last executing test programs: 9m37.354553558s ago: executing program 3 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000630e18110000", @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') 9m36.572513531s ago: executing program 3 (id=241): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x8b2a, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1538, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) getdents(r0, 0x0, 0x0) 9m28.450075438s ago: executing program 3 (id=254): openat$ppp(0xffffffffffffff9c, 0x0, 0x86000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffff08c, 0x101000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_mtu(r2, 0x111, 0xa, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0xfcd3, 0x5, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), 0xce4, r4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) r5 = fsopen(&(0x7f0000000200)='qnx6\x00', 0x1) r6 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x20eb12) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) 9m23.394422107s ago: executing program 3 (id=261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x5}]}, 0x10) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) 9m20.003997262s ago: executing program 3 (id=265): kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x64000044) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0x1}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) userfaultfd(0x80801) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r7, 0x731, 0x4, 0x25dfdbfe, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x80}, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) landlock_create_ruleset(&(0x7f0000000200)={0x8, 0x3, 0x1}, 0x18, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 9m18.741068124s ago: executing program 3 (id=269): openat$ppp(0xffffffffffffff9c, 0x0, 0x86000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffff08c, 0x101000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_mtu(r2, 0x111, 0xa, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0xfcd3, 0x5, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), 0xce4, r4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) r5 = fsopen(&(0x7f0000000200)='qnx6\x00', 0x1) r6 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x20eb12) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) 9m3.398570114s ago: executing program 32 (id=269): openat$ppp(0xffffffffffffff9c, 0x0, 0x86000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$sndmidi(&(0x7f00000000c0), 0xfffffffffffff08c, 0x101000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) setsockopt$inet_mtu(r2, 0x111, 0xa, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5}, 0xfcd3, 0x5, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), 0xce4, r4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x28) r5 = fsopen(&(0x7f0000000200)='qnx6\x00', 0x1) r6 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x20eb12) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0) 16.018405794s ago: executing program 0 (id=1165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x10d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5555, 0x0, &(0x7f0000000140), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = accept(r0, &(0x7f0000000040)=@ieee802154={0x24, @long}, &(0x7f00000000c0)=0x80) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000300)={'pcl816\x00', [0x2f00, 0x5, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7fff, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x30000, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) ioctl$COMEDI_INSN(r5, 0x8028640c, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x22000, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r6, 0x3ba0, &(0x7f0000000440)={0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd, 0x7, {}, 0x2}) 14.809016202s ago: executing program 0 (id=1168): kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x64000044) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) landlock_create_ruleset(&(0x7f0000000200)={0x8, 0x3, 0x1}, 0x18, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 13.809994793s ago: executing program 0 (id=1170): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, 0x0, 0x881) socket$inet6(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x20, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x6, 0xe5, 0x0, 0x1, [@generic="92d1"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffb, 0x5}, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xe}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 12.226363991s ago: executing program 0 (id=1173): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000000000000030000008000100ac1414001ed15999d48e34ac31d07771b4b46f01f5780e083e1d1b4fc68262d1593bd7dca6fc4cec1897d373d7d8603857ae8d85c0b0ca5882648598d49944bdeebbe8a4fc30cff1dd1ca73b4c4866f306d4ca7e476fb363ed5462f93d05c9d6ca01211fd8de90467f0bb634291ef255a359a4881266ef6fc7f03bcc213613a8b45ec847a84ed727395ff15d69c36d05211d0405405ad7eb62e19e2ee303b09e6e961521b335dad188986c3e1deec0384bd23a1c9b9e1be84303bc717341526c"], 0x24}}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) 9.370172992s ago: executing program 2 (id=1178): kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x64000044) r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f00000000c0), &(0x7f0000000100)=0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x1) landlock_create_ruleset(&(0x7f0000000200)={0x8, 0x3, 0x1}, 0x18, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 9.161254299s ago: executing program 1 (id=1179): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 8.448359877s ago: executing program 2 (id=1180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x5}]}, 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(0x0, 0x800) 7.531742461s ago: executing program 1 (id=1181): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, 0x0, 0x881) socket$inet6(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x20, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@nested={0x6, 0xe5, 0x0, 0x1, [@generic="92d1"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffb, 0x5}, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xe}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 6.166230401s ago: executing program 1 (id=1182): mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x26) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) 6.112798126s ago: executing program 2 (id=1183): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0x9, 0xa}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 6.068154679s ago: executing program 4 (id=1184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, 0x0, 0x0) tkill(r4, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000040)={0x6, 0x3, 0x4}) 5.93634602s ago: executing program 0 (id=1185): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x200) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x5}]}, 0x10) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x200013, 0x0) 5.022485184s ago: executing program 2 (id=1186): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x141842, 0x1c2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xffffffffa003e45c, 0x700000000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000002440)={0x2020}, 0x2020) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f00000000c0), &(0x7f0000000080)=@udp}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 5.010919575s ago: executing program 4 (id=1187): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readahead(0xffffffffffffffff, 0x1de, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 4.016752095s ago: executing program 4 (id=1188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x1}}}}}}}, 0x0) 3.604112709s ago: executing program 4 (id=1189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x36) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.35319591s ago: executing program 4 (id=1190): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3233c3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0xf7fffffe, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000003c0)={@hyper, 0x1}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0x7, 0x13ec, 0x1}, 0x20) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) socket$alg(0x26, 0x5, 0x0) 2.297737774s ago: executing program 1 (id=1191): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, 0x0, 0x881) socket$inet6(0xa, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) statx(0xffffffffffffffff, 0x0, 0x1000, 0x20, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, 0x0, 0x20000000) cachestat(0xffffffffffffffff, &(0x7f0000000140)={0xfffffffffffffffb, 0x5}, &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xe}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 1.184057284s ago: executing program 4 (id=1192): socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x7}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect(0x3, 0x36, 0x0, 0x0) 1.150797867s ago: executing program 1 (id=1193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x1, 0x8, 0x0, 0x5}]}, 0x10) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) pipe2(0x0, 0x800) 1.11135726s ago: executing program 2 (id=1194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0x9, 0xa}, {0xfff2, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) 819.531524ms ago: executing program 2 (id=1195): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, 0x0, 0x0) tkill(r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000040)={0x6, 0x3, 0x4}) 11.524579ms ago: executing program 1 (id=1196): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readahead(0xffffffffffffffff, 0x1de, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 0s ago: executing program 0 (id=1197): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x19, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1000, 0x0, {}, {0xffffffffffffffff}, 0x4}) r2 = syz_open_procfs(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x200000000004, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd6, 0xd6, 0x8, [@datasec={0xa, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x6, 0x10b}], "88"}, @struct={0xc, 0x3, 0x0, 0x4, 0x0, 0x6, [{0xd, 0x4, 0x4}, {0x6, 0x3, 0x6}, {0x1, 0x1, 0x9}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x2}, {0xe}, {0xf}, {0x3, 0x2}, {0x10, 0x1}, {0x3}, {0x4, 0x5}]}, @const={0x3, 0x0, 0x0, 0xa, 0x5}, @datasec={0x1, 0x4, 0x0, 0xf, 0x1, [{0x3, 0x2}, {0x1, 0xd4, 0x4}, {0x1, 0x6}, {0x2, 0x4, 0x8}], "e1"}]}, {0x0, [0x30, 0x5f, 0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000040)=""/29, 0xf8, 0x1d, 0x1, 0x7, 0x10000, @value=r2}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d17855027dcd7407221bc", 