last executing test programs: 2m43.462266638s ago: executing program 1 (id=176): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) 2m42.56101362s ago: executing program 1 (id=178): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) 2m33.678947389s ago: executing program 1 (id=182): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x4, 0x7fff}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000780)={r1, @in6={{0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}}, &(0x7f0000000840)=0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0xff, 0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x5, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x40004) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) sendmsg$nl_route_sched(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 2m33.528831836s ago: executing program 0 (id=184): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='-bond_slave_0\n', 0xf) 2m33.359979874s ago: executing program 3 (id=187): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) setns(0xc9, 0x0) listen(r3, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffa, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 2m33.326968565s ago: executing program 0 (id=188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) setns(0xc9, 0x0) 2m31.74534994s ago: executing program 0 (id=190): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsmount(r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="0a000300010000", 0x7) 2m31.74391515s ago: executing program 3 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='nfsd 127.0.0.1 2147483647 localhost\n\x00', 0x24) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='localhost 1 \\x00000000 2147483647 /\n\x00', 0x24) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='localhost / 2147483647 9216 0 0 0\n\x00', 0x22) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='tcp 2049\n\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='1\n\x00', 0x2) close(r4) mount$nfs4(&(0x7f0000000f00)='127.0.0.1:/\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000001000), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp,vers=4.0,clientaddr=127.0.0.1\x00']) openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/lockfile\x00', 0x42, 0x1ff) 2m30.8966546s ago: executing program 1 (id=194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000)='\x00'/3072, 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 2m30.708991199s ago: executing program 0 (id=195): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) listen(r1, 0xfffffffe) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) 2m30.585045315s ago: executing program 2 (id=196): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='-bond_slave_0\n', 0xf) 2m30.477019611s ago: executing program 1 (id=197): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000680)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+bond0\n', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='-bond_slave_0\n', 0xf) write(r2, &(0x7f0000000100)='-bond_slave_1\n', 0xf) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='active-backup\n', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='100\n', 0x4) 2m30.462889231s ago: executing program 3 (id=198): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='1\n', 0x2) 2m30.460212141s ago: executing program 0 (id=199): syz_usb_connect(0x0, 0x3c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ef0201407205a65801000000000109022a000201008032080b01020000000009040000000000000009040100010000000007058102400000"], 0x0) 2m30.407832214s ago: executing program 2 (id=200): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0001000000010902270001010080320904000003ff0000000705810308000a0705020240000007058602400000"], 0x0) getpid() 2m30.241515231s ago: executing program 3 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+bond0\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='active-backup\n', 0xe) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='100\n', 0x4) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x2, 0x0) write(r3, &(0x7f0000000400)='+192.168.1.1\n', 0xd) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'bond_slave_0\x00', 0x1002}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/net/bond0/bonding/slaves\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='+bond_slave_0\n', 0xe) close(r5) socket$inet(0x2, 0x2, 0x0) 2m30.240401502s ago: executing program 1 (id=202): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x4, 0x7fff}, &(0x7f0000000740)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0xff, 0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x5, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x40004) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 2m30.129349497s ago: executing program 3 (id=203): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xb6, 0x40002) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mount(0x0, 0x0, &(0x7f0000000100)='9p\x00', 0x1a0480c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000004140)={0x2020}, 0x2020) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) epoll_create(0x9) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="0a000300010000", 0x7) 2m29.138314414s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\n\x00', 0xd) write(r0, &(0x7f00000000e0)='0000:00:03.0\n\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000120)='0000:00:02.0\n\x00', 0xd) write(r1, &(0x7f0000000140)='0000:00:03.0\n\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='8086 100e\n\x00', 0xa) write(r2, &(0x7f00000001a0)='8086 100f\n\x00', 0xa) write(r2, &(0x7f00000001c0)='8086 10d3\n\x00', 0xa) write(r2, &(0x7f00000001e0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 0\n\x00', 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f0000000220)='0000:00:02.0\n\x00', 0xd) write(r3, &(0x7f0000000240)='0000:00:03.0\n\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000260)='./file0\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='8086 100e\n\x00', 0xa) write(r4, &(0x7f00000002a0)='8086 100f\n\x00', 0xa) write(r4, &(0x7f00000002c0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 0\n\x00', 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f00000002e0)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='0000:00:02.0\n\x00', 0xd) write(r5, &(0x7f0000000320)='0000:00:03.0\n\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000360)='1\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r7, &(0x7f00000003a0)='0\n\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/pm_test\x00', 0x1, 0x0) write(r8, &(0x7f00000003e0)='devices\n\x00', 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) write(r9, &(0x7f0000000420)='freeze\n\x00', 0x7) write(r9, &(0x7f0000000440)='mem\n\x00', 0x4) 2m28.690831884s ago: executing program 2 (id=205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000)='\x00'/3072, 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r3, r4, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 2m28.552968021s ago: executing program 2 (id=206): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0\x00', 0x1, 0x0) 2m28.512506033s ago: executing program 2 (id=207): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0\n', 0x8) 2m28.452535916s ago: executing program 2 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r3, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b4", 0x10) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 2m28.341048451s ago: executing program 0 (id=209): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/n/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='rdma\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='172.20.20.23\n', 0xd) close(r3) write(0xffffffffffffffff, &(0x7f00000004c0)='4420\n', 0x5) 2m7.893470936s ago: executing program 32 (id=209): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/n\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/n/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='rdma\n', 0x5) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='172.20.20.23\n', 0xd) close(r3) write(0xffffffffffffffff, &(0x7f00000004c0)='4420\n', 0x5) 2m7.824819219s ago: executing program 33 (id=202): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000006c0)={0x14, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x4, 0x7fff}, &(0x7f0000000740)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x6, 0x0, 0xff, 0x9, 0x2, 0x5, 0x6, 0x1, 0x7, 0xb, 0x6, 0x7, 0x6, 0xa, 0xfe, 0xd], 0x0, [0xd, 0x7, 0x4, 0x9, 0x31f5, 0x155, 0x1, 0x0, 0x4, 0x4, 0x1, 0x400, 0x1000, 0xe403, 0x5e4b, 0xfff], [0x7, 0x7, 0x5, 0x2, 0xd, 0x5, 0x0, 0xff48, 0x6, 0x2, 0x401, 0x400, 0x84, 0x5, 0x2, 0x1]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x85c}, 0x40004) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0xc}}]}}]}, 0x48}}, 0x4010) 2m7.731733983s ago: executing program 34 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r3, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b4", 0x10) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 2m7.578152151s ago: executing program 35 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='0000:00:02.0\n\x00', 0xd) write(r0, &(0x7f00000000e0)='0000:00:03.0\n\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) write(r1, &(0x7f0000000120)='0000:00:02.0\n\x00', 0xd) write(r1, &(0x7f0000000140)='0000:00:03.0\n\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./file0\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='8086 100e\n\x00', 0xa) write(r2, &(0x7f00000001a0)='8086 100f\n\x00', 0xa) write(r2, &(0x7f00000001c0)='8086 10d3\n\x00', 0xa) write(r2, &(0x7f00000001e0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 0\n\x00', 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x0) write(r3, &(0x7f0000000220)='0000:00:02.0\n\x00', 0xd) write(r3, &(0x7f0000000240)='0000:00:03.0\n\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000260)='./file0\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='8086 100e\n\x00', 0xa) write(r4, &(0x7f00000002a0)='8086 100f\n\x00', 0xa) write(r4, &(0x7f00000002c0)='FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF 0 0 0\n\x00', 0x2a) r5 = openat(0xffffffffffffff9c, &(0x7f00000002e0)='./file0\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='0000:00:02.0\n\x00', 0xd) write(r5, &(0x7f0000000320)='0000:00:03.0\n\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000360)='1\n\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r7, &(0x7f00000003a0)='0\n\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/pm_test\x00', 0x1, 0x0) write(r8, &(0x7f00000003e0)='devices\n\x00', 0x8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/state\x00', 0x1, 0x0) write(r9, &(0x7f0000000420)='freeze\n\x00', 0x7) write(r9, &(0x7f0000000440)='mem\n\x00', 0x4) 19.620759034s ago: executing program 7 (id=394): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x14, 0x0, &(0x7f0000000040)="8c03fa92b5f384c8021b0a08ae03bcaa0db2fbc3"}) setns(0xc9, 0x0) listen(r3, 0x7) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0xfffffffa, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 18.974124705s ago: executing program 7 (id=396): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 18.352946104s ago: executing program 7 (id=398): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0xe4, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b75072501020207", @ANYBLOB='\"$F'], 0x0) 15.740320867s ago: executing program 5 (id=403): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 13.698807464s ago: executing program 7 (id=406): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) 13.547078501s ago: executing program 5 (id=407): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r4 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/4096, 0x79c5}], 0x1) setns(0xc9, 0x0) 13.428995817s ago: executing program 6 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r3, &(0x7f0000000200), 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 12.0729416s ago: executing program 7 (id=409): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(0x0) setresuid(0x0, 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) 10.18034859s ago: executing program 6 (id=412): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0\n', 0x8) 9.74454015s ago: executing program 6 (id=414): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x90}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x5, &(0x7f0000000440)={0x0, 0x200023, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r1, 0x7ebe15194cbacdd9, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x2}, 0x30, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x1000000000) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r5 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r5, 0xc050561a, &(0x7f0000000140)={0x2, "28a076bdd8b9f61d2e590bba02313cfbace9b6cf5328ff6a65b5a9155541e792", 0x2, 0x40, 0x989db715178fc3d, 0x42a93e9ac30c4920, 0x10102, 0x2}) 8.740408198s ago: executing program 4 (id=415): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 7.751566974s ago: executing program 6 (id=416): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 6.046329685s ago: executing program 4 (id=417): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) socketpair$unix(0x1, 0x1, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) 5.675309972s ago: executing program 7 (id=418): syz_usb_disconnect(0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect(0x7, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000280)={0x14, &(0x7f00000002c0)={0x20, 0xc, 0x9a, {0x9a, 0x9, "26d9da24299ca28de89294a2816f00422168fb1cf0595398f2f5a72ad4e2fdbd886c0a502140164b1f23d49a557e25eef98ea615d518f6af3b84806e4735bf2969583d547965d85f8cc2c628138c4b2e5fc516c9164ff662b758205740ba9b2b6e8d3dbb1da5120dd3089b05638325ea6863f65d23978f47bc677e902f9617fb0401a868f06d0205889b401c61eddb8ce6814b60437fc34a"}}, 0x0}, 0x0) syz_usb_connect$uac1(0x0, 0xad, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x2d, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="40097c0000007c06850d962d6ddfdfca359b0b21d26eb55d9c7f4273dcbeb9b6a26afeeb72cfcfbdb9a075a3d4d152c33d6886af96632b0e762bd44ec5e3cc56e88fc54a5a33f13dd908004f60c2831aa3267f7b91a25afdf88cc93fa75c9207845a89593db608ea915923c70672d8509933"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc0105b08, &(0x7f0000000040)={0x1, 0xfce1a86b0db46002, 0x3cf3, 0x202000, 0x110001, 0x80000001}) syz_usb_connect$cdc_ncm(0x3, 0x98, &(0x7f0000001c80)=ANY=[@ANYBLOB="12011003020000082505a1a440000102030109028600020101c00c0904000001020d0000052406000105240000000d240f010700000098"], 0x0) 3.536585223s ago: executing program 4 (id=419): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1900000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.305019014s ago: executing program 6 (id=420): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.918677253s ago: executing program 5 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000380)=@nullb, 0x0, 0x0, 0x800000, 0x0) syz_emit_vhci(0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9901) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r3, &(0x7f0000000200)="dce480febb0ccd0b", 0x8) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 2.200833496s ago: executing program 4 (id=422): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2800000014001102000000000000000028001100fa"], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./file0\n', 0x8) 2.008400936s ago: executing program 4 