T6196] usb 2-1: Manufacturer: syz [ 168.047503][ T6196] usb 2-1: config 0 descriptor?? [ 169.108056][ T6196] rc_core: IR keymap rc-hauppauge not found [ 169.108137][ T6196] Registered IR keymap rc-empty [ 169.121665][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.139072][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 169.979007][ T6196] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 170.035993][ T6196] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 171.829511][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 171.848390][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.942705][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.959971][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 172.981026][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.000416][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.018063][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.041261][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.060342][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.078083][ T6196] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 173.158790][ T6196] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 173.158812][ T6196] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.197487][ T6196] usb 2-1: USB disconnect, device number 4 [ 174.171935][ T6451] capability: warning: `syz.0.186' uses 32-bit capabilities (legacy support in use) [ 186.692111][ T6545] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 190.393211][ T6563] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 190.393241][ T6563] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 190.638020][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 191.620727][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 191.621676][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 191.625347][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.625394][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.625418][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 191.625437][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 191.625457][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.631631][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.631652][ T10] usb 2-1: Manufacturer: syz [ 191.647744][ T10] usb 2-1: config 0 descriptor?? [ 191.685994][ T5598] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 192.104852][ T10] rc_core: IR keymap rc-hauppauge not found [ 192.104868][ T10] Registered IR keymap rc-empty [ 192.104990][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.121038][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.179326][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 192.202562][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 192.317598][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.340361][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.360220][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.378048][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.402734][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.419720][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.448834][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.477084][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.488537][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.518142][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 192.765956][ T6572] syz.3.216 (6572) used greatest stack depth: 16896 bytes left [ 192.773802][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 192.773824][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.849767][ T10] usb 2-1: USB disconnect, device number 6 [ 194.402665][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.402735][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.618659][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.227'. [ 197.585293][ T6625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.797417][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 197.882209][ T6638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.233'. [ 198.998066][ T9] usb 3-1: device descriptor read/all, error -71 [ 200.419900][ T5910] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 200.588044][ T5910] usb 5-1: Using ep0 maxpacket: 16 [ 200.588967][ T5910] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.590532][ T5910] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.590581][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.590606][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 6144, setting to 1024 [ 200.590630][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 