0x0, 0x1200002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setpriority(0x2, 0x0, 0x3b) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 80.997077][ T5775] cgroup: Unknown subsys name 'net' [ 81.162605][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.028845][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.969248][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.982494][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.991862][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.001085][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.009760][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.017952][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.026886][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.036089][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.045548][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.053599][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.062065][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.065905][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.070660][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.078340][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.088882][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.091357][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.107487][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.118471][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.126050][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.127261][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.145801][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.145840][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.162094][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.170121][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.708422][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.748346][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.799043][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 85.889719][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.921689][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.930225][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.939665][ T5787] bridge_slave_0: entered allmulticast mode [ 85.947191][ T5787] bridge_slave_0: entered promiscuous mode [ 85.963018][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.971360][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.979217][ T5787] bridge_slave_1: entered allmulticast mode [ 85.986565][ T5787] bridge_slave_1: entered promiscuous mode [ 86.086128][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.099593][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.156442][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.164632][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.172544][ T5785] bridge_slave_0: entered allmulticast mode [ 86.180802][ T5785] bridge_slave_0: entered promiscuous mode [ 86.189263][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.197042][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.205047][ T5786] bridge_slave_0: entered allmulticast mode [ 86.212080][ T5786] bridge_slave_0: entered promiscuous mode [ 86.237811][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.245842][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.253414][ T5785] bridge_slave_1: entered allmulticast mode [ 86.261074][ T5785] bridge_slave_1: entered promiscuous mode [ 86.268125][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.275912][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.283600][ T5786] bridge_slave_1: entered allmulticast mode [ 86.291453][ T5786] bridge_slave_1: entered promiscuous mode [ 86.302631][ T5787] team0: Port device team_slave_0 added [ 86.312468][ T5787] team0: Port device team_slave_1 added [ 86.385513][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.393072][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.401957][ T5789] bridge_slave_0: entered allmulticast mode [ 86.409900][ T5789] bridge_slave_0: entered promiscuous mode [ 86.453860][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.462002][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.469986][ T5789] bridge_slave_1: entered allmulticast mode [ 86.478912][ T5789] bridge_slave_1: entered promiscuous mode [ 86.488499][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.502477][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.517650][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.528438][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.535804][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.564250][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.603932][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.619215][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.626545][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.653696][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.727658][ T5786] team0: Port device team_slave_0 added [ 86.737930][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.751941][ T5785] team0: Port device team_slave_0 added [ 86.773489][ T5786] team0: Port device team_slave_1 added [ 86.782162][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.812307][ T5785] team0: Port device team_slave_1 added [ 86.885963][ T5787] hsr_slave_0: entered promiscuous mode [ 86.892744][ T5787] hsr_slave_1: entered promiscuous mode [ 86.914773][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.922096][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.949081][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.966483][ T5789] team0: Port device team_slave_0 added [ 86.975855][ T5789] team0: Port device team_slave_1 added [ 86.983304][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.991735][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.020269][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.033811][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.041938][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.071006][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.090782][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.098370][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.114857][ T5790] Bluetooth: hci2: command tx timeout [ 87.131079][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.195457][ T5790] Bluetooth: hci0: command tx timeout [ 87.198826][ T5792] Bluetooth: hci1: command tx timeout [ 87.253162][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.261022][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.274429][ T5792] Bluetooth: hci3: command tx timeout [ 87.292938][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.309708][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.317944][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.348948][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.377745][ T5785] hsr_slave_0: entered promiscuous mode [ 87.385182][ T5785] hsr_slave_1: entered promiscuous mode [ 87.392031][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.400310][ T5785] Cannot create hsr debugfs directory [ 87.469773][ T5786] hsr_slave_0: entered promiscuous mode [ 87.477200][ T5786] hsr_slave_1: entered promiscuous mode [ 87.484250][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.492820][ T5786] Cannot create hsr debugfs directory [ 87.626889][ T5789] hsr_slave_0: entered promiscuous mode [ 87.634616][ T5789] hsr_slave_1: entered promiscuous mode [ 87.642381][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.653902][ T5789] Cannot create hsr debugfs directory [ 87.991606][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.024779][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.043801][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.081396][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.182271][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.197734][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.234661][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.255278][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.359915][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.373002][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.408747][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.462517][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.526528][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.548208][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.571215][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.588802][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.611082][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.682333][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.728563][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.736203][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.749335][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.757342][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.789876][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.911130][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.935487][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.970782][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.978288][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.016248][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.024496][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.089916][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.111652][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.157095][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.197067][ T5792] Bluetooth: hci2: command tx timeout [ 89.203092][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.217909][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.225532][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.245571][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.275462][ T5792] Bluetooth: hci1: command tx timeout [ 89.281284][ T5792] Bluetooth: hci0: command tx timeout [ 89.298716][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.306953][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.336263][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.344125][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.354242][ T5792] Bluetooth: hci3: command tx timeout [ 89.367366][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.374941][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.459421][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.670775][ T5787] veth0_vlan: entered promiscuous mode [ 89.733102][ T5787] veth1_vlan: entered promiscuous mode [ 89.800639][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.858104][ T5787] veth0_macvtap: entered promiscuous mode [ 89.891528][ T5787] veth1_macvtap: entered promiscuous mode [ 89.966136][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.027558][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.056417][ T5785] veth0_vlan: entered promiscuous mode [ 90.075191][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.085373][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.096853][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.106721][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.129182][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.170105][ T5785] veth1_vlan: entered promiscuous mode [ 90.199286][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.290125][ T5785] veth0_macvtap: entered promiscuous mode [ 90.302165][ T5785] veth1_macvtap: entered promiscuous mode [ 90.362742][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.376610][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.411792][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.423297][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.437604][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.478834][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.490630][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.503732][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.523448][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.524943][ T5786] veth0_vlan: entered promiscuous mode [ 90.532096][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.548276][ T5786] veth1_vlan: entered promiscuous mode [ 90.577811][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.588354][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.597639][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.607937][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.622635][ T5789] veth0_vlan: entered promiscuous mode [ 90.707151][ T5789] veth1_vlan: entered promiscuous mode [ 90.768208][ T5786] veth0_macvtap: entered promiscuous mode [ 90.791000][ T5786] veth1_macvtap: entered promiscuous mode [ 90.886942][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.909676][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.949014][ T5789] veth0_macvtap: entered promiscuous mode [ 91.032634][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.044487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 91.054137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 91.083253][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.098141][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.110316][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.153353][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.237439][ T5789] veth1_macvtap: entered promiscuous mode [ 91.277256][ T5792] Bluetooth: hci2: command tx timeout [ 91.354781][ T5790] Bluetooth: hci1: command tx timeout [ 91.361378][ T5792] Bluetooth: hci0: command tx timeout [ 91.434915][ T5792] Bluetooth: hci3: command tx timeout [ 91.635932][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.710069][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.717584][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.722521][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.784260][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.812534][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.823820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.837509][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.852359][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.861786][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.872624][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.890877][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.980257][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.998734][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.014362][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.038220][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.065637][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.097888][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.110592][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.198965][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.225727][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.239698][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.251110][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.263388][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.274674][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.289698][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.300979][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.322795][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.465776][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.475749][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.526011][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.221271][ T966] cfg80211: failed to load regulatory.db [ 93.234573][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.269276][ T5890] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.279765][ T5890] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.289605][ T5890] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.298989][ T5890] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.355967][ T5792] Bluetooth: hci2: command tx timeout [ 93.402696][ T5890] Zero length message leads to an empty skb [ 93.418692][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.437063][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.446092][ T5792] Bluetooth: hci0: command tx timeout [ 93.452101][ T5790] Bluetooth: hci1: command tx timeout [ 93.514384][ T5790] Bluetooth: hci3: command tx timeout [ 93.648413][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.710929][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.834951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.887052][ T5897] mmap: syz.0.6 (5897) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.932311][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.985366][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.097923][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.114590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.143403][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.514421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.679785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.782108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.795329][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.884121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 95.825025][ T5877] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.881683][ T5912] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.256564][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 96.536131][ T966] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.544377][ T5877] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 96.683475][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.723347][ T5877] usb 2-1: config 0 descriptor?? [ 96.812599][ T5877] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 97.932053][ T966] usb 4-1: config index 0 descriptor too short (expected 240, got 45) [ 97.953399][ T966] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 97.998929][ T966] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.046840][ T966] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.28 [ 98.085369][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.142879][ T966] usb 4-1: config 0 descriptor?? [ 99.251540][ T966] usbhid 4-1:0.0: can't add hid device: -71 [ 99.288710][ T966] usbhid: probe of 4-1:0.0 failed with error -71 [ 99.545882][ T966] usb 4-1: USB disconnect, device number 2 [ 99.771360][ T5938] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 100.071770][ T5938] bond1: entered promiscuous mode [ 100.077269][ T5938] bond1: entered allmulticast mode [ 100.084718][ T5938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.214631][ T5777] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.434442][ T5877] gspca_sonixj: reg_r err -71 [ 100.439401][ T5877] sonixj: probe of 2-1:0.0 failed with error -71 [ 100.501128][ T5877] usb 2-1: USB disconnect, device number 2 [ 101.264908][ T5950] process 'syz.1.19' launched '/dev/fd/-1/./file2' with NULL argv: empty string added [ 101.420592][ T5956] syz.1.19[5956]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 106.894443][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 109.980807][ T6007] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 112.710606][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 118.677199][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 130.702638][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.535514][ T6115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.64'. [ 135.393691][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.412123][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.350518][ T5790] Bluetooth: hci3: link tx timeout [ 137.356872][ T5790] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 137.916893][ T6151] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 138.552932][ T6153] netlink: 76 bytes leftover after parsing attributes in process `syz.0.75'. [ 139.436455][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 140.079624][ T6161] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 147.671684][ T6208] netlink: 76 bytes leftover after parsing attributes in process `syz.0.88'. [ 166.939434][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.117'. [ 170.624540][ T6344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.126'. [ 173.226124][ T6372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.135'. [ 173.483607][ T6376] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 175.834265][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.044845][ T5838] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 180.244541][ T5838] usb 2-1: device descriptor read/64, error -71 [ 180.605308][ T23] usb 1-1: device descriptor read/all, error -71 [ 180.664351][ T5838] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 181.164346][ T5838] usb 2-1: device descriptor read/64, error -71 [ 181.362346][ T5838] usb usb2-port1: attempt power cycle [ 186.302366][ T6451] Bluetooth: MGMT ver 1.22 [ 187.869094][ T6463] sched: RT throttling activated [ 188.690131][ T5792] Bluetooth: hci3: link tx timeout [ 188.696063][ T5792] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 188.706574][ T5790] Bluetooth: hci3: link tx timeout [ 188.712942][ T5790] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 188.784169][ T5877] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 188.964149][ T5877] usb 