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.838734953s ago: executing program 5 (id=424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) 1.574378286s ago: executing program 5 (id=425): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0xdf96}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) 572.874433ms ago: executing program 4 (id=426): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000400)) socket(0x2d, 0x2, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000100)=0x3) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1, &(0x7f0000000180), 0x4) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_VOLTAGE(r5, 0x6f43, 0x0) write$proc_mixer(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x10000, 0x5, 0x7, 0x800003, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x10009, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0xd, 0x7}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 102.669765ms ago: executing program 6 (id=427): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000841}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='./file0\n', 0x8) 0s ago: executing program 5 (id=428): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x3, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x3, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x7, 0x34, 0x800}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x81}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000500)={r4, 0x0, 0x7, 0x3, 0x9, 0x5, 0x0, 0x2, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x40000, 0x7ff, 0xc8000000, 0x10000, 0x5}}, &(0x7f00000005c0)=0xb0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000f02) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r6, @ANYBLOB="0100000002"], 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r7}, 0x20) syz_open_dev$ptys(0xc, 0x3, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 84.466617][ T5765] cgroup: Unknown subsys name 'net' [ 84.604237][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.337005][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.238310][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.251240][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.276259][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.289024][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.298337][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.307720][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.309047][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.320273][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.329541][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.337154][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.346280][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.354505][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.362363][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.371201][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.398656][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.408534][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.418398][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.419048][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.427556][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.433402][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.440974][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.448325][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.463168][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.479308][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.983943][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 89.036936][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 89.048820][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 89.183549][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 89.257247][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.264536][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.275701][ T5778] bridge_slave_0: entered allmulticast mode [ 89.282908][ T5778] bridge_slave_0: entered promiscuous mode [ 89.293409][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.300660][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.307966][ T5778] bridge_slave_1: entered allmulticast mode [ 89.315252][ T5778] bridge_slave_1: entered promiscuous mode [ 89.386184][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.393386][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.400700][ T5776] bridge_slave_0: entered allmulticast mode [ 89.408322][ T5776] bridge_slave_0: entered promiscuous mode [ 89.416912][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.424060][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.432716][ T5776] bridge_slave_1: entered allmulticast mode [ 89.440492][ T5776] bridge_slave_1: entered promiscuous mode [ 89.459983][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.468157][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.475694][ T5782] bridge_slave_0: entered allmulticast mode [ 89.483085][ T5782] bridge_slave_0: entered promiscuous mode [ 89.521239][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.531015][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.543097][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.550574][ T5782] bridge_slave_1: entered allmulticast mode [ 89.558790][ T5782] bridge_slave_1: entered promiscuous mode [ 89.573924][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.586848][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.600645][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.692599][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.701004][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.708844][ T5780] bridge_slave_0: entered allmulticast mode [ 89.716115][ T5780] bridge_slave_0: entered promiscuous mode [ 89.734598][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.741874][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.749403][ T5780] bridge_slave_1: entered allmulticast mode [ 89.756946][ T5780] bridge_slave_1: entered promiscuous mode [ 89.766974][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.781754][ T5778] team0: Port device team_slave_0 added [ 89.791393][ T5776] team0: Port device team_slave_0 added [ 89.813026][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.823877][ T5778] team0: Port device team_slave_1 added [ 89.842669][ T5776] team0: Port device team_slave_1 added [ 89.894249][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.907608][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.928705][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.936272][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.962394][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.008986][ T5782] team0: Port device team_slave_0 added [ 90.018314][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.025517][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.052403][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.065132][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.072151][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.098522][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.122611][ T5782] team0: Port device team_slave_1 added [ 90.139978][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.147493][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.173788][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.188452][ T5780] team0: Port device team_slave_0 added [ 90.218800][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.226270][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.252919][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.268137][ T5780] team0: Port device team_slave_1 added [ 90.274640][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.281957][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.308340][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.385817][ T5781] Bluetooth: hci2: command tx timeout [ 90.390850][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.399398][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.426147][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.438997][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.447053][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.473442][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.516049][ T5778] hsr_slave_0: entered promiscuous mode [ 90.522980][ T5778] hsr_slave_1: entered promiscuous mode [ 90.538180][ T5776] hsr_slave_0: entered promiscuous mode [ 90.545954][ T51] Bluetooth: hci0: command tx timeout [ 90.546413][ T5088] Bluetooth: hci3: command tx timeout [ 90.555468][ T5781] Bluetooth: hci1: command tx timeout [ 90.564400][ T5776] hsr_slave_1: entered promiscuous mode [ 90.570850][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.579021][ T5776] Cannot create hsr debugfs directory [ 90.659618][ T5782] hsr_slave_0: entered promiscuous mode [ 90.666861][ T5782] hsr_slave_1: entered promiscuous mode [ 90.673339][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.681333][ T5782] Cannot create hsr debugfs directory [ 90.755821][ T5780] hsr_slave_0: entered promiscuous mode [ 90.762848][ T5780] hsr_slave_1: entered promiscuous mode [ 90.769726][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.778216][ T5780] Cannot create hsr debugfs directory [ 91.225694][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.242332][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.258602][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.272391][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.358606][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.374166][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.390801][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.402073][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.490030][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.520081][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.530711][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.579428][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.621098][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.634726][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.651125][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.662992][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.742156][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.799089][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.832696][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.840238][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.869242][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.876467][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.957907][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.000520][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.017684][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.058111][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.080032][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.087338][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.115730][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.123038][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.165841][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.188657][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.201891][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.209120][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.289392][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.296666][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.368434][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.414060][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.421440][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.454243][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.461685][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.469846][ T5088] Bluetooth: hci2: command tx timeout [ 92.572034][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.626437][ T5088] Bluetooth: hci1: command tx timeout [ 92.632052][ T5088] Bluetooth: hci0: command tx timeout [ 92.635653][ T5781] Bluetooth: hci3: command tx timeout [ 92.664729][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.803312][ T5780] veth0_vlan: entered promiscuous mode [ 92.834191][ T5780] veth1_vlan: entered promiscuous mode [ 92.915621][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.978655][ T5780] veth0_macvtap: entered promiscuous mode [ 93.003758][ T5780] veth1_macvtap: entered promiscuous mode [ 93.113105][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.124386][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.133266][ T5776] veth0_vlan: entered promiscuous mode [ 93.173782][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.219710][ T5776] veth1_vlan: entered promiscuous mode [ 93.233321][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.243229][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.253623][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.262602][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.336918][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.361249][ T5778] veth0_vlan: entered promiscuous mode [ 93.393467][ T5778] veth1_vlan: entered promiscuous mode [ 93.444920][ T5776] veth0_macvtap: entered promiscuous mode [ 93.497317][ T5776] veth1_macvtap: entered promiscuous mode [ 93.512180][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.532751][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.611028][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.619417][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.619530][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.624677][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.648365][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.673237][ T5782] veth0_vlan: entered promiscuous mode [ 93.693879][ T5782] veth1_vlan: entered promiscuous mode [ 93.703094][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.717717][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.730043][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.743172][ T5778] veth0_macvtap: entered promiscuous mode [ 93.771233][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.781565][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.791280][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.803332][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.818286][ T5778] veth1_macvtap: entered promiscuous mode [ 93.930638][ T5782] veth0_macvtap: entered promiscuous mode [ 93.943026][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.958630][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.973198][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.985516][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.997480][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.016340][ T5782] veth1_macvtap: entered promiscuous mode [ 94.029489][ T5847] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 94.051595][ T5848] 8021q: VLANs not supported on gre0 [ 