200.590651][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.591946][ T5910] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.591967][ T5910] usb 5-1: Manufacturer: syz [ 200.608118][ T5910] usb 5-1: config 0 descriptor?? [ 200.822528][ T6662] netlink: 220 bytes leftover after parsing attributes in process `syz.2.238'. [ 200.822542][ T6662] tc_dump_action: action bad kind [ 202.034667][ T5910] rc_core: IR keymap rc-hauppauge not found [ 202.034685][ T5910] Registered IR keymap rc-empty [ 202.036824][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 202.053639][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 202.072245][ T5910] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 202.075347][ T5910] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 202.104885][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 202.136506][ C1] mceusb 5-1:0.0: long-range (0xcc) receiver active [ 202.270577][ C1] rc rc0: IR event FIFO is full! [ 202.271112][ C1] rc rc0: IR event FIFO is full! [ 202.271177][ C1] rc rc0: IR event FIFO is full! [ 202.271212][ C1] rc rc0: IR event FIFO is full! [ 202.271274][ C1] rc rc0: IR event FIFO is full! [ 202.271327][ C1] rc rc0: IR event FIFO is full! [ 202.271381][ C1] rc rc0: IR event FIFO is full! [ 202.272093][ C1] rc rc0: IR event FIFO is full! [ 202.272148][ C1] rc rc0: IR event FIFO is full! [ 202.272204][ C1] rc rc0: IR event FIFO is full! [ 202.272258][ C1] rc rc0: IR event FIFO is full! [ 202.272314][ C1] rc rc0: IR event FIFO is full! [ 202.273036][ C1] rc rc0: IR event FIFO is full! [ 202.273094][ C1] rc rc0: IR event FIFO is full! [ 202.273128][ C1] rc rc0: IR event FIFO is full! [ 202.273162][ C1] rc rc0: IR event FIFO is full! [ 202.273898][ C1] rc rc0: IR event FIFO is full! [ 202.273933][ C1] rc rc0: IR event FIFO is full! [ 202.273977][ C1] rc rc0: IR event FIFO is full! [ 202.274030][ C1] rc rc0: IR event FIFO is full! [ 202.274083][ C1] rc rc0: IR event FIFO is full! [ 202.276096][ C1] rc rc0: IR event FIFO is full! [ 202.276156][ C1] rc rc0: IR event FIFO is full! [ 202.276216][ C1] rc rc0: IR event FIFO is full! [ 202.276252][ C1] rc rc0: IR event FIFO is full! [ 202.276295][ C1] rc rc0: IR event FIFO is full! [ 202.276349][ C1] rc rc0: IR event FIFO is full! [ 202.276420][ C1] rc rc0: IR event FIFO is full! [ 202.276455][ C1] rc rc0: IR event FIFO is full! [ 202.276499][ C1] rc rc0: IR event FIFO is full! [ 202.276532][ C1] rc rc0: IR event FIFO is full! [ 202.277229][ C1] rc rc0: IR event FIFO is full! [ 202.277285][ C1] rc rc0: IR event FIFO is full! [ 202.277338][ C1] rc rc0: IR event FIFO is full! [ 202.277373][ C1] rc rc0: IR event FIFO is full! [ 202.277416][ C1] rc rc0: IR event FIFO is full! [ 202.277450][ C1] rc rc0: IR event FIFO is full! [ 202.277484][ C1] rc rc0: IR event FIFO is full! [ 202.277517][ C1] rc rc0: IR event FIFO is full! [ 202.278342][ C1] rc rc0: IR event FIFO is full! [ 202.278400][ C1] rc rc0: IR event FIFO is full! [ 202.278434][ C1] rc rc0: IR event FIFO is full! [ 202.278468][ C1] rc rc0: IR event FIFO is full! [ 202.278522][ C1] rc rc0: IR event FIFO is full! [ 202.278576][ C1] rc rc0: IR event FIFO is full! [ 202.278617][ C1] rc rc0: IR event FIFO is full! [ 202.279370][ C1] rc rc0: IR event FIFO is full! [ 202.279427][ C1] rc rc0: IR event FIFO is full! [ 202.279482][ C1] rc rc0: IR event FIFO is full! [ 202.279516][ C1] rc rc0: IR event FIFO is full! [ 202.279571][ C1] rc rc0: IR event FIFO is full! [ 202.279631][ C1] rc rc0: IR event FIFO is full! [ 202.279685][ C1] rc rc0: IR event FIFO is full! [ 202.279719][ C1] rc rc0: IR event FIFO is full! [ 202.279773][ C1] rc rc0: IR event FIFO is full! [ 202.279827][ C1] rc rc0: IR event FIFO is full! [ 202.279861][ C1] rc rc0: IR event FIFO is full! [ 202.280548][ C1] rc rc0: IR event FIFO is full! [ 202.280625][ C1] rc rc0: IR event FIFO is full! [ 202.283354][ C1] rc rc0: IR event FIFO is full! [ 202.283413][ C1] rc rc0: IR event FIFO is full! [ 202.283448][ C1] rc rc0: IR event FIFO is full! [ 202.283504][ C1] rc rc0: IR event FIFO is full! [ 202.283559][ C1] rc rc0: IR event FIFO is full! [ 202.285445][ C1] rc rc0: IR event FIFO is full! [ 202.285511][ C1] rc rc0: IR event FIFO is full! [ 202.285566][ C1] rc rc0: IR event FIFO is full! [ 202.285607][ C1] rc rc0: IR event FIFO is full! [ 202.285650][ C1] rc rc0: IR event FIFO is full! [ 202.285705][ C1] rc rc0: IR event FIFO is full! [ 202.285760][ C1] rc rc0: IR event FIFO is full! [ 202.286498][ C1] rc rc0: IR event FIFO is full! [ 202.287086][ C1] rc rc0: IR event FIFO is full! [ 202.287141][ C1] rc rc0: IR event FIFO is full! [ 202.287303][ C1] rc rc0: IR event FIFO is full! [ 