4-1: device descriptor read/64, error -71 [ 189.264177][ T5877] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 189.895335][ T5877] usb 4-1: device descriptor read/64, error -71 [ 190.045332][ T5877] usb usb4-port1: attempt power cycle [ 190.844069][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 191.770634][ T6488] serio: Serial port ptm0 [ 195.767924][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 195.774848][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.788293][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.895579][ T5838] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 196.064046][ T5838] usb 4-1: device descriptor read/64, error -71 [ 196.764107][ T5838] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 200.369378][ T6548] serio: Serial port ptm0 [ 201.762126][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 202.634137][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 204.091455][ T6591] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 207.054936][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 208.065094][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 208.071282][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 208.079114][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 209.501188][ T6628] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 211.914154][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 218.025349][ T6665] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 220.885094][ T5101] Bluetooth: hci3: command 0x0406 tx timeout [ 222.330290][ T6682] binder: BINDER_SET_CONTEXT_MGR already set [ 222.337314][ T6682] binder: 6681:6682 ioctl 4018620d 200000004a80 returned -16 [ 226.634335][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 227.480984][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 227.654210][ T8] usb 4-1: device descriptor read/64, error -71 [ 227.924051][ T8] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 229.390285][ T6738] binder: BINDER_SET_CONTEXT_MGR already set [ 229.406908][ T6738] binder: 6735:6738 ioctl 4018620d 200000004a80 returned -16 [ 233.051146][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 233.516009][ T6771] binder: BINDER_SET_CONTEXT_MGR already set [ 233.522800][ T6771] binder: 6768:6771 ioctl 4018620d 200000004a80 returned -16 [ 238.336925][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 248.300032][ T6859] syz.3.261: attempt to access beyond end of device [ 248.300032][ T6859] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 248.313848][ T6859] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 256.868728][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.884518][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.959638][ T6900] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 256.995516][ T6900] bond1: entered promiscuous mode [ 257.000626][ T6900] bond1: entered allmulticast mode [ 257.006062][ T6900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.977421][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.994837][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.004063][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.023094][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.036216][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.054348][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.316868][ T5101] Bluetooth: hci4: command tx timeout [ 274.207570][ T6951] chnl_net:caif_netlink_parms(): no params data found [ 274.395228][ T5101] Bluetooth: hci4: command tx timeout [ 276.054269][ T5838] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 276.474618][ T5101] Bluetooth: hci4: command tx timeout [ 278.412001][ T6951] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.432226][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.468107][ T6951] bridge_slave_0: entered allmulticast mode [ 278.481458][ T6951] bridge_slave_0: entered promiscuous mode [ 278.563846][ T5101] Bluetooth: hci4: command tx timeout [ 278.635597][ T6951] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.643564][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.656974][ T6951] bridge_slave_1: entered allmulticast mode [ 278.666084][ T6951] bridge_slave_1: entered promiscuous mode [ 278.711034][ T6951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.725867][ T6951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.810945][ T6951] team0: Port device team_slave_0 added [ 278.851330][ T6951] team0: Port device team_slave_1 added [ 279.232740][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.259644][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.288137][ T6951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.324281][ T6951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.331762][ T6951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.394051][ T6951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.570961][ T6951] hsr_slave_0: entered promiscuous mode [ 279.774923][ T6951] hsr_slave_1: entered promiscuous mode [ 279.784448][ T6951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.837750][ T6951] Cannot create hsr debugfs directory [ 284.210102][ T6951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.226220][ T6951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.256822][ T6951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.276571][ T6951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.912704][ T6951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.134379][ T27] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 286.484635][ T27] usb 1-1: device descriptor read/64, error -71 [ 286.609890][ T6951] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.663341][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.671260][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.722087][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.729484][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.764525][ T27] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 290.497445][ T6951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.559704][ T7079] syz.0.314: attempt to access beyond end of device [ 291.559704][ T7079] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 291.580902][ T7079] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 293.594297][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 293.984702][ T9] usb 3-1: device descriptor read/64, error -71 [ 294.255686][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 295.226503][ T6951] veth0_vlan: entered promiscuous mode [ 295.450708][ T6951] veth1_vlan: entered promiscuous mode [ 296.175739][ T6951] veth0_macvtap: entered promiscuous mode [ 296.289713][ T6951] veth1_macvtap: entered promiscuous mode [ 296.373551][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.393713][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.412797][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.430812][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.457523][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.483440][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.495327][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.508087][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.526571][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.540088][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.552579][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.571508][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.590318][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.602279][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.637834][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.656051][ T6951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.672792][ T6951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.862394][ T6951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.895882][ T6951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.912938][ T6951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.932738][ T6951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.944501][ T6951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.081847][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.107786][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.157185][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.171727][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.094605][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 300.476261][ T9] usb 3-1: device descriptor read/64, error -71 [ 301.197468][ T7149] PKCS7: Unknown OID: [5] (bad) [ 301.231798][ T7149] PKCS7: Only support pkcs7_signedData type [ 304.530551][ T7176] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 305.239772][ T7176] bond2: entered promiscuous mode [ 305.244936][ T7176] bond2: entered allmulticast mode [ 305.250243][ T7176] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.270138][ T7180] syz.2.338: attempt to access beyond end of device [ 305.270138][ T7180] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 305.322622][ T7180] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 305.413990][ T27] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 314.114216][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 314.284414][ T23] usb 2-1: device descriptor read/64, error -71 [ 314.574412][ T23] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 314.876249][ T7236] syz.2.353: attempt to access beyond end of device [ 314.876249][ T7236] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 314.890557][ T7236] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 314.974197][ T23] usb 2-1: device descriptor read/64, error -71 [ 315.096220][ T23] usb usb2-port1: attempt power cycle [ 318.157637][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.165327][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.722173][ T7349] syz.0.379: attempt to access beyond end of device [ 331.722173][ T7349] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 331.736371][ T7349] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 340.152674][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 341.011874][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.396904][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.696623][ T7393] pim6reg: entered allmulticast mode [ 345.840268][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.331390][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.346729][ T7431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.399'. [ 351.739117][ T7438] syz.0.400: attempt to access beyond end of device [ 351.739117][ T7438] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 351.753522][ T7438] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 356.304702][ T7460] fuse: Bad value for 'fd' [ 359.003792][ T7471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.409'. [ 360.651168][ T7484] syz.4.413: attempt to access beyond end of device [ 360.651168][ T7484] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 360.665551][ T7484] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 361.264007][ T7486] syz.1.412: attempt to access beyond end of device [ 361.264007][ T7486] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 361.278063][ T7486] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 363.376741][ T42] hsr_slave_0: left promiscuous mode [ 363.926862][ T42] hsr_slave_1: left promiscuous mode [ 363.951530][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.984621][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.290566][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.357295][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.427706][ T42] bridge_slave_1: left allmulticast mode [ 364.459876][ T42] bridge_slave_1: left promiscuous mode [ 364.559788][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.612393][ T42] bridge_slave_0: left allmulticast mode [ 364.621575][ T42] bridge_slave_0: left promiscuous mode [ 364.636790][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.757778][ T42] veth1_macvtap: left promiscuous mode [ 364.948044][ T42] veth0_macvtap: left promiscuous mode [ 364.960251][ T42] veth1_vlan: left promiscuous mode [ 364.991930][ T42] veth0_vlan: left promiscuous mode [ 366.301907][ T7525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 367.199838][ T42] team0 (unregistering): Port device team_slave_1 removed [ 367.251576][ T42] team0 (unregistering): Port device team_slave_0 removed [ 367.338054][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.410794][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.215909][ T7538] syz.4.424: attempt to access beyond end of device [ 371.215909][ T7538] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 371.228936][ T7538] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 371.274021][ T42] bond0 (unregistering): Released all slaves [ 372.003737][ T7515] netlink: 36 bytes leftover after parsing attributes in process `syz.0.420'. [ 372.382211][ T7546] syz.4.425: attempt to access beyond end of device [ 372.382211][ T7546] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 372.397043][ T7546] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 376.019396][ T7575] syz.4.433: attempt to access beyond end of device [ 376.019396][ T7575] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 376.033141][ T7575] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 379.598330][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.607584][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.178953][ T7579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.435'. [ 380.850507][ T7599] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 381.715351][ T7596] syz.4.439: attempt to access beyond end of device [ 381.715351][ T7596] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 381.729097][ T7596] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 383.841599][ T7626] syz.2.443: attempt to access beyond end of device [ 383.841599][ T7626] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 383.871703][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 383.927267][ T7626] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 386.762855][ T7635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.447'. [ 389.152511][ T7658] syz.0.451: attempt to access beyond end of device [ 389.152511][ T7658] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 389.166227][ T7658] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 392.124990][ T7680] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 392.376642][ T7680] bond1: entered promiscuous mode [ 392.384085][ T7680] bond1: entered allmulticast mode [ 392.392287][ T7680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.812168][ T7684] syz.0.456: attempt to access beyond end of device [ 392.812168][ T7684] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 392.827292][ T7684] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 393.194100][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 396.769708][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.458'. [ 397.412390][ T7709] syz.4.461: attempt to access beyond end of device [ 397.412390][ T7709] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 397.426145][ T7709] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 397.946142][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 401.552683][ T7730] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 401.722772][ T7724] syz.2.466: attempt to access beyond end of device [ 401.722772][ T7724] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 401.737786][ T7724] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 401.864486][ T7730] bond2: entered promiscuous mode [ 401.870655][ T7730] bond2: entered allmulticast mode [ 401.876834][ T7730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.103996][ T5777] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 403.578983][ T7751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.470'. [ 403.741343][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 407.637289][ T7775] syz.2.476: attempt to access beyond end of device [ 407.637289][ T7775] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 407.651539][ T7775] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 409.195786][ T7799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.481'. [ 409.643997][ T5845] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 409.841102][ T5845] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 409.882278][ T5845] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 409.934061][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 409.981495][ T5845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 410.043989][ T5845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 410.097838][ T5845] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 410.133949][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 410.184401][ T5845] usb 2-1: Product: syz [ 410.194162][ T5845] usb 2-1: Manufacturer: syz [ 410.235228][ T5845] cdc_wdm 2-1:1.0: skipping garbage [ 410.260292][ T5845] cdc_wdm 2-1:1.0: skipping garbage [ 410.322719][ T5845] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 410.373020][ T5845] cdc_wdm 2-1:1.0: Unknown control protocol [ 411.557523][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 413.462220][ T5877] usb 2-1: USB disconnect, device number 9 [ 413.851247][ T7835] syz.4.487: attempt to access beyond end of device [ 413.851247][ T7835] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 413.865815][ T7835] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 414.061410][ T7838] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 414.890465][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.0.490'. [ 415.345352][ T7857] syz.4.491: attempt to access beyond end of device [ 415.345352][ T7857] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 415.359390][ T7857] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 418.164063][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 418.587289][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 418.665321][ T7898] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 419.420016][ T7900] syz.4.500: attempt to access beyond end of device [ 419.420016][ T7900] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 419.433496][ T7900] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 419.646677][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 419.764167][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 419.783956][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.797280][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 419.811698][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 419.846463][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.182455][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.356444][ T9] usb 1-1: Product: syz [ 420.487790][ T9] usb 1-1: Manufacturer: syz [ 420.677965][ T9] usb 1-1: can't set config #1, error -71 [ 420.708578][ T9] usb 1-1: USB disconnect, device number 8 [ 420.750196][ T7907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.502'. [ 422.138872][ T7921] binder: BINDER_SET_CONTEXT_MGR already set [ 422.166634][ T7921] binder: 7919:7921 ioctl 4018620d 200000004a80 returned -16 [ 424.256846][ T7936] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 425.444290][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 425.646762][ T7939] syz.2.510: attempt to access beyond end of device [ 425.646762][ T7939] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 425.661424][ T7939] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 426.465296][ T5845] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 426.627151][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 426.682250][ T5845] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 426.773278][ T5845] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 426.962124][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 427.144653][ T5845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 427.304780][ T5845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 427.327672][ T5845] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 427.345572][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 427.358384][ T5845] usb 2-1: Product: syz [ 427.363644][ T5845] usb 2-1: Manufacturer: syz [ 427.391916][ T5845] cdc_wdm 2-1:1.0: skipping garbage [ 427.410446][ T5845] cdc_wdm 2-1:1.0: skipping garbage [ 427.431037][ T5845] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 427.444028][ T5845] cdc_wdm 2-1:1.0: Unknown control protocol [ 427.450815][ T7951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.513'. [ 427.645695][ T5845] usb 2-1: USB disconnect, device number 10 [ 431.857047][ T7986] syz.2.518: attempt to access beyond end of device [ 431.857047][ T7986] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 431.870160][ T7986] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 432.521693][ T7990] syz.1.520: attempt to access beyond end of device [ 432.521693][ T7990] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 432.536902][ T7990] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 434.591321][ T8008] netlink: 36 bytes leftover after parsing attributes in process `syz.1.524'. [ 435.963169][ T8016] binder: BINDER_SET_CONTEXT_MGR already set [ 435.983982][ T8016] binder: 8013:8016 