94.090141][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.101424][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.112832][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.123703][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.136691][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.203009][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.210690][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210890][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210919][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210948][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.285425][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.382702][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.396031][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.408658][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.427465][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.438838][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.450347][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.463573][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.526989][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.540154][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.553122][ T5088] Bluetooth: hci2: command tx timeout [ 94.559236][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.569893][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.580174][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.592101][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.613240][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.631500][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.658467][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.665367][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.672596][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.685083][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.700043][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.709495][ T5088] Bluetooth: hci0: command tx timeout [ 94.715445][ T5088] Bluetooth: hci3: command tx timeout [ 94.716679][ T51] Bluetooth: hci1: command tx timeout [ 94.827063][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.862572][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.010097][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.050068][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.072250][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.110191][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.308535][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.352275][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.669220][ T5865] nvmet: adding nsid 1 to subsystem testsubsys [ 95.687161][ T5866] Zero length message leads to an empty skb [ 95.763433][ T5868] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 95.789865][ T5868] bridge0: port 3(geneve2) entered blocking state [ 95.797175][ T5868] bridge0: port 3(geneve2) entered disabled state [ 95.803846][ T5868] geneve2: entered allmulticast mode [ 95.819109][ T5868] geneve2: entered promiscuous mode [ 95.875591][ T5823] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 96.102934][ T5823] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 96.112212][ T5823] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 96.122276][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.133212][ T5823] usb 4-1: config 0 has no interface number 0 [ 96.139885][ T5823] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 96.154802][ T5823] usb 4-1: config 0 interface 106 altsetting 0 has an invalid endpoint with address 0x22, skipping [ 96.167012][ T5823] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 96.181123][ T5823] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 96.191599][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.216858][ T5823] usb 4-1: config 0 descriptor?? [ 96.345901][ T5823] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 96.539111][ T42] usb 4-1: Failed to submit usb control message: -71 [ 96.539224][ T5845] usb 4-1: USB disconnect, device number 2 [ 96.560889][ T42] usb 4-1: unable to send the bmi data to the device: -71 [ 96.568499][ T42] usb 4-1: unable to get target info from device [ 96.575159][ T42] usb 4-1: could not get target info (-71) [ 96.581201][ T42] usb 4-1: could not probe fw (-71) [ 96.627449][ T51] Bluetooth: hci2: command tx timeout [ 96.785495][ T51] Bluetooth: hci3: command tx timeout [ 96.786243][ T5781] Bluetooth: hci0: command tx timeout [ 96.796611][ T51] Bluetooth: hci1: command tx timeout [ 96.955335][ T5889] Bluetooth: MGMT ver 1.22 [ 97.165135][ T5845] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.408970][ T5845] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 97.418375][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.432643][ T789] cfg80211: failed to load regulatory.db [ 97.438909][ T5845] usb 3-1: Product: syz [ 97.445404][ T5845] usb 3-1: Manufacturer: syz [ 97.465722][ T5845] usb 3-1: SerialNumber: syz [ 97.525505][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.736503][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.756313][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 97.774615][ T23] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 97.784025][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.792248][ T23] usb 4-1: Product: syz [ 97.796631][ T23] usb 4-1: Manufacturer: syz [ 97.801452][ T23] usb 4-1: SerialNumber: syz [ 97.955226][ T789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.031174][ T23] kaweth 4-1:1.0: Firmware present in device. [ 98.115278][ T789] usb 2-1: device descriptor read/64, error -71 [ 98.335719][ T23] kaweth 4-1:1.0: Error reading configuration (-71), no net device created [ 98.344652][ T23] kaweth: probe of 4-1:1.0 failed with error -5 [ 98.360018][ T5845] kalmia 3-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle, 02:00:00:00:00:01 [ 98.404434][ T23] usb 4-1: USB disconnect, device number 3 [ 98.404462][ T789] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.565180][ T789] usb 2-1: device descriptor read/64, error -71 [ 98.708234][ T789] usb usb2-port1: attempt power cycle [ 99.205329][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.247223][ T789] usb 2-1: device descriptor read/8, error -71 [ 99.502493][ T23] usb 3-1: USB disconnect, device number 2 [ 99.539850][ T23] kalmia 3-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle [ 99.625249][ T789] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.680891][ T789] usb 2-1: device descriptor read/8, error -71 [ 99.805496][ T789] usb usb2-port1: unable to enumerate USB device [ 99.943858][ T5942] syz.3.29[5942]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.963258][ T5942] loop3: detected capacity change from 0 to 164 [ 100.019102][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.045479][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.291281][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 100.435561][ T27] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 100.540566][ T27] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 100.751765][ T27] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 100.854610][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.962160][ T27] usb 1-1: Product: syz [ 100.979137][ T27] usb 1-1: Manufacturer: syz [ 100.983936][ T27] usb 1-1: SerialNumber: syz [ 101.283563][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.135512][ T9] usb 1-1: USB disconnect, device number 2 [ 102.791333][ T5992] loop1: detected capacity change from 0 to 164 [ 102.857568][ T5794] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.115259][ T5823] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.815602][ T5823] usb 1-1: device descriptor read/64, error -71 [ 103.841199][ T5996] null_blk: disk nullb1 created [ 104.078304][ T789] nvmet: creating nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 104.095141][ T5823] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.121077][ T5996] nvme nvme0: creating 2 I/O queues. [ 104.139358][ T5996] nvme nvme0: new ctrl: "testsubsys" [ 104.245246][ T5823] usb 1-1: device descriptor read/64, error -71 [ 104.296217][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.338986][ T6012] maxtcpc: probe of 0-0022 failed with error -5 [ 104.358279][ T6012] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22 [ 104.379516][ T5823] usb usb1-port1: attempt power cycle [ 104.485386][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 104.493729][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 104.517268][ T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.549114][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 104.563992][ T9] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 104.594464][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.614673][ T9] usb 4-1: config 0 descriptor?? [ 104.810709][ T5823] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.855895][ T5823] usb 1-1: device descriptor read/8, error -71 [ 105.135147][ T5823] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 105.174817][ T5823] usb 1-1: device descriptor read/8, error -71 [ 105.205677][ T789] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.296845][ T5823] usb usb1-port1: unable to enumerate USB device [ 105.415085][ T789] usb 2-1: Using ep0 maxpacket: 16 [ 105.423084][ T789] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 105.434936][ T789] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 105.455291][ T9] hid-alps 0003:044E:120B.0001: failed read register (-32) [ 105.463378][ T9] hid-alps 0003:044E:120B.0001: failed U1_DEV_CTRL_1 (-32) [ 105.480972][ T789] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 105.490404][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.500312][ T789] usb 2-1: Product: syz [ 105.504555][ T789] usb 2-1: Manufacturer: syz [ 105.512086][ T9] hid-alps 0003:044E:120B.0001: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 105.523973][ T789] usb 2-1: SerialNumber: syz [ 105.651778][ T6026] loop2: detected capacity change from 0 to 164 [ 107.752396][ T8] usb 4-1: USB disconnect, device number 4 [ 107.866436][ T9] usb 2-1: USB disconnect, device number 6 [ 109.635613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.045286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 111.907916][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 112.016236][ T6072] loop2: detected capacity change from 0 to 164 [ 112.045553][ T6059] NFSD: attempt to initialize umh client tracking in a container ignored. [ 112.068724][ T6059] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 112.170501][ T6074] overlayfs: failed to resolve './file0': -2 [ 112.605168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 112.890372][ T9] usb 2-1: device descriptor read/64, error -71 [ 112.966033][ T6075] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 113.013791][ T6059] NFSD: Unable to initialize client recovery tracking! (-22) [ 113.061320][ T6059] NFSD: starting 10-second grace period (net f00003d2) [ 113.225283][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.240599][ T6082] bonding: bond0 is being deleted... [ 113.342845][ T6082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.372207][ T6082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.381266][ T9] usb 2-1: device descriptor read/64, error -71 [ 113.404024][ T6082] bond0 (unregistering): Released all slaves [ 113.416149][ T789] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.499849][ T6084] bonding: bond0 is being created... [ 113.505622][ T9] usb usb2-port1: attempt power cycle [ 113.606954][ T5715] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.635081][ T789] usb 3-1: Using ep0 maxpacket: 32 [ 113.645216][ T789] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 113.657034][ T789] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.670109][ T789] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.677129][ T789] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 113.686906][ T789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.700650][ T789] usb 3-1: config 0 descriptor?? [ 113.808336][ T5715] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice= 0.00 [ 113.829732][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.638810][ T789] hid-alps 0003:044E:120B.0002: failed read register (-32) [ 114.657070][ T789] hid-alps 0003:044E:120B.0002: failed U1_DEV_CTRL_1 (-32) [ 114.686531][ T789] hid-alps 0003:044E:120B.0002: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 115.200182][ T5715] comedi comedi5: could not switch to alternate setting 1 [ 115.223420][ T5715] usbduxfast 1-1:1.0: driver 'usbduxfast' failed to auto-configure device. [ 115.255943][ T5715] usb 1-1: USB disconnect, device number 7 [ 116.207968][ T5715] usb 3-1: USB disconnect, device number 3 [ 116.475305][ T6115] overlayfs: failed to resolve './file0': -2 [ 119.785240][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.285256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.635206][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 121.643099][ T23] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 121.675260][ T23] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.705216][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.712002][ T23] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 121.747737][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.762698][ T23] usb 4-1: config 0 descriptor?? [ 122.629162][ T6160] bonding: bond0 is being created... [ 122.643771][ T6160] bonding: bond0 already exists [ 122.649189][ T23] hid-alps 0003:044E:120B.0003: failed read register (-32) [ 122.663369][ T23] hid-alps 0003:044E:120B.0003: failed U1_DEV_CTRL_1 (-32) [ 122.676975][ T6158] input: syz0 as /devices/virtual/input/input8 [ 122.691169][ T23] hid-alps 0003:044E:120B.0003: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.3-1/input0 [ 122.700746][ T6160] bond0: option mode: unable to set because the bond device has slaves [ 122.730367][ T11] bond0: (slave bond_slave_0): interface is now down [ 122.754736][ T6160] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 122.773020][ T11] bond0: (slave bond_slave_1): interface is now down [ 122.780285][ T6160] bond0: option slaves: unable to set because the bond device is up [ 122.817605][ T11] bond0: now running without any active interface! [ 123.085174][ T1083] bond0: (slave bond_slave_0): link status definitely up [ 123.093630][ T1083] bond0: active interface up! [ 124.405808][ T3469] bond0: (slave bond_slave_0): interface is now down [ 124.425322][ T3469] bond0: now running without any active interface! [ 124.510249][ T27] usb 4-1: USB disconnect, device number 5 [ 124.894644][ T6178] bonding: bond0 is being created... [ 124.916899][ T6178] bonding: bond0 already exists [ 125.028137][ T42] bond0: (slave bond_slave_1): link status definitely up [ 125.039523][ T42] bond0: active interface up! [ 125.296915][ T42] bond0: (slave bond_slave_1): interface is now down [ 125.455501][ T6178] bond0: option slaves: invalid value (-bond_slave_1) [ 125.598464][ T62] bond0: (slave bond_slave_1): interface is now down [ 125.639336][ T6178] bond0: (slave bond_slave_0): making interface the new active one [ 125.687141][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.729096][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.746537][ T62] bond0: (slave bond_slave_1): interface is now down [ 125.753761][ T62] bond0: now running without any active interface! [ 126.068425][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 126.104325][ T12] bond0: now running without any active interface! [ 126.515662][ T11] bond0: (slave bond_slave_0): link status definitely up [ 126.522793][ T11] bond0: (slave bond_slave_0): making interface the new active one [ 126.549446][ T11] bond0: active interface up! [ 126.806858][ T11] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 126.871566][ T11] bond0: now running