202.287372][ C1] rc rc0: IR event FIFO is full! [ 202.287426][ C1] rc rc0: IR event FIFO is full! [ 202.287480][ C1] rc rc0: IR event FIFO is full! [ 202.287532][ C1] rc rc0: IR event FIFO is full! [ 202.288396][ C1] rc rc0: IR event FIFO is full! [ 202.288454][ C1] rc rc0: IR event FIFO is full! [ 202.289122][ C1] rc rc0: IR event FIFO is full! [ 202.289185][ C1] rc rc0: IR event FIFO is full! [ 202.289823][ C1] rc rc0: IR event FIFO is full! [ 202.289857][ C1] rc rc0: IR event FIFO is full! [ 202.289912][ C1] rc rc0: IR event FIFO is full! [ 202.289946][ C1] rc rc0: IR event FIFO is full! [ 202.290000][ C1] rc rc0: IR event FIFO is full! [ 202.290054][ C1] rc rc0: IR event FIFO is full! [ 202.291144][ C1] rc rc0: IR event FIFO is full! [ 202.291201][ C1] rc rc0: IR event FIFO is full! [ 202.291256][ C1] rc rc0: IR event FIFO is full! [ 202.291333][ C1] rc rc0: IR event FIFO is full! [ 202.291391][ C1] rc rc0: IR event FIFO is full! [ 202.292081][ C1] rc rc0: IR event FIFO is full! [ 202.292134][ C1] rc rc0: IR event FIFO is full! [ 202.292169][ C1] rc rc0: IR event FIFO is full! [ 202.292202][ C1] rc rc0: IR event FIFO is full! [ 202.292951][ C1] rc rc0: IR event FIFO is full! [ 202.292996][ C1] rc rc0: IR event FIFO is full! [ 202.293048][ C1] rc rc0: IR event FIFO is full! [ 202.293082][ C1] rc rc0: IR event FIFO is full! [ 202.293114][ C1] rc rc0: IR event FIFO is full! [ 202.293148][ C1] rc rc0: IR event FIFO is full! [ 202.293181][ C1] rc rc0: IR event FIFO is full! [ 202.294449][ C1] rc rc0: IR event FIFO is full! [ 202.294504][ C1] rc rc0: IR event FIFO is full! [ 202.294558][ C1] rc rc0: IR event FIFO is full! [ 202.294617][ C1] rc rc0: IR event FIFO is full! [ 202.294670][ C1] rc rc0: IR event FIFO is full! [ 202.294836][ C1] rc rc0: IR event FIFO is full! [ 202.294870][ C1] rc rc0: IR event FIFO is full! [ 202.294904][ C1] rc rc0: IR event FIFO is full! [ 202.294938][ C1] rc rc0: IR event FIFO is full! [ 202.295521][ C1] rc rc0: IR event FIFO is full! [ 202.296784][ C1] rc rc0: IR event FIFO is full! [ 202.296819][ C1] rc rc0: IR event FIFO is full! [ 202.296970][ C1] rc rc0: IR event FIFO is full! [ 202.297025][ C1] rc rc0: IR event FIFO is full! [ 202.297078][ C1] rc rc0: IR event FIFO is full! [ 202.297747][ C1] rc rc0: IR event FIFO is full! [ 202.297802][ C1] rc rc0: IR event FIFO is full! [ 202.297856][ C1] rc rc0: IR event FIFO is full! [ 202.298095][ C1] rc rc0: IR event FIFO is full! [ 202.298151][ C1] rc rc0: IR event FIFO is full! [ 202.298206][ C1] rc rc0: IR event FIFO is full! [ 202.298260][ C1] rc rc0: IR event FIFO is full! [ 202.298314][ C1] rc rc0: IR event FIFO is full! [ 202.298368][ C1] rc rc0: IR event FIFO is full! [ 202.299396][ C1] rc rc0: IR event FIFO is full! [ 202.299451][ C1] rc rc0: IR event FIFO is full! [ 202.299505][ C1] rc rc0: IR event FIFO is full! [ 202.299558][ C1] rc rc0: IR event FIFO is full! [ 202.299600][ C1] rc rc0: IR event FIFO is full! [ 202.299654][ C1] rc rc0: IR event FIFO is full! [ 202.299708][ C1] rc rc0: IR event FIFO is full! [ 202.299762][ C1] rc rc0: IR event FIFO is full! [ 202.299816][ C1] rc rc0: IR event FIFO is full! [ 202.300493][ C1] rc rc0: IR event FIFO is full! [ 202.300550][ C1] rc rc0: IR event FIFO is full! [ 202.301141][ C1] rc rc0: IR event FIFO is full! [ 202.301330][ C1] rc rc0: IR event FIFO is full! [ 202.301896][ C1] rc rc0: IR event FIFO is full! [ 202.301960][ C1] rc rc0: IR event FIFO is full! [ 202.302013][ C1] rc rc0: IR event FIFO is full! [ 202.302066][ C1] rc rc0: IR event FIFO is full! [ 202.302118][ C1] rc rc0: IR event FIFO is full! [ 202.302171][ C1] rc rc0: IR event FIFO is full! [ 202.302224][ C1] rc rc0: IR event FIFO is full! [ 202.302374][ C1] rc rc0: IR event FIFO is full! [ 202.302409][ C1] rc rc0: IR event FIFO is full! [ 202.302441][ C1] rc rc0: IR event FIFO is full! [ 202.302475][ C1] rc rc0: IR event FIFO is full! [ 202.302529][ C1] rc rc0: IR event FIFO is full! [ 202.303139][ C1] rc rc0: IR event FIFO is full! [ 202.303192][ C1] rc rc0: IR event FIFO is full! [ 202.304603][ C1] rc rc0: IR event FIFO is full! [ 202.304658][ C1] rc rc0: IR event FIFO is full! [ 202.304711][ C1] rc rc0: IR event FIFO is full! [ 202.304766][ C1] rc rc0: IR event FIFO is full! [ 202.306481][ C1] rc rc0: IR event FIFO is full! [ 202.306516][ C1] rc rc0: IR event FIFO is full! [ 202.306718][ C1] rc rc0: IR event FIFO is full! [ 202.306772][ C1] rc rc0: IR event FIFO is full! [ 202.306824][ C1] rc rc0: IR event FIFO is full! [ 202.307438][ C1] rc rc0: IR event FIFO is full! [ 202.307491][ C1] rc rc0: IR event FIFO is full! [ 202.307544][ C1] rc rc0: IR event FIFO is