ioctl 4018620d 200000004a80 returned -16 [ 436.307370][ T8024] syz.2.527: attempt to access beyond end of device [ 436.307370][ T8024] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 436.320347][ T8024] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 436.644207][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 438.311827][ T8030] tipc: Enabling of bearer rejected, failed to enable media [ 439.376538][ T8044] syz.4.531: attempt to access beyond end of device [ 439.376538][ T8044] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 439.391906][ T8044] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 441.105117][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.112480][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.553947][ T5777] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 445.923825][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 446.237008][ T5777] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 446.278599][ T5777] usb 5-1: config 0 has no interface number 0 [ 446.307876][ T5777] usb 5-1: config 0 interface 109 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 446.351285][ T5777] usb 5-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 446.382608][ T5777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.416039][ T5777] usb 5-1: config 0 descriptor?? [ 446.428648][ T5777] cxacru 5-1:0.109: usbatm_usb_probe: bind failed: -19! [ 446.553433][ T8118] fuse: Bad value for 'fd' [ 446.770069][ T5795] usb 5-1: USB disconnect, device number 4 [ 452.297500][ T8138] binder: BINDER_SET_CONTEXT_MGR already set [ 452.360662][ T8138] binder: 8137:8138 ioctl 4018620d 200000004a80 returned -16 [ 454.689936][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 457.945628][ T8191] syz.4.563: attempt to access beyond end of device [ 457.945628][ T8191] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 457.960144][ T8191] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 459.885719][ T8229] syz.0.569: attempt to access beyond end of device [ 459.885719][ T8229] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 460.174555][ T8229] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 462.392919][ T5877] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 462.869087][ T5877] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 462.885505][ T5877] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 462.888614][ T8260] netlink: 15 bytes leftover after parsing attributes in process `syz.0.578'. [ 462.913968][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 462.942727][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 462.965706][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 462.994905][ T5877] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 463.012681][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 463.031746][ T5877] usb 5-1: Product: syz [ 463.036714][ T5877] usb 5-1: Manufacturer: syz [ 463.089812][ T5877] cdc_wdm 5-1:1.0: skipping garbage [ 463.162856][ T5877] cdc_wdm 5-1:1.0: skipping garbage [ 463.196623][ T5877] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 463.354669][ T5877] cdc_wdm 5-1:1.0: Unknown control protocol [ 465.220390][ T23] usb 5-1: USB disconnect, device number 5 [ 473.602511][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 476.612697][ T8406] pim6reg: entered allmulticast mode [ 480.231736][ T5777] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 480.522240][ T5777] usb 1-1: device descriptor read/64, error -71 [ 481.045038][ T5777] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 481.223188][ T8451] tipc: Enabling of bearer rejected, failed to enable media [ 482.709937][ T8472] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 489.831615][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 491.057049][ T8520] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 496.280095][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 498.488839][ T8577] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 502.838768][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.849380][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.795380][ T8612] syz.4.651: attempt to access beyond end of device [ 504.795380][ T8612] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 504.809665][ T8612] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 506.399564][ T8625] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 508.712634][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 511.740034][ T786] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 519.695075][ T8690] tipc: Enabling of bearer rejected, failed to enable media [ 519.796400][ T8697] pim6reg: entered allmulticast mode [ 525.856054][ T8738] tipc: Enabling of bearer rejected, failed to enable media [ 535.121433][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 536.342114][ T8812] syz.4.699: attempt to access beyond end of device [ 536.342114][ T8812] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 536.360713][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.367296][ T8812] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 541.666930][ T8851] syzkaller0: entered promiscuous mode [ 541.690744][ T8851] syzkaller0: entered allmulticast mode [ 541.904410][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 542.497295][ T8858] syz.1.709: attempt to access beyond end of device [ 542.497295][ T8858] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 542.510954][ T8858] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 546.388584][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.715'. [ 547.030903][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 547.144913][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'. [ 553.674242][ T8930] syz.4.728: attempt to access beyond end of device [ 553.674242][ T8930] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 553.687360][ T8930] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 556.276159][ T8961] tipc: Enabling of bearer rejected, failed to enable media [ 560.931331][ T8986] syz.0.743: attempt to access beyond end of device [ 560.931331][ T8986] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 560.944151][ T8986] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 562.881795][ T9005] tipc: Enabling of bearer rejected, failed to enable media [ 563.916136][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.923018][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.032741][ T9017] syz.4.749: attempt to access beyond end of device [ 565.032741][ T9017] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 565.045971][ T9017] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 565.439332][ T9019] fuse: Bad value for 'fd' [ 566.666383][ T9033] pim6reg: entered allmulticast mode [ 571.432396][ T9068] fuse: Bad value for 'fd' [ 574.101482][ T9087] binder: 9086:9087 ioctl c0306201 0 returned -14 [ 577.062805][ T9116] syz.2.778: attempt to access beyond end of device [ 577.062805][ T9116] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 577.076796][ T9116] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 577.746835][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 579.075237][ T9128] binder: 9127:9128 ioctl c0306201 0 returned -14 [ 579.377963][ T9133] syz.1.783: attempt to access beyond end of device [ 579.377963][ T9133] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 579.391395][ T9133] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 579.906215][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 582.579657][ T9155] syz.1.788: attempt to access beyond end of device [ 582.579657][ T9155] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 582.593385][ T9155] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 584.016666][ T8749] Bluetooth: hci4: command 0x0406 tx timeout [ 584.346312][ T9162] binder: 9161:9162 ioctl c0306201 0 returned -14 [ 585.040518][ T9168] syz.4.793: attempt to access beyond end of device [ 585.040518][ T9168] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 585.054478][ T9168] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 587.853403][ T9188] syz.4.798: attempt to access beyond end of device [ 587.853403][ T9188] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 587.866777][ T9188] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 588.106035][ T9191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.799'. [ 589.136257][ T8749] Bluetooth: hci4: command 0x0406 tx timeout [ 591.925849][ T9227] syz.2.809: attempt to access beyond end of device [ 591.925849][ T9227] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 591.940033][ T9227] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 594.969152][ T9249] netlink: 68 bytes leftover after parsing attributes in process `syz.0.815'. [ 597.421266][ T9269] syz.2.819: attempt to access beyond end of device [ 597.421266][ T9269] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 597.435234][ T9269] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 600.095035][ T9285] syz.4.826: attempt to access beyond end of device [ 600.095035][ T9285] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 600.108777][ T9285] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 602.796673][ T9308] syz.0.830: attempt to access beyond end of device [ 602.796673][ T9308] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 602.810264][ T9308] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 607.595292][ T9341] syz.0.839: attempt to access beyond end of device [ 607.595292][ T9341] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 607.608594][ T9341] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 608.784569][ T8749] Bluetooth: hci4: command 0x0406 tx timeout [ 612.078492][ T9379] syz.0.849: attempt to access beyond end of device [ 612.078492][ T9379] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 612.092241][ T9379] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 617.606391][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 622.937986][ T9466] fuse: Bad value for 'fd' [ 623.677238][ T9472] syz.4.869: attempt to access beyond end of device [ 623.677238][ T9472] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 623.699825][ T9472] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 625.392129][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.426211][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.852035][ T9523] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 628.918236][ T9] IPVS: starting estimator thread 0... [ 629.053687][ T9527] IPVS: using max 18 ests per chain, 43200 per kthread [ 637.635649][ T8749] Bluetooth: hci4: command 0x0406 tx timeout [ 652.004779][ T9706] tipc: Enabling of bearer