without any active interface! [ 127.011267][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.94'. [ 129.925258][ T6210] NFSD: attempt to initialize umh client tracking in a container ignored. [ 129.956321][ T6210] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 129.988329][ T6218] Bluetooth: MGMT ver 1.22 [ 130.910266][ T6210] NFSD: Unable to initialize client recovery tracking! (-22) [ 131.611811][ T6210] NFSD: starting 90-second grace period (net f0000510) [ 132.015232][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.239346][ T23] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.256151][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.264341][ T23] usb 4-1: Product: syz [ 132.270454][ T23] usb 4-1: Manufacturer: syz [ 132.275567][ T23] usb 4-1: SerialNumber: syz [ 132.726309][ T6231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 133.271292][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.278266][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.820737][ T6225] NFSD: attempt to initialize umh client tracking in a container ignored. [ 133.830532][ T6225] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 133.839713][ T6225] NFSD: Unable to initialize client recovery tracking! (-22) [ 133.853313][ T6225] NFSD: starting 90-second grace period (net f0000510) [ 134.211943][ T5715] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 135.065196][ T5715] usb 1-1: Using ep0 maxpacket: 16 [ 135.164452][ T5715] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 135.394435][ T5715] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 135.502351][ T5715] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 135.576643][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.584802][ T5715] usb 1-1: Product: syz [ 135.665039][ T5715] usb 1-1: Manufacturer: syz [ 135.682386][ T5715] usb 1-1: SerialNumber: syz [ 135.935024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 135.955023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 135.985024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 136.005031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.035029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 136.625021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 138.030014][ T6240] netlink: 84 bytes leftover after parsing attributes in process `syz.0.109'. [ 138.186034][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 138.198771][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 138.210586][ T23] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 138.247077][ T23] lan78xx: probe of 4-1:1.0 failed with error -71 [ 138.254007][ T6240] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 138.326394][ T6269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.114'. [ 138.987052][ T23] usb 4-1: USB disconnect, device number 6 [ 139.299453][ T9] usb 1-1: USB disconnect, device number 8 [ 139.405289][ T6275] svc: failed to register nfsdv3 RPC service (errno 111). [ 139.426352][ T6275] svc: failed to register nfsaclv3 RPC service (errno 111). [ 143.975152][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.165240][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 145.574445][ T23] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 145.596090][ T23] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 145.616895][ T23] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 145.635051][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.643305][ T23] usb 1-1: Product: syz [ 145.647669][ T23] usb 1-1: Manufacturer: syz [ 145.652341][ T23] usb 1-1: SerialNumber: syz [ 146.147891][ T6302] netlink: 84 bytes leftover after parsing attributes in process `syz.0.128'. [ 147.577666][ T23] usb 1-1: USB disconnect, device number 9 [ 148.071050][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.354091][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.436672][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.474251][ T23] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 148.490869][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 148.523843][ T23] usb 1-1: Product: syz [ 148.549262][ T23] usb 1-1: Manufacturer: syz [ 148.579420][ T23] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 149.628027][ T23] mos7840: probe of ttyUSB0 failed with error -71 [ 149.795155][ T23] usb 1-1: USB disconnect, device number 10 [ 149.851043][ T23] mos7840 1-1:1.0: device disconnected [ 149.993645][ T6351] bonding: bond0 is being created... [ 150.009980][ T6351] bonding: bond0 already exists [ 150.056362][ T6351] bond0: (slave bond_slave_0): Releasing backup interface [ 150.166996][ T6352] bond0: (slave bond_slave_1): Releasing backup interface [ 150.276124][ T6351] bond0: ARP target 192.168.1.1 is already present [ 150.283362][ T6351] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 154.714264][ T6388] ubi0: attaching mtd0 [ 154.754070][ T6388] ubi0: scanning is finished [ 154.806723][ T6388] ubi0: empty MTD device detected [ 155.044314][ T6391] block device autoloading is deprecated and will be removed. [ 155.066664][ T6388] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 155.149581][ T6383] ftl_cs: FTL header not found. [ 155.296000][ T6383] block2mtd: mtd1: [/dev/ram0] erase_size = 64KiB [65536] [ 155.360162][ T6400] bonding: bond0 is being created... [ 155.410477][ T6400] bonding: bond0 already exists [ 155.425371][ T6401] bond0: option slaves: invalid value (-bond_slave_0) [ 155.451798][ T6400] bond0: option slaves: invalid value (-bond_slave_1) [ 155.505508][ T6400] bond0: ARP target 192.168.1.1 is already present [ 155.528510][ T6400] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 155.558238][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.748561][ T6408] bonding: bond0 is being created... [ 155.938458][ T6408] bonding: bond0 already exists [ 156.313086][ T6405] bond0: option mode: unable to set because the bond device has slaves [ 156.425379][ T6410] bonding: bond0 is being created... [ 156.571088][ T6410] bonding: bond0 already exists [ 156.666876][ T6413] bond0: (slave bond_slave_0): Releasing backup interface [ 156.805241][ T6410] bond0: option slaves: invalid value (-bond_slave_1) [ 156.877703][ T6410] bond0: ARP target 192.168.1.1 is already present [ 156.884431][ T6410] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 157.879067][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 157.933724][ T6428] bonding: bond0 is being created... [ 157.989843][ T6430] PM: suspend entry (deep) [ 157.991965][ T6428] bonding: bond0 already exists [ 158.021733][ T6431] bond0: option mode: unable to set because the bond device has slaves [ 158.081154][ T49] bond0: (slave bond_slave_0): interface is now down [ 158.097354][ T6428] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 158.108035][ T49] bond0: (slave bond_slave_1): interface is now down [ 158.123932][ T6428] bond0: option slaves: unable to set because the bond device is up [ 158.206740][ T6430] Filesystems sync: 0.201 seconds [ 158.255303][ T11] bond0: (slave bond_slave_1): interface is now down [ 158.467978][ T6440] bonding: bond0 is being created... [ 158.479543][ T6440] bonding: bond0 already exists [ 158.499871][ T6440] bond0: (slave bond_slave_0): Releasing backup interface [ 158.530993][ T6440] bond0: (slave bond_slave_1): Releasing backup interface [ 159.316316][ T6430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 159.343886][ T6430] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 159.799400][ T6430] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.444610][ T6430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.475077][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 160.485151][ T6430] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.516041][ T6430] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.587178][ T6430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.654613][ T6430] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 160.998045][ T6468] bonding: bond0 is being created... [ 161.141327][ T6468] bonding: bond0 already exists [ 161.213392][ T6430] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.404812][ T6430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.440640][ T6430] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.469543][ T6430] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 161.474554][ T6468] bond0: ARP target 192.168.1.1 is already present [ 161.514042][ T6430] Freezing user space processes [ 161.528917][ T6468] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 162.465363][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.545373][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.625188][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 162.657484][ T6467] NFSD: attempt to initialize umh client tracking in a container ignored. [ 162.667267][ T6467] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 162.676380][ T6467] NFSD: Unable to initialize client recovery tracking! (-22) [ 162.685475][ T6467] NFSD: starting 10-second grace period (net f00003d2) [ 162.766076][ T6430] Freezing user space processes completed (elapsed 1.246 seconds) [ 162.774232][ T6430] OOM killer disabled. [ 162.778411][ T6430] Freezing remaining freezable tasks [ 162.789910][ T6430] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 162.801200][ T6430] printk: Suspending console(s) (use no_console_suspend to debug) [ 162.928688][ T6430] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 162.967471][ T6430] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 163.006954][ T6430] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 163.046301][ T6430] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 163.087372][ T6430] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 163.126285][ T6430] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 163.166259][ T6430] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 163.206997][ T6430] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 163.246943][ T6430] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 163.287769][ T6430] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 163.327751][ T6430] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 163.366959][ T6430] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 163.406832][ T6430] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 163.425276][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.446830][ T6430] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 163.488547][ T6430] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 163.557428][ T1083] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 163.803332][ T6430] PM: suspend debug: Waiting for 5 second(s). [ 164.545402][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.636391][ T5781] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.705488][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.505195][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.625338][ T5781] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.785353][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.585252][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.174805][ T6430] OOM killer enabled. [ 169.176317][ T6430] Restarting tasks ... done. [ 169.242625][ T6430] random: crng reseeded on system resumption [ 169.256362][ T6430] PM: suspend exit [ 169.470469][ T6563] bond0: (slave bond_slave_0): Releasing backup interface [ 169.567471][ T6567] bonding: bond0 is being created... [ 169.569089][ T6567] bonding: bond0 already exists [ 169.576768][ T6567] bond0: option slaves: invalid value (-bond_slave_0) [ 169.578516][ T6567] bond0: option slaves: invalid value (-bond_slave_1) [ 169.605224][ T5849] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.806466][ T5849] usb 2-1: Using ep0 maxpacket: 16 [ 169.824598][ T5849] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 169.839710][ T5849] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 169.951328][ T5849] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 169.954053][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.994157][ T5849] usb 2-1: Product: syz [ 170.012729][ T5849] usb 2-1: Manufacturer: syz [ 170.025298][ T5849] usb 2-1: SerialNumber: syz [ 170.636115][ T6559] netlink: 84 bytes leftover after parsing attributes in process `syz.1.182'. [ 170.638205][ T6559] netlink: 'syz.1.182': attribute type 1 has an invalid length. [ 170.706754][ T5825] usb 2-1: USB disconnect, device number 10 [ 171.156183][ T6578] bonding: bond0 is being created... [ 171.157456][ T6578] bonding: bond0 already exists [ 171.164210][ T6578] bond0: ARP target 192.168.1.1 is already present [ 171.165960][ T6578] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 171.172210][ T6578] bond0: (slave bond_slave_0): making interface the new active one [ 171.174059][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.186325][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.522450][ T6491] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 171.557338][ T6491] bond0: now running without any active interface! [ 172.095468][ T6498] bond0: (slave bond_slave_0): link status definitely up [ 172.130556][ T6498] bond0: (slave bond_slave_0): making interface the new active one [ 172.132721][ T6498] bond0: active interface up! [ 172.368753][ T6593] bond0: (slave bond_slave_0): Releasing backup interface [ 172.551662][ T6596] bonding: bond0 is being created... [ 172.552987][ T6596] bonding: bond0 already exists [ 172.568907][ T6596] bond0: option slaves: invalid value (-bond_slave_0) [ 172.570598][ T6596] bond0: option slaves: invalid value (-bond_slave_1) [ 172.684875][ T6604] bonding: bond0 is being created... [ 172.691659][ T6604] bonding: bond0 already exists [ 172.701491][ T6604] bond0: ARP target 192.168.1.1 is already present [ 172.702913][ T6604] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 172.711931][ T6604] bond0: (slave bond_slave_0): making interface the new active one [ 172.713860][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.815152][ T5825] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.855196][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 172.945123][ T5715] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.063869][ T5849] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 173.071354][ T5849] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 173.080665][ T5849] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice= 1.00 [ 173.091157][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.142736][ T6602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.170622][ T6602] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.667919][ T5849] ushc: probe of 3-1:1.0 failed with error -110 [ 173.688696][ T5825] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 173.690610][ T5825] usb 1-1: New USB device found, idVendor=0572, idProduct=58a6, bcdDevice= 0.01 [ 173.692405][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.715404][ T5849] usb 3-1: USB disconnect, device number 4 [ 173.748352][ T5825] cx231xx 1-1:1.1: New device @ 480 Mbps (0572:58a6) with 2 interfaces [ 173.755255][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 173.770540][ T5715] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 173.772729][ T5715] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 173.777816][ T5715] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 173.779618][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.781199][ T5715] usb 