full! [ 202.307603][ C1] rc rc0: IR event FIFO is full! [ 202.307767][ C1] rc rc0: IR event FIFO is full! [ 202.308450][ C1] rc rc0: IR event FIFO is full! [ 202.308485][ C1] rc rc0: IR event FIFO is full! [ 202.309181][ C1] rc rc0: IR event FIFO is full! [ 202.309237][ C1] rc rc0: IR event FIFO is full! [ 202.309292][ C1] rc rc0: IR event FIFO is full! [ 202.309346][ C1] rc rc0: IR event FIFO is full! [ 202.309401][ C1] rc rc0: IR event FIFO is full! [ 202.309455][ C1] rc rc0: IR event FIFO is full! [ 202.309489][ C1] rc rc0: IR event FIFO is full! [ 202.310244][ C1] rc rc0: IR event FIFO is full! [ 202.310279][ C1] rc rc0: IR event FIFO is full! [ 202.310312][ C1] rc rc0: IR event FIFO is full! [ 202.310366][ C1] rc rc0: IR event FIFO is full! [ 202.310420][ C1] rc rc0: IR event FIFO is full! [ 202.310474][ C1] rc rc0: IR event FIFO is full! [ 202.310529][ C1] rc rc0: IR event FIFO is full! [ 202.310563][ C1] rc rc0: IR event FIFO is full! [ 202.311234][ C1] rc rc0: IR event FIFO is full! [ 202.311289][ C1] rc rc0: IR event FIFO is full! [ 202.311343][ C1] rc rc0: IR event FIFO is full! [ 202.311399][ C1] rc rc0: IR event FIFO is full! [ 202.311453][ C1] rc rc0: IR event FIFO is full! [ 202.311507][ C1] rc rc0: IR event FIFO is full! [ 202.311561][ C1] rc rc0: IR event FIFO is full! [ 202.312304][ C1] rc rc0: IR event FIFO is full! [ 202.312360][ C1] rc rc0: IR event FIFO is full! [ 202.312415][ C1] rc rc0: IR event FIFO is full! [ 202.312449][ C1] rc rc0: IR event FIFO is full! [ 202.312503][ C1] rc rc0: IR event FIFO is full! [ 202.312557][ C1] rc rc0: IR event FIFO is full! [ 202.312618][ C1] rc rc0: IR event FIFO is full! [ 202.313377][ C1] rc rc0: IR event FIFO is full! [ 202.313455][ C1] rc rc0: IR event FIFO is full! [ 202.313510][ C1] rc rc0: IR event FIFO is full! [ 202.314094][ C1] rc rc0: IR event FIFO is full! [ 202.314246][ C1] rc rc0: IR event FIFO is full! [ 202.314279][ C1] rc rc0: IR event FIFO is full! [ 202.314333][ C1] rc rc0: IR event FIFO is full! [ 202.314388][ C1] rc rc0: IR event FIFO is full! [ 202.314442][ C1] rc rc0: IR event FIFO is full! [ 202.314497][ C1] rc rc0: IR event FIFO is full! [ 202.314530][ C1] rc rc0: IR event FIFO is full! [ 202.315115][ C1] rc rc0: IR event FIFO is full! [ 202.315170][ C1] rc rc0: IR event FIFO is full! [ 202.315339][ C1] rc rc0: IR event FIFO is full! [ 202.315393][ C1] rc rc0: IR event FIFO is full! [ 202.315447][ C1] rc rc0: IR event FIFO is full! [ 202.315500][ C1] rc rc0: IR event FIFO is full! [ 202.317199][ C1] rc rc0: IR event FIFO is full! [ 202.317256][ C1] rc rc0: IR event FIFO is full! [ 202.317309][ C1] rc rc0: IR event FIFO is full! [ 202.317453][ C1] rc rc0: IR event FIFO is full! [ 202.317486][ C1] rc rc0: IR event FIFO is full! [ 202.319267][ C1] rc rc0: IR event FIFO is full! [ 202.979838][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 202.998181][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.018209][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.038185][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.063572][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.078560][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.129213][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.149042][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.169870][ T5910] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 203.486667][ T5910] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.486689][ T5910] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0xcc active) [ 203.553299][ T5910] usb 5-1: USB disconnect, device number 2 [ 203.640815][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 204.139674][ T5728] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 204.298023][ T5728] usb 3-1: Using ep0 maxpacket: 8 [ 204.298773][ T5728] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 204.300163][ T5728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.693026][ T5728] usb 3-1: config 0 descriptor?? [ 205.321032][ T5728] usb 3-1: string descriptor 0 read error: -71 [ 205.321095][ T5728] uvcvideo 3-1:0.0: Found multiple Units with ID 1 [ 205.321264][ T5728] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 205.321508][ T5728] uvcvideo 3-1:0.0: No valid video chain found. [ 205.349293][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.251'. [ 205.445166][ T5728] usb 3-1: USB disconnect, device number 5 [ 206.547386][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 206.559319][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 206.613010][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 206.613661][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 