rejected, failed to enable media [ 656.850331][ T9741] syz.1.931: attempt to access beyond end of device [ 656.850331][ T9741] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 656.864504][ T9741] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 659.758855][ T9760] tipc: Enabling of bearer rejected, failed to enable media [ 662.902197][ T9785] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 665.846859][ T9808] batman_adv: batadv0: Adding interface: dummy0 [ 665.863988][ T9808] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.904983][ T9808] batman_adv: batadv0: Interface activated: dummy0 [ 665.967991][ T9812] tipc: Enabling of bearer rejected, failed to enable media [ 666.311552][ T9811] batadv0: mtu less than device minimum [ 666.320352][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.333271][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.345485][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.358735][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.371836][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.385321][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.398086][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 666.410872][ T9811] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 672.014227][ T9851] net_ratelimit: 11 callbacks suppressed [ 672.014246][ T9851] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 673.337833][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 679.770632][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 679.810805][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 679.973906][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.998898][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.013909][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.033743][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.151619][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.170536][ T23] usb 3-1: config 0 has an invalid interface number: 115 but max is 0 [ 680.183946][ T23] usb 3-1: config 0 has no interface number 0 [ 680.192537][ T23] usb 3-1: too many endpoints for config 0 interface 115 altsetting 104: 97, using maximum allowed: 30 [ 680.193847][ T9] usb 2-1: config 0 descriptor?? [ 680.205238][ T23] usb 3-1: config 0 interface 115 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 680.205280][ T23] usb 3-1: config 0 interface 115 has no altsetting 0 [ 680.205324][ T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 680.950460][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.998790][ T23] usb 3-1: config 0 descriptor?? [ 681.028273][ T23] cp210x 3-1:0.115: cp210x converter detected [ 681.223374][ T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 681.257449][ T23] cp210x 3-1:0.115: failed to get vendor val 0x370b size 1: -32 [ 681.313978][ T9924] netlink: 52 bytes leftover after parsing attributes in process `syz.2.977'. [ 681.370511][ T23] cp210x 3-1:0.115: querying part number failed [ 681.409039][ T9925] loop4: detected capacity change from 0 to 524255232 [ 681.412104][ T23] usb 3-1: cp210x converter now attached to ttyUSB0 [ 681.864708][ T9926] syz.0.980: attempt to access beyond end of device [ 681.864708][ T9926] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 681.880397][ T9926] (syz.0.980,9926,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 681.890328][ T9926] (syz.0.980,9926,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 681.898869][ T9926] (syz.0.980,9926,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 681.910285][ T9926] (syz.0.980,9926,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 682.065939][ T9] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 682.107673][ T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 682.145547][ T9] usb 2-1: USB disconnect, device number 12 [ 682.159045][ T9924] loop4: detected capacity change from 524255232 to 524287935 [ 682.468103][ T23] usb 3-1: USB disconnect, device number 7 [ 682.497766][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 682.508202][ T23] cp210x 3-1:0.115: device disconnected [ 682.654950][ T9934] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 682.930060][ T9932] fido_id[9932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 686.880441][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.887632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.562081][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.990'. [ 689.771486][ T9997] binder: BINDER_SET_CONTEXT_MGR already set [ 689.991669][ T9997] binder: 9986:9997 ioctl 4018620d 200000004a80 returned -16 [ 693.700838][T10014] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 693.912083][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 694.637291][T10028] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 694.660824][T10028] binder: 10027:10028 ioctl 4018620d 200000004a80 returned -1 [ 695.921972][T10037] binder: 10036:10037 ioctl c0306201 0 returned -14 [ 699.917289][T10051] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 700.481413][T10058] tipc: Enabling of bearer rejected, failed to enable media [ 701.783809][T10067] binder: 10066:10067 ioctl c0306201 0 returned -14 [ 701.837091][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 704.442711][T10090] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 707.999006][ T5838] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 708.010069][T10108] binder: BINDER_SET_CONTEXT_MGR already set [ 708.037708][T10108] binder: 10107:10108 ioctl 4018620d 200000004a80 returned -16 [ 708.065555][T10109] binder: 10107:10109 ioctl c0306201 0 returned -14 [ 708.423582][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1027'. [ 708.625505][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 708.634397][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.676647][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.733575][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 709.007540][ T5838] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 709.018451][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.061713][ T5838] usb 1-1: config 0 descriptor?? [ 710.688121][ T5838] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 710.695880][ T5838] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 710.708283][ T5838] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 710.719084][ T5838] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 710.727804][ T5838] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 710.768013][ T5838] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 710.905011][T10105] random: crng reseeded on system resumption [ 710.955764][ T5838] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 710.981720][ T5838] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 712.305648][ T23] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 712.328732][ T23] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 712.348037][ T23] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 712.364643][ T23] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 712.482067][ T5777] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 712.516419][T10147] fuse: Bad value for 'fd' [ 714.928654][ T5777] usb 1-1: device descriptor read/64, error -32 [ 715.568681][ T5777] usb 1-1: reset high-speed USB device number 11 using dummy_hcd [ 715.848711][ T5777] usb 1-1: device descriptor read/64, error -32 [ 718.253438][ T23] usb 1-1: USB disconnect, device number 11 [ 722.676412][T10201] syz.1.1045: attempt to access beyond end of device [ 722.676412][T10201] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 722.693129][T10201] (syz.1.1045,10201,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 722.702382][T10201] (syz.1.1045,10201,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 722.718366][T10201] (syz.1.1045,10201,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 722.807696][T10201] (syz.1.1045,10201,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 725.197952][ T5777] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 725.378316][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 725.394518][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.414310][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.432635][ T5777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 725.466975][ T5777] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 725.487132][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.523383][ T5777] usb 1-1: config 0 descriptor?? [ 725.734956][ T5777] usb 1-1: can't set config #0, error -71 [ 725.888276][ T5777] usb 1-1: USB disconnect, device number 12 [ 727.704329][T10222] syz.1.1052: attempt to access beyond end of device [ 727.704329][T10222] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 727.717627][T10222] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 733.055611][T10248] syz.1.1059: attempt to access beyond end of device [ 733.055611][T10248] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 733.072957][T10248] (syz.1.1059,10248,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 733.083746][T10248] (syz.1.1059,10248,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 733.092128][T10248] (syz.1.1059,10248,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 733.102000][T10248] (syz.1.1059,10248,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 741.592625][T10141] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 742.790143][T10141] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 742.806878][T10141] usb 2-1: config 0 has no interface number 0 [ 742.813257][T10141] usb 2-1: config 0 interface 98 has no altsetting 0 [ 742.850646][T10141] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 743.069756][T10313] syz.2.1072: attempt to access beyond end of device [ 743.069756][T10313] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 743.086219][T10141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.095469][T10141] usb 2-1: Product: syz [ 743.106918][T10141] usb 2-1: Manufacturer: syz [ 743.111962][T10141] usb 2-1: SerialNumber: syz [ 743.130580][T10141] usb 2-1: config 0 descriptor?? [ 743.453352][T10313] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 743.931577][T10141] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 744.449767][T10141] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 748.186801][T10141] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware [ 748.220823][T10141] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 748.248826][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.255615][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.267329][ T5838] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 748.276560][ T5838] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 748.547069][T10141] usb 2-1: USB disconnect, device number 13 [ 751.663614][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1087'. [ 756.736431][ T5877] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 757.506382][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 757.520717][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.543849][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 757.582418][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.664366][ T5877] usb 1-1: config 0 descriptor?? [ 757.690358][ T5877] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 758.881689][ T5877] gspca_vc032x: reg_w err -71 [ 758.898532][ T5877] vc032x: probe of 1-1:0.0 failed with error -71 [ 758.954603][ T5877] usb 1-1: USB disconnect, device number 13 [ 759.313510][T10420] syz.1.1097: attempt to access beyond end of device [ 759.313510][T10420] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 759.331019][T10420] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 766.585604][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 766.784606][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.799575][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.810390][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 766.824983][ T5877] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 766.835610][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.847579][ T5877] usb 5-1: config 0 descriptor?? [ 767.596128][ T5877] usbhid 5-1:0.0: can't add hid device: -71 [ 767.612832][ T5877] usbhid: probe of 5-1:0.0 failed with error -71 [ 767.636105][ T5877] usb 5-1: USB disconnect, device number 6 [ 773.754087][T10509] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 775.269095][T10515] syz.0.1124: attempt to access beyond end of device [ 775.269095][T10515] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 775.285058][T10515] (syz.0.1124,10515,0):ocfs2_get_sector:1772 ERROR: status = -5 [ 775.293293][T10515] (syz.0.1124,10515,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 775.301077][T10515] (syz.0.1124,10515,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 775.310397][T10515] (syz.0.1124,10515,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 779.690919][T10550] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 781.185045][ T5884] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 781.894793][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 782.272717][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.354272][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 782.469222][ T5884] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 782.608087][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.057402][ T5884] usb 2-1: config 0 descriptor?? [ 783.118791][ T5884] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 783.392781][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.476919][T10586] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 783.598484][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.216648][T10592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1136'. [ 785.257567][ T8749] Bluetooth: hci4: command 0x0406 tx timeout [ 786.451195][ T5877] usb 2-1: USB disconnect, device number 14 [ 793.747839][T10658] syz.1.1158: attempt to access beyond end of device [ 793.747839][T10658] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 793.961120][T10658] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 805.852021][T10743] syz.0.1185: attempt to access beyond end of device [ 805.852021][T10743] nbd0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 805.865491][T10743] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 807.998197][T10751] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 809.666791][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.674091][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.969291][ T5838] ------------[ cut here ]------------ [ 809.975706][ T5838] sysfs group 'power' not found for kobject 'ueagle-atm!eagleII.fw' [ 809.984317][ T5838] WARNING: CPU: 1 PID: 5838 at fs/sysfs/group.c:284 sysfs_remove_group+0x178/0x2a0 [ 809.994070][ T5838] Modules linked in: [ 809.998223][ T5838] CPU: 1 PID: 5838 Comm: kworker/1:5 Not tainted 6.6.101-syzkaller #0 [ 810.006830][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.017723][ T5838] Workqueue: events request_firmware_work_func [ 810.024283][ T5838] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 810.030994][ T5838] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 da d1 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 08 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 8b 72 ff [ 810.052767][ T5838] RSP: 0018:ffffc900049ff800 EFLAGS: 00010246 [ 810.059247][ T5838] RAX: dacc571df9019600 RBX: ffffffff8b214ea0 RCX: ffff88805e05bc00 [ 810.068186][ T5838] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 810.076578][ T5838] RBP: dffffc0000000000 R08: ffffc900049ff407 R09: 1ffff9200093fe80 [ 810.085074][ T5838] R10: dffffc0000000000 R11: fffff5200093fe81 R12: 1ffffffff16429d8 [ 810.093281][ T5838] R13: 0000000000000001 R14: ffff88805e662ba0 R15: ffff88807cf0f008 [ 810.101701][ T5838] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 810.111349][ T5838] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.118384][ T5838] CR2: 0000200000002000 CR3: 0000000078402000 CR4: 00000000003506e0 [ 810.126590][ T5838] Call Trace: [ 810.130353][ T5838] [ 810.133662][ T5838] ? sysfs_unmerge_group+0x10d/0x130 [ 810.138971][ T5838] device_del+0x251/0x900 [ 810.143465][ T5838] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 810.149369][ T5838] ? kill_device+0x160/0x160 [ 810.154085][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 810.160075][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 810.164986][ T5838] ? complete_all+0x2d/0x1d0 [ 810.169581][ T5838] ? __fw_load_abort+0x8b/0x1a0 [ 810.174478][ T5838] firmware_fallback_sysfs+0x682/0x940 [ 810.179953][ T5838] _request_firmware+0xed9/0x1510 [ 810.185039][ T5838] ? request_firmware+0x50/0x50 [ 810.189903][ T5838] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 810.195920][ T5838] ? read_lock_is_recursive+0x20/0x20 [ 810.201320][ T5838] request_firmware_work_func+0xb0/0x1b0 [ 810.207093][ T5838] ? process_scheduled_works+0x957/0x15b0 [ 810.212873][ T5838] process_scheduled_works+0xa45/0x15b0 [ 810.218500][ T5838] ? assign_work+0x400/0x400 [ 810.223262][ T5838] ? assign_work+0x39e/0x400 [ 810.227863][ T5838] worker_thread+0xa55/0xfc0 [ 810.233157][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 810.239189][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 810.244122][ T5838] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 810.250153][ T5838] kthread+0x2fa/0x390 [ 810.254325][ T5838] ? pr_cont_work+0x560/0x560 [ 810.259116][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 810.263904][ T5838] ret_from_fork+0x48/0x80 [ 810.268362][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 810.273061][ T5838] ret_from_fork_asm+0x11/0x20 [ 810.277967][ T5838] [ 810.281028][ T5838] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 810.288410][ T5838] CPU: 1 PID: 5838 Comm: kworker/1:5 Not tainted 6.6.101-syzkaller #0 [ 810.296568][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 810.306674][ T5838] Workqueue: events request_firmware_work_func [ 810.312867][ T5838] Call Trace: [ 810.316166][ T5838] [ 810.319109][ T5838] dump_stack_lvl+0x16c/0x230 [ 810.324067][ T5838] ? show_regs_print_info+0x20/0x20 [ 810.329372][ T5838] ? load_image+0x3b0/0x3b0 [ 810.333915][ T5838] panic+0x2c0/0x710 [ 810.338056][ T5838] ? bpf_jit_dump+0xd0/0xd0 [ 810.342699][ T5838] ? ret_from_fork_asm+0x11/0x20 [ 810.347644][ T5838] __warn+0x2e0/0x470 [ 810.351845][ T5838] ? sysfs_remove_group+0x178/0x2a0 [ 810.357052][ T5838] ? sysfs_remove_group+0x178/0x2a0 [ 810.362257][ T5838] report_bug+0x2be/0x4f0 [ 810.366704][ T5838] ? sysfs_remove_group+0x178/0x2a0 [ 810.372000][ T5838] ? sysfs_remove_group+0x178/0x2a0 [ 810.377300][ T5838] ? sysfs_remove_group+0x17a/0x2a0 [ 810.382789][ T5838] handle_bug+0xcf/0x120 [ 810.387236][ T5838] exc_invalid_op+0x1a/0x50 [ 810.391945][ T5838] asm_exc_invalid_op+0x1a/0x20 [ 810.396817][ T5838] RIP: 0010:sysfs_remove_group+0x178/0x2a0 [ 810.402839][ T5838] Code: 48 8b 1b 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 da d1 c9 ff 49 8b 17 48 c7 c7 80 b3 ba 8a 48 89 de e8 08 01 3d ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b2 8b 72 ff [ 810.423343][ T5838] RSP: 0018:ffffc900049ff800 EFLAGS: 00010246 [ 810.429786][ T5838] RAX: dacc571df9019600 RBX: ffffffff8b214ea0 RCX: ffff88805e05bc00 [ 810.438292][ T5838] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 810.446712][ T5838] RBP: dffffc0000000000 R08: ffffc900049ff407 R09: 1ffff9200093fe80 [ 810.455784][ T5838] R10: dffffc0000000000 R11: fffff5200093fe81 R12: 1ffffffff16429d8 [ 810.464417][ T5838] R13: 0000000000000001 R14: ffff88805e662ba0 R15: ffff88807cf0f008 [ 810.472671][ T5838] ? sysfs_unmerge_group+0x10d/0x130 [ 810.478089][ T5838] device_del+0x251/0x900 [ 810.482519][ T5838] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 810.489152][ T5838] ? kill_device+0x160/0x160 [ 810.494334][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 810.500414][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 810.505451][ T5838] ? complete_all+0x2d/0x1d0 [ 810.510051][ T5838] ? __fw_load_abort+0x8b/0x1a0 [ 810.515261][ T5838] firmware_fallback_sysfs+0x682/0x940 [ 810.521204][ T5838] _request_firmware+0xed9/0x1510 [ 810.526707][ T5838] ? request_firmware+0x50/0x50 [ 810.531816][ T5838] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 810.538367][ T5838] ? read_lock_is_recursive+0x20/0x20 [ 810.543952][ T5838] request_firmware_work_func+0xb0/0x1b0 [ 810.549786][ T5838] ? process_scheduled_works+0x957/0x15b0 [ 810.555732][ T5838] process_scheduled_works+0xa45/0x15b0 [ 810.561670][ T5838] ? assign_work+0x400/0x400 [ 810.566587][ T5838] ? assign_work+0x39e/0x400 [ 810.571397][ T5838] worker_thread+0xa55/0xfc0 [ 810.577001][ T5838] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 810.583048][ T5838] ? _raw_spin_unlock+0x40/0x40 [ 810.588395][ T5838] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 810.594897][ T5838] kthread+0x2fa/0x390 [ 810.599096][ T5838] ? pr_cont_work+0x560/0x560 [ 810.603815][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 810.608430][ T5838] ret_from_fork+0x48/0x80 [ 810.613048][ T5838] ? kthread_blkcg+0xd0/0xd0 [ 810.618157][ T5838] ret_from_fork_asm+0x11/0x20 [ 810.623257][ T5838] [ 810.627134][ T5838] Kernel Offset: disabled [ 810.631693][ T5838] Rebooting in 86400 seconds..