2-1: Product: syz [ 173.782066][ T5715] usb 2-1: Manufacturer: syz [ 173.783360][ T5715] usb 2-1: SerialNumber: syz [ 173.836184][ T6611] PM: suspend entry (s2idle) [ 173.855659][ T5825] cx231xx 1-1:1.1: Failed to read PCB config [ 173.857541][ T5825] cx231xx: probe of 1-1:1.1 failed with error -110 [ 173.983453][ T5849] usb 1-1: USB disconnect, device number 11 [ 174.020596][ T6611] Filesystems sync: 0.183 seconds [ 174.232128][ T6606] netlink: 84 bytes leftover after parsing attributes in process `syz.1.202'. [ 174.236265][ T6606] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 174.311307][ T5849] usb 2-1: USB disconnect, device number 11 [ 174.617614][ T6622] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 174.635150][ T6622] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 174.653108][ T6611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.654717][ T6611] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.659067][ T6611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.660473][ T6611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.663391][ T6611] Freezing user space processes [ 176.145375][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 176.706101][ T5088] Bluetooth: hci1: command 0x0c1a tx timeout [ 176.707254][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 176.708338][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.670934][ T6611] Freezing user space processes failed after 20.006 seconds (1 tasks refusing to freeze, wq_busy=0): [ 194.673070][ T6611] task:syz.3.204 state:D stack:29096 pid:6612 ppid:5782 flags:0x00004004 [ 194.674870][ T6611] Call Trace: [ 194.675560][ T6611] [ 194.676077][ T6611] __schedule+0x15ae/0x4660 [ 194.676906][ T6611] ? asan.module_dtor+0x20/0x20 [ 194.677879][ T6611] ? __mutex_lock+0x66e/0xc80 [ 194.678686][ T6611] ? __mutex_trylock_common+0x8a/0x270 [ 194.679617][ T6611] ? trace_raw_output_contention_end+0xd0/0xd0 [ 194.680815][ T6611] schedule+0xbd/0x170 [ 194.681614][ T6611] schedule_preempt_disabled+0x13/0x20 [ 194.682499][ T6611] __mutex_lock+0x673/0xc80 [ 194.683278][ T6611] ? __fget_files+0x28/0x460 [ 194.684060][ T6611] ? __mutex_lock+0x4d2/0xc80 [ 194.684805][ T6611] ? __fdget_pos+0x2a3/0x330 [ 194.685711][ T6611] ? mutex_lock_nested+0x20/0x20 [ 194.686657][ T6611] ? __fget_files+0x3fc/0x460 [ 194.687856][ T6611] __fdget_pos+0x2a3/0x330 [ 194.688685][ T6611] ? ksys_write+0x74/0x260 [ 194.689516][ T6611] ksys_write+0x7b/0x260 [ 194.690277][ T6611] ? lock_chain_count+0x20/0x20 [ 194.691150][ T6611] ? __ia32_sys_read+0x90/0x90 [ 194.696194][ T6611] ? lockdep_hardirqs_on+0x98/0x150 [ 194.701459][ T6611] do_syscall_64+0x55/0xb0 [ 194.711008][ T6611] ? clear_bhb_loop+0x40/0x90 [ 194.715830][ T6611] ? clear_bhb_loop+0x40/0x90 [ 194.719526][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720556][ T6611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.727226][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.732839][ T6611] RIP: 0033:0x7fca75f9e159 [ 194.743930][ T6611] RSP: 002b:00007fca76ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.752573][ T6611] RAX: ffffffffffffffda RBX: 00007fca76226090 RCX: 00007fca75f9e159 [ 194.760733][ T6611] RDX: 0000000000000004 RSI: 0000200000000440 RDI: 0000000000000006 [ 194.768871][ T6611] RBP: 00007fca7603503b R08: 0000000000000000 R09: 0000000000000000 [ 194.776973][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.785117][ T6611] R13: 00007fca76226128 R14: 00007fca76226090 R15: 00007ffd4d32cd98 [ 194.793186][ T6611] [ 194.798387][ T6611] OOM killer enabled. [ 194.802487][ T6611] Restarting tasks ... done. [ 194.842270][ T6611] random: crng reseeded on system resumption [ 194.862200][ T6611] PM: suspend exit [ 194.882079][ T6612] PM: suspend entry (deep) [ 195.042719][ T6612] Filesystems sync: 0.137 seconds [ 195.165205][ T6612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.214160][ T6612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.235299][ T6612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.241487][ T6612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.402488][ T6612] Freezing user space processes [ 196.070894][ T6498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.136400][ T6498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.199374][ T6498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.261270][ T6498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.215916][ T6498] hsr_slave_0: left promiscuous mode [ 197.222172][ T6498] hsr_slave_1: left promiscuous mode [ 197.234066][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.242152][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.251391][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.259272][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.267117][ T5781] Bluetooth: hci3: command 0x0c1a tx timeout [ 197.274044][ T6498] bridge_slave_1: left allmulticast mode [ 197.279932][ T6498] bridge_slave_1: left promiscuous mode [ 197.287491][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.301390][ T6498] bridge_slave_0: left allmulticast mode [ 197.307341][ T6498] bridge_slave_0: left promiscuous mode [ 197.313295][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.344005][ T6498] veth1_macvtap: left promiscuous mode [ 197.350701][ T6498] veth0_macvtap: left promiscuous mode [ 197.356874][ T6498] veth1_vlan: left promiscuous mode [ 197.362873][ T6498] veth0_vlan: left promiscuous mode [ 198.026215][ T6498] team0 (unregistering): Port device team_slave_1 removed [ 198.074359][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 198.501327][ T6498] bond0 (unregistering): Released all slaves [ 198.974903][ T6498] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.047954][ T6498] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.113014][ T6498] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.194307][ T6498] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.328726][ T6498] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.404840][ T6498] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.482826][ T6498] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.546560][ T6498] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.734001][ T6498] hsr_slave_0: left promiscuous mode [ 200.740695][ T6498] hsr_slave_1: left promiscuous mode [ 200.749123][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.758294][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.769718][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.777869][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.785985][ T6498] bridge_slave_1: left allmulticast mode [ 200.791697][ T6498] bridge_slave_1: left promiscuous mode [ 200.797607][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.807667][ T6498] bridge_slave_0: left allmulticast mode [ 200.813352][ T6498] bridge_slave_0: left promiscuous mode [ 200.819774][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.837621][ T6498] hsr_slave_0: left promiscuous mode [ 200.843724][ T6498] hsr_slave_1: left promiscuous mode [ 200.851286][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.859326][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.869812][ T6498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.877948][ T6498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.887018][ T6498] geneve2: left allmulticast mode [ 200.892145][ T6498] geneve2: left promiscuous mode [ 200.897352][ T6498] bridge0: port 3(geneve2) entered disabled state [ 200.905922][ T6498] bridge_slave_1: left allmulticast mode [ 200.911662][ T6498] bridge_slave_1: left promiscuous mode [ 200.917679][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.928693][ T6498] bridge_slave_0: left allmulticast mode [ 200.934752][ T6498] bridge_slave_0: left promiscuous mode [ 200.940927][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.978576][ T6498] veth1_macvtap: left promiscuous mode [ 200.985352][ T6498] veth0_macvtap: left promiscuous mode [ 200.991131][ T6498] veth1_vlan: left promiscuous mode [ 200.998301][ T6498] veth0_vlan: left promiscuous mode [ 201.005210][ T6498] veth1_macvtap: left promiscuous mode [ 201.010794][ T6498] veth0_macvtap: left promiscuous mode [ 201.016764][ T6498] veth1_vlan: left promiscuous mode [ 201.022291][ T6498] veth0_vlan: left promiscuous mode [ 201.781519][ T6498] team0 (unregistering): Port device team_slave_1 removed [ 201.828747][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 202.270636][ T6498] bond0 (unregistering): Released all slaves [ 202.872931][ T6498] team0 (unregistering): Port device team_slave_1 removed [ 202.919507][ T6498] team0 (unregistering): Port device team_slave_0 removed [ 202.972278][ T6498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.355957][ T6498] bond0 (unregistering): Released all slaves [ 215.432048][ T6612] Freezing user space processes failed after 20.016 seconds (1 tasks refusing to freeze, wq_busy=0): [ 215.443182][ T6612] task:syz-executor state:S stack:21800 pid:5782 ppid:1 flags:0x00004002 [ 215.452490][ T6612] Call Trace: [ 215.455840][ T6612] [ 215.458818][ T6612] __schedule+0x15ae/0x4660 [ 215.463606][ T6612] ? asan.module_dtor+0x20/0x20 [ 215.468565][ T6612] ? do_wait+0x685/0xab0 [ 215.472872][ T6612] ? _raw_spin_unlock+0x40/0x40 [ 215.478094][ T6612] schedule+0xbd/0x170 [ 215.482221][ T6612] do_wait+0x75c/0xab0 [ 215.486399][ T6612] kernel_wait4+0x22f/0x2b0 [ 215.490933][ T6612] ? __ia32_sys_waitid+0xc0/0xc0 [ 215.496005][ T6612] ? kernel_waitid+0x3d0/0x3d0 [ 215.500824][ T6612] ? zap_pid_ns_processes+0x13e/0x690 [ 215.506368][ T6612] zap_pid_ns_processes+0x3a4/0x690 [ 215.511620][ T6612] ? zap_pid_ns_processes+0x13e/0x690 [ 215.517105][ T6612] ? lock_chain_count+0x20/0x20 [ 215.522027][ T6612] ? put_pid_ns+0x130/0x130 [ 215.526646][ T6612] ? _raw_write_unlock_irq+0x23/0x50 [ 215.531974][ T6612] ? lockdep_hardirqs_on+0x98/0x150 [ 215.537289][ T6612] do_exit+0x2042/0x2530 [ 215.541907][ T6612] ? put_task_struct+0xc0/0xc0 [ 215.547075][ T6612] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.553624][ T6612] ? get_signal+0x100e/0x1390 [ 215.558426][ T6612] ? lock_chain_count+0x20/0x20 [ 215.563543][ T6612] ? _raw_spin_lock_irq+0xbb/0xf0 [ 215.569317][ T6612] do_group_exit+0x22d/0x2f0 [ 215.573944][ T6612] ? lockdep_hardirqs_on+0x98/0x150 [ 215.579307][ T6612] get_signal+0x12a6/0x1390 [ 215.583869][ T6612] arch_do_signal_or_restart+0xc2/0x7b0 [ 215.589819][ T6612] ? __x64_sys_wait4+0x1b8/0x240 [ 215.594896][ T6612] ? get_sigframe_size+0x20/0x20 [ 215.600044][ T6612] ? exit_to_user_mode_loop+0x3b/0x110 [ 215.605989][ T6612] exit_to_user_mode_loop+0x70/0x110 [ 215.611429][ T6612] exit_to_user_mode_prepare+0xee/0x180 [ 215.617163][ T6612] syscall_exit_to_user_mode+0x1a/0x50 [ 215.622800][ T6612] do_syscall_64+0x61/0xb0 [ 215.627339][ T6612] ? clear_bhb_loop+0x40/0x90 [ 215.632146][ T6612] ? clear_bhb_loop+0x40/0x90 [ 215.636919][ T6612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 215.642974][ T6612] RIP: 0033:0x7fca75f5e98e [ 215.647509][ T6612] RSP: 002b:00007ffd4d32d098 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 215.656123][ T6612] RAX: fffffffffffffe00 RBX: 0000555563734500 RCX: 00007fca75f5e98e [ 215.664356][ T6612] RDX: 0000000040000000 RSI: 00007ffd4d32d13c RDI: ffffffffffffffff [ 215.672602][ T6612] RBP: 00007ffd4d32d13c R08: 0000000000000000 R09: 0000000000000000 [ 215.680634][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000003a [ 215.688767][ T6612] R13: 0000555563747a00 R14: 000000000002f904 R15: 00007ffd4d32d190 [ 215.697051][ T6612] [ 215.701428][ T6612] OOM killer enabled. [ 215.705509][ T6612] Restarting tasks ... done. [ 215.767860][ T6612] random: crng reseeded on system resumption [ 215.774067][ T6612] PM: suspend exit [ 216.416007][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.439318][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.447731][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.462197][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.471452][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.480849][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.537235][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.555810][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.571286][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.607622][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.627915][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.635535][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.775634][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.788088][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.796513][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.827127][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.836592][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.865756][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 216.928427][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 216.939924][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 216.951873][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 216.960557][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 216.969468][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 216.977366][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.117780][ T6497] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.247540][ T6497] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.352287][ T6497] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.434595][ T6638] chnl_net:caif_netlink_parms(): no params data found [ 217.490669][ T6497] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.756673][ T6641] chnl_net:caif_netlink_parms(): no params data found [ 217.778139][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.785553][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.793139][ T6638] bridge_slave_0: entered allmulticast mode [ 217.802164][ T6638] bridge_slave_0: entered promiscuous mode [ 217.811447][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.820766][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.828364][ T6638] bridge_slave_1: entered allmulticast mode [ 217.835959][ T6638] bridge_slave_1: entered promiscuous mode [ 217.989214][ T6638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.051170][ T6638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.114116][ T6649] chnl_net:caif_netlink_parms(): no params data found [ 218.162242][ T6645] chnl_net:caif_netlink_parms(): no params data found [ 218.314128][ T6638] team0: Port device team_slave_0 added [ 218.333124][ T6638] team0: Port device team_slave_1 added [ 218.339690][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.355497][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.364684][ T6641] bridge_slave_0: entered allmulticast mode [ 218.377042][ T6641] bridge_slave_0: entered promiscuous mode [ 218.400628][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.412587][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.421691][ T6641] bridge_slave_1: entered allmulticast mode [ 218.440152][ T6641] bridge_slave_1: entered promiscuous mode [ 218.545274][ T5088] Bluetooth: hci0: command tx timeout [ 218.604468][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.625063][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.654261][ T6638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.705199][ T5088] Bluetooth: hci1: command tx timeout [ 218.741939][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.754001][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.765601][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.792055][ T6638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.843719][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.943571][ T6641] team0: Port device team_slave_0 added [ 218.945653][ T5088] Bluetooth: hci2: command tx timeout [ 218.984072][ T6638] hsr_slave_0: entered promiscuous mode [ 218.990656][ T6638] hsr_slave_1: entered promiscuous mode [ 219.029024][ T5088] Bluetooth: hci3: command tx timeout [ 219.057595][ T6641] team0: Port device team_slave_1 added [ 219.064391][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.071882][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.079216][ T6645] bridge_slave_0: entered allmulticast mode [ 219.086844][ T6645] bridge_slave_0: entered promiscuous mode [ 219.096900][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.104060][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.111608][ T6645] bridge_slave_1: entered allmulticast mode [ 219.118983][ T6645] bridge_slave_1: entered promiscuous mode [ 219.143439][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.151255][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.159030][ T6649] bridge_slave_0: entered allmulticast mode [ 219.166922][ T6649] bridge_slave_0: entered promiscuous mode [ 219.226527][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.233749][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.242741][ T6649] bridge_slave_1: entered allmulticast mode [ 219.250574][ T6649] bridge_slave_1: entered promiscuous mode [ 219.291010][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.350148][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.357855][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.384151][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.417862][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.476838][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.483988][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.511072][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.554288][ T6649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.569564][ T6645] team0: Port device team_slave_0 added [ 219.620533][ T6645] team0: Port device team_slave_1 added [ 219.656024][ T6649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.791869][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.802693][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.833750][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.848258][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.855736][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.883278][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.907356][ T6649] team0: Port device team_slave_0 added [ 219.918344][ T6649] team0: Port device team_slave_1 added [ 219.965589][ T6641] hsr_slave_0: entered promiscuous mode [ 219.976146][ T6641] hsr_slave_1: entered promiscuous mode [ 219.983674][ T6641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.992185][ T6641] Cannot create hsr debugfs directory [ 220.167000][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.174124][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.204667][ T6649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.223158][ T6649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.233142][ T6649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.266127][ T6649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.407903][ T6645] hsr_slave_0: entered promiscuous mode [ 220.414707][ T6645] hsr_slave_1: entered promiscuous mode [ 220.422740][ T6645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.430968][ T6645] Cannot create hsr debugfs directory [ 220.498596][ T6497] hsr_slave_0: left promiscuous mode [ 220.504600][ T6497] hsr_slave_1: left promiscuous mode [ 220.511396][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.519589][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.528159][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.536127][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.544370][ T6497] bridge_slave_1: left allmulticast mode [ 220.551465][ T6497] bridge_slave_1: left promiscuous mode [ 220.557442][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.568079][ T6497] bridge_slave_0: left allmulticast mode [ 220.573869][ T6497] bridge_slave_0: left promiscuous mode [ 220.580188][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.606789][ T6497] veth1_macvtap: left promiscuous mode [ 220.612409][ T6497] veth0_macvtap: left promiscuous mode [ 220.618183][ T6497] veth1_vlan: left promiscuous mode [ 220.623509][ T6497] veth0_vlan: left promiscuous mode [ 220.630472][ T5088] Bluetooth: hci0: command tx timeout [ 220.789961][ T5088] Bluetooth: hci1: command tx timeout [ 220.875593][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.886607][ T6497] bond0 (unregistering): Released all slaves [ 221.025189][ T5088] Bluetooth: hci2: command tx timeout [ 221.110230][ T5088] Bluetooth: hci3: command tx timeout [ 221.399969][ T6497] team0 (unregistering): Port device team_slave_1 removed [ 221.453154][ T6497] team0 (unregistering): Port device team_slave_0 removed [ 222.108674][ T6638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.129862][ T6638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.169937][ T6649] hsr_slave_0: entered promiscuous mode [ 222.183521][ T6649] hsr_slave_1: entered promiscuous mode [ 222.194923][ T6649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.203126][ T6649] Cannot create hsr debugfs directory [ 222.229384][ T6638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.333976][ T6638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.709729][ T5088] Bluetooth: hci0: command tx timeout [ 222.788671][ T6641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 222.811810][ T6641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 222.827867][ T6641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 222.866290][ T5088] Bluetooth: hci1: command tx timeout [ 222.873420][ T6641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 223.019545][ T6645] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.040143][ T6645] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.080437][ T6645] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.091907][ T6645] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.106732][ T5088] Bluetooth: hci2: command tx timeout [ 223.134102][ T6638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.185201][ T5088] Bluetooth: hci3: command tx timeout [ 223.247423][ T6638] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.260617][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.322802][ T6649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.349422][ T6649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 223.364714][ T6649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 223.389621][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.396895][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.419161][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.426495][ T6498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.450454][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.467671][ T6649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 223.522132][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.529470][ T6498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.580745][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.587996][ T6498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.649793][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.770558][ T6645] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.860190][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.867475][ T6491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.894751][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.902120][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.126539][ T6649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.202349][ T6649] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.257192][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.264510][ T6491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.298820][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.306075][ T6491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.520135][ T6638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.571914][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.786402][ T5088] Bluetooth: hci0: command tx timeout [ 224.818902][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.956300][ T5088] Bluetooth: hci1: command tx timeout [ 225.185196][ T5088] Bluetooth: hci2: command tx timeout [ 225.259728][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.268021][ T5088] Bluetooth: hci3: command tx timeout [ 225.707051][ T6641] veth0_vlan: entered promiscuous mode [ 225.749498][ T6638] veth0_vlan: entered promiscuous mode [ 225.810432][ T6638] veth1_vlan: entered promiscuous mode [ 225.832875][ T6641] veth1_vlan: entered promiscuous mode [ 225.873643][ T6645] veth0_vlan: entered promiscuous mode [ 225.924904][ T6645] veth1_vlan: entered promiscuous mode [ 225.970390][ T6641] veth0_macvtap: entered promiscuous mode [ 225.983009][ T6641] veth1_macvtap: entered promiscuous mode [ 226.039852][ T6638] veth0_macvtap: entered promiscuous mode [ 226.082585][ T6638] veth1_macvtap: entered promiscuous mode [ 226.156913][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.183091][ T6638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.198509][ T6638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.212007][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.223766][ T6645] veth0_macvtap: entered promiscuous mode [ 226.248920][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.274071][ T6638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.291381][ T6638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.304370][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.329477][ T6641] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.341714][ T6641] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.352106][ T6641] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.361537][ T6641] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.384059][ T6645] veth1_macvtap: entered promiscuous mode [ 226.408077][ T6638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.418795][ T6638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.428357][ T6638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.438919][ T6638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.478304][ T6649] veth0_vlan: entered promiscuous mode [ 226.597518][ T6649] veth1_vlan: entered promiscuous mode [ 226.617062][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.636287][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.647915][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.659286][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.671137][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.694675][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.706376][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.717316][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.730155][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.742562][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.771779][ T6645] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.782606][ T6645] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.792963][ T6645] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.804064][ T6645] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.826784][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.834863][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.907931][ T6497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.930805][ T6497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.964579][ T6649] veth0_macvtap: entered promiscuous mode [ 226.992935][ T6649] veth1_macvtap: entered promiscuous mode [ 227.111981][ T6498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.131395][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.146406][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.156572][ T6498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.167555][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.178180][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.191073][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.205834][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.217932][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.232108][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.243037][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.253905][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.274804][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.285141][ T6649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.296257][ T6649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.318799][ T6649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.355370][ T6492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.375163][ T6492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.432430][ T6649] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.442814][ T6649] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.451876][ T6649] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.462530][ T6649] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.507585][ T6492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.530037][ T6492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.692206][ T6498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.738021][ T6498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.894581][ T6475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.932835][ T6475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.996827][ T6496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.021265][ T6496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.191446][ T6808] Bluetooth: MGMT ver 1.22 [ 229.068210][ T6814] bonding: bond0 is being created... [ 229.132674][ T6811] bond0: option mode: unable to set because the bond device has slaves [ 229.177726][ T6814] bonding: bond0 already exists [ 229.574011][ T6829] e1000 0000:00:00.0: can't ioremap BAR 0: [??? 