206.613689][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 209.680591][ T6742] tipc: Enabling of bearer rejected, failed to enable media [ 211.795662][ T6770] capability: warning: `syz.3.269' uses deprecated v2 capabilities in a way that may be insecure [ 219.591244][ T6801] kvm: kvm [6799]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xfe [ 223.185775][ T6842] fuse: Bad value for 'fd' [ 223.439571][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 227.001984][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.298'. [ 230.351099][ T5604] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 231.518752][ T5604] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 231.526679][ T5604] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 231.526704][ T5604] usb 5-1: Product: syz [ 231.526777][ T5604] usb 5-1: Manufacturer: syz [ 231.526791][ T5604] usb 5-1: SerialNumber: syz [ 231.574117][ T5604] usb 5-1: config 0 descriptor?? [ 231.584967][ T5604] ch341 5-1:0.0: ch341-uart converter detected [ 232.089900][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.304'. [ 233.003116][ T5604] usb 5-1: failed to send control message: -110 [ 233.003173][ T5604] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 233.103515][ T5604] usb 5-1: USB disconnect, device number 3 [ 233.324966][ T5604] ch341 5-1:0.0: device disconnected [ 233.633312][ T6656] udevd[6656]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory [ 233.633489][ T6656] udevd[6656]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 236.420794][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.757972][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 236.757988][ T37] audit: type=1800 audit(1787078339.058:278): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.327" name="idVendor" dev="configfs" ino=12313 res=0 errno=0 [ 236.758032][ T37] audit: type=1800 audit(1787078339.068:279): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.327" name="idProduct" dev="configfs" ino=12314 res=0 errno=0 [ 236.758071][ T37] audit: type=1800 audit(1787078339.068:280): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.327" name="serialnumber" dev="configfs" ino=12316 res=0 errno=0 [ 236.758118][ T37] audit: type=1800 audit(1787078339.068:281): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.327" name="manufacturer" dev="configfs" ino=12317 res=0 errno=0 [ 236.758156][ T37] audit: type=1800 audit(1787078339.068:282): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.327" name="product" dev="configfs" ino=12318 res=0 errno=0 [ 236.758193][ T37] audit: type=1800 audit(1787078339.078:283): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.327" name="configuration" dev="configfs" ino=12323 res=0 errno=0 [ 237.238657][ T1872] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 237.430929][ T6971] bridge_slave_0: left allmulticast mode [ 237.431060][ T6971] bridge_slave_0: left promiscuous mode [ 237.431317][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.631193][ T1872] usb 3-1: not running at top speed; connect to a high speed hub [ 237.631226][ T1872] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 237.632097][ T1872] usb 3-1: config 0 has no interfaces? [ 237.645805][ T1872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.645818][ T1872] usb 3-1: Product: syz [ 237.645826][ T1872] usb 3-1: Manufacturer: syz [ 237.645833][ T1872] usb 3-1: SerialNumber: syz [ 237.705409][ T1872] usb 3-1: config 0 descriptor?? [ 237.746784][ T6993] openvswitch: netlink: Message has 8 unknown bytes. [ 237.825218][ T6971] bridge_slave_1: left allmulticast mode [ 237.825248][ T6971] bridge_slave_1: left promiscuous mode [ 237.825379][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.948766][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.957534][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.978983][ T6996] netlink: 'syz.0.333': attribute type 8 has an invalid length. [ 238.045921][ T6971] bond0: (slave bond_slave_0): Releasing backup interface [ 240.084909][ T6971] bond0: (slave bond_slave_1): Releasing backup interface [ 240.704059][ T6971] team0: Port device team_slave_0 removed [ 241.452640][ T6971] team0: Port device team_slave_1 removed [ 241.456737][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.456761][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.534615][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.534631][ T6971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.607135][ T6971] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 242.335435][ T997] usb 3-1: USB disconnect, device number 6 [ 242.418664][ T7028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.206946][ T7100] binder_alloc: 7099: pid 7099 spamming oneway? 1 buffers allocated for a total size of 4096 [ 250.210599][ T7100] binder_alloc: 7099: pid 7099 spamming oneway? 2 buffers allocated for a total size of 5120 [ 255.664233][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.664274][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.624252][ T7205] veth1_macvtap: left promiscuous mode [ 260.624278][ T7205] macsec0: entered allmulticast mode [ 260.735954][ T7208] veth1_macvtap: entered promiscuous mode [ 260.735978][ T7208] veth1_macvtap: entered allmulticast mode [ 260.771943][ T7208] macsec0: left allmulticast mode [ 260.771962][ T7208] veth1_macvtap: left allmulticast mode [ 261.170336][ T37] audit: type=1800 audit(1787078363.498:284): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.393" name="idVendor" dev="configfs" ino=12795 res=0 errno=0 [ 261.173410][ T37] audit: type=1800 audit(1787078363.498:285): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.393" name="idProduct" dev="configfs" ino=12796 res=0 errno=0 [ 261.254931][ T37] audit: type=1800 audit(1787078363.578:286): pid=7212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.393" name="serialnumber" dev="configfs" ino=12797 res=0 errno=0 [ 261.779272][ T7202] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 261.779298][ T7202] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.841660][ T7202] vhci_hcd vhci_hcd.0: Device attached [ 261.870638][ T7217] vhci_hcd: connection closed [ 261.936315][ T1433] vhci_hcd vhci_hcd.4: stop threads [ 261.937176][ T1433] vhci_hcd vhci_hcd.4: release socket [ 261.937286][ T1433] vhci_hcd vhci_hcd.4: disconnect device [ 264.456587][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'. [ 269.202090][ T4907] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 269.229053][ T7253] tmpfs: Bad value for 'mpol' [ 271.170132][ T7275] ======================================================= [ 271.170132][ T7275] WARNING: The mand mount option has been deprecated and [ 271.170132][ T7275] and is ignored by this kernel. Remove the mand [ 271.170132][ T7275] option from the mount to silence this warning. [ 271.170132][ T7275] ======================================================= [ 272.618956][ T7295] netlink: 'syz.1.421': attribute type 1 has an invalid length. [ 272.737347][ T7295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.220055][ T7300] veth3: entered allmulticast mode [ 273.256002][ T7300] bond1: (slave veth3): Enslaving as an active interface with a down link [ 273.660322][ T7295] bond1: (slave veth0_to_bond): making interface the new active one [ 273.833056][ T7295] veth0_to_bond: entered promiscuous mode [ 273.833583][ T7295] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 275.282718][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 275.929728][ T7302] bond1: entered promiscuous mode [ 275.929973][ T7302] bond1: entered allmulticast mode [ 275.929987][ T7302] veth0_to_bond: entered allmulticast mode [ 277.193460][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 289.793807][ T7456] bridge_slave_0: left allmulticast mode [ 289.793839][ T7456] bridge_slave_0: left promiscuous mode [ 289.794094][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.199915][ T7456] bridge_slave_1: left allmulticast mode [ 291.199947][ T7456] bridge_slave_1: left promiscuous mode [ 291.212970][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.320156][ T7456] bond0: (slave bond_slave_0): Releasing backup interface [ 293.430791][ T7456] bond0: (slave bond_slave_1): Releasing backup interface [ 293.670264][ T7456] team0: Port device team_slave_0 removed [ 293.713441][ T7456] team0: Port device team_slave_1 removed [ 293.714386][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.714409][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.764560][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.764582][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.814324][ T7456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 295.316247][ T10] IPVS: starting estimator thread 0... [ 295.552817][ T7519] IPVS: using max 15 ests per chain, 36000 per kthread [ 296.461060][ T7535] 9pnet_fd: p9_fd_create_unix (7535): problem connecting socket: ./file0: -111 [ 296.754849][ T7537] veth0: left allmulticast mode [ 296.754879][ T7537] veth0: left promiscuous mode [ 296.755097][ T7537] bridge0: port 3(veth0) entered disabled state [ 297.562298][ T5604] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 299.960968][ T7537] bridge_slave_0: left allmulticast mode [ 299.960999][ T7537] bridge_slave_0: left promiscuous mode [ 299.961199][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.935567][ T7537] bridge_slave_1: left allmulticast mode [ 300.935595][ T7537] bridge_slave_1: left promiscuous mode [ 300.935780][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.151331][ T7537] bond1: (slave veth0_to_bond): Releasing active interface [ 302.160466][ T7537] veth0_to_bond: left allmulticast mode [ 302.160494][ T7537] veth0_to_bond: left promiscuous mode [ 302.308865][ T7537] bond0: (slave bond_slave_0): Releasing backup interface [ 302.438804][ T7537] bond0: (slave bond_slave_1): Releasing backup interface [ 303.095440][ T7537] team0: Port device team_slave_0 removed [ 303.983203][ T7537] team0: Port device team_slave_1 removed [ 303.985704][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.985728][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.061483][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.061508][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.229530][ T5604] usb 2-1: device descriptor read/all, error -110 [ 305.257755][ T7537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 312.508602][ T7651] bond0: (slave bond_slave_0): Releasing backup interface [ 313.009497][ T7651] bond0: (slave bond_slave_1): Releasing backup interface [ 313.131975][ T7651] team0: Port device team_slave_0 removed [ 313.152646][ T7651] team0: Port device team_slave_1 removed [ 313.153536][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.153558][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.005199][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.005225][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.040426][ T7651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.619192][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.619482][ T57] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.667713][ T5696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.898201][ T5696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 317.860716][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.860796][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.882760][ T5910] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 318.244003][ T7713] kernel profiling enabled (shift: 63) [ 318.244014][ T7713] profiling shift: 63 too large [ 319.500466][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.806246][ T7721] loop7: detected capacity change from 0 to 7 [ 319.910276][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 319.910440][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.003666][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.003750][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.004056][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.004122][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.004321][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.004383][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.004608][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.004669][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.004873][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.004934][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.005149][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.005211][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.005293][ T7721] ldm_validate_partition_table(): Disk read failed. [ 320.005433][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.005493][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.005699][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.005760][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.005953][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.006015][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 320.006329][ T7721] Dev loop7: unable to read RDB block 0 [ 320.007280][ T7721] loop7: unable to read partition table [ 320.007490][ T7721] loop7: partition table beyond EOD, truncated [ 320.007528][ T7721] loop_reread_partitions: partition scan of loop7 (j̖ 8?