0x00000000 flags 0x0] [ 229.588399][ T6829] e1000: probe of 0000:00:00.0 failed with error -5 [ 229.900010][ T6835] md: could not open device unknown-block(1,0). [ 230.045153][ T5849] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 230.065621][ T27] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 230.182272][ T6854] loop0: detected capacity change from 0 to 32768 [ 230.265187][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 230.270605][ T27] usb 8-1: Using ep0 maxpacket: 8 [ 230.287146][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.313917][ T27] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 230.334797][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.354040][ T27] usb 8-1: config 0 has no interface number 0 [ 230.378880][ T27] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 230.398252][ T5849] usb 5-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 230.419391][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.429487][ T6859] bonding: bond0 is being created... [ 230.438699][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.450747][ T6859] bonding: bond0 already exists [ 230.486502][ T27] usb 8-1: config 0 descriptor?? [ 230.495161][ T6859] bond0: option mode: unable to set because the bond device has slaves [ 230.522609][ T5849] usb 5-1: config 0 descriptor?? [ 230.634412][ T27] viperboard 8-1:0.143: version 0.00 found at bus 008 address 002 [ 230.709775][ T27] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 230.768340][ T27] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 230.993569][ T5849] thrustmaster 0003:044F:B654.0004: unknown main item tag 0x0 [ 231.039341][ T5849] input: HID 044f:b654 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:044F:B654.0004/input/input10 [ 231.197681][ T5849] thrustmaster 0003:044F:B654.0004: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b654] on usb-dummy_hcd.4-1/input0 [ 231.257196][ T6873] UBIFS error (pid: 6873): cannot open "ubi0:test", error -19 [ 231.260585][ T5849] thrustmaster 0003:044F:B654.0004: force feedback for ThrustMaster devices by Zinx Verituse [ 231.406063][ T6877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 231.431354][ T6877] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 231.446779][ T6877] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 231.460630][ T6877] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 231.805790][ T5849] usb 5-1: USB disconnect, device number 2 [ 231.856806][ T9] usb 8-1: USB disconnect, device number 2 [ 232.304126][ T6498] bond0: (slave bond_slave_0): interface is now down [ 232.329060][ T6498] bond0: (slave bond_slave_1): interface is now down [ 232.369798][ T6498] bond0: now running without any active interface! [ 232.578840][ T6903] loop1: detected capacity change from 0 to 32768 [ 232.617061][ T6903] device-mapper: table: 248:0: zero-length target [ 232.655184][ T6903] device-mapper: ioctl: error adding target to table [ 232.710918][ T6906] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 234.265187][ T8] nvmet: creating nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 234.495538][ T6906] nvme nvme1: creating 2 I/O queues. [ 234.594154][ T6906] nvme nvme1: new ctrl: "testsubsys" [ 234.650856][ T6922] bonding: bond0 is being created... [ 234.703573][ T6924] input: syz0 as /devices/virtual/input/input11 [ 234.775325][ T6922] bonding: bond0 already exists [ 235.487506][ T6922] bond0: (slave bond_slave_0): Releasing backup interface [ 235.769480][ T6930] bonding: bond0 is being created... [ 235.795419][ T6930] bonding: bond0 already exists [ 235.802351][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.877729][ T6927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.941004][ T6925] bond0: no command found in slaves file - use +ifname or -ifname [ 235.977417][ T6930] bond0: option mode: unable to set because the bond device has slaves [ 236.762493][ T6952] tmpfs: Unknown parameter 'grpquota_b' [ 237.943501][ T6964] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 237.986095][ T6963] binder: 6957:6963 ioctl 80045017 200000000400 returned -22 [ 238.116407][ T6963] overlayfs: failed to resolve './file0': -2 [ 238.215641][ T6973] bonding: bond0 is being created... [ 238.221400][ T6973] bonding: bond0 already exists [ 238.245743][ T6973] bond0: (slave bond_slave_0): Releasing backup interface [ 238.447278][ T6978] bond0: (slave bond_slave_1): Releasing backup interface [ 238.724917][ T8] nvmet: creating nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 238.750099][ T6964] nvme nvme2: creating 2 I/O queues. [ 238.765882][ T6964] nvme nvme2: new ctrl: "testsubsys" [ 239.096592][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.255846][ T6985] bonding: bond0 is being created... [ 239.261953][ T6985] bonding: bond0 already exists [ 239.341706][ T6985] bond0: (slave bond_slave_0): Releasing backup interface [ 239.409812][ T6994] bonding: bond0 is being created... [ 239.525780][ T6994] bonding: bond0 already exists [ 239.540079][ T6993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.604994][ T6996] bond0: option mode: unable to set because the bond device has slaves [ 239.647127][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.654970][ T6985] bond0: no command found in slaves file - use +ifname or -ifname [ 240.121100][ T7011] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 240.284274][ T7011] bond0: option slaves: unable to set because the bond device is up [ 240.752128][ T7014] binder: 7009:7014 ioctl 80045017 200000000400 returned -22 [ 240.835768][ T7015] overlayfs: failed to resolve './file0': -2 [ 241.464084][ T7031] bonding: bond0 is being created... [ 241.493539][ T7031] bonding: bond0 already exists [ 241.578773][ T7031] bond0: (slave bond_slave_0): Releasing backup interface [ 241.705259][ T7033] bond0: option mode: invalid value (-bond_slave_1) [ 241.781482][ T7031] bond0: ARP target 192.168.1.1 is already present [ 241.818067][ T7031] bond0: option arp_ip_target: invalid value (+192.168.1.1) [ 241.921837][ T7031] bond0: (slave bond_slave_0): making interface the new active one [ 241.982739][ T7031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.113962][ T7047] bonding: bond0 is being created... [ 242.124483][ T7047] bonding: bond0 already exists [ 242.132522][ T7047] bond0: option mode: unable to set because the bond device has slaves [ 243.306164][ T7062] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 243.355203][ T7068] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 243.511276][ T7062] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 243.551274][ T7070] binder: 7061:7070 ioctl 80045017 200000000400 returned -22 [ 243.555202][ T7068] bond0: option slaves: unable to set because the bond device is up [ 243.616995][ T7071] input: syz0 as /devices/virtual/input/input12 [ 244.459642][ T7074] overlayfs: failed to resolve './file0': -2 [ 245.117219][ T7089] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 246.964500][ T27] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 247.472045][ T7115] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 248.014765][ T8] nvmet: creating nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 248.091110][ T7115] nvme nvme3: creating 2 I/O queues. [ 248.112178][ T7115] nvme nvme3: new ctrl: "testsubsys" [ 248.136539][ T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.155125][ T27] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 248.172024][ T27] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.182301][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.222042][ T27] usb 7-1: config 0 descriptor?? [ 248.489194][ T5849] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 248.658891][ T7127] input: syz0 as /devices/virtual/input/input13 [ 248.760037][ T5849] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 248.907317][ T5849] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 249.082756][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.276626][ T5849] usb 5-1: config 0 has no interface number 0 [ 249.292768][ T5849] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 249.322765][ T5849] usb 5-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 249.364545][ T5849] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 249.384180][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.431335][ T5849] usb 5-1: config 0 descriptor?? [ 249.498422][ T5849] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 249.700123][ T5849] usb 5-1: USB disconnect, device number 3 [ 249.706664][ T6495] usb 5-1: Failed to submit usb control message: -71 [ 249.747720][ T6495] usb 5-1: unable to send the bmi data to the device: -71 [ 249.757576][ T6495] usb 5-1: unable to get target info from device [ 249.764121][ T6495] usb 5-1: could not get target info (-71) [ 249.770905][ T6495] usb 5-1: could not probe fw (-71) [ 249.818225][ T8] usb 7-1: USB disconnect, device number 2 [ 250.211582][ T7151] binder: 7144:7151 ioctl 80045017 200000000400 returned -22 [ 250.294955][ T7154] overlayfs: failed to resolve './file0': -2 [ 252.144024][ T7167] bond0: option mode: unable to set because the bond device has slaves [ 253.108669][ T7172] overlayfs: missing 'lowerdir' [ 253.350331][ T7181] kAFS: unable to lookup cell '' [ 255.636751][ T7197] binder: 7193:7197 ioctl 80045017 200000000400 returned -22 [ 255.835081][ T7199] overlayfs: failed to resolve './file0': -2 [ 256.185352][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.191970][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.162848][ T7214] bond0: option mode: unable to set because the bond device has slaves [ 258.287082][ T7223] overlayfs: missing 'lowerdir' [ 259.863688][ C1] sched: RT throttling activated [ 260.353504][ T7230] bond0: (slave bond_slave_0): Releasing backup interface [ 260.884432][ T7241] input: syz0 as /devices/virtual/input/input14 [ 261.862669][ T5715] nvmet: creating nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 261.931162][ T7240] nvme nvme4: creating 2 I/O queues. [ 261.987717][ T7240] nvme nvme4: new ctrl: "testsubsys" [ 262.030149][ T7249] binder: 7248:7249 ioctl 80045017 200000000400 returned -22 [ 262.164077][ T7254] overlayfs: failed to resolve './file0': -2 [ 262.883396][ T7264] netlink: 'syz.5.322': attribute type 1 has an invalid length. [ 263.289432][ T7264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.068268][ T7268] bond1: (slave geneve2): making interface the new active one [ 264.110955][ T7268] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 264.143656][ T7275] overlayfs: missing 'lowerdir' [ 264.181207][ T7268] syz.5.322 (7268) used greatest stack depth: 20360 bytes left [ 266.284592][ T7287] bond0: option mode: unable to set because the bond device has slaves [ 266.509255][ T7294] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 268.507220][ T7304] binder: 7300:7304 ioctl 80045017 200000000400 returned -22 [ 268.574301][ T7305] overlayfs: failed to resolve './file0': -2 [ 269.213805][ T7306] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 269.618709][ T8] nvmet: creating nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 269.651096][ T7309] nvme nvme5: creating 2 I/O queues. [ 269.663803][ T7309] nvme nvme5: new ctrl: "testsubsys" [ 272.485458][ T7329] overlayfs: missing 'lowerdir' [ 272.566546][ T7337] bonding: bond0 is being created... [ 272.572231][ T7337] bonding: bond0 already exists [ 272.659479][ T7337] bond0: option slaves: invalid value (-bond_slave_0) [ 272.762356][ T7337] bond0: (slave bond_slave_1): Releasing backup interface [ 273.083844][ T7345] bond0: option mode: unable to set because the bond device has slaves [ 273.735182][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.209649][ T7359] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 274.334700][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 274.720122][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.892224][ T8] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.017788][ T8] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 275.072960][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.134023][ T8] usb 8-1: config 0 descriptor?? [ 277.355677][ T5849] nvmet: creating nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:e8891430-2359-4d9d-a4d1-b4791cf98d87. [ 277.376280][ T5824] usb 8-1: USB disconnect, device number 3 [ 277.484586][ T7364] nvme nvme6: creating 2 I/O queues. [ 277.515920][ T7364] nvme nvme6: new ctrl: "testsubsys" [ 277.697284][ T7377] overlayfs: missing 'lowerdir' [ 277.963485][ T7383] bond0: option mode: unable to set because the bond device has slaves [ 279.872990][ T56] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 280.201457][ T56] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 280.355197][ T56] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 280.447542][ T56] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.458020][ T56] usb 8-1: config 0 has no interface number 0 [ 280.472023][ T56] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 280.481995][ T56] usb 8-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 280.495252][ T56] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 280.510815][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.762067][ T56] usb 8-1: config 0 descriptor?? [ 281.285502][ T56] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 281.325377][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 281.515174][ T6549] usb 8-1: Failed to submit usb control message: -32 [ 281.665258][ T7421] netlink: 'syz.5.355': attribute type 1 has an invalid length. [ 281.748889][ T6549] usb 8-1: unable to send the bmi data to the device: -32 [ 281.774851][ T56] usb 8-1: USB disconnect, device number 4 [ 281.999714][ T6549] usb 8-1: unable to get target info from device [ 282.132619][ T6549] usb 8-1: could not get target info (-32) [ 282.254572][ T6549] usb 8-1: could not probe fw (-32) [ 282.628299][ T7435] input: syz0 as /devices/virtual/input/input15 [ 283.349450][ T7421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 289.416467][ T7467] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 290.140239][ T7481] input: syz0 as /devices/virtual/input/input16 [ 292.973326][ T27] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 293.947633][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.999792][ T27] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.037935][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.073042][ T27] usb 8-1: config 0 descriptor?? [ 294.123014][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 294.330672][ T7510] netlink: 'syz.6.376': attribute type 1 has an invalid length. [ 294.505567][ T7510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.046185][ T7516] bond1: (slave geneve2): making interface the new active one [ 295.116495][ T7516] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 295.277362][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 295.286127][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 295.293801][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 295.301218][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 295.308617][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 295.316069][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 295.351994][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 295.391818][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 295.411852][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 295.426251][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 295.452528][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 295.467061][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 295.489425][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 296.443711][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 296.450968][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 296.458139][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 296.481692][ T27] pwc: Registered as video103. [ 296.502844][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 296.517715][ T7530] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 296.812817][ T27] usb 8-1: USB disconnect, device number 5 [ 298.774574][ C1] nvme nvme0: long keepalive RTT (1430 ms) [ 298.780562][ C1] nvme nvme6: long keepalive RTT (1430 ms) [ 298.786538][ C1] nvme nvme1: long keepalive RTT (1440 ms) [ 298.792584][ C1] nvme nvme2: long keepalive RTT (1450 ms) [ 298.798507][ C1] nvme nvme5: long keepalive RTT (1450 ms) [ 298.804480][ C1] nvme nvme4: long keepalive RTT (1460 ms) [ 298.810394][ C1] nvme nvme3: long keepalive RTT (1460 ms) [ 299.322343][ T5849] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 299.552732][ T5849] usb 7-1: config index 0 descriptor too short (expected 63186, got 210) [ 299.678303][ T5849] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 300.030265][ T5849] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.074158][ T5849] usb 7-1: config 0 has no interface number 0 [ 300.080746][ T5849] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 300.093309][ T7564] netlink: 'syz.7.387': attribute type 1 has an invalid length. [ 300.134000][ T7564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.175893][ T7564] bond1: (slave geneve2): making interface the new active one [ 300.186329][ T7564] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 300.196202][ T5849] usb 7-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 300.331465][ T7568] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 300.338606][ T5849] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 300.520760][ T5849] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.848964][ T5849] usb 7-1: config 0 descriptor?? [ 300.979634][ T5849] usb 7-1: can't set config #0, error -71 [ 301.261181][ T5849] usb 7-1: USB disconnect, device number 3 [ 304.811235][ T27] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 305.653373][ T27] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 305.665302][ T27] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 305.691485][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.711013][ T27] usb 8-1: config 0 has no interface number 0 [ 305.729282][ T27] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 306.241871][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 306.593587][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 306.746798][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 306.880963][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.936539][ T27] usb 8-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 306.949853][ T27] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 306.968449][ T27] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.979212][ T27] usb 8-1: config 0 descriptor?? [ 306.999796][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.020469][ T27] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 307.081052][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.151053][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.208142][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 307.234402][ T6474] usb 8-1: Failed to submit usb control message: -71 [ 307.248554][ T27] usb 8-1: USB disconnect, device number 6 [ 307.265606][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.281100][ T6474] usb 8-1: unable to send the bmi data to the device: -71 [ 307.309038][ T6474] usb 8-1: unable to get target info from device [ 307.328876][ T6474] usb 8-1: could not get target info (-71) [ 307.351029][ T6474] usb 8-1: could not probe fw (-71) [ 307.575335][ T9] usb 5-1: usb_control_msg returned -32 [ 307.581644][ T9] usbtmc 5-1:16.0: can't read capabilities [ 310.893010][ T9] usb 5-1: USB disconnect, device number 4 [ 311.902247][ T7665] input: syz0 as /devices/virtual/input/input18 [ 314.195141][ T7685] overlayfs: missing 'lowerdir' [ 319.258302][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.264747][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.970361][ T27] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 320.374265][ T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.410096][ T27] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.429984][ T5824] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 320.443416][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.491420][ T27] usb 7-1: config 0 descriptor?? [ 320.515327][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 320.650727][ T5824] usb 8-1: Using ep0 maxpacket: 8 [ 320.677894][ T5824] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 320.700635][ T5824] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.727356][ T5824] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.738353][ T5824] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.749044][ T5824] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.778776][ T5824] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 320.807025][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.014540][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 321.033132][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 321.043842][ T5824] usb 8-1: usb_control_msg returned -32 [ 321.049518][ T5824] usbtmc 8-1:16.0: can't read capabilities [ 321.056961][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 321.076497][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 321.088770][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 321.109209][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 321.330727][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 321.338031][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 321.359125][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 321.369656][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 321.379090][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 321.392485][ T27] pwc: recv_control_msg error -32 req 02 val 2600 [ 322.068065][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.388666][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.841678][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 322.848674][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 322.855896][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.881338][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.897434][ T27] pwc: Registered as video103. [ 322.907229][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input19 [ 322.983479][ T7751] binder: 7747:7751 ioctl 80045017 200000000400 returned -22 [ 323.179208][ T7753] overlayfs: failed to resolve './file0': -2 [ 324.782564][ T27] usb 7-1: USB disconnect, device number 4 [ 324.947891][ T7756] ================================================================== [ 324.956061][ T7756] BUG: KFENCE: use-after-free read in dvb_device_open+0xc9/0x360 [ 324.956061][ T7756] [ 324.966059][ T7756] Use-after-free read at 0xffff88823bdccf18 (in kfence-#229): [ 324.973566][ T7756] dvb_device_open+0xc9/0x360 [ 324.978301][ T7756] chrdev_open+0x58c/0x600 [ 324.982811][ T7756] do_dentry_open+0x880/0x14b0 [ 324.987656][ T7756] path_openat+0x284f/0x3270 [ 324.992287][ T7756] do_filp_open+0x1f2/0x430 [ 324.996911][ T7756] do_sys_openat2+0x134/0x1d0 [ 325.001712][ T7756] __x64_sys_openat+0x139/0x160 [ 325.006788][ T7756] do_syscall_64+0x55/0xb0 [ 325.011238][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.017188][ T7756] [ 325.019566][ T7756] kfence-#229: 0xffff88823bdcc000-0xffff88823bdcc0ef, size=240, cache=skbuff_head_cache [ 325.019566][ T7756] [ 325.031489][ T7756] allocated by task 6549 on cpu 0 at 321.553501s: [ 325.037958][ T7756] __alloc_skb+0x103/0x2c0 [ 325.042412][ T7756] nsim_dev_trap_report_work+0x253/0xa90 [ 325.048168][ T7756] process_scheduled_works+0xa60/0x1600 [ 325.053951][ T7756] worker_thread+0xa5e/0xfe0 [ 325.058632][ T7756] kthread+0x2fa/0x390 [ 325.062730][ T7756] ret_from_fork+0x48/0x80 [ 325.067258][ T7756] ret_from_fork_asm+0x11/0x20 [ 325.072049][ T7756] [ 325.074396][ T7756] freed by task 6549 on cpu 0 at 321.553559s: [ 325.080518][ T7756] nsim_dev_trap_report_work+0x723/0xa90 [ 325.086189][ T7756] process_scheduled_works+0xa60/0x1600 [ 325.091777][ T7756] worker_thread+0xa5e/0xfe0 [ 325.096400][ T7756] kthread+0x2fa/0x390 [ 325.100493][ T7756] ret_from_fork+0x48/0x80 [ 325.104960][ T7756] ret_from_fork_asm+0x11/0x20 [ 325.109749][ T7756] [ 325.112213][ T7756] CPU: 1 PID: 7756 Comm: syz.4.426 Not tainted syzkaller #0 [ 325.119517][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.129596][ T7756] RIP: 0010:dvb_device_open+0xc9/0x360 [ 325.135101][ T7756] Code: 4d 8b 3f 4d 85 ff 0f 84 2f 01 00 00 4c 89 24 24 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 b7 12 d3 fa <4d> 8b 2c 24 4d 85 ed 0f 84 0b 01 00 00 4c 89 e8 48 c1 e8 03 80 3c [ 325.154937][ T7756] RSP: 0018:ffffc9000c4877f0 EFLAGS: 00010246 [ 325.161029][ T7756] RAX: 1ffffffff2ecc68f RBX: dffffc0000000000 RCX: 0000000000000000 [ 325.169025][ T7756] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 325.177023][ T7756] RBP: 1ffff110477b99e3 R08: ffffffff8df11f8f R09: 1ffffffff1be23f1 [ 325.185025][ T7756] R10: dffffc0000000000 R11: fffffbfff1be23f2 R12: ffff88823bdccf18 [ 325.193113][ T7756] R13: dffffc0000000000 R14: ffff88802694a9f8 R15: ffff88823bdccf00 [ 325.201380][ T7756] FS: 00007ff280dde6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 325.210426][ T7756] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.217066][ T7756] CR2: ffff88823bdccf18 CR3: 000000005ef54000 CR4: 00000000003506e0 [ 325.225236][ T7756] Call Trace: [ 325.228543][ T7756] [ 325.231524][ T7756] chrdev_open+0x58c/0x600 [ 325.236157][ T7756] ? cd_forget+0x160/0x160 [ 325.240599][ T7756] ? lockdep_hardirqs_on+0x98/0x150 [ 325.245946][ T7756] ? fsnotify_perm+0x3ed/0x5e0 [ 325.250763][ T7756] do_dentry_open+0x880/0x14b0 [ 325.255735][ T7756] ? cd_forget+0x160/0x160 [ 325.260186][ T7756] path_openat+0x284f/0x3270 [ 325.264814][ T7756] ? do_sys_openat2+0xda/0x1d0 [ 325.269707][ T7756] ? __x64_sys_openat+0x139/0x160 [ 325.274788][ T7756] ? verify_lock_unused+0x140/0x140 [ 325.280025][ T7756] ? do_filp_open+0x430/0x430 [ 325.284751][ T7756] do_filp_open+0x1f2/0x430 [ 325.289299][ T7756] ? vfs_tmpfile+0x620/0x620 [ 325.293972][ T7756] ? _raw_spin_unlock+0x28/0x40 [ 325.298861][ T7756] ? alloc_fd+0x590/0x640 [ 325.303245][ T7756] do_sys_openat2+0x134/0x1d0 [ 325.308221][ T7756] ? do_sys_open+0xe0/0xe0 [ 325.312675][ T7756] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 325.318709][ T7756] ? lock_chain_count+0x20/0x20 [ 325.323593][ T7756] __x64_sys_openat+0x139/0x160 [ 325.328481][ T7756] do_syscall_64+0x55/0xb0 [ 325.332956][ T7756] ? clear_bhb_loop+0x40/0x90 [ 325.337686][ T7756] ? clear_bhb_loop+0x40/0x90 [ 325.342394][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.348403][ T7756] RIP: 0033:0x7ff27ff5e98e [ 325.352945][ T7756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.372846][ T7756] RSP: 002b:00007ff280dddb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.381552][ T7756] RAX: ffffffffffffffda RBX: 00007ff280dde6c0 RCX: 00007ff27ff5e98e [ 325.389562][ T7756] RDX: 0000000000040002 RSI: 00007ff280dddc00 RDI: ffffffffffffff9c [ 325.397561][ T7756] RBP: 00007ff280dddc00 R08: 0000000000000000 R09: 0000000000000000 [ 325.405569][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 325.413623][ T7756] R13: 00007ff280226308 R14: 00007ff280226270 R15: 00007ffe558dc968 [ 325.421640][ T7756] [ 325.424827][ T7756] ================================================================== [ 325.432937][ T7756] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 325.440835][ T7756] CPU: 1 PID: 7756 Comm: syz.4.426 Not tainted syzkaller #0 [ 325.448495][ T7756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.458677][ T7756] Call Trace: [ 325.462075][ T7756] [ 325.465040][ T7756] dump_stack_lvl+0x18c/0x250 [ 325.469777][ T7756] ? show_regs_print_info+0x20/0x20 [ 325.475039][ T7756] ? load_image+0x420/0x420 [ 325.479619][ T7756] panic+0x2ca/0x720 [ 325.483602][ T7756] ? bpf_jit_dump+0xd0/0xd0 [ 325.488175][ T7756] check_panic_on_warn+0x84/0xa0 [ 325.493171][ T7756] kfence_report_error+0x7cf/0xac0 [ 325.498430][ T7756] ? kfence_print_stack+0x2c0/0x2c0 [ 325.503667][ T7756] ? dvb_device_open+0xc9/0x360 [ 325.508586][ T7756] ? chrdev_open+0x58c/0x600 [ 325.513210][ T7756] ? do_dentry_open+0x880/0x14b0 [ 325.518203][ T7756] ? path_openat+0x284f/0x3270 [ 325.523083][ T7756] ? do_filp_open+0x1f2/0x430 [ 325.527817][ T7756] ? do_sys_openat2+0x134/0x1d0 [ 325.532705][ T7756] ? __x64_sys_openat+0x139/0x160 [ 325.537773][ T7756] ? do_syscall_64+0x55/0xb0 [ 325.542402][ T7756] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.548621][ T7756] ? _raw_spin_lock+0x40/0x40 [ 325.553346][ T7756] kfence_handle_page_fault+0x536/0x720 [ 325.559107][ T7756] ? trim_init_extable+0x6f0/0x6f0 [ 325.564260][ T7756] ? rcu_guarded_free+0x50/0x50 [ 325.569337][ T7756] ? search_bpf_extables+0x36c/0x3c0 [ 325.574654][ T7756] ? search_bpf_extables+0x26/0x3c0 [ 325.579892][ T7756] page_fault_oops+0x1a3/0x930 [ 325.584697][ T7756] ? __mutex_trylock_common+0x160/0x270 [ 325.590294][ T7756] ? ex_get_fixup_type+0x70/0x70 [ 325.595568][ T7756] ? kernelmode_fixup_or_oops+0xf0/0xf0 [ 325.601262][ T7756] ? is_prefetch+0x434/0x690 [ 325.605894][ T7756] ? page_fault_oops+0x930/0x930 [ 325.610878][ T7756] exc_page_fault+0xac/0x100 [ 325.615505][ T7756] ? mutex_lock_nested+0x20/0x20 [ 325.620594][ T7756] asm_exc_page_fault+0x26/0x30 [ 325.625481][ T7756] RIP: 0010:dvb_device_open+0xc9/0x360 [ 325.630974][ T7756] Code: 4d 8b 3f 4d 85 ff 0f 84 2f 01 00 00 4c 89 24 24 4d 8d 67 18 4c 89 e5 48 c1 ed 03 80 7c 1d 00 00 74 08 4c 89 e7 e8 b7 12 d3 fa <4d> 8b 2c 24 4d 85 ed 0f 84 0b 01 00 00 4c 89 e8 48 c1 e8 03 80 3c [ 325.650634][ T7756] RSP: 0018:ffffc9000c4877f0 EFLAGS: 00010246 [ 325.657084][ T7756] RAX: 1ffffffff2ecc68f RBX: dffffc0000000000 RCX: 0000000000000000 [ 325.665104][ T7756] RDX: 0000000000000001 RSI: 0000000000000008 RDI: 00000000ffffffff [ 325.673124][ T7756] RBP: 1ffff110477b99e3 R08: ffffffff8df11f8f R09: 1ffffffff1be23f1 [ 325.681129][ T7756] R10: dffffc0000000000 R11: fffffbfff1be23f2 R12: ffff88823bdccf18 [ 325.689130][ T7756] R13: dffffc0000000000 R14: ffff88802694a9f8 R15: ffff88823bdccf00 [ 325.697153][ T7756] chrdev_open+0x58c/0x600 [ 325.701613][ T7756] ? cd_forget+0x160/0x160 [ 325.706060][ T7756] ? lockdep_hardirqs_on+0x98/0x150 [ 325.711296][ T7756] ? fsnotify_perm+0x3ed/0x5e0 [ 325.716131][ T7756] do_dentry_open+0x880/0x14b0 [ 325.720986][ T7756] ? cd_forget+0x160/0x160 [ 325.725452][ T7756] path_openat+0x284f/0x3270 [ 325.730095][ T7756] ? do_sys_openat2+0xda/0x1d0 [ 325.734983][ T7756] ? __x64_sys_openat+0x139/0x160 [ 325.740214][ T7756] ? verify_lock_unused+0x140/0x140 [ 325.745569][ T7756] ? do_filp_open+0x430/0x430 [ 325.750296][ T7756] do_filp_open+0x1f2/0x430 [ 325.754850][ T7756] ? vfs_tmpfile+0x620/0x620 [ 325.759529][ T7756] ? _raw_spin_unlock+0x28/0x40 [ 325.764535][ T7756] ? alloc_fd+0x590/0x640 [ 325.769117][ T7756] do_sys_openat2+0x134/0x1d0 [ 325.773927][ T7756] ? do_sys_open+0xe0/0xe0 [ 325.778380][ T7756] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 325.784485][ T7756] ? lock_chain_count+0x20/0x20 [ 325.789402][ T7756] __x64_sys_openat+0x139/0x160 [ 325.794296][ T7756] do_syscall_64+0x55/0xb0 [ 325.798763][ T7756] ? clear_bhb_loop+0x40/0x90 [ 325.803491][ T7756] ? clear_bhb_loop+0x40/0x90 [ 325.808211][ T7756] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.814170][ T7756] RIP: 0033:0x7ff27ff5e98e [ 325.818624][ T7756] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 325.838263][ T7756] RSP: 002b:00007ff280dddb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 325.846730][ T7756] RAX: ffffffffffffffda RBX: 00007ff280dde6c0 RCX: 00007ff27ff5e98e [ 325.855023][ T7756] RDX: 0000000000040002 RSI: 00007ff280dddc00 RDI: ffffffffffffff9c [ 325.863051][ T7756] RBP: 00007ff280dddc00 R08: 0000000000000000 R09: 0000000000000000 [ 325.871057][ T7756] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 325.879074][ T7756] R13: 00007ff280226308 R14: 00007ff280226270 R15: 00007ffe558dc968 [ 325.887104][ T7756] [ 325.890825][ T7756] Kernel Offset: disabled [ 325.895589][ T7756] Rebooting in 86400 seconds..