}X%`ր{֐ȵ4FLQ5) failed (rc=-5) [ 327.925122][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 329.597307][ T7786] netlink: Conntrack attr has 4 unknown bytes [ 329.597328][ T7786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.813957][ T7790] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 330.900186][ T7795] overlayfs: failed to clone upperpath [ 331.952332][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 332.973214][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.0.562'. [ 333.944470][ T5604] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 334.967015][ T5604] usb 4-1: Using ep0 maxpacket: 16 [ 334.967942][ T5604] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 334.999588][ T5604] usb 4-1: config 251 has an invalid interface number: 16 but max is 0 [ 334.999602][ T5604] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 334.999611][ T5604] usb 4-1: config 251 has no interface number 0 [ 334.999636][ T5604] usb 4-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 334.999646][ T5604] usb 4-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 334.999658][ T5604] usb 4-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 334.999670][ T5604] usb 4-1: config 251 interface 16 has no altsetting 0 [ 335.077569][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.077591][ T5604] usb 4-1: Product: syz [ 335.077604][ T5604] usb 4-1: Manufacturer: syz [ 335.077617][ T5604] usb 4-1: SerialNumber: syz [ 335.331000][ T4907] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 335.331017][ T4907] #PF: supervisor read access in kernel mode [ 335.331027][ T4907] #PF: error_code(0x0000) - not-present page [ 335.331037][ T4907] PGD 8000000035420067 P4D 8000000035420067 PUD 0 [ 335.331066][ T4907] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 335.331091][ T4907] CPU: 1 UID: 0 PID: 4907 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.331105][ T4907] Tainted: [L]=SOFTLOCKUP [ 335.331108][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 335.331114][ T4907] Workqueue: hci3 hci_rx_work [ 335.331144][ T4907] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 335.331173][ T4907] Code: b3 8d 4c 8b b8 b8 72 9f 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 10 22 8e 4d 8b 3f 49 81 ff 00 10 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 2b c0 09 03 84 c0 74 0e 49 8b 07 49 [ 335.331188][ T4907] RSP: 0018:ffffc90010c47a38 EFLAGS: 00010207 [ 335.331202][ T4907] RAX: 0000000000000000 RBX: ffff888035af5d00 RCX: 0000000000000000 [ 335.331214][ T4907] RDX: 0000000000f7d2e1 RSI: 0000000000000001 RDI: ffffffff8bca7720 [ 335.331227][ T4907] RBP: 0000000000100000 R08: ffffffff8b497c40 R09: 0000000000000000 [ 335.331238][ T4907] R10: 0000000000000000 R11: ffffffff8e1c3100 R12: 0000000000000002 [ 335.331246][ T4907] R13: 0000000000000001 R14: ffff888034592800 R15: 0000000000000000 [ 335.331252][ T4907] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 335.331266][ T4907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.331273][ T4907] CR2: 0000000000000010 CR3: 000000005f740000 CR4: 00000000003526f0 [ 335.331288][ T4907] Call Trace: [ 335.331292][ T4907] [ 335.331298][ T4907] hci_rx_work+0x10f/0x1020 [ 335.331327][ T4907] ? process_scheduled_works+0xa20/0x14e0 [ 335.331348][ T4907] process_scheduled_works+0xa8e/0x14e0 [ 335.331381][ T4907] ? __pfx_process_scheduled_works+0x10/0x10 [ 335.331404][ T4907] ? assign_work+0x3cf/0x5d0 [ 335.331424][ T4907] worker_thread+0xa47/0xfb0 [ 335.331443][ T4907] ? __kthread_parkme+0x71/0x1f0 [ 335.331458][ T4907] kthread+0x388/0x470 [ 335.331481][ T4907] ? __pfx_worker_thread+0x10/0x10 [ 335.331500][ T4907] ? __pfx_kthread+0x10/0x10 [ 335.331525][ T4907] ret_from_fork+0x514/0xb70 [ 335.331551][ T4907] ? __pfx_ret_from_fork+0x10/0x10 [ 335.331569][ T4907] ? __switch_to+0xc89/0x1420 [ 335.331580][ T4907] ? __pfx_kthread+0x10/0x10 [ 335.331593][ T4907] ret_from_fork_asm+0x1a/0x30 [ 335.331610][ T4907] [ 335.331613][ T4907] Modules linked in: [ 335.331632][ T4907] CR2: 0000000000000010 [ 335.331644][ T4907] ---[ end trace 0000000000000000 ]--- [ 335.331654][ T4907] RIP: 0010:kcov_remote_start+0x287/0x6f0 [ 335.331680][ T4907] Code: b3 8d 4c 8b b8 b8 72 9f 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 10 22 8e 4d 8b 3f 49 81 ff 00 10 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 2b c0 09 03 84 c0 74 0e 49 8b 07 49 [ 335.331693][ T4907] RSP: 0018:ffffc90010c47a38 EFLAGS: 00010207 [ 335.331708][ T4907] RAX: 0000000000000000 RBX: ffff888035af5d00 RCX: 0000000000000000 [ 335.331719][ T4907] RDX: 0000000000f7d2e1 RSI: 0000000000000001 RDI: ffffffff8bca7720 [ 335.331725][ T4907] RBP: 0000000000100000 R08: ffffffff8b497c40 R09: 0000000000000000 [ 335.331731][ T4907] R10: 0000000000000000 R11: ffffffff8e1c3100 R12: 0000000000000002 [ 335.331737][ T4907] R13: 0000000000000001 R14: ffff888034592800 R15: 0000000000000000 [ 335.331743][ T4907] FS: 0000000000000000(0000) GS:ffff888125d32000(0000) knlGS:0000000000000000 [ 335.331751][ T4907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.331758][ T4907] CR2: 0000000000000010 CR3: 000000005f740000 CR4: 00000000003526f0 [ 335.331770][ T4907] Kernel panic - not syncing: Fatal exception [ 335.332041][ T4907] Kernel Offset: disabled